summaryrefslogtreecommitdiff
path: root/source4
Commit message (Expand)AuthorAgeFilesLines
* CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: log warnings about unsecure...Stefan Metzmacher2020-09-181-3/+63
* CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: support "server require sch...Stefan Metzmacher2020-09-181-1/+8
* CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: refactor dcesrv_netr_creds_...Stefan Metzmacher2020-09-181-12/+33
* CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: protect netr_ServerPassword...Stefan Metzmacher2020-09-181-1/+59
* CVE-2020-1472(ZeroLogon): s4:rpc_server:netlogon: make use of netlogon_creds_...Stefan Metzmacher2020-09-181-2/+1
* CVE-2020-1472(ZeroLogon): s4:torture/rpc: make use of netlogon_creds_random_c...Stefan Metzmacher2020-09-182-23/+13
* CVE-2020-10760 dsdb: Add tests for paged_results and VLV over the Global Cata...Andrew Bartlett2020-06-251-65/+106
* CVE-2020-10760 dsdb: Ensure a proper talloc tree for saved controlsAndrew Bartlett2020-06-252-0/+15
* CVE-2020-10745: librpc/tests: cmocka tests of dns and ndr stringsDouglas Bagnall2020-06-251-0/+2
* CVE-2020-10745: pytests: hand-rolled invalid dns/nbt packet testsDouglas Bagnall2020-06-251-0/+10
* CVE-2020-10730: s4 dsdb vlv_pagination: Prevent repeat call of ldb_module_doneGary Lockyer2020-06-251-12/+49
* CVE-2020-10730: s4 dsdb paged_results: Prevent repeat call of ldb_module_doneGary Lockyer2020-06-251-9/+34
* CVE-2020-10730: dsdb: Ban the combination of paged_results and VLVAndrew Bartlett2020-06-251-0/+10
* CVE-2020-10730: dsdb: Fix crash when vlv and paged_results are combinedAndrew Bartlett2020-06-251-0/+4
* CVE-2020-10730: selftest: Add test to show that VLV and paged_results are inc...Andrew Bartlett2020-06-252-0/+50
* CVE-2020-10730: vlv: Another workaround for mixing ASQ and VLVAndrew Bartlett2020-06-251-4/+15
* CVE-2020-10730: selftest: Add test to confirm VLV interaction with ASQAndrew Bartlett2020-06-251-0/+27
* CVE-2020-10730: vlv: Do not re-ASQ search the results of an ASQ search with VLVAndrew Bartlett2020-06-251-0/+11
* CVE-2020-10730: vlv: Use strcmp(), not strncmp() checking the NULL terminated...Andrew Bartlett2020-06-251-2/+2
* CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decodeGary Lockyer2020-04-212-3/+10
* CVE-2020-10704: S4 ldap server: Limit request sizesGary Lockyer2020-04-211-1/+95
* CVE-2020-10704: ldapserver tests: Limit search request sizesGary Lockyer2020-04-211-0/+6
* CVE-2020-10704: libcli ldap: test recursion depth in ldap_decode_filter_treeGary Lockyer2020-04-211-0/+2
* CVE-2020-10704: lib util asn1: Add ASN.1 max tree depthGary Lockyer2020-04-214-28/+28
* CVE-2020-10700: dsdb: Do not permit the ASQ control for the GUID search in pa...Andrew Bartlett2020-04-211-5/+13
* CVE-2020-10700: dsdb: Add test for ASQ and ASQ in combination with paged_resultsAndrew Bartlett2020-04-212-0/+172
* dsdb: Correctly handle memory in objectclass_attrsAndrew Bartlett2020-03-041-1/+16
* s4:torture: Skip the deltest20 as user rootAndreas Schneider2020-02-031-0/+4
* Merge tag 'samba-4.10.12' into v4-10-testKarolin Seeger2020-01-217-151/+658
|\
| * CVE-2019-19344 kcc dns scavenging: Fix use after free in dns_tombstone_record...Gary Lockyer2020-01-091-9/+42
| * CVE-2019-14902 dsdb: Change basis of descriptor module deferred processing to...Andrew Bartlett2020-01-094-153/+156
| * CVE-2019-14902 repl_meta_data: Set renamed = true (and so do SD inheritance) ...Andrew Bartlett2020-01-091-0/+13
| * CVE-2019-14902 repl_meta_data: Fix issue where inherited Security Descriptors...Andrew Bartlett2020-01-091-1/+21
| * CVE-2019-14902 repl_meta_data: schedule SD propagation to a renamed DNAndrew Bartlett2020-01-091-1/+16
| * CVE-2019-14902 dsdb: Ensure we honour both change->force_self and change->for...Andrew Bartlett2020-01-091-0/+7
| * CVE-2019-14902 dsdb: Add comments explaining why SD propagation needs to be d...Andrew Bartlett2020-01-091-0/+7
| * CVE-2019-14902 dsdb: Explain that descriptor_sd_propagation_recursive() is pr...Andrew Bartlett2020-01-091-0/+3
| * selftest: Add test to confirm ACL inheritence really happensAndrew Bartlett2020-01-091-21/+94
| * CVE-2019-14902 selftest: Add test for a special case around replicated renamesAndrew Bartlett2020-01-091-0/+69
| * CVE-2019-14902 selftest: Add test for replication of inherited security descr...Andrew Bartlett2020-01-092-0/+264
* | test upgradedns: ensure lmdb lock files linkedGary Lockyer2020-01-141-0/+2
* | Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero.Torsten Fohrer2019-12-191-1/+1
* | Merge tag 'samba-4.10.11' into v4-10-testKarolin Seeger2019-12-108-65/+72
|\ \ | |/
| * CVE-2019-14870: mit-kdc: enforce delegation_not_allowed flagIsaac Boukris2019-12-032-11/+11
| * CVE-2019-14870: heimdal: enforce delegation_not_allowed in S4U2SelfIsaac Boukris2019-12-031-22/+36
| * CVE-2019-14870: heimdal: add S4U test for delegation_not_allowedIsaac Boukris2019-12-031-0/+1
| * s4-torture: Reduce flapping in SambaToolDrsTests.test_samba_tool_replicate_localAndrew Bartlett2019-12-031-1/+2
| * CVE-2019-14861: s4-rpc/dnsserver: Avoid crash in ldb_qsort() via dcesrv_Dnssr...Andrew Bartlett2019-12-033-27/+17
| * CVE-2019-14861: s4-rpc_server: Remove special case for @ in dns_build_tree()Andrew Bartlett2019-12-031-4/+5
* | heimdal-build: avoid hard-coded /usr/include/heimdal in asn1_compile-generate...Uri Simchoni2019-12-031-1/+1