search for: jaltman

Hello, In order to experiment with OpenCA, I have built an RPM for redhat 7.2 of a recent OpenSSL snapshot (the binary rpm on the OpenCA was built with the different target directories and libraries. Unfortunately these recent OpenSSL snapshots seems to break all OpenSSH tarballs and RPMs that I have been able to find. None of them seem to compile successfully, even the snapshots at

...rberos are vulnerable to a man-in-the-middle attack impersonating a trusted server, who may gain elevated access to the domain by returning malicious replication or authorization data. Samba binaries built against MIT Kerberos are not vulnerable. Changes: -------- o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...lison <jra at samba.org> * BUG 13428: s3: smbd: Fix SMB2-FLUSH against directories. * BUG 13457: s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x. * BUG 13474: python: Fix talloc frame use in make_simple_acl(). o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 11573: heimdal: lib/krb5: Do not fail set_config_files due to parse error. o Andrew Bartlett <abartlet at samba.org> * ldb: version 1.3.4 * BUG 13448: ldb: One-level search was incorrectly falling back to full DB scan. * BUG 13452: ldb...

...lison <jra at samba.org> * BUG 13428: s3: smbd: Fix SMB2-FLUSH against directories. * BUG 13457: s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x. * BUG 13474: python: Fix talloc frame use in make_simple_acl(). o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 11573: heimdal: lib/krb5: Do not fail set_config_files due to parse error. o Andrew Bartlett <abartlet at samba.org> * ldb: version 1.3.4 * BUG 13448: ldb: One-level search was incorrectly falling back to full DB scan. * BUG 13452: ldb...

...onal error path leak fix. * BUG 13511: libsmbclient: Initialize written value before use. * BUG 13527: s3: libsmbclient: Fix cli_splice() fallback when reading less than a complete file. * BUG 13537: Using "sendfile = yes" with SMB2 can cause CPU spin. o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 11573: heimdal: lib/krb5: Do not fail set_config_files due to parse error. o Andrew Bartlett <abartlet at samba.org> * BUG 13519: ldb: Refuse to build Samba against a newer minor version of ldb. o Bailey Berro <baileyberro at chromium.o...

...onal error path leak fix. * BUG 13511: libsmbclient: Initialize written value before use. * BUG 13527: s3: libsmbclient: Fix cli_splice() fallback when reading less than a complete file. * BUG 13537: Using "sendfile = yes" with SMB2 can cause CPU spin. o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 11573: heimdal: lib/krb5: Do not fail set_config_files due to parse error. o Andrew Bartlett <abartlet at samba.org> * BUG 13519: ldb: Refuse to build Samba against a newer minor version of ldb. o Bailey Berro <baileyberro at chromium.o...

...ways to make it clear in what direction we are heading but also that the other options are only being provided to address the issue of compatibility with deployed implementations. Signed, Marshall Vale, on behalf of the MIT Kerberos Development Team <krbcore at mit.edu> Jeffrey Altman <jaltman at kermit-project.org> Douglas E. Engert <deengert at anl.gov> Joseph Galbraith <galb at vandyke.com> Jeffrey Hutzelman <jhutz at cmu.edu> Joseph Salowey <jsalowey at cisco.com> Von Welch <welch at mcs.anl.gov> Simon Wilkinson <sxw at inf.ed.ac.uk>

...hash userPassword schemes New parameter ntlm auth New values ntlmv2-only KNOWN ISSUES ============ https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.7#Release_blocking_bugs CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...chneider <asn at samba.org> * BUG 12882: waf: Do not install _ldb_text.py if we have system libldb. o Martin Schwenke <martin at meltin.net> * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. CHANGES SINCE 4.7.0rc1 ====================== o Jeffrey Altman <jaltman at secure-endpoints.com> * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing lis...

...12882: waf: Do not install _ldb_text.py if we have system libldb. > > o Martin Schwenke <martin at meltin.net> > * BUG 12898: ctdb-common: Set close-on-exec when creating PID file. > > > CHANGES SINCE 4.7.0rc1 > ====================== > > o Jeffrey Altman <jaltman at secure-endpoints.com> > * BUG 12894: CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation > > > ####################################### > Reporting bugs & Development Discussion > ####################################### > > Please discuss this rele...