X-Git-Url: http://git.ipfire.org/?p=ipfire-2.x.git;a=blobdiff_plain;f=src%2Fpatches%2Fsamba%2FCVE-2016-2125-v3.6.patch;fp=src%2Fpatches%2Fsamba%2FCVE-2016-2125-v3.6.patch;h=0000000000000000000000000000000000000000;hp=f67b5d08f41941c7b3faf4e80915943275ae1e0b;hb=201ad7ff80eb8870aab2b903be6eb7aea2adf563;hpb=f29f169735ff3b431c6dc7cb50b36d0fe644163b diff --git a/src/patches/samba/CVE-2016-2125-v3.6.patch b/src/patches/samba/CVE-2016-2125-v3.6.patch deleted file mode 100644 index f67b5d08f4..0000000000 --- a/src/patches/samba/CVE-2016-2125-v3.6.patch +++ /dev/null @@ -1,46 +0,0 @@ -From 7cc3b25f4bf9e89e326d04b83bc7365f3cc29265 Mon Sep 17 00:00:00 2001 -From: Stefan Metzmacher -Date: Wed, 7 Dec 2016 10:58:35 +0100 -Subject: [PATCH] CVE-2016-2125: s3:gse: avoid using GSS_C_DELEG_FLAG - -We should only use GSS_C_DELEG_POLICY_FLAG in order to let -the KDC decide if we should send delegated credentials to -a remote server. - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445 - -Signed-off-by: Stefan Metzmacher -Backported-by: Andreas Schneider ---- - source3/librpc/crypto/gse.c | 1 - - source3/libsmb/clifsinfo.c | 2 +- - 2 files changed, 1 insertion(+), 2 deletions(-) - -diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c -index 02fb0f6141d..211ca7774be 100644 ---- a/source3/librpc/crypto/gse.c -+++ b/source3/librpc/crypto/gse.c -@@ -162,7 +162,6 @@ static NTSTATUS gse_context_init(TALLOC_CTX *mem_ctx, - memcpy(&gse_ctx->gss_mech, gss_mech_krb5, sizeof(gss_OID_desc)); - - gse_ctx->gss_c_flags = GSS_C_MUTUAL_FLAG | -- GSS_C_DELEG_FLAG | - GSS_C_DELEG_POLICY_FLAG | - GSS_C_REPLAY_FLAG | - GSS_C_SEQUENCE_FLAG; -diff --git a/source3/libsmb/clifsinfo.c b/source3/libsmb/clifsinfo.c -index 1d66eb4c6b8..34ebc208db0 100644 ---- a/source3/libsmb/clifsinfo.c -+++ b/source3/libsmb/clifsinfo.c -@@ -726,7 +726,7 @@ static NTSTATUS make_cli_gss_blob(TALLOC_CTX *ctx, - &es->s.gss_state->gss_ctx, - srv_name, - GSS_C_NO_OID, /* default OID. */ -- GSS_C_MUTUAL_FLAG | GSS_C_REPLAY_FLAG | GSS_C_SEQUENCE_FLAG | GSS_C_DELEG_FLAG, -+ GSS_C_MUTUAL_FLAG | GSS_C_REPLAY_FLAG | GSS_C_SEQUENCE_FLAG | GSS_C_DELEG_POLICY_FLAG, - GSS_C_INDEFINITE, /* requested ticket lifetime. */ - NULL, /* no channel bindings */ - p_tok_in, --- -2.11.0 -