mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
b5e6133eab
https://www.samba.org/samba/history/samba-4.24.5.html This is a security release in order to address the following defects: o CVE-2026-6949: TSIG packet with name compression can crash DNS Incorrect size calculations when a TSIG record contains compressed names can lead to a large out-of-bounds write causing the server to crash. https://www.samba.org/samba/security/CVE-2026-6949.html o CVE-2026-58216: An authenticated user could possibly crash a KDC process A kpasswd packet that contains malformed ASN.1 might cause the server to access 6 bytes of unallocated memory. This memory is not exposed to the user, but in some circumstances the server could crash. https://www.samba.org/samba/security/CVE-2026-58216.html o CVE-2026-58218: DNS signing DoS via TKEY name cache exhaustion An unauthenticated user can repeatedly register names TKEY names, which floods a cache causing legitimate TKEYs to be expunged. This can practically block the use DNS TSIG signing. https://www.samba.org/samba/security/CVE-2026-58218.html o CVE-2026-58221: Samba AD authenticated LDAP access domain takeover Samba AD low-privilege authenticated LDAP access allows modifications to internal LDB special DNs, which permits a domain takeover. https://www.samba.org/samba/security/CVE-2026-58221.html o CVE-2026-58222: Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes An ordinary authenticated domain user can bypass access checks and query confidential Active Directory attributes (such as KDS root keys) via LDAP Compare requests. Due to a filter injection flaw and trusted execution context, the LDAP Compare operation can be turned into a protected-attribute disclosure oracle. https://www.samba.org/samba/security/CVE-2026-58222.html o CVE-2026-58224: The CTDB protocol has bounds checking issues CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets. https://www.samba.org/samba/security/CVE-2026-58224.html Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at https://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches