summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* CVE-2023-0922 set default ldap client sasl wrapping to sealRob van der Linde2023-03-201-1/+1
* CVE-2023-0614 ldb: Release LDB 2.6.2ldb-2.6.2Andrew Bartlett2023-03-203-1/+305
* CVE-2023-0614 lib/ldb-samba Ensure ACLs are evaluated on SAMBA_LDAP_MATCH_RUL...Andrew Bartlett2023-03-201-1/+6
* CVE-2023-0614 lib/ldb-samba: Add test for SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EV...Andrew Bartlett2023-03-202-57/+174
* CVE-2023-0614 dsdb: Add pre-cleanup and self.addCleanup() of OU created in ma...Andrew Bartlett2023-03-201-0/+8
* CVE-2023-0614 ldb: Filter on search base before redacting messageJoseph Sutton2023-03-204-23/+47
* CVE-2023-0614 ldb: Centralise checking for inaccessible matchesJoseph Sutton2023-03-202-30/+31
* CVE-2023-0614 ldb: Prevent disclosure of confidential attributesJoseph Sutton2023-03-206-0/+91
* CVE-2023-0614 ldb: Add ldb_parse_tree_get_attr()Joseph Sutton2023-03-202-0/+28
* CVE-2023-0614 ldb: Make use of ldb_filter_attrs_in_place()Joseph Sutton2023-03-203-57/+62
* CVE-2023-0614 ldb: Make ldb_filter_attrs_in_place() work in placeJoseph Sutton2023-03-203-442/+307
* CVE-2023-0614 ldb: Add function to filter message in placeJoseph Sutton2023-03-204-0/+1148
* CVE-2023-0614 ldb: Add function to add distinguishedName to messageJoseph Sutton2023-03-202-3/+8
* CVE-2023-0614 ldb: Add function to remove excess capacity from an ldb messageJoseph Sutton2023-03-202-0/+19
* CVE-2023-0614 ldb: Add function to take ownership of an ldb messageJoseph Sutton2023-03-202-0/+45
* CVE-2023-0614 ldb:tests: Ensure all tests are accounted forJoseph Sutton2023-03-201-2/+3
* CVE-2023-0614 ldb:tests: Ensure ldb_val data is zero-terminatedJoseph Sutton2023-03-201-85/+86
* CVE-2023-0614 ldb: Add functions for handling inaccessible message elementsJoseph Sutton2023-03-202-0/+30
* CVE-2023-0614 lib/ldb: Avoid allocation and memcpy() for every wildcard match...Andrew Bartlett2023-03-201-10/+50
* lib:util: File descriptor being closed repeatedly.baixiangcpp2023-02-231-1/+8
* lib/replace - add extra check to bsd_attr_listAndrew Walker2023-01-231-0/+12
* CVE-2022-37966 param: Add support for new option "kdc supported enctypes"Stefan Metzmacher2022-12-141-0/+69
* CVE-2022-37966 param: let "kdc default domain supportedenctypes = 0" mean the...Stefan Metzmacher2022-12-141-4/+0
* CVE-2022-37966 param: don't explicitly initialize "kdc force enable rc4 weak ...Stefan Metzmacher2022-12-141-4/+0
* CVE-2022-37966 lib/krb5_wrap: no longer reference des encryption typesStefan Metzmacher2022-12-141-2/+0
* CVE-2022-37966 lib/krb5_wrap: remove unused ifdef HAVE_ENCTYPE_AES*Stefan Metzmacher2022-12-141-4/+0
* CVE-2022-37966 param: Add support for new option "kdc force enable rc4 weak s...Andrew Bartlett2022-12-141-0/+4
* CVE-2022-37966 param: Add support for new option "kdc default domain supporte...Joseph Sutton2022-12-141-0/+79
* CVE-2022-38023 docs-xml/smbdotconf: add "server schannel require seal[:COMPUT...Stefan Metzmacher2022-12-141-0/+1
* CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 clients' default to yesStefan Metzmacher2022-12-141-0/+1
* CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yesStefan Metzmacher2022-12-141-0/+1
* lib/replace: fix memory leak in snprintf replacementsStefan Metzmacher2022-11-231-0/+2
* lib/tsocket: avoid endless cpu-spinning in tstream_bsd_fde_handler()Stefan Metzmacher2022-10-311-5/+116
* lib/tsocket: remember the first error as tstream_bsd->errorStefan Metzmacher2022-10-311-0/+39
* lib/tsocket: check for errors indicated by poll() before getsockopt(fd, SOL_S...Stefan Metzmacher2022-10-311-1/+79
* lib/tsocket: split out tsocket_bsd_error() from tsocket_bsd_pending()Stefan Metzmacher2022-10-311-19/+23
* lib/tsocket: Add tests for loop on EAGAINAndrew Bartlett2022-10-314-0/+641
* lib:replace: Add macro BURN_STR() to zero memory of a stringPavel Filipenský2022-09-191-0/+11
* lib:util: Check memset_s() error code in talloc_keep_secret_destructor()Joseph Sutton2022-09-191-1/+14
* CVE-2021-20251 lib:crypto: Add Python functions for AES SAMR password changeJoseph Sutton2022-09-191-0/+221
* CVE-2021-20251 lib:crypto: Add md4_hash_blob() for hashing data with MD4Joseph Sutton2022-09-191-0/+35
* CVE-2021-20251 lib:crypto: Add des_crypt_blob_16() for encrypting data with DESJoseph Sutton2022-09-192-1/+66
* lib:crypto: Use constant time memory comparison to check HMACJoseph Sutton2022-09-191-3/+3
* lib:crypto: Check for overflow before filling pauth_tag arrayJoseph Sutton2022-09-191-0/+8
* lib:crypto: Zero auth_tag array in encryption testJoseph Sutton2022-09-191-1/+1
* lib/util: add unlikely() to SMB_ASSERT()Stefan Metzmacher2022-08-231-1/+1
* lib/replace: let DISABLE_OPATH also undef __NR_openat2Stefan Metzmacher2022-08-161-0/+8
* lib/replace: add fallback defines for __NR_openat2Stefan Metzmacher2022-08-161-0/+20
* lib/replace: use syscall(__NR_openat2) if availableStefan Metzmacher2022-08-161-0/+8
* lib/replace: always include <sys/syscall.h> in replace.c if availableStefan Metzmacher2022-08-161-3/+4