Timur I. Bakeyev fb71a4b641 net/samba413: Update to the 4.13.16 release to address CVE-2021-43566 ... In addition an CVE-2021-20316 is issued, but can't be address in this Samba release. ==================================================== Workaround and mitigating factors for CVE-2021-20316 ==================================================== Do not enable SMB1 (please note SMB1 is disabled by default in Samba from version 4.11.0 and onwards). This prevents the creation of symbolic links via SMB1. If SMB1 must be enabled for backwards compatibility then add the parameter: unix extensions = no to the [global] section of your smb.conf and restart smbd. This prevents SMB1 clients from creating symlinks on the exported file system. However, if the same region of the file system is also exported using NFS, NFS clients can create symlinks that potentially can also hit the race condition. For non-patched versions of Samba we recommend only exporting areas of the file system by either SMB2 or NFS, not both. Security: CVE-2021-43566		2022-01-12 06:35:52 +01:00
..
files
distinfo	net/samba413: Update to the 4.13.16 release to address CVE-2021-43566	2022-01-12 06:35:52 +01:00
Makefile	net/samba413: Update to the 4.13.16 release to address CVE-2021-43566	2022-01-12 06:35:52 +01:00
pkg-descr
pkg-plist
pkg-plist.ad_dc
pkg-plist.cluster
pkg-plist.python	net/samba413: Update to the 4.13.16 release to address CVE-2021-43566	2022-01-12 06:35:52 +01:00