Prevent read buffer overflow in verbose debug logging.
When we receive more than 8 nameservers in a DHCP lease we would
overread the nameservers buffer because the loop was not bounded by
items in the array but the whole size.
Pointed out by Stuart Thomas some time ago, thanks!
isakmpd: Handle malformed MONITOR_BIND message
Using a stack allocated sockaddr_storage avoids the malloc(3)
entirely. Add length checks for the payload sent by the child.
When a malicious child sends us a malformed message the privsep
protocol is out of sync. Thus terminate gracefully with log_fatalx().
While there, attribute log_fatalx() with __dead.
Reported by Shibo, Hugo Systopia Team
ok markus@ tb@ deraadt@
Update to samba-4.24.6
Changes: https://www.samba.org/samba/history/samba-4.24.6.html
Minor of libndr needs a minor bump because of the addition of symbol.
Tested and OK Ian McWilliam <kaosagnt AT gmail DOT com> (co-maintainer)
Update to samba-4.24.6
Changes: https://www.samba.org/samba/history/samba-4.24.6.html
Minor of libndr needs a minor bump because of the addition of symbol.
Tested and OK Ian McWilliam <kaosagnt AT gmail DOT com> (co-maintainer)
disable dynamic power gating on Panther Lake and later
described in Intel changes as known to cause hangs
tested on 0x57b3 / E1000_DEV_ID_PCH_PTP_I219_LM25
partly from Intel's DPDK driver
ok jmatthew@