diff --git a/build-source-timestamp b/build-source-timestamp index cf4e3f5..96bb71c 100644 --- a/build-source-timestamp +++ b/build-source-timestamp @@ -1,2 +1,2 @@ -2722 +2740 Branch : trunk diff --git a/patches.tar.bz2 b/patches.tar.bz2 index fca4b9c..b4bacad 100644 --- a/patches.tar.bz2 +++ b/patches.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:ff9b05f15eea00286afb5181a65289678a41ba67ad51b3d5e71f31b7d53561eb -size 33520 +oid sha256:a78cd2e7ae056b6ab1bcc7ee45a291d09a0335250aa5c46b16b5416fddbc22fa +size 33487 diff --git a/samba-3.6.1.tar.bz2 b/samba-3.6.1.tar.bz2 deleted file mode 100644 index 9f4a86b..0000000 --- a/samba-3.6.1.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ac15f08fd83116f0879842b83e9a74def67e10e3de127bdf7bbcf6ed3b6f0307 -size 24440361 diff --git a/samba-3.6.3.tar.bz2 b/samba-3.6.3.tar.bz2 new file mode 100644 index 0000000..502215d --- /dev/null +++ b/samba-3.6.3.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f0b251f493340f19a653e777688f2ce9667736dd289f0d96954afc799f7b7d61 +size 24448051 diff --git a/samba-doc.spec b/samba-doc.spec index d08ca80..e901665 100644 --- a/samba-doc.spec +++ b/samba-doc.spec @@ -79,7 +79,7 @@ BuildRequires: pkg-config %else BuildRequires: pkgconfig %endif -%define samba_ver 3.6.1 +%define samba_ver 3.6.3 %define samba_ver_suffix %nil %define samba_ver_full %{samba_ver}%{samba_ver_suffix} %if 0%{?suse_version} && 0%{?suse_version} < 1111 @@ -101,10 +101,10 @@ BuildRequires: pkgconfig %else %define build_make_smp_mflags %{?jobs:-j%jobs} %endif -Version: 3.6.1 +Version: 3.6.3 Release: 1 Url: http://www.samba.org/ -License: GPLv3+ +License: GPL-3.0+ Summary: Samba Documentation Group: Documentation/Other PreReq: coreutils @@ -437,7 +437,7 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %changelog diff --git a/samba.changes b/samba.changes index fc3268b..1dcfab1 100644 --- a/samba.changes +++ b/samba.changes @@ -1,3 +1,205 @@ +------------------------------------------------------------------- +Sun Jan 29 21:06:24 UTC 2012 - lmuelle@suse.de + +- Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); + (bnc#743986). + +------------------------------------------------------------------- +Thu Jan 26 14:15:38 UTC 2012 - lmuelle@suse.de + +- Use spdx.org compliant license names for all packages. + +------------------------------------------------------------------- +Wed Jan 25 20:16:10 UTC 2012 - lmuelle@suse.de + +- Update to 3.6.2. + + Make Winbind receive user/group information (bug #8371). + + Several SMB2 fixes. + + Fix a crash bug in the spoolss code. + + Add new contributing FAQ announcing acceptance of corporate (C). + + + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563); + (bnc#726145). + + Remove pointless use_memory_krb5_ccache; (bso#7465). + + Fix perl path; (bso#8176). + + Grant credits in async interim responses (SMB2); (bso#8357). + + Make Winbind receive user/group information; (bso#8371). + + Fix Windows XP clients crashing smbd process every once in a while; + (bso#8384); (bnc#731571). + + Make VFS op "streaminfo" stackable; (bso#8419). + + Add an allocation pool to idmap_autorid; (bso#8444). + + Fix SEGFAULT from net registry export on not zero terminated REG_SZ + values; (bso#8528). + + Make DSO_EXPORTS_CMD more portable; (bso#8531). + + readlink() on Linux clients fails if the symlink target is outside of the + share; (bso#8541). + + smbclient posix_open command fails to return correct info on open file; + (bso#8542). + + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + + Fix setting the machine account password; (bso#8550). + + Make SMB2 handle compound request headers in the same way as Windows; + (bso#8560). + + Password change settings not fully observed; (bso#8561). + + Fix double free error in talloc; (bso#8562). + + Fix alignment in the non-extended-security negprot; (bso#8573). + + Add systemd service files; (bso#8575). + + Add systemd service files; (bso#8575). + + smb2_flush: Don't send uninitialized memory; (bso#8579). + + Enable inotify if sys or kernel inotify is available; (bso#8580). + + Increase a debug level; (bso#8585). + + libsmb: Only align unicode pipe_name; (bso#8586). + + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + + Don't limit the number of open dptrs for SMB2; (bso#8592). + + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + + Make cldap work over IPv6; (bso#8600). + + Fix intermittent print job failures caused by character conversion errors; + (bso#8606). + + Improve configure.in so it can be used outside the Samba source tree; + (bso#8607). + + Winbind: Don't fail on users without a uid; (bso#8608). + + Ensure we correctly calculate reply credits over all returned SMB2 + replies; (bso#8614). + + Fix migrate printer code; (bso#8618). + + Fix crash bug when trying to browse Samba printers; (bso#8623). + + libsmb: Don't duplicate Kerberos service tickets; (bso#8628). + + POSIX ACE x permission becomes rx following mapping to and from a DACL; + (bso#8631). + + When returning an ACL without SECINFO_DACL requested, we still set + SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + + Fix the vfs_commit module; (bso#8639). + + Add an update function for Winbind cache; (bso#8643). + + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries + on a directory with no stored ACL; (bso#8644). + + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb + vfs modules; (bso#8652). + + Fix deleting a symlink if the symlink target is outside of the share; + (bso#8663). + + Fix renaming a symlink if the symlink target is outside of the share; + (bso#8664). + + Fix NT ACL issue; (bso#8673). + + Fix buffer overflow issue with AES encryption in samba traffic analyzer; + (bso#8674). + + Fix Winbind segfault if we can't map the last user; (bso#8678). + + recvfile code path using splice() on Linux leaves data in the pipe on + short write; (bso#8679). + + Try ctdbd_init_connection() as root; (bso#8684). + + Packet validation checks can be done before length validation causing + uninitialized memory read; (bso#8686). + + Fix typo in 'net memberships' usage; (bso#8687). + + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); + (bso#8692). + + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) + (bnc#740810). + + Fix major leak with SMB2 in connections.tdb; (bso#8710). + +------------------------------------------------------------------- +Wed Jan 25 19:55:25 UTC 2012 - lmuelle@suse.de + +- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504). + +------------------------------------------------------------------- +Wed Jan 25 12:56:23 UTC 2012 - lmuelle@suse.de + +- Use correct license, LGPLv3+ for libwbclient packages. + +------------------------------------------------------------------- +Tue Jan 24 19:46:46 UTC 2012 - lmuelle@suse.de + +- When returning an ACL without SECINFO_DACL requested, we still set + SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + +------------------------------------------------------------------- +Sun Jan 22 01:38:35 CET 2012 - ddiss@suse.de + +- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810). +- Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504). + +------------------------------------------------------------------- +Sat Jan 21 21:23:08 UTC 2012 - lmuelle@suse.de + +- Buffer overflow issue with AES encryption in samba traffic analyzer; + (bso#8674). +- NT ACL issue; (bso#8673). +- Deleting a symlink fails if the symlink target is outside of the share; + (bso#8663). +- connections.tdb - major leak with SMB2; (bso#8710). + +------------------------------------------------------------------- +Wed Jan 18 20:55:14 UTC 2012 - lmuelle@suse.de + +- Renaming a symlink fails if the symlink target is outside of the share; + (bso#8664). + +------------------------------------------------------------------- +Tue Jan 17 12:04:12 UTC 2012 - lmuelle@suse.de + +- Intermittent print job failures caused by character conversion errors; + (bso#8606). +- ads_keytab_verify_ticket mixes talloc allocation with malloc free; + (bso#8692). +- libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). +- s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684). +- s3-printing: fix migrate printer code; (bso#8618). +- Packet validation checks can be done before length validation causing + uninitialized memory read; (bso#8686). + +------------------------------------------------------------------- +Mon Jan 16 16:41:18 UTC 2012 - lmuelle@suse.de + +- net memberships usage info was wrong; (bso#8687). +- s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628). +- Recvfile code path using splice() on Linux leaves data in the pipe on short + write; (bso#8679). +- s3-winbind: Fix segfault if we can't map the last user; (bso#8678). +- vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on + a directory with no stored ACL; (bso#8644). +- s3/doc: document the ignore system acls option of vfs_acl_xattr and + vfs_acl_tdb; (bso#8652). +- Winbind can't receive any user/group information; (bso#8371). +- s3-winbind: Add an update function for winbind cache; (bso#8643). +- s3: Attempt to fix the vfs_commit module. +- POSIX ACE x permission becomes rx following mapping to and from a DACL; + (#bso#8631). +- s3:libsmb: only align unicode pipe_name; (bso#8586). +- s3-winbind: Don't fail on users without a uid; (bso#8608). +- Crash when trying to browse samba printers; (bso#8623). +- talloc: double free error; (bso#8562). +- cldap doesn't work over ipv6; (bso#8600). +- s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326). +- SMB2: not granting credits for all requests in a compound request; + (bso#8614). +- smb2_flush sends uninitialized memory; (bso#8579). +- Password change settings not fully observed; (bso#8561). +- s3:smb2_server: grant credits in async interim responses; (bso#8357). +- s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592). +- samr_ChangePasswordUser3 IDL incorrect; (bso#8591). +- idmap_autorid does not have allocation pool; (bso#8444). +- Add systemd service files. +- s3:libsmb: the workgroup in the non-extended-security negprot is not + aligned; (bso#8573). +- s3-build: Fix inotify detection; (bso#8580). +- SMB2 doesn't handle compound request headers in the same way as Windows; + (#bso8560). +- Disconnecting clients swamp the logs; (bso#8585). +- s3-netlogon: Fix setting the machinge account password; (bso#8550). +- winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). +- smbclient posix_open command fails to return correct info on open file; + (bso#8542). +- readlink() on Linux clients fails if the symlink target is outside of the + share; (bso#8541). +- s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465). +- s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531). +- s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated + ucs2 string; (bso#8528). +- Make VFS op "streaminfo" stackable; (bso#8419). + +------------------------------------------------------------------- +Tue Jan 3 12:04:48 CET 2012 - ddiss@suse.de + +- Fix incorrect perfcount array length calculations; (bnc#739258). + ------------------------------------------------------------------- Wed Dec 21 12:59:18 UTC 2011 - coolo@suse.com diff --git a/samba.spec b/samba.spec index b4fca3f..1f0afb4 100644 --- a/samba.spec +++ b/samba.spec @@ -79,7 +79,7 @@ BuildRequires: pkg-config %else BuildRequires: pkgconfig %endif -%define samba_ver 3.6.1 +%define samba_ver 3.6.3 %define samba_ver_suffix %nil %define samba_ver_full %{samba_ver}%{samba_ver_suffix} %if 0%{?suse_version} && 0%{?suse_version} < 1111 @@ -101,10 +101,10 @@ BuildRequires: pkgconfig %else %define build_make_smp_mflags %{?jobs:-j%jobs} %endif -Version: 3.6.1 +Version: 3.6.3 Release: 1 %define ldapsmb_ver 1.34b -License: GPLv3+ +License: GPL-3.0+ Url: http://www.samba.org/ Group: Productivity/Networking/Samba Provides: samba-gplv3 = %{version} @@ -208,11 +208,11 @@ Authors: The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package client -License: GPLv3+ +License: GPL-3.0+ Summary: Samba Client Utilities Group: Productivity/Networking/Samba Provides: samba-gplv3-client = %{version} @@ -252,13 +252,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %if 0%{?suse_version} == 0 || 0%{?suse_version} > 1020 %package devel -License: GPLv3+ +License: GPL-3.0+ Summary: Libraries and Header Files to Develop Programs with Samba Support Group: Development/Libraries/C and C++ Provides: samba-gplv3-devel = %{version} @@ -278,14 +278,14 @@ Authors: The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %endif %if 0%{?suse_version} && 0%{?suse_version} < 1001 || 0%{?suse_version} > 1110 %package doc -License: GPLv3+ +License: GPL-3.0+ Summary: Samba Documentation Group: Documentation/Other PreReq: coreutils @@ -308,13 +308,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %endif %package krb-printing -License: GPLv3+ +License: GPL-3.0+ Summary: Wrapper binary for kerberized printing Group: Productivity/Networking/Samba PreReq: coreutils @@ -335,7 +335,7 @@ Authors: -------- Jeremy Allison -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %if %{make_utils} @@ -356,13 +356,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %endif %package winbind -License: GPLv3+ +License: GPL-3.0+ Summary: Winbind Daemon and Tool Group: Productivity/Networking/Samba Provides: samba-gplv3-winbind = %{version} @@ -391,18 +391,18 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %if 0%{?suse_version} && 0%{?suse_version} < 1031 %package -n libsmbclient -License: GPLv3+ +License: GPL-3.0+ %else %package -n libsmbclient0 -License: GPLv3+ +License: GPL-3.0+ Provides: libsmbclient = %{version} Obsoletes: libsmbclient %endif @@ -417,14 +417,14 @@ PreReq: /sbin/ldconfig %description -n libsmbclient -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %else %description -n libsmbclient0 -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %endif @@ -441,7 +441,7 @@ Authors: The Samba Team %package -n libsmbclient-devel -License: GPLv3+ +License: GPL-3.0+ Summary: Libraries and Header Files to Develop Programs with smbclient Support Group: Development/Libraries/C and C++ %if 0%{?suse_version} > 1020 @@ -472,11 +472,11 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libnetapi0 -License: GPLv3+ +License: GPL-3.0+ Summary: Samba netapi Library Group: System/Libraries PreReq: /sbin/ldconfig @@ -490,11 +490,11 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libnetapi-devel -License: GPLv3+ +License: GPL-3.0+ Summary: Libraries and Header Files to Develop Programs with netapi Support Group: Development/Libraries/C and C++ %if 0%{?suse_version} > 1020 @@ -514,18 +514,18 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %if 0%{?suse_version} && 0%{?suse_version} < 1031 %package -n libsmbsharemodes -License: GPLv3+ +License: GPL-3.0+ %else %package -n libsmbsharemodes0 -License: GPLv3+ +License: GPL-3.0+ %endif Summary: Samba smbsharemodes Library Group: System/Libraries @@ -535,14 +535,14 @@ PreReq: /sbin/ldconfig %description -n libsmbsharemodes -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %else %description -n libsmbsharemodes0 -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %endif @@ -553,7 +553,7 @@ Authors: The Samba Team %package -n libsmbsharemodes-devel -License: GPLv3+ +License: GPL-3.0+ Summary: Libraries and Header Files to Develop Programs with smbsharemodes Support Group: Development/Libraries/C and C++ %if 0%{?suse_version} > 1020 @@ -578,11 +578,11 @@ Authors: The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libwbclient0 -License: GPLv3+ +License: LGPL-3.0+ Summary: Samba libwbclient Library Group: System/Libraries PreReq: /sbin/ldconfig @@ -596,11 +596,11 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libwbclient-devel -License: GPLv3+ +License: LGPL-3.0+ Summary: Libraries and Header Files to Develop Programs with wbclient Support Group: Development/Libraries/C and C++ %if 0%{?suse_version} > 1020 @@ -620,13 +620,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libtalloc2 Version: %{libtalloc_ver} Release: 5 -License: LGPLv3+ +License: LGPL-3.0+ Summary: Samba talloc Library Group: System/Libraries PreReq: /sbin/ldconfig @@ -640,13 +640,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libtalloc-devel Version: %{libtalloc_ver} Release: 5 -License: LGPLv3+ +License: LGPL-3.0+ Summary: Libraries and Header Files to Develop Programs with talloc Support Group: Development/Libraries/C and C++ %if 0%{?suse_version} > 1020 @@ -666,13 +666,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libtdb1 Version: %{libtdb_ver} Release: 5 -License: LGPLv3+ +License: LGPL-3.0+ Summary: Samba tdb Library Group: System/Libraries PreReq: /sbin/ldconfig @@ -686,13 +686,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libtdb-devel Version: %{libtdb_ver} Release: 5 -License: LGPLv3+ +License: LGPL-3.0+ Summary: Libraries and Header Files to Develop Programs with tdb Support Group: Development/Libraries/C and C++ #BuildRequires: pkg-config @@ -708,13 +708,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libtevent0 Version: %{libtevent_ver} Release: 5 -License: LGPLv3+ +License: LGPL-3.0+ Summary: Samba tevent Library Group: System/Libraries PreReq: /sbin/ldconfig @@ -728,13 +728,13 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libtevent-devel Version: %{libtevent_ver} Release: 5 -License: LGPLv3+ +License: LGPL-3.0+ Summary: Libraries and Header Files to Develop Programs with tevent Support Group: Development/Libraries/C and C++ %if 0%{?suse_version} > 1020 @@ -756,13 +756,13 @@ Authors: The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libldb1 Version: %{libldb_ver} Release: 5 -License: LGPLv3+ +License: LGPL-3.0+ Summary: Samba ldb Library Group: System/Libraries BuildRequires: popt-devel @@ -778,13 +778,13 @@ Authors: The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %package -n libldb-devel Version: %{libldb_ver} Release: 5 -License: LGPLv3+ +License: LGPL-3.0+ Summary: Libraries and Header Files to Develop Programs with ldb Support Group: Development/Libraries/C and C++ %if 0%{?suse_version} > 1020 @@ -805,7 +805,7 @@ Authors: -------- The Samba Team -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %if %{make_ldapsmb} @@ -813,7 +813,7 @@ Branch : trunk %package -n ldapsmb Version: 1.34b Release: 307 -License: GPLv2+ +License: GPL-2.0+ Summary: Tool to administer Samba's LDAP backend Group: Productivity/Networking/Samba Requires: perl-ldap @@ -828,7 +828,7 @@ Authors: -------- Guenther Deschner -Source Timestamp: 2722 +Source Timestamp: 2740 Branch : trunk %endif diff --git a/vendor-files.tar.bz2 b/vendor-files.tar.bz2 index 892abb5..19b7841 100644 --- a/vendor-files.tar.bz2 +++ b/vendor-files.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:6cb639a600ad1f863759bb62c3cfe0d51255cdd4d39d6529b4eb7b54024db20d -size 52374 +oid sha256:579e0067fd3d7a841a9390c250e5202f7f7695d27bded0a2bf2d4f00c731fd91 +size 52395