Commit Graph

737 Commits

Author SHA256 Message Date
Dominique Leuenberger
36f6b4f169 Accepting request 527524 from network:samba:STABLE
- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).

- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).

- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565). (forwarded request 527518 from npower)

OBS-URL: https://build.opensuse.org/request/show/527524
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=222
2017-09-25 11:53:18 +00:00
aa792ab3bb Accepting request 527518 from home:npower:sept-update-factory
- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).

- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).

- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).

OBS-URL: https://build.opensuse.org/request/show/527518
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=572
2017-09-20 12:13:02 +00:00
Dominique Leuenberger
d0937556c1 Accepting request 520204 from network:samba:STABLE
1

OBS-URL: https://build.opensuse.org/request/show/520204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=221
2017-09-07 20:09:20 +00:00
Aurelien Aptel
ae1ea30911 Accepting request 519876 from home:aaptel:samba-speclean
- Clean specfile assuming SUSE-only system and product >=SLE11
  + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version}
    are always undefined
  + %{_vendor} is "suse" and %{suse_version} is at least 1100

OBS-URL: https://build.opensuse.org/request/show/519876
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=571
2017-09-01 14:59:11 +00:00
Dominique Leuenberger
518a694b7a Accepting request 517193 from network:samba:STABLE
- Update to 4.6.7; (bsc#1054017)

OBS-URL: https://build.opensuse.org/request/show/517193
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=220
2017-08-24 16:27:05 +00:00
David Disseldorp
8fb1f6bb14 - Update to 4.6.7; (bsc#1054017)
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=570
2017-08-16 11:38:57 +00:00
Yuchen Lin
689ff63468 Accepting request 515194 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/515194
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=219
2017-08-12 18:07:30 +00:00
af6fd2963a - Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
(bsc#1048339).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=569
2017-08-08 13:01:02 +00:00
David Disseldorp
02fe0939f2 Accepting request 515066 from home:dmulder:branches:network:samba:STABLE
Fix duplicate CTDB_LOGGING params when downgraded and upgraded again (bsc#1048339)

OBS-URL: https://build.opensuse.org/request/show/515066
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=568
2017-08-08 12:42:26 +00:00
Dominique Leuenberger
2d5feb7d3a Accepting request 512298 from network:samba:STABLE
- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).

OBS-URL: https://build.opensuse.org/request/show/512298
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=218
2017-07-28 07:43:08 +00:00
David Disseldorp
9bb5fae037 - fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=567
2017-07-24 13:52:30 +00:00
Dominique Leuenberger
db4aaaeeac Accepting request 510316 from network:samba:STABLE
1

OBS-URL: https://build.opensuse.org/request/show/510316
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=217
2017-07-17 07:00:05 +00:00
David Disseldorp
f5aff418ad Accepting request 510312 from home:dmulder:branches:network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/510312
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=566
2017-07-14 13:54:02 +00:00
Aurelien Aptel
88ef9fdf19 Accepting request 510060 from home:dmdiss:ceph-sambagw
- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).

OBS-URL: https://build.opensuse.org/request/show/510060
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=565
2017-07-13 13:42:20 +00:00
Dominique Leuenberger
d87a96c207 Accepting request 505266 from network:samba:STABLE
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/505266
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=216
2017-06-29 13:12:09 +00:00
Dominique Leuenberger
fd6e2791d0 Accepting request 501776 from network:samba:STABLE
- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702).

OBS-URL: https://build.opensuse.org/request/show/501776
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=215
2017-06-16 08:52:43 +00:00
7466787b91 Accepting request 503634 from home:npower:1042419
- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).

OBS-URL: https://build.opensuse.org/request/show/503634
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=564
2017-06-14 10:01:54 +00:00
David Disseldorp
88564acfda - Update to 4.6.5; (bsc#1040157)
+ Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=563
2017-06-07 14:37:38 +00:00
Dominique Leuenberger
6429ee1a11 Accepting request 499449 from network:samba:STABLE
- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).

OBS-URL: https://build.opensuse.org/request/show/499449
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=214
2017-06-07 07:50:37 +00:00
David Disseldorp
cbef29480c - Revert explicit winbind %{version}-%{release} dependency.
+ The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=562
2017-05-29 16:08:25 +00:00
Dominique Leuenberger
9267f1af9a Accepting request 497890 from network:samba:STABLE
- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).

OBS-URL: https://build.opensuse.org/request/show/497890
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=213
2017-05-24 14:51:43 +00:00
David Disseldorp
6d266c100d - Fix CVE-2017-7494 remote code execution from a writable share;
(bso#12780); (bsc#1038231).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=561
2017-05-24 08:02:17 +00:00
Dominique Leuenberger
8bff52d1a4 Accepting request 491225 from network:samba:STABLE
1

OBS-URL: https://build.opensuse.org/request/show/491225
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=212
2017-05-04 06:50:24 +00:00
Noel Power
3bd36433a1 Accepting request 491060 from home:dmdiss:samba_stable_git_migration_v2
- Update to 4.6.3; (bsc#1036011)

- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).

OBS-URL: https://build.opensuse.org/request/show/491060
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=560
2017-04-26 09:40:57 +00:00
Dominique Leuenberger
cad0e53af8 Accepting request 489610 from network:samba:STABLE
1

OBS-URL: https://build.opensuse.org/request/show/489610
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=211
2017-04-25 06:56:28 +00:00
Aurelien Aptel
3c207d7687 Accepting request 489392 from home:dmdiss:samba_stable_git_migration_v2
- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
    - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"

OBS-URL: https://build.opensuse.org/request/show/489392
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=559
2017-04-20 12:26:04 +00:00
Yuchen Lin
6debb252ea Accepting request 487103 from network:samba:STABLE
- Update to 4.6.2
  + remove bso#12721 patches now upstream

- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64

- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).

- Build and install the html man pages (bsc#1021907).

- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).

- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes

- Remove chkconfig requirements for systemd systems

 - Don't call insserv if systemd is used

- Fix check if we need to require insserv

OBS-URL: https://build.opensuse.org/request/show/487103
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=210
2017-04-17 08:22:20 +00:00
David Disseldorp
9bcb70be0d Sync changelog entries from SLE Samba 4.4.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=558
2017-04-12 14:47:32 +00:00
David Disseldorp
6539ffb439 - Update to 4.6.2
+ remove bso#12721 patches now upstream

- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64

- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=557
2017-04-10 13:56:46 +00:00
David Disseldorp
1382a46a1c - Enable librados CTDB lock helper for samba-ceph package; (fate#321622).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=556
2017-04-03 14:59:54 +00:00
6a14d0bdd9 Accepting request 483890 from home:dmulder:branches:network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/483890
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=555
2017-03-31 11:23:32 +00:00
8c1ef5b501 Accepting request 482503 from home:jmcdough:updateto46
Update to 4.6.1 for CVE-2017-2619 + fix build for platforms without cmocka

OBS-URL: https://build.opensuse.org/request/show/482503
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=554
2017-03-24 13:30:38 +00:00
Aurelien Aptel
b71b411b66 Accepting request 482455 from home:jmcdough:updateto46
Update to 4.6.1 for CVE-2017-2619

OBS-URL: https://build.opensuse.org/request/show/482455
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=553
2017-03-24 11:11:14 +00:00
Dominique Leuenberger
d3f22a4736 Accepting request 478020 from network:samba:STABLE
1

OBS-URL: https://build.opensuse.org/request/show/478020
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=209
2017-03-13 14:30:18 +00:00
Noel Power
68f2e352c5 Accepting request 478019 from home:dmulder:branches:network:samba:STABLE
- add missing patch for libnss_wins segfault; (bsc#995730).

OBS-URL: https://build.opensuse.org/request/show/478019
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=552
2017-03-09 19:06:50 +00:00
Dominique Leuenberger
3792ee7423 Accepting request 460728 from network:samba:STABLE
1

OBS-URL: https://build.opensuse.org/request/show/460728
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=208
2017-03-01 22:39:44 +00:00
David Disseldorp
4102b25c8b Accepting request 460727 from home:dimstar:Factory
Fix build with util-linux change as prepared in Staging:C

OBS-URL: https://build.opensuse.org/request/show/460727
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=551
2017-02-27 16:33:47 +00:00
Dominique Leuenberger
e9a6e774be Accepting request 452702 from network:samba:STABLE
1

OBS-URL: https://build.opensuse.org/request/show/452702
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=207
2017-02-10 08:44:37 +00:00
Aurelien Aptel
a71b3f3d30 Accepting request 452480 from home:dmdiss:bsc1021933_samba_vfs_ceph_statx
- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).
- Add base Samba dependency to samba-ceph package.

OBS-URL: https://build.opensuse.org/request/show/452480
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=550
2017-01-26 13:37:29 +00:00
Ludwig Nussel
f362603dda Accepting request 447040 from network:samba:STABLE
Update to 4.5.3 for CVE-2016-2123 (bsc#1014437) CVE-2016-2125 (bsc#1014441) CVE-2016-2126 (bsc#1014442) (forwarded request 447039 from jmcdough)

OBS-URL: https://build.opensuse.org/request/show/447040
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=206
2016-12-29 21:40:50 +00:00
ee3db2b8d2 Accepting request 447039 from home:jmcdough:next
Update to 4.5.3 for CVE-2016-2123 (bsc#1014437) CVE-2016-2125 (bsc#1014441) CVE-2016-2126 (bsc#1014442)

OBS-URL: https://build.opensuse.org/request/show/447039
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=549
2016-12-19 15:42:31 +00:00
Dominique Leuenberger
813119cd02 Accepting request 433727 from network:samba:STABLE
Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).

OBS-URL: https://build.opensuse.org/request/show/433727
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=205
2016-11-03 10:10:59 +00:00
a0add68146 Accepting request 433664 from home:jmcdough:rhbuildfix
Fix RH builds by replacing Prereq with Requires

OBS-URL: https://build.opensuse.org/request/show/433664
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=548
2016-10-06 23:42:10 +00:00
f243773fee Accepting request 429185 from home:jmcdough:STABLE-next
Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).

OBS-URL: https://build.opensuse.org/request/show/429185
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=547
2016-09-20 19:41:13 +00:00
41a9a61feb Accepting request 427927 from home:jmcdough:samba450
Update to 4.5.0

OBS-URL: https://build.opensuse.org/request/show/427927
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=546
2016-09-15 12:21:11 +00:00
David Disseldorp
851005e5e2 Accepting request 419509 from home:dmdiss:samba_vfs_ceph
- Don't package man pages for VFS modules that aren't built;
  (boo#993707).
- Fix population of ctdb sysconfig after source merge; (bsc#981566).
- Enable vfs_ceph builds for Factory (x86-64)
  + Package as samba-ceph to avoid Ceph dependency in base package.

OBS-URL: https://build.opensuse.org/request/show/419509
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=545
2016-08-15 19:38:49 +00:00
Dominique Leuenberger
0c45e6ed6b Accepting request 407155 from network:samba:STABLE
Upgrade to 4.4.5: Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).

OBS-URL: https://build.opensuse.org/request/show/407155
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=204
2016-07-12 21:45:18 +00:00
5144ab054e Update to 4.4.5: Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=544
2016-07-07 16:01:50 +00:00
Dominique Leuenberger
b227a25c1c Accepting request 404084 from network:samba:STABLE
Remove obsolete syslog.target; (bsc#983938); Honor smb.conf socket options in winbind; (bsc#975131); Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).

OBS-URL: https://build.opensuse.org/request/show/404084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=203
2016-06-29 13:04:19 +00:00
e4ff39e71f - Remove obsolete syslog.target; (bsc#983938).
- Honor smb.conf socket options in winbind; (bsc#975131).

- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=543
2016-06-22 15:39:58 +00:00