+ ACLs are not checked on opening an alternate data stream on a file or
directory; CVE-2013-4475; (bso#10229); (bnc#848101).
+ Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).
- Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).
- ACLs are not checked on opening an alternate data stream on a file or
directory; CVE-2013-4475; (bso#10229); (bnc#848101).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=347
The final 4.1.0 is scheduled for Friday, October 11.
The goal is to have native systemd files tested and added too.
- Update to 4.1.0rc4.
+ dsdb: Convert the full string from UTF16 to UTF8, including embedded
NULLs; (bso#8077).
+ python-samba-tool fsmo: Do not give an error on a successful role
transfer; (bso#9461).
+ dbwrap_ctdb: Treat empty records as non-existing; (bso#10008).
+ Raise the level of a debug when unable to open a printer; (bso#10118).
+ Add "acl allow execute always" parameter; (bso#10134).
+ vfs_shadow_copy2: Display previous versions correctly over SMB2;
(bso#10137).
+ smbd: Always clean up share modes after hard crash; (bso#10138).
+ Valid utf8 filenames cause "invalid conversion error" messages;
(bso#10139).
+ libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144).
+ Samba SMB2 client code reads the wrong short name length in a directory
listing reply; (bso#10145).
+ libcli/smb: Only check the SMB2 session setup signature if required and
valid; (bso#10146).
+ Better document potential implications of a globally used "valid users";
(bso#10147).
+ cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149).
+ Not all OEM servers support the ALTNAME info level; (bso#10150).
+ Regression causes replication failure with Windows 2008R2 and deletes
Deleted Objects; (bso#10157).
+ Netbios related samba process consumes 100% CPU; (bso#10158).
+ Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162).
- Add or polish the shared library package summaries and descriptions.
OBS-URL: https://build.opensuse.org/request/show/201529
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=141
+ dsdb: Convert the full string from UTF16 to UTF8, including embedded
NULLs; (bso#8077).
+ python-samba-tool fsmo: Do not give an error on a successful role
transfer; (bso#9461).
+ dbwrap_ctdb: Treat empty records as non-existing; (bso#10008).
+ Raise the level of a debug when unable to open a printer; (bso#10118).
+ Add "acl allow execute always" parameter; (bso#10134).
+ vfs_shadow_copy2: Display previous versions correctly over SMB2;
(bso#10137).
+ smbd: Always clean up share modes after hard crash; (bso#10138).
+ Valid utf8 filenames cause "invalid conversion error" messages;
(bso#10139).
+ libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144).
+ Samba SMB2 client code reads the wrong short name length in a directory
listing reply; (bso#10145).
+ libcli/smb: Only check the SMB2 session setup signature if required and
valid; (bso#10146).
+ Better document potential implications of a globally used "valid users";
(bso#10147).
+ cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149).
+ Not all OEM servers support the ALTNAME info level; (bso#10150).
+ Regression causes replication failure with Windows 2008R2 and deletes
Deleted Objects; (bso#10157).
+ Netbios related samba process consumes 100% CPU; (bso#10158).
+ Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=341
Credits to Jan Engelhard who implemented the the split of the shared
libraies packaging as it is part of this submit request.
Systemd service files for nmb, smb, and winbind will follow soon.
- Require libndr-standard-devel due to gen_ndr/lsa.h from libpdb-devel.
- Add libdcerpc0, libdcerpc-atsvc0, libdcerpc-binding0, libdcerpc-samr0,
libgensec0, libndr0, libndr-krb5pac0, libndr-nbt0, libndr-standard0,
libpdb0, libregistry0, libsamba-credentials0, libsamba-hostconfig0,
libsamba-policy0, libsamba-util0, libsamdb0, libsmbclient-raw0, libsmbconf0,
libsmbldap0, and libtevent-util0 to baselibs.conf.
- Implement shared library packaging guidelines.
OBS-URL: https://build.opensuse.org/request/show/199779
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=140
- Update to 4.1.0rc3.
+ Fix working on site with Read Only Domain Controller; (bso#5917).
+ Add man page for vfs_syncops; (bso#7364).
+ Add man page for vfs_linux_xfs_sgid; (bso#7490).
+ When replicating DNS for bind9_dlz we need to create the server-DNS
account remotely; (bso#9091).
+ Winbind unable to retrieve user information from AD; (bso#9615).
+ winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO;
(bso#9899).
+ Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911).
+ Add SMB2 and SMB3 support for smbclient; (bso#9974).
+ Add man pages for ntdb tools; (bso#10000).
+ Add man page for samba-regedit tool; (bso#10001).
+ ::1 added to nameserver on join; (bso#10030).
+ Fix memory leak in source3/lib/util.c:1493; (bso#10063).
+ Fix segmentation fault in 'net ads join'; (bso#10073).
+ Fix variable list in vfs_crossrename man page; (bso#10076).
+ s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082).
+ smbd: Fix async echo handler forking; (bso#10086).
+ MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba;
(bso#10097).
+ Honour output buffer length set by the client for SMB2 GetInfo requests;
(bso#10106).
+ Fix Winbind crashes on DC with trusted AD domains; (bso#10107).
+ Handle Dropbox (write-only-directory) case correctly in pathname lookup;
(bso#10114).
+ Masks incorrectly applied to UNIX extension permission changes;
(bso#10121).
- Correct interpackage dependencies; (bso#10129).
OBS-URL: https://build.opensuse.org/request/show/198926
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=138
+ Fix working on site with Read Only Domain Controller; (bso#5917).
+ Add man page for vfs_syncops; (bso#7364).
+ Add man page for vfs_linux_xfs_sgid; (bso#7490).
+ When replicating DNS for bind9_dlz we need to create the server-DNS
account remotely; (bso#9091).
+ Winbind unable to retrieve user information from AD; (bso#9615).
+ winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO;
(bso#9899).
+ Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911).
+ Add SMB2 and SMB3 support for smbclient; (bso#9974).
+ Add man pages for ntdb tools; (bso#10000).
+ Add man page for samba-regedit tool; (bso#10001).
+ ::1 added to nameserver on join; (bso#10030).
+ Fix memory leak in source3/lib/util.c:1493; (bso#10063).
+ Fix segmentation fault in 'net ads join'; (bso#10073).
+ Fix variable list in vfs_crossrename man page; (bso#10076).
+ s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082).
+ smbd: Fix async echo handler forking; (bso#10086).
+ MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba;
(bso#10097).
+ Honour output buffer length set by the client for SMB2 GetInfo requests;
(bso#10106).
+ Fix Winbind crashes on DC with trusted AD domains; (bso#10107).
+ Handle Dropbox (write-only-directory) case correctly in pathname lookup;
(bso#10114).
+ Masks incorrectly applied to UNIX extension permission changes;
(bso#10121).
- Correct interpackage dependencies; (bso#10129).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=338
See http://lists.opensuse.org/opensuse-factory/2013-09/msg00022.html
with references to the upstream release schedule of Samba 4.1.0
4.1.0 RC 3 is scheduled for September 11 and GA for September 27.
- Define the source URL differently in the case of a release candidate.
- Update to 4.1.0rc2.
+ Add vfs_btrfs module.
+ Add support for server-side copy operations via the
SMB2 FSCTL_SRV_COPYCHUNK request.
+ Fix replication with --domain-crictical-only to fill in backlinks;
(bso#9029).
+ Windows 8 Roaming profiles fail; (bso#9678).
+ Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol";
(bso#9820).
+ Windows error 0x800700FE when copying files with xattr names containing
":"; (bso#9992).
+ Do not delete an existing valid credential cache (s3-winbind); (bso#9994).
+ Fix segfault while reading incomplete session info; (bso#10003).
+ Missing integer wrap protection in EA list reading can cause server to
loop with DOS (CVE-2013-4124); (bso#10010).
+ Fix a 100% loop at shutdown time (smbd); (bso#10013).
+ Fix/improve debug options; (bso#10015).
+ Rename regedit to samba-regedit; (bso#10040).
+ Remove obsolete swat manpage and references; (bso#10041).
+ Fix crashes in socket_get_local_addr(); (bso#10042).
+ Allow to change the default location for Kerberos credential caches;
(bso#10043).
+ Remove a redundant inlined substitution of ACLs; (bso#10045).
+ nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048).
+ dsdb improvements; (bso#10056).
+ Linux kernel oplock breaks can miss signals; (bso#10064).
OBS-URL: https://build.opensuse.org/request/show/197338
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=137
+ Add vfs_btrfs module.
+ Add support for server-side copy operations via the
SMB2 FSCTL_SRV_COPYCHUNK request.
+ Fix replication with --domain-crictical-only to fill in backlinks;
(bso#9029).
+ Windows 8 Roaming profiles fail; (bso#9678).
+ Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol";
+ Windows error 0x800700FE when copying files with xattr names containing
":"; (bso#9992).
+ Do not delete an existing valid credential cache (s3-winbind); (bso#9994).
+ Fix segfault while reading incomplete session info; (bso#10003).
+ Missing integer wrap protection in EA list reading can cause server to
loop with DOS (CVE-2013-4124); (bso#10010).
+ Fix a 100% loop at shutdown time (smbd); (bso#10013).
+ Rename regedit to samba-regedit; (bso#10040).
+ Remove obsolete swat manpage and references; (bso#10041).
+ Fix crashes in socket_get_local_addr(); (bso#10042).
+ Remove a redundant inlined substitution of ACLs; (bso#10045).
+ nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048).
+ dsdb improvements; (bso#10056).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=335
The huge difference in the package change log indeed was caused by the
parallel development of Samba 3 and 4.
- BuildRequire pyldb-devel.
- Add libnetapi0 and samba-libs to baselibs.conf.
- Update to 4.0.9.
+ Fix crash of Winbind after "ls -l /usr/local/samba/var/locks/sysvol";
(bso#9820).
+ s3-lib: Fix segmentation fault while reading incomplete session info;
(bso#10003).
+ smbd: Fix a 100% loop at shutdown time; (bso#10013).
+ Windows 8 Roaming profiles fail; (bso#9678).
+ Add UPN enumeration to passdb internal API; (bso#9779).
+ smbd: Cleanup disonnected durable handles; (bso#9930).
+ vfs_streams_xattr: Do not attempt to write empty attribute twice;
(bso#9970).
+ Fix Windows error 0x800700FE when copying files with xattr names
containing ":"; (bso#9992).
+ s3-winbind: Do not delete an existing valid credential cache; (bso#9994).
+ Fix excessive RID allocation; (bso#10014).
+ Add debugclass for DNS server; (bso#10015).
+ Fix/improve debug options; (bso#10015).
+ Allow to change the default location for Kerberos credential caches;
(bso#10043).
+ Linux kernel oplock breaks can miss signals; (bso#10064).
+ net ads join: Fix segmentation fault in
create_local_private_krb5_conf_for_domain; (bso#10073).
OBS-URL: https://build.opensuse.org/request/show/196786
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=136
- BuildRequire libxslt, libxslt1, or libxslt-tools depending on SUSE version.
- Require perl-base on SUSE systems only.
- Adjust group setting of the test-devel subpackage.
- Require perl-base from the pidl subpackage.
- Remove libdir/samba/ldb after install if we're building Samba without
Active Directory Domain Controller support.
- Remove unused ccache switch from the spec file.
- BuildRequire docbook-xsl-stylesheets and libxslt-tools to build the
man pages and add them to the package again.
- Build from the package from the top level directory; (bnc#794744).
- BuildRequire pytalloc-devel, python-tdb, and python-tevent.
- Also use out of tree builds of talloc, tdb, tevent, and ldb for pre-12.1
SUSE systems.
- Update to 4.0.7.
+ Fix a core dump with invalid lock order while opening/editing
or copying MS files; (bso#9794).
+ Fix crash bug from search of mail=; (bso#9967).
+ s3-rpc_server: Ensure we are root when starting and using gensec;
(bso#9465).
+ Add support for MX queries; (bso#9485).
+ dns: Delete dnsNode objects when they are empty; (bso#9559).
+ dns: Support larger queries when asking forwarder; (bso#9632).
+ s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST; (bso#9805).
+ Use of wrong RFC2307 primary group field; (bso#9880).
+ Check for system libtevent; (bso#9881).
+ is_printer_published GUID retrieval; (bso#9900).
+ Doc fixes for 4.0; (bso#9906).
+ Build fixes for 4.0 found during autoconf or debian packaging work;
(bso#9907).
+ build: Add missing new line to replaced python shebang line; (bso#9909).
+ PIE builds not supported; (bso#9910).
+ s4:winbind: Don't leak libnet_context into the main event context;
(bso#9929).
+ Fix a bug of drvupgrade of smbcontrol; (bso#9941).
+ Check for netbios aliases in ad_get_referrals; (bso#9947).
+ Fix tevent_poll on 32-bit machines (Coverity ID 989236); (bso#9953).
+ docs: Avoid mentioning a possibly misleading option; (bso#9964).
+ Fix build with system Heimdal of samba4kgetcred; (bso#9968).
- Update to 4.0.6.
+ Fix crash during Win8 sync; (bso#9822).
+ Fix segfault when loging in with wrong password from w2k8r2; (bso#9834).
+ Fix the username map optimization; (bso#9139).
+ Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382).
+ SMB2 server doesn't support recvfile; (bso#9412).
+ Fix the build of vfs_notify_fam; (bso#9545).
+ Fix adding case sensitive spn; (bso#9699).
+ Properly handle oplock breaks in compound requests; (bso#9722).
+ Properly handle oplock breaks in compound requests; (bso#9722).
+ Cache name_to_sid/sid_to_name correctly; (bso#9766).
+ Fix 'net ads join' when called via stdin; (bso#9767).
+ Fix segfault for "artificial" conn_structs in vfs_fake_perms; (bso#9775).
+ vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and
doesn't cope with directories being modified whilst reading; (bso#9777).
+ Fix panic when running 'smbtorture smb.base'; (bso#9782).
+ Use specified python for runtime installation of Samba; (bso#9785).
+ Change '--with-dmapi' to 'default=auto' to match the autoconf build;
(bso#9803).
+ wafsamba: Display the default value in help for SAMBA3_ADD_OPTION;
(bso#9804).
+ wbinfo: Fix segfault in wbinfo_pam_logon; (bso#9807).
+ Package new dbwrap_tool man page; (bso#9809).
+ Old DOS SMB CTEMP request uses a non-VFS function to access
the filesystem; (bso#9811).
+ Fix 'map untrusted to domain' with NTLMv2; (bso#9817).
+ SMB signing and the async echo responder don't work together; (bso#9824).
+ Fix panic in nt_printer_publish_ads; (bso#9830).
+ talloc use after free in winbind4; (bso#9832).
+ Function called in unix_convert() path can overwrite errno; (bso#9833).
+ Fix NULL pointer dereference in Winbind; (bso#9854).
+ Fix making LIBNDR_PREG_OBJ; (bso#9868).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=325
- Adjust ldapsmb and nmbstatus man page syntax required by a newer pod2man.
- Don't bzip2 the main tar ball, use the upstream gziped one instead.
- Explicitly BuildRequire cyrus-sasl-devel, libattr-devel, and
libopenssl-devel.
- Update to 3.6.16.
+ Fix crash bug during Win8 sync; (bso#9822).
+ Properly handle Oplock breaks in compound requests; (bso#9722).
- Fix crash bug during Win8 sync; (bso#9822).
- Check for system libtevent and link dbwrap_tool and dbwrap_torture against
it; (bso#9881).
- errno gets overwritten in call to check_parent_exists(); (bso#9927).
- Fix a bug of drvupgrade of smbcontrol; (bso#9941).
- Document idmap_ad rfc2307 attribute requirements; (bso#9880); (bnc#820531).
OBS-URL: https://build.opensuse.org/request/show/181065
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=133
+ Fix crash bug during Win8 sync; (bso#9822).
+ Properly handle Oplock breaks in compound requests; (bso#9722).
- Fix crash bug during Win8 sync; (bso#9822).
- Check for system libtevent and link dbwrap_tool and dbwrap_torture against
it; (bso#9881).
- errno gets overwritten in call to check_parent_exists(); (bso#9927).
- Fix a bug of drvupgrade of smbcontrol; (bso#9941).
- Document idmap_ad rfc2307 attribute requirements; (bso#9880); (bnc#820531).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=313
- Don't package the SWAT man page while its build is disabled; (bnc#816647).
- Don't install the tdb utilities man pages on post-12.1 systems; (bnc#823549).
- Fix libreplace license ambiguity; (bso#8997); (bnc#765270).
- s3-docs: Remove "experimental" label on "max protocol=SMB2" parameter;
(bso#9688).
- Remove the compound_related_in_progress state from the smb2 global state;
(bso#9722).
- Makefile: Don't know how to make LIBNDR_PREG_OBJ; (bso#9868).
- Fix is_printer_published GUID retrieval; (bso#9900); (bnc#798856).
- Update to 3.6.15.
+ Fix crash bug in Winbind; (bso#9854).
- Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382).
- Fix "guest ok", "force user" and "force group" for guest users; (bso#9746).
- Fix 'map untrusted to domain' with NTLMv2; (bso#9817); (bnc#817919).
- Fix crash bug in Winbind; (bso#9854).
- Fix panic in nt_printer_publish_ads; (bso#9830).
- Update to 3.6.14.
+ Certain xattrs cause Windows error 0x800700FF; (bso#9130).
- Exclude dbwrap_tool man page from the list of packaged files.
- Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.
OBS-URL: https://build.opensuse.org/request/show/178946
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=132
