Commit Graph

626 Commits

Author SHA256 Message Date
Lars Müller
9eab0c6b6f Update to 4.4.0.
See also WHATSNEW.txt from the samba-doc package.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=534
2016-03-22 14:14:33 +00:00
Dominique Leuenberger
e1b82e3f9c Accepting request 368484 from network:samba:STABLE
- Update to 4.3.6.
  + Getting and setting Windows ACLs on symlinks can change permissions on link
    target; CVE-2015-7560; (bso#11648); (bsc#968222).
  + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771;
    (bso#11128); (bso#11686); (bsc#968223).

OBS-URL: https://build.opensuse.org/request/show/368484
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=199
2016-03-16 09:24:16 +00:00
Lars Müller
943665cb92 update expired samba.keyring
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=533
2016-03-08 13:50:30 +00:00
Lars Müller
10fc14d966 - Update to 4.3.6.
+ Getting and setting Windows ACLs on symlinks can change permissions on link
    target; CVE-2015-7560; (bso#11648); (bsc#968222).
  + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771;
    (bso#11128); (bso#11686); (bsc#968223).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=532
2016-03-08 13:16:59 +00:00
Dominique Leuenberger
7f7c75f59a Accepting request 364943 from network:samba:STABLE
- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).

- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).

OBS-URL: https://build.opensuse.org/request/show/364943
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=198
2016-03-07 12:25:59 +00:00
Lars Müller
ff89e0fef7 Add MACHINE.SID idmap2.tdb, and idmap_test.tdb
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=531
2016-03-02 18:25:28 +00:00
Lars Müller
5a0be9a0e1 Add connections.tdb and g_lock.tdb
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=530
2016-03-02 17:55:24 +00:00
Lars Müller
91761c3145 Relocate lock directory to the client package
Else the directory is missing at install time and the relocating mv
command stacked one dir into the next with the same name. The last
remaining lock file then later got replaced by the dir created by the
samba (main) package.

Adding a ending / to the destination also of lock and private ensures
this will not bit us again.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=529
2016-03-02 15:19:44 +00:00
Lars Müller
e8d66ad90c Only obsolete but do not provide gplv2/3 package names; (bsc#968973).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=528
2016-03-01 18:18:14 +00:00
Lars Müller
8a2bceb7d6 Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=527
2016-03-01 17:45:52 +00:00
Dominique Leuenberger
d9e7a3a5ee Accepting request 361133 from network:samba:STABLE
- Update to 4.3.5.

  Check WHATSNEW.txt from the main tar ball, the web page, or the samba
  package change log for a detailed list of changes.

- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).

- Enable clustering (CTDB) support; (bsc#966271).

- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703);
  (bsc#964023).

OBS-URL: https://build.opensuse.org/request/show/361133
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=197
2016-02-25 21:00:57 +00:00
Lars Müller
122cd26916 Update to 4.3.5.
Check WHATSNEW.txt from the main tar ball, the web page, or the samba
package change log for a detailed list of changes.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=526
2016-02-23 10:10:26 +00:00
Lars Müller
5284b3d2af Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=525
2016-02-22 17:29:53 +00:00
Lars Müller
fe6abd0ec3 !BuildIgnore libtalloc, libtdb, or libtevent
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=524
2016-02-22 14:18:14 +00:00
Lars Müller
1702d34f95 - Add missing license lines
- Avoid badness due to non capatized summary

- Package /run/ctdb correctly on post-12.2 systems

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=523
2016-02-15 12:16:18 +00:00
Lars Müller
c9d0da8944 Enable clustering (CTDB) support; (bsc#966271).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=522
2016-02-14 23:57:19 +00:00
Lars Müller
1d15f76c69 s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703);
(bsc#964023).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=521
2016-02-12 18:17:28 +00:00
Dominique Leuenberger
eea7d52f2d Accepting request 354145 from network:samba:STABLE
- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).

- Remove autoconf build-time requirement.

- Update to 4.3.4.
  + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065).
  + Crash: Bad talloc magic value - access after free; (bso#11394).
  + Copying files with vfs_fruit fails when using vfs_streams_xattr without
    stream prefix and type suffix; (bso#11466).
  + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given;
    (bso#11613).
  + Fix a typo in the smb.conf manpage, explanation of idmap config;
    (bso#11619).
  + Correctly initialize the list head when keeping a list of primary followed
    by DFS connections; (bso#11624).
  + Reduce the memory footprint of empty string options; (bso#11625).
  + lib/async_req: Do not install async_connect_send_test; (bso#11639).
  + Fix typos in man vfs_gpfs; (bso#11641).
  + Make "hide dot files" option work with "store dos attributes = yes";
    (bso#11645).
  + Fix a corner case of the symlink verification; (bso#11647);  (bnc#960249).
  + Do not disable "store dos attributes" on-the-fly; (bso#11649).
  + Update lastLogon and lastLogonTimestamp; (bso#11659).

- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).

OBS-URL: https://build.opensuse.org/request/show/354145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=196
2016-01-20 08:54:16 +00:00
Lars Müller
fae32e1506 Add quotes around path of update-apparmor-samba-profile; (bnc#962177).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=520
2016-01-16 21:37:47 +00:00
Lars Müller
37c9f2ecdf Remove autoconf build-time requirement.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=519
2016-01-13 21:38:03 +00:00
Lars Müller
5bc5934a71 async_connect_send_test doen't longer get installed
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=518
2016-01-13 10:39:18 +00:00
Lars Müller
346d625ac5 - Update to 4.3.4.
Check WHATSNEW.txt from the main tar ball, the web page, or the samba
  package change log for a detailed list of changes.

- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=517
2016-01-13 10:34:39 +00:00
Dominique Leuenberger
d7ad01a49f Accepting request 349211 from network:samba:STABLE
- Update to 4.3.3.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).

OBS-URL: https://build.opensuse.org/request/show/349211
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=195
2015-12-18 20:51:17 +00:00
Lars Müller
f36d80a1ef Use https everywhere in Urls if possible
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=516
2015-12-16 16:43:01 +00:00
Lars Müller
719e04e8f7 And include the required 4.3.3 files too
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=515
2015-12-16 15:35:14 +00:00
Lars Müller
e84d12d387 - Update to 4.3.3.
+ Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=514
2015-12-16 15:14:26 +00:00
Dominique Leuenberger
419ff1d126 Accepting request 347083 from network:samba:STABLE
Update to 4.3.2.

Check WHATSNEW.txt from the main tar ball or the web page for a detailed
list of changes.

OBS-URL: https://build.opensuse.org/request/show/347083
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=194
2015-12-06 06:37:30 +00:00
Lars Müller
1fbfbb9353 Remove dangling %endif
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=513
2015-12-01 19:22:43 +00:00
Lars Müller
6e9432f919 Update to 4.3.2.
Check WHATSNEW.txt from the main tar ball or the web page for a detailed
list of changes.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=512
2015-12-01 19:17:25 +00:00
Stephan Kulow
3807912fff Accepting request 345393 from network:samba:STABLE
- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0.
- Always use the default optimization even on pre-9.2 systems.

- Remove redundant configure options while adding with-relro.

- Relocate the lockdir to the /var/lib/samba/lock directory.

- Cleanup and enhance the pidl sub package.

OBS-URL: https://build.opensuse.org/request/show/345393
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=193
2015-11-24 21:21:16 +00:00
Lars Müller
4830ba27c9 Avoid conflict with perl-Parse-Yapp
Both install %{perl_vendorlib}/Parse/Yapp/Driver.pm so we exclude the
directory and the one particular file to catch potential more installs
later too

This is a follow up to
Cleanup and enhance the pidl sub package.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=511
2015-11-20 10:48:38 +00:00
Lars Müller
f9ec733ab4 - Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0.
- Always use the default optimization even on pre-9.2 systems.

- Remove redundant configure options while adding with-relro.

- Relocate the lockdir to the /var/lib/samba/lock directory.

- Cleanup and enhance the pidl sub package.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=510
2015-11-17 13:29:26 +00:00
Dominique Leuenberger
d62f928cb5 Accepting request 340763 from network:samba:STABLE
This request depends on

https://build.opensuse.org/request/show/340759  talloc
https://build.opensuse.org/request/show/340760  ldb
https://build.opensuse.org/request/show/340760  tevent

The changes to the samba package sources are:

- Require renamed python-ldb-devel and python-talloc-devel at build-time.
- Requires python-ldb and python-talloc from the python subpackage.

- Update to 4.3.1.

  Check WHATSNEW.txt from the main tar ball or the web page for a detailed
  list of changes.

OBS-URL: https://build.opensuse.org/request/show/340763
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=192
2015-10-28 16:29:31 +00:00
Lars Müller
2a3a0f074d Requires python-ldb and python-talloc from the python subpackage.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=509
2015-10-22 22:21:41 +00:00
Lars Müller
a4df6aea7a Require renamed python-ldb-devel and python-talloc-devel at build-time.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=508
2015-10-22 22:14:43 +00:00
Lars Müller
aaddbc12cb Cleanup previous commit
use 'msg.lock' and 'msg.sock' in the package filelist too

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=507
2015-10-22 17:36:01 +00:00
Lars Müller
62c00a1075 Update to 4.3.1.
Check WHATSNEW.txt from the main tar ball or the web page for a detailed
list of changes.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=506
2015-10-21 11:39:25 +00:00
Dominique Leuenberger
c6596d637a Accepting request 333929 from network:samba:STABLE
- Relocate the tmpfiles.d directory to the client package; (bnc#947552).

- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).

OBS-URL: https://build.opensuse.org/request/show/333929
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=191
2015-10-01 10:22:29 +00:00
Lars Müller
7d3479f4c9 Revert "Add missing sysconfig file header; (bnc#947361)."
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=505
2015-09-26 17:31:40 +00:00
Lars Müller
d399675f26 Add an extra empty line
Else the samba or samba-winbind sysconfig content gets directly added
after the work "options" from the Decription line

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=504
2015-09-25 22:22:41 +00:00
Lars Müller
af76b2230b Express post-12.2 simpler; no else case
This is identical to the apparoch used before the tmpfilesdir relocation

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=503
2015-09-25 19:28:45 +00:00
Lars Müller
7f56053649 Package the tmpfilesdir on post-12.2 systems only
this fixes the previous commit for pre-12.3 builds

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=502
2015-09-25 16:37:48 +00:00
Lars Müller
7116a1f802 Relocate the tmpfiles.d directory to the client package; (bnc#947552).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=501
2015-09-25 15:48:22 +00:00
Lars Müller
f50d1b53d2 Add missing sysconfig file header; (bnc#947361).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=500
2015-09-25 13:42:08 +00:00
Lars Müller
ff3dd43321 Obsolte libpdb0 < %version
This fits the baselibs.conf obsoletes

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=499
2015-09-22 22:58:38 +00:00
Lars Müller
bc10e362f1 Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
instead; (bnc#942716).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=498
2015-09-22 17:42:44 +00:00
Lars Müller
db36721221 Add bso 11515 to bnc 945502
This change must not be mregd into pre-4.3 branches

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=497
2015-09-19 15:14:24 +00:00
Stephan Kulow
2e9518f4f9 Accepting request 331893 from network:samba:STABLE
This commit by intention reverts the

  Do not provide and obsolete libpdb0 from libsamba-passdb0

change is the reported issue requires more investigation.

With the first suggested solution we have two issues:

a) a library name conflict as reported to Samba upstream at
   https://bugzilla.samba.org/show_bug.cgi?id=10355

   As libpdb depends heavily on other versioned shared Samba libraries
	libpdb in the old version can't work alone.  We'll end up in a
	library missmatch.

b) libzypp (YaST/ zypper) pulls in libpdb0 _i586_ from the main openSUSE
   13.2 repository for example

The actual package changes are:

- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).

- Package /var/lib/samba/msg with 0755 permissions; (bnc#945502).

- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15
  systems; (bnc#945013).

OBS-URL: https://build.opensuse.org/request/show/331893
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=190
2015-09-19 04:54:26 +00:00
Lars Müller
a5ea207f93 Revert 'Do not provide and obsolete libpdb0 from libsamba-passdb0'
bnc#942716

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=496
2015-09-18 07:18:52 +00:00
Lars Müller
1461cfcec9 Enhance last commit by adding netlogon_creds_cli.tdb
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=495
2015-09-17 12:44:19 +00:00