Revisions of samba

Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 150723 from Lars Müller's avatar Lars Müller (lmuelle) (revision 130)
- Update to 3.6.12.
  + Address SWAT security issues CVE-2013-0213 and CVE-2013-0214 which both
    don't apply to any SUSE Samba post-3.6.10 as it isn't longer built.
  + Don't build and package static libraries.

- Drop separate build-source-timestamp file as it led to a second, incorrect
  Source Timestamp line.
Adrian Schröter's avatar Adrian Schröter (adrianSuSE) committed (revision 129)
Split 12.3 from Factory
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 149788 from Lars Müller's avatar Lars Müller (lmuelle) (revision 128)
- Update to 3.6.11.
  + defer_open is triggered multiple times on the same request; (bso#9196).
  + Fix SEGV when using second vfs module; (bso#9471).

- defer_open is triggered multiple times on the same request; (bso#9196).
- Fix SEGV when using second vfs module; (bso#9471).
- Correctly detect O_DIRECT; (bso#9548).
- Mask off signals the correct way from the signal handler; (bso#9550).
- ntlm_auth.1: Fix format and make examples visible; (bso#9569).

- Disable SWAT during configure and don't package it any longer.

- Remove dangling references to Heimdal from the spec file.

- s3-printing: Add new printers to registry; (bso#8554); (bso#8612);
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 147861 from Lars Müller's avatar Lars Müller (lmuelle) (revision 127)
The "Execute the run_permissions macro on pre-11.4 systems and else the
set_permission one if available." change set is a reworked/ enhanceent
of the former "Only execute the run_permissions macro on pre-12.3
systems."  Therefore both share the same timestamp.

We never pushed the first version into Factory.

The actual changes of this submit request are:

- Add the missing get_printing_ticket binary path while calling the
  set_permissions macro; (bnc#783375).

- Use the version macro while definition of the branch macro.

- SEGV when using second vfs module; (bso#9471).

- Update to 3.6.10.
  + Respond correctly to FILE_STREAM_INFO requests; (bso#9460).
  + Fix segfault when "default devmode" is disabled; (bso#9433).
  + Fix segfaults in "log level = 10" on Solaris; (bso#9390).

- Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094);
  (bso#9418).
- Use work around for 'winbind use default domain' only if it is set;
  (bso#9367).
- Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend;
  (bso#9374).
- large read requests cause server to issue malformed reply; (bso#9422).
- s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426).
- Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439).
- Allow to force DNS updates using net; (bso#9451).
- Respond correctly to FILE_STREAM_INFO requests; (bso#9460).

- On uninstall remove winbind from the pam configuration, invalidate the nscd
  passwd and group cache and only recommend the install of nscd; (bnc#792340).

- BuildRequire libnscd-devel once.

- Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 140584 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 126)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 137385 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 125)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 134806 from Lars Müller's avatar Lars Müller (lmuelle) (revision 124)
- Update to 3.6.8.
  + Fix crash bug in smbd caused by a blocking lock followed by close;
    (bso#9084).
  + Fix Winbind panic if we couldn't find the domain; (bso#9135).
- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058).
- Fix bad call to memcpy source3/registry/regfio.c; (bso#9065).
- "Domain Users" incorrectly added as additional group on domain members;
  (bso#9066).
- Use correct RID for "Domain Guests" primary group; (bso#9067).
- Fix crash bug in smbd caused by a blocking lock followed by close;
  (bso#9084).
- Fix smbclient/tarmode panic when connecting to Windows 2000 clients;
  (bso#9088).
- Fix refreshing of Kerberos tickets in Winbind; (bso#9098).
- Fix identification of idle clients in Winbind to avoid crashes and NDR
  parsing errors; (bso#9104).
- Fix compilation with newer MIT Kerberos which hides internal symbols;
  (bso#9111).
- Fix flooding the logs with records we don't find in pcap; (bso#9112).
- Initialize the print backend after we setup winreg; (bso#9122).
- Fix lprng job tracking errors; (bso#9123).
- Fix setting of "inherited" bit on inherited ACE's; (bso#9124).
- Fix Winbind panic if we couldn't find the domain; (bso#9135).
- Make 'smbclient allinfo' show the snapshot list; (bso#9137).
- Fix nfs quota support with Linux nfs4 mounts; (bso#9144).
- Valid open requests can cause smbd assert due to incorrect oplock handling
  on delete requests; (bso#9150).
- NMB registration for a duplicate workstation fails with registration
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 134095 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 123)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 130363 from Lars Müller's avatar Lars Müller (lmuelle) (revision 122)
- Update to 3.6.7.
  + Fix resolving our own "Domain Local" groups; (bso#9052).
  + Fix migrating printers while upgrading from 3.5.x; (bso#9026).

- Correct documentation of "case sensitive"; (bso#8552).
- Printing fails in function cups_job_submit; (bso#8719).
- Fix kernel oplocks when uid(file) != uid(process); (bso#8974).
- Send correct responses to NT Transact Secondary when no data and no params
  for the Trans2 calls are set; (bso#8989).
- Fix build without ads support; (bso#8996).
- Don't turn negative cache entries into valid idmappings; (bso#9002).
- Fix posix acl on gpfs; (bso#9003).
- Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022).
- Fix migrating printers while upgrading from 3.5.x; (bso#9026).
- Fix typo in set_re_uid() call when USE_SETRESUID selected in configure;
  (bso#9034).
- Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error
  instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040).
- Fix resolving our own "Domain Local" groups; (bso#9052).
- Fix build against CUPS 1.6; (bso#9055).
- Fix bugs in SMB2 credit handling code; (bso#9057).
- rpcclient: Fix bad call to data_blob_const; (bso#9062).

- BuildRequire gcc, make, and patch; (bnc#771516).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 127780 from Lars Müller's avatar Lars Müller (lmuelle) (revision 121)
- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).
- Fix shell syntax in dhcpcd hook script; (bnc#769957).
- Update to 3.6.6.
  + Fix possible memory leaks in the Samba master process; (bso#8970).
  + Fix uninitialized memory read in talloc_free(); (bnc#764577).
  + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373).
- resolve_ads() code can return zero addresses and miss valid DC IP addresses;
  (bso#8910).
- Can't join XP Pro workstations to 3.6.1 DC; (bso#8373).
- winbind can hang as nbt_getdc() has no timeout; (bso#8953).
- Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627)
- s3-pid: Catch with pid filename's change when config file is not smb.conf;
  (bso#8714).
- Possible memory leaks in the main Samba process; (bso#8970).
- s3: Fix uninitialized memory read in talloc_free(); (bnc#764577).
- Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971).
- Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988).
- Winzip occasionally can not read files out of an open winzip dialog;
  (bso#8311).
- s3-winbindd: call dump_core_setup after command line option has been parsed;
  (bso#8975).
- Directory group write permission bit is set if unix extensions are enabled;
  (bso#8972).
- s3: remove dependency on automake for "make everything"; (bso#8978).
- sd_has_inheritable_components segfaults on an SD that se_access_check
  accepts; (bso#8811).
- smbclient's tarmode insists on listing excluded directories; (bso#8922).
- Notify code can miss a ChDir; (bso#8998).
- s3:smbd: add a fsp_persistent_id() function; (bso#8995).
- Call autogen.sh even on post-12.1 SUSE systems.
- Include the reviewed french translation for pam_winbind; (bnc#499233).
Adrian Schröter's avatar Adrian Schröter (adrianSuSE) committed (revision 120)
revert
Adrian Schröter's avatar Adrian Schröter (adrianSuSE) committed (revision 119)
branched from openSUSE:Factory
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 123259 from Lars Müller's avatar Lars Müller (lmuelle) (revision 118)
- Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems.
- Recompile all IDL in any case.
- BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora
  systems.
- Install talloc.pc only on pre-12.2 and non SUSE systems.
- BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and
  libtevent-devel on post-12.1 systems.
- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861).
- s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904).
- smbd crashes when deleting directory and veto files are enabled; (bso#8837).
- winbind_krb5_locator only returns one IP address; (bso#8897).
- Wrong assertion/comparison: Compare value not pointer; (bso#8859).
- Inconsistent (with manpage) command-line switch for "help" in smbtree;
  (bso#8831).
- Fix incorrect debug statement.
- Setting traverse rights fails to enable directory traversal when acl_xattr
  in use; (bso#8857).
- Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877).
- s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869).
- s3-docs: fixes several typos; (bso#7938).
- s3-VFS: Fix building out-of-tree modules; (bso#8822).
- s3-docs: Add hint that setting "profile acls = yes" on normal shares can
  cause trouble; (bso#7930).
- s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915).
- Avoid null dereference in initialize_password_db(); (bso#8920).
- s3:registry: implement values_need_update and subkeys_need_update in the
  smbconf backend.
- s3:registry:reg_api: fix reg_queryvalue to not fail when values are
  modified while it runs.
- s4:torture:rpc:spoolss: also initialize driverName before checking it in
  test_PrinterData_DsSpooler().
- s3:registry: multiple cleanups, fixes, and optimisations.
- s3:auth/server_info: the primary rid should be in the groups rid array;
  (bso#8798).
- s3-printing: Add new printers to registry; (bso#8554); (baso#8612);
  (bso#8748).
- Fix the overwriting of errno before use in a DEBUG statement and use the
  return value from store_acl_blob_fsp rather than ignoring it; (bso#8945).
- s3-auth: Don't lookup the system user in pdb; (bso#8944).
- s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952).
- Fix typo in pam_winbindd code; (bso#8957).
- Fix remove_duplicate_addrs2 previously it could leave zero addresses in the
  list; (bso#8910).
- Slow but responsive DC can lock up winbindd; (bso#8943).
- Broken processing of %U with vfs_full_audit when force user is set;
  (bso#8882).
- Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems.
- BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and
  libtevent0-devel on post-12.1 systems.
- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).
- s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845);
  (bnc#730769).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 116103 from Lars Müller's avatar Lars Müller (lmuelle) (revision 117)
- docs-xml: fix default name resolve order; (bso#7564).
- s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836).
- docs: remove whitespace in example samba.ldif; (bso#8789).
- s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845).
- s3-docs: Prepend '/' to filename argument; (bso#8826).
- Update to 3.6.5.
- Restrict self granting privileges where security=ads for Samba post-3.3.16;
  CVE-2012-2111; (bnc#757576).
- Remove all precompiled idl output to ensure any pidl changes take effect;
  (bnc#757080).
- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES;
  (bso#8631); (bnc#732572).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 113255 from Lars Müller's avatar Lars Müller (lmuelle) (revision 116)
- Update to 3.6.4.
- Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe-
  cution as the "root" user; PIDL based autogenerated code allows overwriting
  beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).
- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys;
  (bso#8599).
- Correctly handle DENY ACEs when privileges apply; (bso#8797).
- s3:smb2_server: fix a logic error, we should sign non guest sessions;
  (bso8749).
- Allow vfs_aio_pthread to build as a static module; (bso#8723).
- s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for
  persistent dbs; (#bso8527).
- s3: segfault in dom_sid_compare(bso#8567).
- Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER;
  (bso#8768).
- s3-winbindd: Close netlogon connection if the status returned by the
  NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771).
- s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599).
- Fix problem when calculating the share security mask, take priviliges into
  account for the connecting user; (bso#8784).
- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups;
  (bso#8807); (bnc#751454).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 109356 from Lars Müller's avatar Lars Müller (lmuelle) (revision 115)
- Add the ldapsmb sources as else patches against them have no chance to apply.
- Remove obsoleted Authors lines from spec file for post-11.2 systems.
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 108324 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 114)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 106910 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 113)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 103616 from Lars Müller's avatar Lars Müller (lmuelle) (revision 112)
- s3:winbindd fix a return code check; (bso#8406).
- s3: Add rmdir operation to streams_depot; (bso#8733).
- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used();
  (bso#8738).
- s3:auth: fill the sids array of the info3 in
  wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).
- s3:client: ignore SMBecho errors (the server may not support it);
  (bso#8139).
- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is
  enabled and don't unintentionally use a bogus domain name; (bso#8734).
- smbclient fails with posix large reads; (bso#8727).
- Use the smbfs init script on versions pre-11.3, or cifs in later versions;
  (bnc#744614).
- s3: Compile IDL files in autogen, some configure tests need this.
- Fixes various deadlocks in if-up.d / if-down.d when running under
  systemd; (bnc#732395).
- Fix incorrect types in the full_audit VFS module. Add null terminators to
  audit log enums; (bnc#742885).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 101972 from Lars Müller's avatar Lars Müller (lmuelle) (revision 111)
- Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724);
  (bnc#743986).
- Use spdx.org compliant license names for all packages.
- Update to 3.6.2.

See WHATSNEW.txt from the main tar ball or the samba.changes file for more
details.

- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).
- Use correct license, LGPLv3+ for libwbclient packages.
- When returning an ACL without SECINFO_DACL requested, we still set
  SEC_DESC_DACL_PRESENT in the type field; (bso#8636).
- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810).
- Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).
- Buffer overflow issue with AES encryption in samba traffic analyzer;
  (bso#8674).
- NT ACL issue; (bso#8673).
- Deleting a symlink fails if the symlink target is outside of the share;
  (bso#8663).
- connections.tdb - major leak with SMB2; (bso#8710).
- Renaming a symlink fails if the symlink target is outside of the share;
  (bso#8664).
- Intermittent print job failures caused by character conversion errors;
  (bso#8606).
- ads_keytab_verify_ticket mixes talloc allocation with malloc free;
  (bso#8692).
- libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593).
- s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684).
- s3-printing: fix migrate printer code; (bso#8618).
- Packet validation checks can be done before length validation causing
  uninitialized memory read; (bso#8686).
- net memberships usage info was wrong; (bso#8687).
- s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628).
- Recvfile code path using splice() on Linux leaves data in the pipe on short
  write; (bso#8679).
- s3-winbind: Fix segfault if we can't map the last user; (bso#8678).
- vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on
  a directory with no stored ACL; (bso#8644).
- s3/doc: document the ignore system acls option of vfs_acl_xattr and
  vfs_acl_tdb; (bso#8652).
- Winbind can't receive any user/group information; (bso#8371).
- s3-winbind: Add an update function for winbind cache; (bso#8643).
- s3: Attempt to fix the vfs_commit module.
- POSIX ACE x permission becomes rx following mapping to and from a DACL;
  (#bso#8631).
- s3:libsmb: only align unicode pipe_name; (bso#8586).
- s3-winbind: Don't fail on users without a uid; (bso#8608).
- Crash when trying to browse samba printers; (bso#8623).
- talloc: double free error; (bso#8562).
- cldap doesn't work over ipv6; (bso#8600).
- s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326).
- SMB2: not granting credits for all requests in a compound request;
  (bso#8614).
- smb2_flush sends uninitialized memory; (bso#8579).
- Password change settings not fully observed; (bso#8561).
- s3:smb2_server: grant credits in async interim responses; (bso#8357).
- s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592).
- samr_ChangePasswordUser3 IDL incorrect; (bso#8591).
- idmap_autorid does not have allocation pool; (bso#8444).
- Add systemd service files.
- s3:libsmb: the workgroup in the non-extended-security negprot is not
  aligned; (bso#8573).
- s3-build: Fix inotify detection; (bso#8580).
- SMB2 doesn't handle compound request headers in the same way as Windows;
  (#bso8560).
- Disconnecting clients swamp the logs; (bso#8585).
- s3-netlogon: Fix setting the machinge account password; (bso#8550).
- winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). 
- smbclient posix_open command fails to return correct info on open file;
  (bso#8542).
- readlink() on Linux clients fails if the symlink target is outside of the
  share; (bso#8541).
- s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465).
- s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531).
- s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated
  ucs2 string; (bso#8528).
- Make VFS op "streaminfo" stackable; (bso#8419).
- Fix incorrect perfcount array length calculations; (bnc#739258).
Displaying revisions 181 - 200 of 310
openSUSE Build Service is sponsored by