Revisions of samba

Ludwig Nussel's avatar Ludwig Nussel (lnussel_factory) accepted request 447040 from James McDonough's avatar James McDonough (jmcdough) (revision 206)
Update to 4.5.3 for CVE-2016-2123 (bsc#1014437) CVE-2016-2125 (bsc#1014441) CVE-2016-2126 (bsc#1014442) (forwarded request 447039 from jmcdough)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 433727 from James McDonough's avatar James McDonough (jmcdough) (revision 205)
Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 407155 from James McDonough's avatar James McDonough (jmcdough) (revision 204)
Upgrade to 4.4.5: Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 404084 from James McDonough's avatar James McDonough (jmcdough) (revision 203)
Remove obsolete syslog.target; (bsc#983938); Honor smb.conf socket options in winbind; (bsc#975131); Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 393429 from James McDonough's avatar James McDonough (jmcdough) (revision 201)
Fix NTLMSSP regressions caused by badlock fixes
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 389520 from James McDonough's avatar James McDonough (jmcdough) (revision 200)
badlock fixes (bsc#936862, bsc#971965, bsc#973031, bsc#973032, bsc#973033, bsc#973034, bsc#973035, bsc#973036)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 368484 from Lars Müller's avatar Lars Müller (lmuelle) (revision 199)
- Update to 4.3.6.
  + Getting and setting Windows ACLs on symlinks can change permissions on link
    target; CVE-2015-7560; (bso#11648); (bsc#968222).
  + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771;
    (bso#11128); (bso#11686); (bsc#968223).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 364943 from Lars Müller's avatar Lars Müller (lmuelle) (revision 198)
- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).

- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 361133 from Lars Müller's avatar Lars Müller (lmuelle) (revision 197)
- Update to 4.3.5.

  Check WHATSNEW.txt from the main tar ball, the web page, or the samba
  package change log for a detailed list of changes.

- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).

- Enable clustering (CTDB) support; (bsc#966271).

- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703);
  (bsc#964023).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 354145 from Lars Müller's avatar Lars Müller (lmuelle) (revision 196)
- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).

- Remove autoconf build-time requirement.

- Update to 4.3.4.
  + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065).
  + Crash: Bad talloc magic value - access after free; (bso#11394).
  + Copying files with vfs_fruit fails when using vfs_streams_xattr without
    stream prefix and type suffix; (bso#11466).
  + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given;
    (bso#11613).
  + Fix a typo in the smb.conf manpage, explanation of idmap config;
    (bso#11619).
  + Correctly initialize the list head when keeping a list of primary followed
    by DFS connections; (bso#11624).
  + Reduce the memory footprint of empty string options; (bso#11625).
  + lib/async_req: Do not install async_connect_send_test; (bso#11639).
  + Fix typos in man vfs_gpfs; (bso#11641).
  + Make "hide dot files" option work with "store dos attributes = yes";
    (bso#11645).
  + Fix a corner case of the symlink verification; (bso#11647);  (bnc#960249).
  + Do not disable "store dos attributes" on-the-fly; (bso#11649).
  + Update lastLogon and lastLogonTimestamp; (bso#11659).

- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 349211 from Lars Müller's avatar Lars Müller (lmuelle) (revision 195)
- Update to 4.3.3.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 347083 from Lars Müller's avatar Lars Müller (lmuelle) (revision 194)
Update to 4.3.2.

Check WHATSNEW.txt from the main tar ball or the web page for a detailed
list of changes.
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 345393 from Lars Müller's avatar Lars Müller (lmuelle) (revision 193)
- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0.
- Always use the default optimization even on pre-9.2 systems.

- Remove redundant configure options while adding with-relro.

- Relocate the lockdir to the /var/lib/samba/lock directory.

- Cleanup and enhance the pidl sub package.
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 340763 from Lars Müller's avatar Lars Müller (lmuelle) (revision 192)
This request depends on

https://build.opensuse.org/request/show/340759  talloc
https://build.opensuse.org/request/show/340760  ldb
https://build.opensuse.org/request/show/340760  tevent

The changes to the samba package sources are:

- Require renamed python-ldb-devel and python-talloc-devel at build-time.
- Requires python-ldb and python-talloc from the python subpackage.

- Update to 4.3.1.

  Check WHATSNEW.txt from the main tar ball or the web page for a detailed
  list of changes.
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 333929 from Lars Müller's avatar Lars Müller (lmuelle) (revision 191)
- Relocate the tmpfiles.d directory to the client package; (bnc#947552).

- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 331893 from Lars Müller's avatar Lars Müller (lmuelle) (revision 190)
This commit by intention reverts the

  Do not provide and obsolete libpdb0 from libsamba-passdb0

change is the reported issue requires more investigation.

With the first suggested solution we have two issues:

a) a library name conflict as reported to Samba upstream at
   https://bugzilla.samba.org/show_bug.cgi?id=10355

   As libpdb depends heavily on other versioned shared Samba libraries
	libpdb in the old version can't work alone.  We'll end up in a
	library missmatch.

b) libzypp (YaST/ zypper) pulls in libpdb0 _i586_ from the main openSUSE
   13.2 repository for example

The actual package changes are:

- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).

- Package /var/lib/samba/msg with 0755 permissions; (bnc#945502).

- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15
  systems; (bnc#945013).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 329782 from Lars Müller's avatar Lars Müller (lmuelle) (revision 189)
- Update to 4.3.0.

  Check WHATSNEW.txt from the main tar ball, the web page, or the samba
  package change log for a detailed list of changes.

- Do not provide and obsolete libpdb0 from libsamba-passdb0; (bnc#942716).

- Configure with --bundled-libraries=NONE; (bso#11458).
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 323232 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 188)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 317282 from Lars Müller's avatar Lars Müller (lmuelle) (revision 187)
Remove libiniparser-devel build-time requirement.
Displaying revisions 101 - 120 of 306
openSUSE Build Service is sponsored by