[Pkg-samba-maint] [samba] branch stable-update created (now ba3333d)

Jelmer Vernooij jelmer at moszumanska.debian.org
Sun Apr 3 15:01:53 UTC 2016


This is an automated email from the git hooks/post-receive script.

jelmer pushed a change to branch stable-update
in repository samba.

        at  ba3333d   Drop patch Fix-CTDB-build-with-PMDA.patch: applied upstream.

This branch includes the following new commits:

       new  8acd3c8   VERSION: Bump version up to 4.2.2...
       new  663cedd   ctdb-tools: Fix heap-use-after-free problem
       new  b2db194   ctdb: Fix 1125553 Buffer not null terminated
       new  4b2663d   ctdb: Fix CID 1288201 Array compared against 0
       new  a0698ef   ctdb: Make for-loop in ctdb_get_script_list more idiomatic
       new  9b79fa1   ctdb: Fix memleak in ctdb_get_script_list
       new  265ab2e   ctdb: Introduce a helper var in ctdb_get_script_list
       new  47deea0   ctdb: Fix CID 1125613 Destination buffer too small
       new  dd44ac4   ctdb: Fix CID 1125634 Out-of-bounds write
       new  b006b7e   ctdb: Fix CID 1125615 Copy into fixed size buffer
       new  014c3d9   ctdb: Coverity fix for CID 1291643
       new  e3d3ffd   ctdb: check for talloc_asprintf() failure
       new  6cbfa35   ctdb-scripts: Try to deal with Ubuntu having /usr/sbin/service
       new  3aecf28   ctdb-scripts: Don't use the GNU awk gensub() function
       new  74db853   ctdb-scripts: Fix tunable setup code by making it shell-agnostic
       new  4adb57c   ctdb-tests: Fix tickle sniffing for IPv4
       new  9c54ea8   ctdb-scripts: Call iptables/ip6tables directly from iptables_wrapper
       new  ec1a40d   ctdb-scripts: Fix bashism in ctdbd_wrapper script
       new  1d1db40   s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid.
       new  9b721b9   spoolss: purge the printer name cache on name change
       new  65c7bc5   build: Move systemd checks to lib/util
       new  6352ce7   waf: Fix systemd detection
       new  6135c95   lib/util: Include DEBUG macro in internal header files before samba_util.h
       new  3d74950   ctdb-tests: Extend ctdb stub to support "ptrans", "pdelete", "catdb"
       new  cb1e82d   ctdb-tests: Extend ctdb stub to support "ip" with and without -X
       new  59f2aef   ctdb-tests: Support testing scripts that change directory
       new  cb5cd84   ctdb-tests: Extend eventscript unit test infrastructure for other scripts
       new  c955fe8   ctdb-tests: Make setup of public addresses more obvious
       new  bc1e3a8   ctdb-tests: Unit tests for statd-callout
       new  bb6497e   ctdb-scripts: Fix a regression in statd-callout
       new  fa53179   ctdb-scripts: Change statd-callout to be more scalable
       new  189ed91   ctdb-scripts: Remove unused function nfs_statd_update()
       new  8e034d4   ctdb-scripts: Add a 'rm' stub so statd-callout tests work correctly
       new  e9c498b   vfs_fruit: also map characters below 0x20
       new  8478c00   ctdb-build: Specify absolute path to libsocket-wrapper.so
       new  9423985   s3:smbd: missing tevent_req_nterror
       new  b5ff650   s3:smbd: update comment to correctly reflect MS-SMB2
       new  967679c   Make sure we initialize conn to NULL, because a routine we call may give an error and not touch conn, and then we get an error when trying to TALLOC_FREE it.
       new  69d632d   Add multiplex state to dcerpc flags and control over multiplex PFC flag in bind_ack and and dcesrv_alter replies
       new  f330a2e   Add DCERPC flag to call unbind hooks without destroying the connection itself upon termination of a connection with outstanding pending calls.
       new  2d2702a   smbcacls: Make 'numeric' a local variable
       new  cb564bf   smbcacls: Use defines for security flags
       new  989ec37   smbcacls: Move SidToString to common file
       new  5bad1a2   smbcacls: Move StringToSid to common file
       new  f4ac982   smbcacls: Move print_ace and parse_ace to common file
       new  af26539   smbcacls: Move sec_desc_print to common file
       new  667b3a3   util_sd: Make server conncection optional
       new  d79a504   sharesec: Print ACEs in similar format as expected in input
       new  e0aead2   sharesec: Use common parse_ace function
       new  794cc5d   s4: rpc: Refactor dcesrv_alter() function into setup and send steps.
       new  251accf   s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"
       new  509f2bb   s4: torture: Test for incorrect file size returned in the response of "FILE_SUPERSEDE Create".
       new  82f7a0c   vfs: kernel_flock and named streams
       new  c79abc9   s3: nmbd: Ensure we only set work_changed = true if we modify the record.
       new  bd7bc99   s3: nmbd: Don't set work_changed = True inside update_server_ttl().
       new  a4f1a49   s3:smbd: add a smbd_notify_cancel_by_map() helper function
       new  26496f9   s3:smbd: use STATUS_NOTIFY_CLEANUP when closing a smb2 directory handle
       new  06a7050   s3:smbd: use STATUS_NOTIFY_CLEANUP on smb2 logoff (explicit and implicit) and tdis
       new  ef5a649   s4:torture/smb2: verify STATUS_NOTIFY_CLEANUP return value
       new  e3bb691   s4:torture/smb2: add smb2.notify.close test
       new  398400b   s4:torture/smb2: add smb2.notify.invalid-reauth test
       new  09a5282   s4:torture/smb2: add smb2.notify.session-reconnect test
       new  72ceb73   s3:smbXsrv_session: clear smb2req->session of pending requests in smbXsrv_session_destructor()
       new  1340130   s3:smbXsrv_session: clear smb2req->session of pending requests in smbXsrv_session_logoff_all_callback()
       new  03263c7   s3:smbXsrv_session: add smb2srv_session_shutdown_send/recv helper functions
       new  6233772   s3:smbXsrv_session: cancel pending requests when we logoff a previous session
       new  b653861   s3:smb2_sesssetup: let smbd_smb2_logoff_* use smbXsrv_session_shutdown_*
       new  7a56711   s3:smb2_sesssetup: always assign smb2req->session when a session was created.
       new  3a2b5ec   s3:smb2_sesssetup: add smbd_smb2_session_setup_wrap_send/recv()
       new  abe61f4   s3:smb2_sesssetup: remove unused smbd_smb2_session_setup_* destructors
       new  f8e64d7   s3:smb2_tcon: cancel pending requests on all connections on tdis
       new  688352c   s3:selftest: run smb2.notify with --signing=required
       new  ea27c56   s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff()
       new  37e5d67   vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff
       new  c071f95   vfs_fruit: comment fix: the options are documented
       new  08a72cb   vfp_gpfs: ensure END_PROFILE is always called
       new  86ed62a   vfs_gpfs: move failure label before END_PROFILE
       new  87f2dd8   s3: smbd: VFS: Add vfs_stat_smb_basename() - to be called when we *know* stream name parsing has already been done.
       new  cf8235a   s3: smbd: VFS: All the places that are currently calling vfs_stat_smb_fname() and vfs_lstat_smb_fname() should be calling vfs_stat_smb_basename().
       new  177d620   s3: smbd: VFS: For all EA and ACL calls use synthetic_smb_fname(), not synthetic_smb_fname_split().
       new  80db448   s3: smbd: VFS: fake_acl module called get_full_smb_filename() with a stream path, then used the result to call XATTR functions directly.
       new  691a887   s3: torture: Add regression test for bug #11249.
       new  6db3de7   gencache: don't fail gencache_stabilize if there were records to delete.
       new  60f1f76   libads: record service ticket endtime for sealed ldap connections
       new  fa55c75   s3:winbindd: make sure we remove pending io requests before closing client sockets
       new  d754099   smbd: Introduce reset_delete_on_close_lck
       new  e41c7a7   smbd: Use reset_delete_on_close_lck directly
       new  bd09b15   smbd: Remove bool arg from set_delete_on_close_lck
       new  b3e3e41   smbd: Cancel pending notifies if the directory goes away
       new  c7e4454   torture: Add smb2.notify.rmdir
       new  c78585f   s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used
       new  0ce6ad8   WHATSNEW: Add release notes for Samba 4.2.2.
       new  f312bf9   VERSION: Disable git snapshot for the 4.2.2 release.
       new  5398e93   VERSION: Bump version up to 4.2.3...
       new  9a86ca9   s3-rpc_server: fix rpc_create_tcpip_sockets() processing of interfaces.
       new  83cc6d0   s3: lib: util: Ensure we read a hex number as %x, not %u.
       new  cf32189   s3:smb2: add padding to last command in compound requests
       new  ffc7481   s4:torture:smb2:compound: compound read and padding
       new  aedee67   Add IPv6 support to ADS client side LDAP connects. Corrected format for IPv6 LDAP URI. Signed-off-by: David Holder <david.holder at erion.co.uk>
       new  1adcb0e   Add IPv6 support for determining FQDN during ADS join.
       new  8293292   s3: IPv6 enabled DNS connections for ADS client
       new  4233065   s4:lib/tls: fix build with gnutls 3.4
       new  ceb7c09   s4.2/fsmo.py: fixed fsmo transfer exception
       new  7a36a93   idmap_rfc2307: Fix wbinfo --gid-to-sid query
       new  3f01e75   nsswitch: Extend idmap_rfc2307 testcase for reverse lookup
       new  09e0734   tstream: Make socketpair nonblocking
       new  97d9d0b   s3-unix_msg: remove socket file after closing socket fd
       new  3f61d55   s3: libsmbclient: Re-resolving targetcli on every read/write/lseek/ftruncate/close is both incorrect and slow.
       new  c786ea6   smbd: Fix a use-after-free
       new  92f7b8e   tevent: Fix CID 1035381 Unchecked return value
       new  282802f   lib: tevent: Fix compile error in Solaris ports backend.
       new  9a65763   tevent: add a note to tevent_add_fd()
       new  e7ad0a7   tevent: fix access after free in tevent_common_check_signal()
       new  622581d   pytevent: Better error and reference handling
       new  a8bf805   pytevent: Define missing TeventFd_Type object
       new  7ee5cb7   pytalloc: Improve timer wrapper, and test it
       new  742bfc5   pytevent: Port to Python 3
       new  722bd35   tevent/testsuite: make sure we cleanup tevent_fd structures in the correct order
       new  c11701f   tevent.h: propose tstream_ versions of read_packet_send/recv and writev_send/recv
       new  cdcf907   pytevent: remove dead code TEVENT_DEPRECATED is never defined
       new  bccf0d6   pytevent: remove const warnings using discard_const_p()
       new  2a6c505   pytevent: add a TeventTimer_Object_ref helper structure to make the code clearer
       new  a1d7c1b   tevent: version 0.9.25
       new  4e65889   ctdb-locking: Avoid memory corruption in ctdb_lock_context_destructor
       new  f52066b   ctdb-locking: Set the lock_ctx->request to NULL when request is freed
       new  4216f06   ctdb-locking: Set destructor when lock_context is created
       new  5e91991   ctdb-locking: Avoid memory leak in the failure case
       new  faf635a   ctdb-locking: Avoid resetting talloc destructor
       new  9579ef9   ctdb-locking: Add a comment to explain auto_mark usage
       new  0a6b40b   ctdb-locking: make process_callbacks() more robust
       new  3209575   ctdb-locking: move all auto_mark logic into process_callbacks()
       new  3d1df8d   vfs_fruit: add option veto_appledouble
       new  1ac2ee0   lib/util/charset: fix conversion failure logging
       new  a7cfaa8   smbd/trans2: add a useful diagnostic for files with bad encoding
       new  49fb6e7   tdb: Fix CID 1034841 Resource leak
       new  7f07079   tdb: Fix CID 1034842 Resource leak
       new  346ef80   tdb: Do not build test binaries if it's not a standalone build
       new  9ec7d7e   Add set date to tdb manpages.
       new  35181ac   tdb: introduce tdb_chainlock_read_nonblock(), a nonblock variant of tdb_chainlock_read()
       new  ec6b122   tdb: version 1.3.5
       new  8480d36   lib/replace: add signal related configure checks
       new  46fec0b   lib/util: remove signal related configure checks
       new  669ed89   s3:wscript: remove signal related configure checks
       new  4bb5bea   wafsamba: let CHECK_DECLS() find enum values
       new  862f50f   lib/replace: fix PTHREAD_MUTEX_ROBUST fallback to PTHREAD_MUTEX_ROBUST_NP on solaris 11
       new  5f96713   lib/replace: remove unused HAVE_DECL_PTHREAD_{MUTEXATTR_SETROBUST,MUTEX_CONSISTENT}_NP checks
       new  cb3eb21   tdb: version 1.3.6
       new  aa658dc   s3:param/loadparm fix testparm --show-all-parameters
       new  251141b   Group creation: Add msSFU30Name only when --nis-domain was given
       new  cc18cd2   lib: Add tevent_req_simple_recv_unix
       new  f9f27a9   lib/tsocket: add tdgram_bsd_existing_socket() helper function
       new  69a6b05   lib/tsocket: add tdgram_inet_udp_broadcast_socket()
       new  d576029   s4:libcli/raw: make sure smbcli_transport_connect_send/recv correctly cleanup on error
       new  2409e6d   s3:wscript: move lib/util_tsock.c from 'TLDAP' to 'samba3util'
       new  8693ae9   s3:lib/background: make sure we destroy a pending read_packet_send() before closing the pipe fd
       new  2bda2dd   s3:lib/addrchange: look at the correct nl_pid in addrchange_done()
       new  c4c55a1   s3:lib/addrchange: make use of tdgram_* in addrchange_*()
       new  e791b77   s3:libsmb: remove the cli_session_request as early as possible via a nb_connect_cleanup() hook
       new  511674a   s3:libsmb: remove subreqs as early as possible via a smbsock_connect_cleanup() hook
       new  5f6eed5   s3:libsmb: remove pending requests as early as possible via a smbsock_any_connect_cleanup() hook
       new  7d01a20   s3:libsmb: let nb_packet_server_destructor() explicitly destroy the tevent_fd
       new  af62a4a   s3:libsmb: convert nb_packet_client to tstream_* functions
       new  109e579   s3:libsmb: convert nb_packet_reader to tstream_* functions
       new  a9e2d2a   s3:libsmb: convert nb_trans_send/recv internals to tdgram
       new  65dc14c   lib/async_req: remove unused sendto_{send,recv} and recvfrom_{send,recv}
       new  ad8c901   lib/async_req: s/result/req/ in async_connect_send()
       new  d7d9f4e   lib/async_req: simplify async_connect_* using a _cleanup() hook
       new  4b39759   lib/async_req: remove the tevent_fd as early as possible via a writev_cleanup() hook
       new  cc01ff4   lib/async_req: s/result/req/ in read_packet_send()
       new  41b593a   lib/async_req: use tevent_req_nomem/tevent_req_post in read_packet_send()
       new  4d10c2b   lib/async_req: remove the tevent_fd as early as possible via a read_packet_cleanup() hook
       new  e34065b   lib/async_req: remove the tevent_fd as early as possible via a wait_for_read_cleanup() hook
       new  1b55fab   libcli/smb: use tevent_req_received(req) in read_smb_recv()
       new  92c456d   libcli/smb: close the socket fd at the end of smbXcli_conn_disconnect()
       new  2eeecae   libcli/smb: remove unused split of read_fd and write_fd
       new  1fdf3b3   libcli/smb: make sure the writev_send of smbXcli_conn_samba_suicide() is removed before closing the socket
       new  b909752   libcli/smb: add smb1 requests to the pending array before writev_send()
       new  a66870b   libcli/smb: make sure we remove the writev_send() request when a request is destroyed
       new  3e219f4   ctdb-ib: make sure the tevent_fd is removed before the fd is closed
       new  8fafa9d   sharesec: Use non-numerical output for sharesec
       new  94c5af4   selftest: Add test for sharesec command
       new  b02152f   docs-xml: Update sharesec manpage to reflect current output
       new  4099e13   s3: smbd: Use separate flag to track become_root()/unbecome_root() state.
       new  7896b84   selftest: Run winbind tests in chgdcpass environment
       new  fc6074c   winbindd: Use pdb_get_domain_info() to get exactly the local domain info when we are an AD DC
       new  4bacf0d   winbindd: Sync secrets.ldb into secrets.tdb on startup
       new  251544b   selftest: Change chgdcpass environment to use winbindd
       new  cbd98bf   s3: smbd: Codenomicon crash in do_smb_load_module().
       new  645ec21   pidl: Make the compilation of PIDL producing the same results if the content hasn't change
       new  fcc7112   docs: overhaul the description of "smb encrypt" to include SMB3 encryption.
       new  8782e06   kerberos auth info3 should contain resource group ids available from pac_logon
       new  27aa4d4   winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC.
       new  2429bd6   s3:smb2_setinfo: fix memory leak in the defer_rename case
       new  c53828d   s3:auth_domain: fix talloc problem in connect_to_domain_password_server()
       new  685876a   auth/gensec: gensec_[un]seal_packet() should only work with GENSEC_FEATURE_DCE_STYLE
       new  f6e6167   auth/gensec: make sure gensec_start_mech_by_authtype() resets SIGN/SEAL before starting
       new  3467356   dcerpc.idl: add DCERPC_AUTH_PAD_ALIGNMENT (=16)
       new  50d7029   librpc/rpc: add DCERPC_AUTH_PAD_LENGTH(stub_length) helper macro
       new  dba57bd   s3:librpc/rpc: allow up to DCERPC_AUTH_PAD_ALIGNMENT padding bytes in dcerpc_add_auth_footer()
       new  8249470   s3:librpc/rpc: fix padding calculation in dcerpc_guess_sizes()
       new  452a2f8   s3:rpc_server: remove pad handling from api_pipe_alter_context()
       new  db644ad   s4:librpc/rpc: let dcerpc_ship_next_request() use DCERPC_AUTH_PAD_ALIGNMENT define
       new  97bedee   s4:librpc/rpc: let dcerpc_ship_next_request() use a sig_size for a padded payload
       new  f9fce60   s4:librpc/rpc: let ncacn_push_request_sign() handle sig_size == 0 with auth_info as internal error
       new  1dae656   s4:librpc/rpc: fix padding caclucation in ncacn_push_request_sign()
       new  a0fbd5e   s4:rpc_server: let dcesrv_reply() use DCERPC_AUTH_PAD_ALIGNMENT define
       new  eac0b78   s4:rpc_server: let dcesrv_reply() use a sig_size for a padded payload
       new  ae37b34   s4:rpc_server: let dcesrv_auth_response() handle sig_size == 0 with auth_info as error
       new  30b9074   s4:rpc_server: fix padding caclucation in dcesrv_auth_response()
       new  05a0995   s4:selftest: run rpc.echo tests also with krb5 krb5,sign krb5,seal
       new  1f51989   s4:selftest: also run rpc.winreg with kerberos and all possible auth options
       new  a70531c   winbindd: disconnect child process if request is cancelled at main process
       new  0691890   vfs_fruit: check offset and length for AFP_AfpInfo read requests
       new  4c8b66e   s4:torture:vfs_fruit: check offset and length when reading AFP_AfpInfo stream
       new  74ae99f   ncacn_http: fix GNUism
       new  d770ed8   WHATSNEW: Add release notes for Samba 4.2.3.
       new  baf4349   VERSION: Disable git snapshots for the 4.2.3 release.
       new  274513b   VERSION: Bump version up to 4.2.4...
       new  b1cd2fe   smbd: Make SMB3 clients use encryption with "smb encrypt = auto"
       new  872668a   Introduce setting "desired" for 'smb encrypt' and 'client/server signing'
       new  6429747   smbXsrv: add bools encryption_desired to session and tcon
       new  6cb67e5   smbd:smb2: separate between encryption required and enc desired
       new  8e06f18   smbd:smb2: only enable encryption in session if desired
       new  90ee73b   smbd:smb2: only enable encryption in tcon if desired
       new  9817f8c   smbd:smb2: use encryption_desired in send_break
       new  8be6d09   docs:smb.conf: explain effect of new setting 'desired' of smb encrypt
       new  f33d7fa   smbd:trans2: treat new SMB_SIGNING_DESIRED in case
       new  a759cd6   s3:libsmb: Fix a bug in conversion of ea list to ea array.
       new  ebde3fe   s3-smbd: reset protocol in smbXsrv_connection_init_tables failure paths.
       new  c0fb5fc   ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM
       new  44fddac   auth/credentials: if credentials have principal set, they are not anonymous anymore
       new  fede929   ctdb-scripts: Fix regression in VLAN interface support
       new  27f1550   ctdb-scripts: Support monitoring of interestingly named VLANs on bonds
       new  215f15b   ctdb-tests: Interface number in "ip link show" stub defaults to 42
       new  1168579   ctdb-tests: Add VLAN support to the "ip link" stub
       new  30fd8d1   ctdb-tests: Add some 10.interfaces VLAN tests
       new  d00db84   s3-smbd: Leave sys_disk_free() if dfree command is used
       new  20fba40   s3-auth: Fix a possible null pointer dereference
       new  f90c55b   lib: replace: Add strsep function (missing on Solaris).
       new  98ac8fc   s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup.
       new  65f09ac   s4:rpc_server/netlogon: Fix for NetApp
       new  dc65591   s3-net: use talloc array in share allowedusers
       new  864ca13   ctdb-banning: If node is already banned, do not run ctdb_local_node_got_banned()
       new  a156ca8   ctdb-daemon: Check if updates are in flight when releasing all IPs
       new  baf5328   ctdb-build: Fix building of PCP PMDA module
       new  9923741   s3:util: add internal function for transfer_file that uses pread/pwrite
       new  bb56c5f   smb2:ioctl: support for OS X AAPL copyfile style copy_chunk
       new  9f7ca62   vfs:fruit: implement copyfile style copy_chunk
       new  34fc0cd   s4:torture:vfs_fruit: copyfile
       new  b827f28   vfs_streams_xattr: stream names may contain colons
       new  7ed25fc   vfs_catia: run translation on stream names
       new  d6ed2f9   s4:torture:vfs_fruit: pass xattr name as arg to torture_setup_local_xattr()
       new  e9d22f1   s4:torture:vfs_fruit: add a test for stream names
       new  7ad714e   lib: Fix rundown of open_socket_out()
       new  1f7e86d   s3:lib: fix some corner cases of open_socket_out_cleanup()
       new  0d36fba   ctdb-tool: Correctly print timed out event scripts output
       new  bbaef4d   ctdb-daemon: Improve error handling for running event scripts
       new  75e2768   ctdb-daemon: Correctly process the exit code from failed eventscripts
       new  b688f57   s4:rpc_server/netlogon: fix bugs in dcesrv_netr_DsRGetDCNameEx2()
       new  7e43c43   s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable.
       new  281bd2f   s3-auth: Fix 'map to guest = Bad Uid' support
       new  175e73d   s3-auth: Pass nt_username to check_account()
       new  f2a2ac4   s3-auth: Fix a memory leak in make_server_info_info3()
       new  08bbbbc   s3-util: Compare the maximum allowed length of a NetBIOS name
       new  9bc968a   samr4: Use <SID=%s> in GetGroupsForUser
       new  09653dc   vfs_fruit: handling of empty resource fork
       new  aeda612   vfs_fruit: split and simplify fruit_ftruncate
       new  33bc5d2   vfs_fruit: delete ._ file when deleting the basefile
       new  1f796a5   s4:torture:vfs_fruit: add a resource fork truncation test
       new  e806635   s4:torture:vfs_fruit: created empty resourceforks
       new  a10eacd   WHATSNEW: Add release notes for Samba 4.2.4.
       new  413fb83   VERSION: Disable git snapshots for the 4.2.4 release.
       new  7cabb4c   VERSION: Bump version up to 4.2.5...
       new  f4bc73f   build: use as-needed linker flag also on OpenBSD
       new  68801fb   nss_winbind: fix hang on Solaris on big groups
       new  105f949   s3: dfs: Fix a crash when the dfs targets are disabled.
       new  d194836   s3: smbd: Fix mkdir race condition.
       new  d2105b7   s4: torture: Test mkdir race condition.
       new  6c6b62f   pam_winbind: Fix a segfault if initialization fails
       new  eb1aa45   s3: smbclient: Move cmd_setmode out of clitar.c and back into client.c
       new  29f057c   s3: smbd: Remove unused parameter from build_stream_path().
       new  22d55ca   s3: smbd: Fix opening/creating :stream files on the root share directory.
       new  2e516a7   s3: tests: smbclient test to ensure we can create and see a :foobar stream on the top level directory in a share.
       new  2df7b85   net: fix a crash with net ads keytab create
       new  d69db57   s3: smbd: fix a crash in unix_convert()
       new  f9a820a   s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bug #11522).
       new  b6f1310   winbind: Fix 100% loop
       new  5bc3a2f   kerberos: make sure we only use prompter type when available.
       new  ba280e6   s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket
       new  0349f95   vfs_commit: set the fd on open before calling SMB_VFS_FSTAT
       new  95b17d5   tdb: Fix bug 11381, deadlock
       new  dd39bd2   vfs_fruit: return value of ad_pack in vfs_fruit.c
       new  deaa748   smbd: Fix file name buflen and padding in notify repsonse
       new  3695d46   s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows.
       new  b13c829   lib: cli: Add accessor function smb2cli_tcon_flags() to get tcon flags.
       new  f1ea5fd   s4: torture: Add SMB2 access-based enumeration test. Passes against Win2k12R2.
       new  8c5990a   s3:locking: initialize lease pointer in share_mode_traverse_fn()
       new  8bd6345   s3:lib: validate domain name in lookup_wellknown_name()
       new  2b1a40d   s3: lsa: lookup_name() logic for unqualified (no DOMAIN\ component) names is incorrect.
       new  4cb9657   s3:smbstatus: add stream name to share_entry_forall()
       new  bf344f7   dcerpc.idl: accept invalid dcerpc_bind_nak pdus
       new  0c46d4a   WHATSNEW: Add release notes for Samba 4.2.5.
       new  851ea18   VERSION: Disable git snapshots for the 4.2.5 release.
       new  929166e   VERSION: Bump version up to 4.2.6...
       new  d098372   smbd: Send SMB2 oplock breaks unencrypted
       new  84f6010   s3-smbd: Fix old DOS client doing wildcard delete - gives a attribute type of zero
       new  7c535ad   s3-torture: Add WILDDELETE test to smbtorture3 to test old wildcard delete with zero attribute
       new  a915f8f   s3-torture: Remove (incorrect) samba3-specific behavior in samba3.raw.unlink now the server is correct
       new  c016c1a   selftest: add a test for async_connect_send()
       new  fc280ca   async_req: fix non-blocking connect()
       new  52e3615   auth: gensec: Parameters out_mem_ctx and ev are passed in the wrong order to gensec_spnego_server_try_fallback().
       new  0d3fd03   selftest: Avoid system krb5.conf in testenv provisioning
       new  fbf5c79   selftest: Avoid system krb5.conf in some test envs that don't use kerberos
       new  1bbb6bf   selftest: Avoid system krb5.conf in "none" test env
       new  f0238b7   ctdb: open the RO tracking db with perms 0600 instead of 0000
       new  1998b07   ctdb: strip trailing spaces from nodes file.
       new  6f95e55   manpage: corrected small typo error
       new  2aded40   lib: util: Make non-critical message a warning.
       new  95232e6   Changing log level of two entries to from 1 to 3
       new  c63638e   vfs_gpfs: Re-enable share modes
       new  01ca2cf   s3: smbd: If EA's are turned off on a share don't allow an SMB2 create containing them.
       new  d9afa70   s3: rpcclient: Prevent null ptr access by returning error if no creds available
       new  92cc4e0   s3: winbind: Prevent null ptr access by returning error if no creds available
       new  7cbca2f   nss_wins: Use lp_global_no_reinit()
       new  6a7f87b   remove many valgrind errors for base.lock test
       new  579c13de  fix uninitialised read in process_host_announce
       new  9e8475e   fix writev(vector[...]) points to uninitialised bytes in call_trans2findnext
       new  1eb6f36   fix 'Invalid read of size 1' in reply_search
       new  6033569   fix writev(vector[...]) points to uninitialised bytes in call_trans2findfirst
       new  6f47535   wafsamba: Also build libraries with RELRO protection
       new  fdac7f1   s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle.
       new  b83e261   doc: fix a typo in the smb.conf manpage, explanation of idmap config
       new  785158f   docs: Fix some typos in the idmap backend section.
       new  a6f9a79   WHATSNEW: Add release notes for Samba 4.2.6.
       new  0a7b693   VERSION: Disable git snapshots for the 4.2.6 release.
       new  5f9d311   VERSION: Bump version up to 4.2.7...
       new  9c7e988   CVE-2015-3223: lib: ldb: Cope with canonicalise_fn returning string "", length 0.
       new  3c68b50   CVE-2015-3223: lib: ldb: Use memmem binary search, not strstr text search.
       new  813ecea   CVE-2015-5330: ldb_dn: simplify and fix ldb_dn_escape_internal()
       new  06f2d95   CVE-2015-5330: ldb_dn_escape_value: use known string length, not strlen()
       new  405170b   CVE-2015-5330: Fix handling of unicode near string endings
       new  9c06833   CVE-2015-5330: strupper_talloc_n_handle(): properly count characters
       new  75b3ce6   CVE-2015-5330: next_codepoint_handle_ext: don't short-circuit UTF16 low bytes
       new  aa68bd3   CVE-2015-5330: ldb_dn_explode: copy strings by length, not terminators
       new  6dc18a6   ldb: bump version of the required system ldb to 1.1.24
       new  79e5023   CVE-2015-5252: s3: smbd: Fix symlink verification (file access outside the share).
       new  1d8efe6   CVE-2015-5299: s3-shadow-copy2: fix missing access check on snapdir
       new  05d09fb   CVE-2015-5296: s3:libsmb: force signing when requiring encryption in do_connect()
       new  3e8f112   CVE-2015-5296: s3:libsmb: force signing when requiring encryption in SMBC_server_internal()
       new  41e1e8b   CVE-2015-5296: libcli/smb: make sure we require signing when we demand encryption on a session
       new  2483d66   CVE-2015-8467: samdb: Match MS15-096 behaviour for userAccountControl
       new  e59d852   WHATSNEW: Add release notes for Samba 4.2.7.
       new  add4fe9   VERSION: Disable git snapshots for the 4.2.7 release.
       new  b8077d8   Fix bug #11394 - Crash: Bad talloc magic value - access after free
       new  f51d78c   Merge tag 'samba-4.2.7' into v4-2-test
       new  b73894c   VERSION: Bump version up to 4.2.8...
       new  c91214f   s3:smbd: convert file_struct.posix_open to a bitmap with flags
       new  b5a081b   s3:smbd: file_struct: seperate POSIX directory rename cap from POSIX open
       new  3a1a67e   vfs_fruit: add a flag that tracks whether use of AAPL was negotiated
       new  8b3e19b   vfs_fruit: enable POSIX directory rename semantics
       new  417eca7   s4:torture:vfs_fruit: add a test for POSIX rename
       new  3f05db5   lib/param: add a fixed unified lpcfg_string_{free,set,set_upper}() infrastructure
       new  6d1ee8b   lib/async_req: do not install async_connect_send_test.
       new  fd92549   smbd: make "hide dot files" option work with "store dos attributes = yes"
       new  2028bac   docs: Fix typos in man vfs_gpfs.
       new  468c551   s4:torture:vfs_fruit: remove unused tree2
       new  4eeb6db   s4:torture:vfs_fruit: rename tree1 -> tree
       new  62a455a   s4:torture:vfs_fruit: tweak check_stream_list()
       new  b883c09   s4:torture:vfs_fruit: use AFPINFO_STREAM_NAME
       new  3bf1846   s4:torture:vfs_fruit: enhance check_stream
       new  432e9a1   s4:torture:vfs_fruit: add --option=torture:osx for enable_aapl()
       new  6dba57e   s4:torture:vfs_fruit: add explicit cleanup of testfiles
       new  6a9f21c   s4:torture:vfs_fruit: skip test test_read_atalk_metadata() without "localdir" and rename it
       new  4d7b2ab   s4:torture:vfs_fruit: skip test_adouble_conversion() without "localdir"
       new  08f61fa   s4:torture:vfs_fruit: skip test_stream_names() without "localdir"
       new  b8512d4   s4:torture:vfs_fruit: fix test_aapl() to work with OS X
       new  7b2f35b   s4:torture:vfs_fruit: fix test_rename_dir_openfile() to work with OS X
       new  b32587e   s4:torture:vfs_fruit: fix flakey test_write_atalk_rfork_io with OS X
       new  8a25a0a   s3:lib/errmap_unix: map EOVERFLOW to NT_STATUS_ALLOTTED_SPACE_EXCEEDED
       new  aa95842   vfs_fruit: fix some debug messages
       new  d26b979   vfs_fruit: stat AFP_AfpInfo must fail when it doesn't exist
       new  a4e0639   s4:torture:vfs_fruit: file without AFP_AfpInfo
       new  642b62b   vfs_fruit: handling of ftruncate() on AFP_AfpInfo stream
       new  95699b3   s4:torture:vfs_fruit: add tests for AFP_AfpInfo delete-on-close and eof
       new  293363b   vfs_fruit: writing all 0 to AFP_AfpInfo stream
       new  d8511c0   s4:torture:vfs_fruit: test nulling out AFP_AfpInfo stream
       new  c99c910   vfs_fruit: fix offset and len handling for AFP_AfpInfo stream
       new  a48eb89   s4:torture:vfs_fruit: update AFP_AfpInfo IO tests
       new  3892a74   vfs_fruit: ignore delete on the AFP_Resource stream
       new  985d331   s4:torture:vfs_fruit: add tests for AFP_Resource delete-on-close and eof
       new  6d7e711   s4:torture:vfs_fruit: add test test_read_afpinfo
       new  9bedefb   vfs_fruit: add and use define for the Netatalk metadata xattr
       new  73dac61   vfs_fruit: hide the Netatalk metadata xattr in streaminfo
       new  76213b0   vfs_streams_xattr: fix and simplify streams_xattr_get_name()
       new  6b1c418   s3: libsmb: Correctly initialize the list head when keeping a list of primary followed by DFS connections.
       new  c1f06fe   s3:smbd: fix a corner case of the symlink verification
       new  d63f0b1   s3:smbd/oplock obey kernel oplock setting when releasing oplocks
       new  279246d   smbcacls: fix uninitialized variable
       new  e33472d   s3:smbd: Ignore initial allocation size for directory creation
       new  be4f52b   s4:torture: add SMB2 test for directory creation initial allocation size
       new  4464e65   WHATSNEW: Add release notes for Samba 4.2.8.
       new  ba74960   VERSION: Disable git snapshots for the 4.2.8 release.
       new  0549f6e   VERSION: Bump version up to 4.2.9...
       new  e20deaf   CVE-2015-7560: s3: smbd: Add refuse_symlink() function that can be used to prevent operations on a symlink.
       new  cc73ba9   CVE-2015-7560: s3: smbd: Refuse to get an ACL from a POSIX file handle on a symlink.
       new  478ed76   CVE-2015-7560: s3: smbd: Refuse to set an ACL from a POSIX file handle on a symlink.
       new  cb5b446   CVE-2015-7560: s3: smbd: Refuse to set a POSIX ACL on a symlink.
       new  3898806   CVE-2015-7560: s3: smbd: Refuse to get a POSIX ACL on a symlink.
       new  ef5f235   CVE-2015-7560: s3: smbd: Set return values early, allows removal of code duplication.
       new  e77fb42   CVE-2015-7560: s3: smbd: Silently return no EA's available on a symlink.
       new  5923745   CVE-2015-7560: s3: smbd: Refuse to set EA's on a symlink.
       new  10e5700   CVE-2015-7560: s3: libsmb: Rename cli_posix_getfaclXX() functions to cli_posix_getacl() as they operate on pathnames.
       new  6122a71   CVE-2015-7560: s3: libsmb: Add SMB1-only POSIX cli_posix_setacl() functions. Needed for tests.
       new  db00d27   CVE-2015-7560: s3: torture3: Add new POSIX-SYMLINK-ACL test.
       new  6296447   CVE-2015-7560: s3: torture3: Add new POSIX-SYMLINK-EA test.
       new  8070e38   CVE-2016-0771: s4:librpc: python_dns and python_dcerpc_dnsp doesn't require client bindings
       new  192a619   CVE-2016-0771: librpc: add RPC_NDR_DNSSERVER to dcerpc-samba library
       new  69a4def   CVE-2016-0771: librpc: add ndr_dnsp_string_list_copy() helper function
       new  50972cc   CVE-2016-0771: s4:dns_server: fix idl for dns_txt_record
       new  9c50144   CVE-2016-0771: dns.idl: make use of dnsp_hinfo
       new  d076289   CVE-2016-0771: tests/dns: Modify dns tests to match new IDL
       new  356cc26   CVE-2016-0771: tests/dns: prepare script for further testing
       new  5462a4c   CVE-2016-0771: tests/dns: FORMERR can simply timeout against Windows
       new  9f1f669   CVE-2016-0771: tests/dns: Add a comment regarding odd Windows behaviour
       new  ffe5757   CVE-2016-0771: tests/dns: restore formerly segfaulting test
       new  1cae991   CVE-2016-0771: tests/dns: Correct error code for formerly unrun test
       new  18a1a7c   CVE-2016-0771: tests/dns: Add some more test cases for TXT records
       new  43de2c0   CVE-2016-0771: tests/dns: modify tests to check via RPC
       new  b9c595f   CVE-2016-0771: dnsserver: don't force UTF-8 for TXT
       new  93662cf   CVE-2016-0771: tests/dns: RPC => DNS roundtrip test
       new  409ec58   CVE-2016-0771: tests: rename test getopt to get_opt
       new  4dfa41d   CVE-2016-0771: tests/dns: change samba.tests.dns from being a unittest
       new  981cbe1   CVE-2016-0771: tests/dns: Remove dependencies on env variables
       new  c3eeba3   WHATSNEW: Add release notes for Samba 4.2.9.
       new  c0aa427   VERSION: Disable git snapshots for the 4.2.9 release.
       new  e33ed1b   Update watch file to only check foer 4.2.X releases.
       new  3c9490c   Imported Upstream version 4.2.9+dfsg
       new  134b926   Merge tag 'upstream/4.2.9+dfsg' into stable-update
       new  f924e0c   New upstream release.
       new  e8427fe   Refresh patch.
       new  ba3333d   Drop patch Fix-CTDB-build-with-PMDA.patch: applied upstream.

The 441 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git




More information about the Pkg-samba-maint mailing list