[Pkg-samba-maint] [Announce] Samba 4.6.1, 4.5.7 and 4.4.12 Security Releases Available for Download

[Roberto C. Sánchez]

On Fri, Mar 24, 2017 at 03:16:28PM +0100, Mathieu Parent wrote:
> Please wait a bit before uploading.
> 
> There is a regression in jessie when "follow symlinks = no" #858564,
> and a segfault with vfs_shadow2 (#858590).
> 

Hi Mathieu,

I was able to backport the fix for #858564 from the Bugzilla patch and
then I was able to verify against what the Ubuntu maintainers had
backported.

When I looked at the change you made for #858590 I found that it does
not apply at all.  Specifically, the function being patched to resolve
the segfault, shadow_copy2_connectpath, does not exist in the Wheezy
version of Samba.  It appears that in May 2012 the shadow_copy2 from
master was backported (the change is in shadow_copy2_backport.patch in
the Wheezy package).  That change replaced shadow_copy2_connectpath with
shadow_copy2_realpath.  The two functions are substantially different
and it does not appear to me that the problem is even present in Wheezy.

That said, I intend to leave the patch from #858590 out of the Wheezy
LTS update that I am preparing.

I wanted to mention it to you directly and via the mailing list to give
you and others the opportunity to speak up in case there was something I
overlooked.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20170331/564df434/attachment.sig>