[Pkg-samba-maint] [samba] branch master updated (9f65a9e -> a42f73e)

Mathieu Parent sathieu at moszumanska.debian.org
Sat Apr 1 19:02:10 UTC 2017


This is an automated email from the git hooks/post-receive script.

sathieu pushed a change to branch master
in repository samba.

      from  9f65a9e   Re-release 2:4.5.6+dfsg-2
      adds  cac3807   VERSION: Bump version up to 4.5.7...
      adds  5ef7df6   CVE-2017-2619: s3/smbd: re-open directory after dptr_CloseDir()
      adds  0d6b518   CVE-2017-2619: s4/torture: add SMB2_FIND tests with SMB2_CONTINUE_FLAG_REOPEN flag
      adds  92f17bb   CVE-2017-2619: s3: smbd: Create wrapper function for OpenDir in preparation for making robust.
      adds  039eb4a   CVE-2017-2619: s3: smbd: Opendir_internal() early return if SMB_VFS_OPENDIR failed.
      adds  3e2bb3f   CVE-2017-2619: s3: smbd: Create and use open_dir_safely(). Use from OpenDir().
      adds  5e75a52   CVE-2017-2619: s3: smbd: OpenDir_fsp() use early returns.
      adds  7e915c8   CVE-2017-2619: s3: smbd: OpenDir_fsp() - Fix memory leak on error.
      adds  2594b8b   CVE-2017-2619: s3: smbd: Move the reference counting and destructor setup to just before retuning success.
      adds  e413f14   CVE-2017-2619: s3: smbd: Correctly fallback to open_dir_safely if FDOPENDIR not supported on system.
      adds  52a1765   CVE-2017-2619: s3: smbd: Remove O_NOFOLLOW guards. We insist on O_NOFOLLOW existing.
      adds  7942f9d   CVE-2017-2619: s3: smbd: Move special handling of symlink errno's into a utility function.
      adds  444d49b   CVE-2017-2619: s3: smbd: Add the core functions to prevent symlink open races.
      adds  3bae150   CVE-2017-2619: s3: smbd: Use the new non_widelink_open() function.
      adds  818dd9e   WHATSNEW: Add release notes for Samba 4.5.7.
      adds  3da28b8   VERSION: Disable GIT_SNAPSHOTS for the 4.5.7 release.
      adds  bf889af   VERSION: Up to Samba 4.5.8.
      adds  4e28a8f   VERSION: Re-enable GIT_SNAPSHOTS.
      adds  42fd34a   s3: smbd: Fix incorrect logic exposed by fix for the security bug 12496 (CVE-2017-2619).
      adds  29dd6b1   s3: Test for CVE-2017-2619 regression with "follow symlinks = no".
      adds  99378b7   s3: Fixup test for CVE-2017-2619 regression with "follow symlinks = no"
      adds  95c190d   s3: smbd: Fix "follow symlink = no" regression part 2.
      adds  8dfe455   s3: smbd: Fix "follow symlink = no" regression part 2.
      adds  e013dc8   s3: Test for CVE-2017-2619 regression with "follow symlinks = no" - part 2
      adds  46032b9   WHATSNEW: Add release notes for Samba 4.5.8.
      adds  964d1fc   VERSION: Disable GIT_SNAPSHOTS for the 4.5.8 release.
      adds  552f08f   New upstream version 4.5.8+dfsg
       new  0fb3d99   Merge tag 'upstream/4.5.8+dfsg'
       new  a42f73e   Release 2:4.5.8+dfsg-1

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 VERSION                                   |   2 +-
 WHATSNEW.txt                              | 116 +++-
 debian/changelog                          |   8 +
 debian/patches/CVE-2017-2619.patch        | 993 ------------------------------
 debian/patches/series                     |   1 -
 docs/manpages/cifsdd.8                    |   4 +-
 docs/manpages/dbwrap_tool.1               |   4 +-
 docs/manpages/eventlogadm.8               |   4 +-
 docs/manpages/findsmb.1                   |   4 +-
 docs/manpages/idmap_ad.8                  |   4 +-
 docs/manpages/idmap_autorid.8             |   4 +-
 docs/manpages/idmap_hash.8                |   4 +-
 docs/manpages/idmap_ldap.8                |   4 +-
 docs/manpages/idmap_nss.8                 |   4 +-
 docs/manpages/idmap_rfc2307.8             |   4 +-
 docs/manpages/idmap_rid.8                 |   4 +-
 docs/manpages/idmap_script.8              |   4 +-
 docs/manpages/idmap_tdb.8                 |   4 +-
 docs/manpages/idmap_tdb2.8                |   4 +-
 docs/manpages/libsmbclient.7              |   4 +-
 docs/manpages/lmhosts.5                   |   4 +-
 docs/manpages/log2pcap.1                  |   4 +-
 docs/manpages/net.8                       |   4 +-
 docs/manpages/nmbd.8                      |   4 +-
 docs/manpages/nmblookup.1                 |   4 +-
 docs/manpages/ntlm_auth.1                 |   4 +-
 docs/manpages/pam_winbind.8               |   4 +-
 docs/manpages/pam_winbind.conf.5          |   4 +-
 docs/manpages/pdbedit.8                   |   4 +-
 docs/manpages/profiles.1                  |   4 +-
 docs/manpages/rpcclient.1                 |   4 +-
 docs/manpages/samba-regedit.8             |   4 +-
 docs/manpages/samba-tool.8                |   4 +-
 docs/manpages/samba.7                     |   4 +-
 docs/manpages/samba.8                     |   4 +-
 docs/manpages/sharesec.1                  |   4 +-
 docs/manpages/smb.conf.5                  |   4 +-
 docs/manpages/smbcacls.1                  |   4 +-
 docs/manpages/smbclient.1                 |   4 +-
 docs/manpages/smbcontrol.1                |   4 +-
 docs/manpages/smbcquotas.1                |   4 +-
 docs/manpages/smbd.8                      |   4 +-
 docs/manpages/smbget.1                    |   4 +-
 docs/manpages/smbgetrc.5                  |   4 +-
 docs/manpages/smbpasswd.5                 |   4 +-
 docs/manpages/smbpasswd.8                 |   4 +-
 docs/manpages/smbspool.8                  |   4 +-
 docs/manpages/smbspool_krb5_wrapper.8     |   4 +-
 docs/manpages/smbstatus.1                 |   4 +-
 docs/manpages/smbtar.1                    |   4 +-
 docs/manpages/smbtree.1                   |   4 +-
 docs/manpages/testparm.1                  |   4 +-
 docs/manpages/vfs_acl_tdb.8               |   4 +-
 docs/manpages/vfs_acl_xattr.8             |   4 +-
 docs/manpages/vfs_aio_fork.8              |   4 +-
 docs/manpages/vfs_aio_linux.8             |   4 +-
 docs/manpages/vfs_aio_pthread.8           |   4 +-
 docs/manpages/vfs_audit.8                 |   4 +-
 docs/manpages/vfs_btrfs.8                 |   4 +-
 docs/manpages/vfs_cacheprime.8            |   4 +-
 docs/manpages/vfs_cap.8                   |   4 +-
 docs/manpages/vfs_catia.8                 |   4 +-
 docs/manpages/vfs_ceph.8                  |   4 +-
 docs/manpages/vfs_commit.8                |   4 +-
 docs/manpages/vfs_crossrename.8           |   4 +-
 docs/manpages/vfs_default_quota.8         |   4 +-
 docs/manpages/vfs_dirsort.8               |   4 +-
 docs/manpages/vfs_extd_audit.8            |   4 +-
 docs/manpages/vfs_fake_perms.8            |   4 +-
 docs/manpages/vfs_fileid.8                |   4 +-
 docs/manpages/vfs_fruit.8                 |   4 +-
 docs/manpages/vfs_full_audit.8            |   4 +-
 docs/manpages/vfs_glusterfs.8             |   4 +-
 docs/manpages/vfs_gpfs.8                  |   4 +-
 docs/manpages/vfs_linux_xfs_sgid.8        |   4 +-
 docs/manpages/vfs_media_harmony.8         |   4 +-
 docs/manpages/vfs_netatalk.8              |   4 +-
 docs/manpages/vfs_offline.8               |   4 +-
 docs/manpages/vfs_prealloc.8              |   4 +-
 docs/manpages/vfs_preopen.8               |   4 +-
 docs/manpages/vfs_readahead.8             |   4 +-
 docs/manpages/vfs_readonly.8              |   4 +-
 docs/manpages/vfs_recycle.8               |   4 +-
 docs/manpages/vfs_shadow_copy.8           |   4 +-
 docs/manpages/vfs_shadow_copy2.8          |   4 +-
 docs/manpages/vfs_shell_snap.8            |   4 +-
 docs/manpages/vfs_snapper.8               |   4 +-
 docs/manpages/vfs_streams_depot.8         |   4 +-
 docs/manpages/vfs_streams_xattr.8         |   4 +-
 docs/manpages/vfs_syncops.8               |   4 +-
 docs/manpages/vfs_time_audit.8            |   4 +-
 docs/manpages/vfs_tsmsm.8                 |   4 +-
 docs/manpages/vfs_unityed_media.8         |   4 +-
 docs/manpages/vfs_worm.8                  |   4 +-
 docs/manpages/vfs_xattr_tdb.8             |   4 +-
 docs/manpages/vfs_zfsacl.8                |   4 +-
 docs/manpages/vfstest.1                   |   4 +-
 docs/manpages/wbinfo.1                    |   4 +-
 docs/manpages/winbind_krb5_locator.7      |   4 +-
 docs/manpages/winbindd.8                  |   4 +-
 selftest/target/Samba3.pm                 |   7 +
 source3/script/tests/test_smbclient_s3.sh | 111 ++++
 source3/smbd/filename.c                   |   2 +-
 source3/smbd/open.c                       |   2 +-
 source3/smbd/proto.h                      |   4 +-
 source3/smbd/vfs.c                        |  40 +-
 106 files changed, 473 insertions(+), 1193 deletions(-)
 delete mode 100644 debian/patches/CVE-2017-2619.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git




More information about the Pkg-samba-maint mailing list