[Pkg-samba-maint] [samba] annotated tag upstream/4.5.12+dfsg created (now 5694f7b)

Mathieu Parent sathieu at moszumanska.debian.org
Wed Nov 8 20:15:15 UTC 2017


This is an automated email from the git hooks/post-receive script.

sathieu pushed a change to annotated tag upstream/4.5.12+dfsg
in repository samba.

        at  5694f7b   (tag)
   tagging  19587dd5463d8bb2d9a60fd3a615bd2fbe23d0db (commit)
  replaces  upstream/4.5.8+dfsg
 tagged by  Mathieu Parent
        on  Fri Jul 28 20:43:00 2017 +0200

- Log -----------------------------------------------------------------
Upstream version 4.5.12+dfsg

Amitay Isaacs (11):
      ctdb-readonly: Avoid a tight loop waiting for revoke to complete
      ctdb-docs: Fix documentation of -n option to ctdb tool
      Revert "ctdb-readonly: Avoid a tight loop waiting for revoke to complete"
      ctdb-readonly: Avoid a tight loop waiting for revoke to complete
      ctdb-scripts: Don't send empty argument string to logger
      ctdb-recovery: Assign banning credits if database fails to freeze
      ctdb-recovery: Setting up of recmode should be idempotent
      ctdb-recovery: Simplify logging of recovery mode setting
      ctdb-recovery: Finish processing for recovery mode ACTIVE first
      ctdb-recovery: Get recmode unconditionally in the main_loop
      ctdb-recovery: Do not run local ip verification when in recovery

Andreas Schneider (4):
      replace: Include sysmacros.h
      s3:vfs_expand_msdfs: Do not open the remote address as a file
      waf: Explicitly link libreplace against libnss_wins.so
      libcli:smb2: Gracefully handle not supported for FSCTL_VALIDATE_NEGOTIATE_INFO

Bob Campbell (2):
      WHATSNEW: Add release notes for Samba 4.5.12
      VERSION: Release Samba 4.5.12 for CVE-2017-11103

Christof Schmitt (1):
      winbindd: Fix password policy for pam authentication

Daniel Kobras (1):
      s3: smbd: fix regression with non-wide symlinks to directories over SMB3.

Doug Nazar (1):
      s3: smbd: inotify_map_mask_to_filter incorrectly indexes an array.

Hanno Böck (1):
      cleanupdb: Fix a memory read error

Jeffrey Altman (1):
      CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation

Jeremy Allison (26):
      s3: locking: Move two leases functions into a new file.
      s3: locking: Update oplock optimization for the leases era !
      Fix for Solaris C compiler.
      Changes to make the Solaris C compiler happy.
      s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes.
      s3: smbd: Fix incorrect logic exposed by fix for the security bug 12496 (CVE-2017-2619).
      s3: Test for CVE-2017-2619 regression with "follow symlinks = no".
      s3: Fixup test for CVE-2017-2619 regression with "follow symlinks = no"
      s3: smbd: Fix "follow symlink = no" regression part 2.
      s3: smbd: Fix "follow symlink = no" regression part 2.
      s3: Test for CVE-2017-2619 regression with "follow symlinks = no" - part 2
      lib: debug: Avoid negative array access.
      s3:lib: Fix incorrect logic in sys_broken_getgroups()
      s3:smbd: Fix incorrect use of sys_getgroups()
      s3: smbd: Fix open_files.idl to correctly ignore share_mode_lease *lease in share_mode_entry.
      s3: VFS: Catia: Ensure path name is also converted.
      s3: smbd: When deleting an fsp pointer ensure we don't keep any references to it around.
      s3: smbd: Add regression test for non-wide symlinks to directories fail over SMB3.
      libcli: smb: Add smbXcli_tcon_copy().
      libcli: smb: Add smb2cli_tcon_set_id().
      s3: libsmb: Add cli_state_save_tcon() / cli_state_restore_tcon().
      s3: smbtorture: Show correct use of cli_state_save_tcon() / cli_state_restore_tcon().
      s3: libsmb: Widen cli_state_get_tid() / cli_state_set_tid() to 32-bits.
      s3: libsmb: Fix cli_state_has_tcon() to cope with SMB2 connections.
      s3: libsmb: Correctly do lifecycle management on cli->smb1.tcon and cli->smb2.tcon.
      s3: libsmb: Correctly save and restore connection tcon in smbclient, smbcacls and smbtorture3.

Karolin Seeger (16):
      VERSION: Bump version up to 4.5.7...
      Merge tag 'samba-4.5.7' into v4-5-test
      VERSION: Up to Samba 4.5.8.
      Merge tag 'samba-4.5.8' into v4-5-test
      VERSION: Bump version up to 4.5.9.
      WHATSNEW: Add release notes for Samba 4.5.9.
      VERSION: Disable GIT_SNAPSHOTS for the 4.5.9 release.
      VERSION: Bump version up to 4.5.10...
      VERSION: Bump version up to 4.5.10...
      WHATSNEW: Add release notes for Samba 4.5.10.
      VERSION: Disable GIT_SNAPSHOTS for the 4.5.10 release.
      Merge tag 'samba-4.5.10' into v4-5-test
      VERSION: Bump version up to 4.5.11.
      WHATSNEW: Add release notes for Samba 4.5.11.
      VERSION: Disable GIT_SNAPSHOTS for the 4.5.11 release.
      VERSION: Bump version up to 4.5.12...

Martin Schwenke (5):
      ctdb-tools: Stop "ctdb nodestatus" from always showing all nodes
      ctdb-tools: "ctdb nodestatus" should only display header for "all"
      ctdb-tests: Add some extra tests for "ctdb nodestatus"
      ctdb-scripts: NFS call-out failures should cause event failure
      ctdb-tests: Add more NFS eventscript tests for call-out failures

Mathieu Parent (1):
      New upstream version 4.5.12+dfsg

Michael Adam (3):
      s3:vfs:shadow_copy2: fix quoting in debug messages
      s3:vfs:shadow_copy2: fix the corner case if cwd=/ in make_relative_path
      s3:vfs:shadow_copy2: fix corner case of "/@GMT-token" in shadow_copy2_strip_snapshot

Michael Saxl (1):
      s3:gse_krb5: fix a possible crash in fill_mem_keytab_from_system_keytab()

Ralph Boehme (38):
      s3/wscript: fix Linux kernel oplock detection
      s3/smbd: add const to get_lease_type() args
      s3/smbd: add comments and some reformatting to open_file_ntcreate()
      s3/smbd: req is already validated at the beginning of open_file_ntcreate()
      s3/smbd: simplify defer_open()
      s3/smbd: add and use retry_open() instead of defer_open() in two places
      s3/smbd: fix schedule_async_open() timer
      s3/smbd: remove async_open arg from defer_open()
      s3/smbd: all callers of defer_open() pass a lck
      s3/smbd: fix deferred open with streams and kernel oplocks
      s3/selftest: adopt config.h check from source4
      s4/torture: some tests for kernel oplocks
      manpages/vfs_fruit: document global options
      winbindd: use correct domain name for failed lookupsids
      winbindd: remove unused single_domains array
      selftest: new environment "ad_member_idmap_rid"
      selftest: tests idmap mapping with idmap_rid
      vfs_fruit: resource fork open request with flags=O_CREAT|O_RDONLY
      s4/torture: vfs_fruit: test for bug 12565
      winbindd: use passdb backend for well-known SIDs
      selftest: wbinfo -s tests for wellknown SIDs
      selftest: wbinfo --sids-to-unix-ids tests for wellknown SIDs
      winbindd: explicit check for well-known SIDs in wb_lookupsids_bulk()
      selftest: fix for wbinfo -s tests for wellknown SIDs
      s3/include: add NT_STATUS_LOOKUP_ERR
      s3/rpc_client: use NT_STATUS_LOOKUP_ERR
      s3/rpc_client: lookupsids error handling of NT_STATUS_NONE_MAPPED
      winbindd: error handling in rpc_lookup_sids()
      winbindd: trigger possible passdb_dsdb initialisation
      vfs_acl_xattr|tdb: ensure create mask is at least 0666 if ignore_system_acls is set
      vfs_fruit: lp_case_sensitive() does not return a bool
      s3/locking: add const to fsp_lease_type
      s3/locking: helper functions for lease types
      s3/smbd: update exclusive oplock optimisation to the lease area
      s3/smbd: update exclusive oplock optimisation to the lease area
      s3/locking: make find_share_mode_entry public
      s3/smbd: fix exclusive lease optimisation
      s4/torture: test for bug 12798

Richard Sharpe (1):
      Bug 15852. There are valid paths where conn->lsa_pipe_tcp->transport is NULL. Protect against this.

Shilpa Krishnareddy (1):
      notify: Fix ordering of events in notifyd

Stefan Metzmacher (11):
      pam_winbind: no longer use wbcUserPasswordPolicyInfo when authenticating
      samba-tool: let 'samba-tool user syncpasswords' report deletions immediately
      s3:smb2_tcon: allow a compound request after a TreeConnect
      s3:smb2_sesssetup: allow a compound request after a SessionSetup
      auth/ntlmssp: enforce NTLMSSP_NEGOTIATE_NTLM2 for the NTLMv2 client case
      samba-tool: fix log message of 'samba-tool user syncpasswords'
      s3:smbd: unimplement FSCTL_VALIDATE_NEGOTIATE_INFO with "server max protocol = SMB2_02"
      auth/spnego: fix gensec_update_ev() argument order for the SPNEGO_FALLBACK case
      s3:smb2_create: avoid reusing the 'tevent_req' within smbd_smb2_create_send()
      wafsamba: add maxversion and version_blacklist to CHECK_BUNDLED_SYSTEM[_PKG]()
      ldb: protect Samba < 4.7 against incompatible ldb versions and require ldb < 1.2.0

Uri Simchoni (9):
      smbd: add zero_file_id flag
      vfs_fruit: enable zero file id
      vfs_fruit: document added zero_file_id parameter
      torture: add torture_assert_mem_not_equal_goto()
      selftest: tests for vfs_fruite file-id behavior
      selftest: test fetching a large ACL from vfs_acl_xattr
      vfs_xattr_tdb: handle case of zero size.
      vfs_acl_xattr: factor out fetching of an extended attribute
      vfs_acl_xattr: avoid needlessly supplying a large buffer to getxattr()

Volker Lendecke (16):
      smbd: Do an early exit on negprot failure
      smbd: Fix smb1 findfirst with DFS
      selftest: Test for bug 12558
      lib: Fix CID 1373623 Dereference after null check
      idmap_rfc2307: Don't stop after 30 entries
      idmap_rfc2307: "ldap_next_entry" needs the previous entry, not the start
      test_idmap_rfc2307: Remove the correct file
      test_idmap_rfc2307: Avoid a tmpfile
      test_idmap_rfc2307: Correct usage
      test_idmap_rfc2307: Do a recursive delete in ou=idmap
      test_idmap_rfc2307: Test wbinfo -r for 35 supplementary group memberships
      idmap_rfc2307: Don't stop after 30 entries
      idmap_rfc2307: "ldap_next_entry" needs the previous entry, not the start
      selftest: Avoid idmap caching when testing idmap_rfc2307
      idmap_rfc2307: Test unix-ids-to-sids with 35 groups
      CVE-2017-7494: rpc_server3: Refuse to open pipe names with / inside

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git




More information about the Pkg-samba-maint mailing list