[Pkg-samba-maint] [Git][samba-team/samba][master] 5 commits: intel aes-ni no more needed as GnuTLS is used

Mathieu Parent gitlab at salsa.debian.org
Wed Jun 24 22:14:28 BST 2020



Mathieu Parent pushed to branch master at Debian Samba Team / samba


Commits:
15c7ada5 by Mathieu Parent at 2020-06-24T20:52:22+02:00
intel aes-ni no more needed as GnuTLS is used

See 20b9cae63d5a5881cc6100a2533fab683cc307aa

- - - - -
00d7f048 by Mathieu Parent at 2020-06-24T21:41:56+02:00
Install new files

- - - - -
372ae095 by Mathieu Parent at 2020-06-24T22:23:31+02:00
Update symbols

- - - - -
cb8e6e36 by Mathieu Parent at 2020-06-24T23:12:08+02:00
Update samba-libs.lintian-overrides

- - - - -
73005064 by Mathieu Parent at 2020-06-24T23:12:14+02:00
Release 2:4.12.3+dfsg-1 to experimental

- - - - -


9 changed files:

- debian/changelog
- debian/libsmbclient.symbols
- debian/libwbclient0.install
- debian/libwbclient0.symbols
- debian/rules
- debian/samba-dev.install
- debian/samba-libs.install
- debian/samba-libs.lintian-overrides
- debian/smbclient.install


Changes:

=====================================
debian/changelog
=====================================
@@ -1,4 +1,4 @@
-samba (2:4.12.3+dfsg-1) UNRELEASED; urgency=medium
+samba (2:4.12.3+dfsg-1) experimental; urgency=medium
 
   * New upstream major version (Closes: #963106)
     - Update d/gbp.conf, d/watch and d/README.source for 4.12
@@ -18,9 +18,13 @@ samba (2:4.12.3+dfsg-1) UNRELEASED; urgency=medium
         cause a stack overflow leading to a denial of service. The highest
         threat from this vulnerability is to system availability
         (Closes: #960188)
+    - intel aes-ni no more needed as GnuTLS is used
+    - Install new files
+    - Update symbols
+    - Update samba-libs.lintian-overrides
   * d/control: Remove unused libattr1-dev Build-Depends (Closes: #953915)
 
- -- Mathieu Parent <sathieu at debian.org>  Tue, 23 Jun 2020 13:13:25 +0200
+ -- Mathieu Parent <sathieu at debian.org>  Wed, 24 Jun 2020 23:12:11 +0200
 
 samba (2:4.11.5+dfsg-1) unstable; urgency=medium
 


=====================================
debian/libsmbclient.symbols
=====================================
@@ -10,6 +10,7 @@ libsmbclient.so.0 libsmbclient #MINVER#
  SMBCLIENT_0.3.3 at SMBCLIENT_0.3.3 2:4.9.0+dfsg
  SMBCLIENT_0.4.0 at SMBCLIENT_0.4.0 2:4.9.0+dfsg
  SMBCLIENT_0.5.0 at SMBCLIENT_0.5.0 2:4.10.0+dfsg
+ SMBCLIENT_0.6.0 at SMBCLIENT_0.6.0 2:4.12.0+dfsg
  smbc_chmod at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_close at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_closedir at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
@@ -51,6 +52,7 @@ libsmbclient.so.0 libsmbclient #MINVER#
  smbc_getFunctionPurgeCachedServers at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_getFunctionRead at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_getFunctionReaddir at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
+ smbc_getFunctionReaddirPlus2 at SMBCLIENT_0.6.0 2:4.12.0+dfsg
  smbc_getFunctionReaddirPlus at SMBCLIENT_0.3.3 2:4.9.0+dfsg
  smbc_getFunctionRemoveCachedServer at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_getFunctionRemoveUnusedServer at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
@@ -109,6 +111,7 @@ libsmbclient.so.0 libsmbclient #MINVER#
  smbc_print_file at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_read at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_readdir at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
+ smbc_readdirplus2 at SMBCLIENT_0.6.0 2:4.12.0+dfsg
  smbc_readdirplus at SMBCLIENT_0.3.3 2:4.9.0+dfsg
  smbc_removexattr at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_rename at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
@@ -143,6 +146,7 @@ libsmbclient.so.0 libsmbclient #MINVER#
  smbc_setFunctionPurgeCachedServers at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_setFunctionRead at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_setFunctionReaddir at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
+ smbc_setFunctionReaddirPlus2 at SMBCLIENT_0.6.0 2:4.12.0+dfsg
  smbc_setFunctionReaddirPlus at SMBCLIENT_0.3.3 2:4.9.0+dfsg
  smbc_setFunctionRemoveCachedServer at SMBCLIENT_0.1.0 2:4.0.3+dfsg1
  smbc_setFunctionRemoveUnusedServer at SMBCLIENT_0.1.0 2:4.0.3+dfsg1


=====================================
debian/libwbclient0.install
=====================================
@@ -1,5 +1,3 @@
-#!/usr/bin/dh-exec --with-scripts=filter-arch
-[any-amd64] usr/lib/*/samba/libaesni-intel.so.0
 usr/lib/*/libsamba-util.so.*
 usr/lib/*/libwbclient.so.0*
 usr/lib/*/samba/libgenrand.so.0


=====================================
debian/libwbclient0.symbols
=====================================
@@ -4,10 +4,6 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  CatchChildLeaveStatus at SAMBA_UTIL_0.0.1 2:4.11.0
  CatchSignal at SAMBA_UTIL_0.0.1 2:4.11.0
  SAMBA_UTIL_0.0.1 at SAMBA_UTIL_0.0.1 2:4.11.0
- _samba_rijndaelDecrypt at SAMBA_UTIL_0.0.1 2:4.11.0
- _samba_rijndaelEncrypt at SAMBA_UTIL_0.0.1 2:4.11.0
- _samba_rijndaelKeySetupDec at SAMBA_UTIL_0.0.1 2:4.11.0
- _samba_rijndaelKeySetupEnc at SAMBA_UTIL_0.0.1 2:4.11.0
  _talloc_keep_secret at SAMBA_UTIL_0.0.1 2:4.11.0
  _talloc_stackframe at SAMBA_UTIL_0.0.1 2:4.11.0
  _talloc_stackframe_pool at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -15,18 +11,6 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  add_gid_to_array_unique at SAMBA_UTIL_0.0.1 2:4.11.0
  add_string_to_array at SAMBA_UTIL_0.0.1 2:4.11.0
  add_uid_to_array_unique at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_ccm_128_crypt at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_ccm_128_digest at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_ccm_128_init at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_ccm_128_update at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_cmac_128_final at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_cmac_128_init at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_cmac_128_update at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_gcm_128_crypt at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_gcm_128_digest at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_gcm_128_init at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_gcm_128_updateA at SAMBA_UTIL_0.0.1 2:4.11.0
- aes_gcm_128_updateC at SAMBA_UTIL_0.0.1 2:4.11.0
  afdgets at SAMBA_UTIL_0.0.1 2:4.11.0
  all_string_sub at SAMBA_UTIL_0.0.1 2:4.11.0
  all_zero at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -34,10 +18,6 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  anonymous_shared_allocate at SAMBA_UTIL_0.0.1 2:4.11.0
  anonymous_shared_free at SAMBA_UTIL_0.0.1 2:4.11.0
  anonymous_shared_resize at SAMBA_UTIL_0.0.1 2:4.11.0
- arcfour_crypt at SAMBA_UTIL_0.0.1 2:4.11.0
- arcfour_crypt_blob at SAMBA_UTIL_0.0.1 2:4.11.0
- arcfour_crypt_sbox at SAMBA_UTIL_0.0.1 2:4.11.0
- arcfour_init at SAMBA_UTIL_0.0.1 2:4.11.0
  ascii_len_n at SAMBA_UTIL_0.0.1 2:4.11.0
  base64_decode_data_blob at SAMBA_UTIL_0.0.1 2:4.11.0
  base64_decode_data_blob_talloc at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -127,6 +107,7 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  dyn_PRIVATE_DIR at SAMBA_UTIL_0.0.1 2:4.11.0
  dyn_PYTHONARCHDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  dyn_PYTHONDIR at SAMBA_UTIL_0.0.1 2:4.11.0
+ dyn_SAMBA_DATADIR at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  dyn_SBINDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  dyn_SCRIPTSBINDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  dyn_SETUPDIR at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -154,6 +135,8 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  file_save at SAMBA_UTIL_0.0.1 2:4.11.0
  file_save_mode at SAMBA_UTIL_0.0.1 2:4.11.0
  free_iconv_handle at SAMBA_UTIL_0.0.1 2:4.11.0
+ full_timespec_to_nt_time at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
+ full_timespec_to_time_t at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  gen_fnmatch at SAMBA_UTIL_0.0.1 2:4.11.0
  generate_random at SAMBA_UTIL_0.0.1 2:4.11.0
  generate_random_machine_password at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -182,6 +165,7 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  get_dyn_PRIVATE_DIR at SAMBA_UTIL_0.0.1 2:4.11.0
  get_dyn_PYTHONARCHDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  get_dyn_PYTHONDIR at SAMBA_UTIL_0.0.1 2:4.11.0
+ get_dyn_SAMBA_DATADIR at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  get_dyn_SBINDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  get_dyn_SCRIPTSBINDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  get_dyn_SETUPDIR at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -237,6 +221,7 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  is_default_dyn_PRIVATE_DIR at SAMBA_UTIL_0.0.1 2:4.11.0
  is_default_dyn_PYTHONARCHDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  is_default_dyn_PYTHONDIR at SAMBA_UTIL_0.0.1 2:4.11.0
+ is_default_dyn_SAMBA_DATADIR at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  is_default_dyn_SBINDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  is_default_dyn_SCRIPTSBINDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  is_default_dyn_SETUPDIR at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -251,11 +236,13 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  is_linklocal_addr at SAMBA_UTIL_0.0.1 2:4.11.0
  is_loopback_addr at SAMBA_UTIL_0.0.1 2:4.11.0
  is_loopback_ip_v4 at SAMBA_UTIL_0.0.1 2:4.11.0
+ is_omit_timespec at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  is_zero_addr at SAMBA_UTIL_0.0.1 2:4.11.0
  is_zero_ip_v4 at SAMBA_UTIL_0.0.1 2:4.11.0
  islower_m at SAMBA_UTIL_0.0.1 2:4.11.0
  isupper_m at SAMBA_UTIL_0.0.1 2:4.11.0
  log_stack_trace at SAMBA_UTIL_0.0.1 2:4.11.0
+ make_omit_timespec at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  malloc_array at SAMBA_UTIL_0.0.1 2:4.11.0
  mdfour at SAMBA_UTIL_0.0.1 2:4.11.0
  memalign_array at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -282,6 +269,8 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  nsec_time_diff at SAMBA_UTIL_0.0.1 2:4.11.0
  nt_time_equal at SAMBA_UTIL_0.0.1 2:4.11.0
  nt_time_string at SAMBA_UTIL_0.0.1 2:4.11.0
+ nt_time_to_full_time_t at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
+ nt_time_to_full_timespec at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  nt_time_to_unix at SAMBA_UTIL_0.0.1 2:4.11.0
  nt_time_to_unix_timespec at SAMBA_UTIL_0.0.1 2:4.11.0
  nttime_to_timeval at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -338,17 +327,12 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  round_timespec_to_nttime at SAMBA_UTIL_0.0.1 2:4.11.0
  round_timespec_to_sec at SAMBA_UTIL_0.0.1 2:4.11.0
  round_timespec_to_usec at SAMBA_UTIL_0.0.1 2:4.11.0
- samba_AES_cbc_encrypt at SAMBA_UTIL_0.0.1 2:4.11.0
- samba_AES_cfb8_encrypt at SAMBA_UTIL_0.0.1 2:4.11.0
- samba_AES_decrypt at SAMBA_UTIL_0.0.1 2:4.11.0
- samba_AES_decrypt_key at SAMBA_UTIL_0.0.1 2:4.11.0
- samba_AES_encrypt at SAMBA_UTIL_0.0.1 2:4.11.0
- samba_AES_set_encrypt_key at SAMBA_UTIL_0.0.1 2:4.11.0
  samba_getpass at SAMBA_UTIL_0.0.1 2:4.11.0
  samba_tevent_context_init at SAMBA_UTIL_0.0.1 2:4.11.0
  samba_tevent_set_debug at SAMBA_UTIL_0.0.1 2:4.11.0
  same_net at SAMBA_UTIL_0.0.1 2:4.11.0
  same_net_v4 at SAMBA_UTIL_0.0.1 2:4.11.0
+ server_id_cmp at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  server_id_equal at SAMBA_UTIL_0.0.1 2:4.11.0
  server_id_from_string at SAMBA_UTIL_0.0.1 2:4.11.0
  server_id_get at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -378,6 +362,7 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  set_dyn_PRIVATE_DIR at SAMBA_UTIL_0.0.1 2:4.11.0
  set_dyn_PYTHONARCHDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  set_dyn_PYTHONDIR at SAMBA_UTIL_0.0.1 2:4.11.0
+ set_dyn_SAMBA_DATADIR at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  set_dyn_SBINDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  set_dyn_SCRIPTSBINDIR at SAMBA_UTIL_0.0.1 2:4.11.0
  set_dyn_SETUPDIR at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -496,11 +481,13 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  tfork_status at SAMBA_UTIL_0.0.1 2:4.11.0
  tftw at SAMBA_UTIL_0.0.1 2:4.11.0
  time_mono at SAMBA_UTIL_0.0.1 2:4.11.0
+ time_t_to_full_timespec at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  timespec_compare at SAMBA_UTIL_0.0.1 2:4.11.0
  timespec_current at SAMBA_UTIL_0.0.1 2:4.11.0
  timespec_elapsed2 at SAMBA_UTIL_0.0.1 2:4.11.0
  timespec_elapsed at SAMBA_UTIL_0.0.1 2:4.11.0
  timespec_min at SAMBA_UTIL_0.0.1 2:4.11.0
+ timespec_string_buf at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  timestring at SAMBA_UTIL_0.0.1 2:4.11.0
  timeval_add at SAMBA_UTIL_0.0.1 2:4.11.0
  timeval_compare at SAMBA_UTIL_0.0.1 2:4.11.0
@@ -526,6 +513,7 @@ libsamba-util.so.0 libwbclient0 #MINVER#
  tiniparser_getint at SAMBA_UTIL_0.0.1 2:4.11.0
  tiniparser_getstring at SAMBA_UTIL_0.0.1 2:4.11.0
  tiniparser_load at SAMBA_UTIL_0.0.1 2:4.11.0
+ tiniparser_load_stream at SAMBA_UTIL_0.0.1 2:4.12.0+dfsg
  tmpdir at SAMBA_UTIL_0.0.1 2:4.11.0
  tolower_m at SAMBA_UTIL_0.0.1 2:4.11.0
  toupper_m at SAMBA_UTIL_0.0.1 2:4.11.0


=====================================
debian/rules
=====================================
@@ -90,11 +90,6 @@ else
 		--without-systemd
 endif
 
-ifeq ($(DEB_HOST_ARCH_CPU), amd64)
-	conf_args += \
-		--accel-aes=intelaesni
-endif
-
 %:
 	dh $* --with python3
 


=====================================
debian/samba-dev.install
=====================================
@@ -6,6 +6,7 @@ usr/include/samba-4.0/core/*.h
 usr/include/samba-4.0/credentials.h
 usr/include/samba-4.0/dcerpc.h
 usr/include/samba-4.0/dcerpc_server.h
+usr/include/samba-4.0/dcesrv_core.h
 usr/include/samba-4.0/domain_credentials.h
 usr/include/samba-4.0/gen_ndr/*.h
 usr/include/samba-4.0/ldb_wrap.h
@@ -31,6 +32,7 @@ usr/include/samba-4.0/util/*.h
 usr/include/samba-4.0/util_ldb.h
 usr/lib/*/libdcerpc-binding.so
 usr/lib/*/libdcerpc-samr.so
+usr/lib/*/libdcerpc-server-core.so
 usr/lib/*/libdcerpc-server.so
 usr/lib/*/libdcerpc.so
 usr/lib/*/libndr-krb5pac.so


=====================================
debian/samba-libs.install
=====================================
@@ -1,5 +1,6 @@
 usr/lib/*/libdcerpc-binding.so.*
 usr/lib/*/libdcerpc-samr.so.*
+usr/lib/*/libdcerpc-server-core.so.*
 usr/lib/*/libdcerpc-server.so.*
 usr/lib/*/libdcerpc.so.*
 usr/lib/*/libndr-krb5pac.so.*
@@ -119,6 +120,7 @@ usr/lib/*/samba/libsmbd-conn.so.0
 usr/lib/*/samba/libsmbd-shim.so.0
 usr/lib/*/samba/libsmbldaphelper.so.*
 usr/lib/*/samba/libsmbpasswdparser.so.*
+usr/lib/*/samba/libtalloc-report-printf.so.0
 usr/lib/*/samba/libtalloc-report.so.0
 usr/lib/*/samba/libtdb-wrap.so.*
 usr/lib/*/samba/libtrusts-util.so.0


=====================================
debian/samba-libs.lintian-overrides
=====================================
@@ -1,7 +1,7 @@
 # the samba-libs package contains a number of libraries
 # it doesn't make sense to have them in separate packages, as this would
 # result in circular dependencies
-samba-libs: package-name-doesnt-match-sonames libdcerpc-binding0 libdcerpc-samr0 libdcerpc-server0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr0 libnetapi0 libsamba-credentials0 libsamba-errors1 libsamba-hostconfig0 libsamba-passdb0 libsamba-policy.cpython-* libsamdb0 libsmbconf0 libsmbldap2 libtevent-util0
+samba-libs: package-name-doesnt-match-sonames libdcerpc-binding0 libdcerpc-samr0 libdcerpc-server-core0 libdcerpc-server0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr1 libnetapi0 libsamba-credentials0 libsamba-errors1 libsamba-hostconfig0 libsamba-passdb0 libsamba-policy.cpython-38-x86-64-linux-gnu0 libsamdb0 libsmbconf0 libsmbldap2 libtevent-util0
 # Embedded Heimdal is patched
 samba-libs: embedded-library usr/lib/*/samba/libgssapi-samba4.so.*: heimdal
 # False positives, see #896012


=====================================
debian/smbclient.install
=====================================
@@ -1,5 +1,6 @@
 usr/bin/cifsdd
 usr/bin/findsmb
+usr/bin/mdfind
 usr/bin/rpcclient
 usr/bin/smbcacls
 usr/bin/smbclient
@@ -10,6 +11,7 @@ usr/bin/smbtar
 usr/bin/smbtree
 usr/lib/*/samba/smbspool_krb5_wrapper
 usr/share/man/man1/findsmb.1
+usr/share/man/man1/mdfind.1
 usr/share/man/man1/rpcclient.1
 usr/share/man/man1/smbcacls.1
 usr/share/man/man1/smbclient.1



View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/2f2c3567ab3fed6639515ea6bfb30bfd38206b2b...730050642d6521a976dea6f2f3be581e624509e4

-- 
View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/2f2c3567ab3fed6639515ea6bfb30bfd38206b2b...730050642d6521a976dea6f2f3be581e624509e4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20200624/1a65aad9/attachment-0001.html>


More information about the Pkg-samba-maint mailing list