[Pkg-samba-maint] [Git][samba-team/samba][bullseye] 3 commits: d/rules: export PYTHONHASHSEED=1 for waf (#1006935 #1009855 #1002059)

[Michael Tokarev (@mjt)]

Michael Tokarev pushed to branch bullseye at Debian Samba Team / samba


Commits:
b2be791e by Michael Tokarev at 2022-04-23T11:05:19+03:00
d/rules: export PYTHONHASHSEED=1 for waf (#1006935 #1009855 #1002059)

- - - - -
ee4a1272 by Michael Tokarev at 2022-04-23T11:05:19+03:00
d/changelog: switch to regular +debMuN release numbering

- - - - -
6e9c3d27 by Michael Tokarev at 2022-04-23T11:11:51+03:00
update changelog

- - - - -


2 changed files:

- debian/changelog
- debian/rules


Changes:

=====================================
debian/changelog
=====================================
@@ -1,24 +1,36 @@
-samba (2:4.13.13+dfsg-1~deb11u4) UNRELEASED; urgency=medium
+samba (2:4.13.13+dfsg-1+deb11u4) UNRELEASED; urgency=medium
 
-  * Import the left-other patches from 4.13.17 upstream stable branch:
+  * fix the order of everything during build by exporting PYTHONHASHSEED=1
+    for waf.  This should fix the broken i386 build of the last security
+    upload. Closes: #1006935, #1009855, #1002059
+  * Import the left-over patches from 4.13.17 upstream stable branch:
    - s3-winbindd-fix-allow-trusted-domains-no-regression.patch
+     https://bugzilla.samba.org/show_bug.cgi?id=14899
      Closes: #999876, winbind fails to start with `allow trusted domains: no`
    - IPA-DC-add-missing-checks.patch
+     https://bugzilla.samba.org/show_bug.cgi?id=14903
    - CVE-2020-25717-s3-auth-fix-MIT-Realm-regression.patch
+     https://bugzilla.samba.org/show_bug.cgi?id=14922
      Closes: #1001053, MIT-kerberos auth broken after 4.13.13+dfsg-1~deb11u2
    - dsdb-Use-DSDB_SEARCH_SHOW_EXTENDED_DN-when-searching.patch
+     https://bugzilla.samba.org/show_bug.cgi?id=14656
+     https://bugzilla.samba.org/show_bug.cgi?id=14902
    - s3-smbd-Fix-mkdir-race-condition-allows-share-escape.patch
-      Closes: #1004691, CVE-2021-43566:
-      mkdir race condition allows share escape
+     https://bugzilla.samba.org/show_bug.cgi?id=13979
+     Closes: #1004691, CVE-2021-43566: mkdir race condition allows share escape
   * 4 patches from upstream to fix possible serious data corruption issue
     with windows client cache poisoning, Closes: #1005642
+    https://bugzilla.samba.org/show_bug.cgi?id=14928
   * two patches from upstream to fix coredump when connecting to shares
     with var substitutions, Closes: #998423
+    https://bugzilla.samba.org/show_bug.cgi?id=14809
   * samba-common-bin.postinst: mkdir /run/samba before invoking samba binaries
     Closes: #953530
   * remove file creation+deletion from previously applied combined patches
     CVE-2021-23192-only-4.13-v2.patch & CVE-2021-3738-dsdb-crash-4.13-v03.patch
     to make patch deapply happy (quilt does not notice this situation)
+  * switch from weird ~deb11uN to the usual +deb11uN release numbering scheme
+    since a more recent upstream version is available in testing now
   * d/salsa-ci.yml: target bullseye
 
  -- Michael Tokarev <mjt at tls.msk.ru>  Thu, 14 Apr 2022 16:47:55 +0300


=====================================
debian/rules
=====================================
@@ -25,7 +25,7 @@ LDB_DEPENDS = "libldb2 (<< $(LDB_EPOCH):$(LDB_NEXT_VERSION)~), libldb2 (>> $(LDB
 export PYSHORT=python3
 export PYTHON=$(shell which $(PYSHORT))
 export PYTHON_CONFIG="$(PYTHON)-config"
-WAF := $(PYTHON) ./buildtools/bin/waf -v
+WAF := PYTHONHASHSEED=1 $(PYTHON) ./buildtools/bin/waf -v
 WAF_NO_PARALLEL := $(WAF) -j 1
 
 # wrapper around cups-config, to work around #726726



View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/7a6a6575913d07c28411ad76e31e38114c50904c...6e9c3d27ba2fc86bb4d66f3c82166cab0baa6696

-- 
View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/7a6a6575913d07c28411ad76e31e38114c50904c...6e9c3d27ba2fc86bb4d66f3c82166cab0baa6696
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20220423/039a6edc/attachment-0001.htm>