| 1 | ==============================
|
|---|
| 2 | Release Notes for Samba 3.6.25
|
|---|
| 3 | February 23, 2015
|
|---|
| 4 | ==============================
|
|---|
| 5 |
|
|---|
| 6 |
|
|---|
| 7 | This is a security release in order to address CVE-2015-0240 (Unexpected
|
|---|
| 8 | code execution in smbd).
|
|---|
| 9 |
|
|---|
| 10 | o CVE-2015-0240:
|
|---|
| 11 | All versions of Samba from 3.5.0 to 4.2.0rc4 are vulnerable to an
|
|---|
| 12 | unexpected code execution vulnerability in the smbd file server
|
|---|
| 13 | daemon.
|
|---|
| 14 |
|
|---|
| 15 | A malicious client could send packets that may set up the stack in
|
|---|
| 16 | such a way that the freeing of memory in a subsequent anonymous
|
|---|
| 17 | netlogon packet could allow execution of arbitrary code. This code
|
|---|
| 18 | would execute with root privileges.
|
|---|
| 19 |
|
|---|
| 20 | o CVE-2014-0178:
|
|---|
| 21 | In preparing a response to an authenticated FSCTL_GET_SHADOW_COPY_DATA
|
|---|
| 22 | or FSCTL_SRV_ENUMERATE_SNAPSHOTS client request, affected versions of
|
|---|
| 23 | Samba do not initialize 8 bytes of the 16 byte SRV_SNAPSHOT_ARRAY
|
|---|
| 24 | response field. The uninitialized buffer is sent back to the client.
|
|---|
| 25 |
|
|---|
| 26 | A non-default VFS module providing the get_shadow_copy_data_fn() hook
|
|---|
| 27 | must be explicitly enabled for Samba to process the aforementioned
|
|---|
| 28 | client requests. Therefore, only configurations with "shadow_copy" or
|
|---|
| 29 | "shadow_copy2" specified for the "vfs objects" parameter are vulnerable.
|
|---|
| 30 |
|
|---|
| 31 |
|
|---|
| 32 | Changes since 3.6.24:
|
|---|
| 33 | ---------------------
|
|---|
| 34 |
|
|---|
| 35 | o Jeremy Allison <jra@samba.org>
|
|---|
| 36 | * BUG 11077: CVE-2015-0240: talloc free on uninitialized stack pointer
|
|---|
| 37 | in netlogon server could lead to security vulnerability.
|
|---|
| 38 |
|
|---|
| 39 |
|
|---|
| 40 | o JiÅà ŠaÅ¡ek <jiri.sasek@oracle.com>
|
|---|
| 41 | * BUG 10549: CVE-2014-0178: Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS
|
|---|
| 42 | response.
|
|---|
| 43 |
|
|---|
| 44 |
|
|---|
| 45 | o Andreas Schneider <asn@samba.org>
|
|---|
| 46 | * BUG 11077: CVE-2015-0240: s3-netlogon: Make sure we do not deference
|
|---|
| 47 | a NULL pointer./auth: Make sure that creds_out is initialized with NULL.
|
|---|
| 48 |
|
|---|
| 49 |
|
|---|
| 50 | ######################################################################
|
|---|
| 51 | Reporting bugs & Development Discussion
|
|---|
| 52 | #######################################
|
|---|
| 53 |
|
|---|
| 54 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 55 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 56 |
|
|---|
| 57 | If you do report problems then please try to send high quality
|
|---|
| 58 | feedback. If you don't provide vital information to help us track down
|
|---|
| 59 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 60 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 61 | database (https://bugzilla.samba.org/).
|
|---|
| 62 |
|
|---|
| 63 |
|
|---|
| 64 | ======================================================================
|
|---|
| 65 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 66 | == The Samba Team
|
|---|
| 67 | ======================================================================
|
|---|
| 68 |
|
|---|
| 69 |
|
|---|
| 70 | Release notes for older releases follow:
|
|---|
| 71 | ----------------------------------------
|
|---|
| 72 |
|
|---|
| 73 | ==============================
|
|---|
| 74 | Release Notes for Samba 3.6.24
|
|---|
| 75 | June 23, 2014
|
|---|
| 76 | ==============================
|
|---|
| 77 |
|
|---|
| 78 |
|
|---|
| 79 | This is a security release in order to address
|
|---|
| 80 | CVE-2014-0244 (Denial of service - CPU loop) and
|
|---|
| 81 | CVE-2014-3493 (Denial of service - Server crash/memory corruption).
|
|---|
| 82 |
|
|---|
| 83 | o CVE-2014-0244:
|
|---|
| 84 | All current released versions of Samba are vulnerable to a denial of
|
|---|
| 85 | service on the nmbd NetBIOS name services daemon. A malformed packet
|
|---|
| 86 | can cause the nmbd server to loop the CPU and prevent any further
|
|---|
| 87 | NetBIOS name service.
|
|---|
| 88 |
|
|---|
| 89 | This flaw is not exploitable beyond causing the code to loop expending
|
|---|
| 90 | CPU resources.
|
|---|
| 91 |
|
|---|
| 92 | o CVE-2014-3493:
|
|---|
| 93 | All current released versions of Samba are affected by a denial of service
|
|---|
| 94 | crash involving overwriting memory on an authenticated connection to the
|
|---|
| 95 | smbd file server.
|
|---|
| 96 |
|
|---|
| 97 |
|
|---|
| 98 | Changes since 3.6.22:
|
|---|
| 99 | ---------------------
|
|---|
| 100 |
|
|---|
| 101 | o Jeremy Allison <jra@samba.org>
|
|---|
| 102 | * BUG 10633: CVE-2014-0244: Fix nmbd denial of service.
|
|---|
| 103 | * BUG 10654: CVE-2014-3493: Fix segmentation fault in
|
|---|
| 104 | smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler.
|
|---|
| 105 |
|
|---|
| 106 |
|
|---|
| 107 | ######################################################################
|
|---|
| 108 | Reporting bugs & Development Discussion
|
|---|
| 109 | #######################################
|
|---|
| 110 |
|
|---|
| 111 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 112 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 113 |
|
|---|
| 114 | If you do report problems then please try to send high quality
|
|---|
| 115 | feedback. If you don't provide vital information to help us track down
|
|---|
| 116 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 117 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 118 | database (https://bugzilla.samba.org/).
|
|---|
| 119 |
|
|---|
| 120 |
|
|---|
| 121 | ======================================================================
|
|---|
| 122 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 123 | == The Samba Team
|
|---|
| 124 | ======================================================================
|
|---|
| 125 |
|
|---|
| 126 |
|
|---|
| 127 | ----------------------------------------------------------------------
|
|---|
| 128 |
|
|---|
| 129 |
|
|---|
| 130 | ==============================
|
|---|
| 131 | Release Notes for Samba 3.6.23
|
|---|
| 132 | March 11, 2014
|
|---|
| 133 | ==============================
|
|---|
| 134 |
|
|---|
| 135 |
|
|---|
| 136 | This is a security release in order to address
|
|---|
| 137 | CVE-2013-4496 (Password lockout not enforced for SAMR password changes).
|
|---|
| 138 |
|
|---|
| 139 | o CVE-2013-4496:
|
|---|
| 140 | Samba versions 3.4.0 and above allow the administrator to implement
|
|---|
| 141 | locking out Samba accounts after a number of bad password attempts.
|
|---|
| 142 |
|
|---|
| 143 | However, all released versions of Samba did not implement this check for
|
|---|
| 144 | password changes, such as are available over multiple SAMR and RAP
|
|---|
| 145 | interfaces, allowing password guessing attacks.
|
|---|
| 146 |
|
|---|
| 147 |
|
|---|
| 148 | Changes since 3.6.22:
|
|---|
| 149 | ---------------------
|
|---|
| 150 |
|
|---|
| 151 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 152 | * BUG 10245: CVE-2013-4496: Enforce password lockout for SAMR password
|
|---|
| 153 | changes.
|
|---|
| 154 |
|
|---|
| 155 |
|
|---|
| 156 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 157 | * BUG 10245: CVE-2013-4496: Enforce password lockout for SAMR password
|
|---|
| 158 | changes.
|
|---|
| 159 |
|
|---|
| 160 |
|
|---|
| 161 | ######################################################################
|
|---|
| 162 | Reporting bugs & Development Discussion
|
|---|
| 163 | #######################################
|
|---|
| 164 |
|
|---|
| 165 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 166 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 167 |
|
|---|
| 168 | If you do report problems then please try to send high quality
|
|---|
| 169 | feedback. If you don't provide vital information to help us track down
|
|---|
| 170 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 171 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 172 | database (https://bugzilla.samba.org/).
|
|---|
| 173 |
|
|---|
| 174 |
|
|---|
| 175 | ======================================================================
|
|---|
| 176 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 177 | == The Samba Team
|
|---|
| 178 | ======================================================================
|
|---|
| 179 |
|
|---|
| 180 |
|
|---|
| 181 | ----------------------------------------------------------------------
|
|---|
| 182 |
|
|---|
| 183 |
|
|---|
| 184 | ==============================
|
|---|
| 185 | Release Notes for Samba 3.6.22
|
|---|
| 186 | December 9, 2013
|
|---|
| 187 | ==============================
|
|---|
| 188 |
|
|---|
| 189 |
|
|---|
| 190 | This is a security release in order to address
|
|---|
| 191 | CVE-2013-4408 (DCE-RPC fragment length field is incorrectly checked) and
|
|---|
| 192 | CVE-2012-6150 (pam_winbind login without require_membership_of restrictions).
|
|---|
| 193 |
|
|---|
| 194 | o CVE-2013-4408:
|
|---|
| 195 | Samba versions 3.4.0 and above (versions 3.4.0 - 3.4.17, 3.5.0 -
|
|---|
| 196 | 3.5.22, 3.6.0 - 3.6.21, 4.0.0 - 4.0.12 and including 4.1.2) are
|
|---|
| 197 | vulnerable to buffer overrun exploits in the client processing of
|
|---|
| 198 | DCE-RPC packets. This is due to incorrect checking of the DCE-RPC
|
|---|
| 199 | fragment length in the client code.
|
|---|
| 200 |
|
|---|
| 201 | This is a critical vulnerability as the DCE-RPC client code is part of
|
|---|
| 202 | the winbindd authentication and identity mapping daemon, which is
|
|---|
| 203 | commonly configured as part of many server installations (when joined
|
|---|
| 204 | to an Active Directory Domain). A malicious Active Directory Domain
|
|---|
| 205 | Controller or man-in-the-middle attacker impersonating an Active
|
|---|
| 206 | Directory Domain Controller could achieve root-level access by
|
|---|
| 207 | compromising the winbindd process.
|
|---|
| 208 |
|
|---|
| 209 | Samba server versions 3.4.0 - 3.4.17 and versions 3.5.0 - 3.5.22 are
|
|---|
| 210 | also vulnerable to a denial of service attack (server crash) due to a
|
|---|
| 211 | similar error in the server code of those versions.
|
|---|
| 212 |
|
|---|
| 213 | Samba server versions 3.6.0 and above (including all 3.6.x versions,
|
|---|
| 214 | all 4.0.x versions and 4.1.x) are not vulnerable to this problem.
|
|---|
| 215 |
|
|---|
| 216 | In addition range checks were missing on arguments returned from calls
|
|---|
| 217 | to the DCE-RPC functions LookupSids (lsa and samr), LookupNames (lsa and samr)
|
|---|
| 218 | and LookupRids (samr) which could also cause similar problems.
|
|---|
| 219 |
|
|---|
| 220 | As this was found during an internal audit of the Samba code there are
|
|---|
| 221 | no currently known exploits for this problem (as of December 9th 2013).
|
|---|
| 222 |
|
|---|
| 223 | o CVE-2012-6150:
|
|---|
| 224 | Winbind allows for the further restriction of authenticated PAM logins using
|
|---|
| 225 | the require_membership_of parameter. System administrators may specify a list
|
|---|
| 226 | of SIDs or groups for which an authenticated user must be a member of. If an
|
|---|
| 227 | authenticated user does not belong to any of the entries, then login should
|
|---|
| 228 | fail. Invalid group name entries are ignored.
|
|---|
| 229 |
|
|---|
| 230 | Samba versions 3.3.10, 3.4.3, 3.5.0 and later incorrectly allow login from
|
|---|
| 231 | authenticated users if the require_membership_of parameter specifies only
|
|---|
| 232 | invalid group names.
|
|---|
| 233 |
|
|---|
| 234 | This is a vulnerability with low impact. All require_membership_of group
|
|---|
| 235 | names must be invalid for this bug to be encountered.
|
|---|
| 236 |
|
|---|
| 237 |
|
|---|
| 238 | Changes since 3.6.21:
|
|---|
| 239 | ---------------------
|
|---|
| 240 |
|
|---|
| 241 | o Jeremy Allison <jra@samba.org>
|
|---|
| 242 | * BUG 10185: CVE-2013-4408: Correctly check DCE-RPC fragment length field.
|
|---|
| 243 |
|
|---|
| 244 |
|
|---|
| 245 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 246 | * BUG 10185: CVE-2013-4408: Correctly check DCE-RPC fragment length field.
|
|---|
| 247 |
|
|---|
| 248 |
|
|---|
| 249 | o Noel Power <noel.power@suse.com>
|
|---|
| 250 | * BUGs 10300, 10306: CVE-2012-6150: Fail authentication if user isn't
|
|---|
| 251 | member of *any* require_membership_of specified groups.
|
|---|
| 252 |
|
|---|
| 253 |
|
|---|
| 254 | ######################################################################
|
|---|
| 255 | Reporting bugs & Development Discussion
|
|---|
| 256 | #######################################
|
|---|
| 257 |
|
|---|
| 258 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 259 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 260 |
|
|---|
| 261 | If you do report problems then please try to send high quality
|
|---|
| 262 | feedback. If you don't provide vital information to help us track down
|
|---|
| 263 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 264 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 265 | database (https://bugzilla.samba.org/).
|
|---|
| 266 |
|
|---|
| 267 |
|
|---|
| 268 | ======================================================================
|
|---|
| 269 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 270 | == The Samba Team
|
|---|
| 271 | ======================================================================
|
|---|
| 272 |
|
|---|
| 273 |
|
|---|
| 274 | ----------------------------------------------------------------------
|
|---|
| 275 |
|
|---|
| 276 |
|
|---|
| 277 | ==============================
|
|---|
| 278 | Release Notes for Samba 3.6.21
|
|---|
| 279 | November 29, 2013
|
|---|
| 280 | ==============================
|
|---|
| 281 |
|
|---|
| 282 |
|
|---|
| 283 | This is is the latest stable release of Samba 3.6.
|
|---|
| 284 |
|
|---|
| 285 |
|
|---|
| 286 | Changes since 3.6.20:
|
|---|
| 287 | ---------------------
|
|---|
| 288 |
|
|---|
| 289 | o Jeremy Allison <jra@samba.org>
|
|---|
| 290 | * BUG 10139: Valid utf8 filenames cause "invalid conversion error"
|
|---|
| 291 | messages.
|
|---|
| 292 | * BUG 10167: s3-smb2 server: smb2 breaks "smb encryption = mandatory".
|
|---|
| 293 | * BUG 10187: Missing talloc_free can leak stackframe in error path.
|
|---|
| 294 | * BUG 10247: xattr: Fix listing EAs on *BSD for non-root users.
|
|---|
| 295 |
|
|---|
| 296 |
|
|---|
| 297 | o Korobkin <korobkin+samba@gmail.com>
|
|---|
| 298 | * BUG 10118: Raise debug level for being unable to open a printer.
|
|---|
| 299 |
|
|---|
| 300 |
|
|---|
| 301 | o Volker Lendecke <vl@samba.org>
|
|---|
| 302 | * BUG 10195: nsswitch: Fix short writes in winbind_write_sock.
|
|---|
| 303 |
|
|---|
| 304 |
|
|---|
| 305 | o Arvid Requate <requate@univention.de>
|
|---|
| 306 | * BUG 10267: Fix Windows 8 printing via local printer drivers.
|
|---|
| 307 |
|
|---|
| 308 |
|
|---|
| 309 | o Andreas Schneider <asn@cryptomilk.org>
|
|---|
| 310 | * BUG 10194: Make offline logon cache updating for cross child domain
|
|---|
| 311 | group membership.
|
|---|
| 312 |
|
|---|
| 313 |
|
|---|
| 314 | ######################################################################
|
|---|
| 315 | Reporting bugs & Development Discussion
|
|---|
| 316 | #######################################
|
|---|
| 317 |
|
|---|
| 318 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 319 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 320 |
|
|---|
| 321 | If you do report problems then please try to send high quality
|
|---|
| 322 | feedback. If you don't provide vital information to help us track down
|
|---|
| 323 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 324 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 325 | database (https://bugzilla.samba.org/).
|
|---|
| 326 |
|
|---|
| 327 |
|
|---|
| 328 | ======================================================================
|
|---|
| 329 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 330 | == The Samba Team
|
|---|
| 331 | ======================================================================
|
|---|
| 332 |
|
|---|
| 333 |
|
|---|
| 334 | ----------------------------------------------------------------------
|
|---|
| 335 |
|
|---|
| 336 |
|
|---|
| 337 | ==============================
|
|---|
| 338 | Release Notes for Samba 3.6.20
|
|---|
| 339 | November 11, 2013
|
|---|
| 340 | ==============================
|
|---|
| 341 |
|
|---|
| 342 |
|
|---|
| 343 | This is a security release in order to address
|
|---|
| 344 | CVE-2013-4475 (ACLs are not checked on opening an alternate
|
|---|
| 345 | data stream on a file or directory).
|
|---|
| 346 |
|
|---|
| 347 | o CVE-2013-4475:
|
|---|
| 348 | Samba versions 3.2.0 and above (all versions of 3.2.x, 3.3.x,
|
|---|
| 349 | 3.4.x, 3.5.x, 3.6.x, 4.0.x and 4.1.x) do not check the underlying
|
|---|
| 350 | file or directory ACL when opening an alternate data stream.
|
|---|
| 351 |
|
|---|
| 352 | According to the SMB1 and SMB2+ protocols the ACL on an underlying
|
|---|
| 353 | file or directory should control what access is allowed to alternate
|
|---|
| 354 | data streams that are associated with the file or directory.
|
|---|
| 355 |
|
|---|
| 356 | By default no version of Samba supports alternate data streams
|
|---|
| 357 | on files or directories.
|
|---|
| 358 |
|
|---|
| 359 | Samba can be configured to support alternate data streams by loading
|
|---|
| 360 | either one of two virtual file system modues (VFS) vfs_streams_depot or
|
|---|
| 361 | vfs_streams_xattr supplied with Samba, so this bug only affects Samba
|
|---|
| 362 | servers configured this way.
|
|---|
| 363 |
|
|---|
| 364 | To determine if your server is vulnerable, check for the strings
|
|---|
| 365 | "streams_depot" or "streams_xattr" inside your smb.conf configuration
|
|---|
| 366 | file.
|
|---|
| 367 |
|
|---|
| 368 |
|
|---|
| 369 | Changes since 3.6.19:
|
|---|
| 370 | ---------------------
|
|---|
| 371 |
|
|---|
| 372 | o Jeremy Allison <jra@samba.org>
|
|---|
| 373 | * BUGs 10234 + 10229: CVE-2013-4475: Fix access check verification on stream
|
|---|
| 374 | files.
|
|---|
| 375 |
|
|---|
| 376 |
|
|---|
| 377 | ######################################################################
|
|---|
| 378 | Reporting bugs & Development Discussion
|
|---|
| 379 | #######################################
|
|---|
| 380 |
|
|---|
| 381 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 382 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 383 |
|
|---|
| 384 | If you do report problems then please try to send high quality
|
|---|
| 385 | feedback. If you don't provide vital information to help us track down
|
|---|
| 386 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 387 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 388 | database (https://bugzilla.samba.org/).
|
|---|
| 389 |
|
|---|
| 390 |
|
|---|
| 391 | ======================================================================
|
|---|
| 392 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 393 | == The Samba Team
|
|---|
| 394 | ======================================================================
|
|---|
| 395 |
|
|---|
| 396 |
|
|---|
| 397 | ----------------------------------------------------------------------
|
|---|
| 398 |
|
|---|
| 399 |
|
|---|
| 400 | ==============================
|
|---|
| 401 | Release Notes for Samba 3.6.19
|
|---|
| 402 | September 25, 2013
|
|---|
| 403 | ==============================
|
|---|
| 404 |
|
|---|
| 405 |
|
|---|
| 406 | This is is the latest maintenance release of Samba 3.6.
|
|---|
| 407 |
|
|---|
| 408 | Please note that this will probably be the last maintenance release
|
|---|
| 409 | of the Samba 3.6 release series. With the release of Samba 4.1.0, the
|
|---|
| 410 | 3.6 release series will be turned into the "security fixes only" mode.
|
|---|
| 411 |
|
|---|
| 412 |
|
|---|
| 413 | Changes since 3.6.18:
|
|---|
| 414 | ---------------------
|
|---|
| 415 |
|
|---|
| 416 | o Jeremy Allison <jra@samba.org>
|
|---|
| 417 | * BUG 5917: Make Samba work on site with Read Only Domain Controller.
|
|---|
| 418 |
|
|---|
| 419 |
|
|---|
| 420 | o Christian Ambach <ambi@samba.org>
|
|---|
| 421 | * BUG 8955: NetrServerPasswordSet2 timeout is too short.
|
|---|
| 422 |
|
|---|
| 423 |
|
|---|
| 424 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 425 | * BUG 9899: Fix fallback to ncacn_np in cm_connect_lsat().
|
|---|
| 426 | * BUG 9615: Fix fallback to ncacn_np in cm_connect_lsat().
|
|---|
| 427 | * BUG 10127: Fix 'smbstatus' as non-root user.
|
|---|
| 428 |
|
|---|
| 429 |
|
|---|
| 430 | o Volker Lendecke <vl@samba.org>
|
|---|
| 431 | * BUG 8955: Give machine password changes 10 minutes of time.
|
|---|
| 432 | * BUG 10106: Honour output buffer length set by the client for SMB2 GetInfo
|
|---|
| 433 | requests.
|
|---|
| 434 | * BUG 10114: Handle Dropbox (write-only-directory) case correctly in
|
|---|
| 435 | pathname lookup.
|
|---|
| 436 |
|
|---|
| 437 |
|
|---|
| 438 | o Karolin Seeger <kseeger@samba.org>
|
|---|
| 439 | * BUG 10076: Fix variable list in man vfs_crossrename.
|
|---|
| 440 |
|
|---|
| 441 |
|
|---|
| 442 | o Andreas Schneider <asn@samba.org>
|
|---|
| 443 | * BUG 9994: s3-winbind: Do not delete an existing valid credential cache.
|
|---|
| 444 | * BUG 10073: 'net ads join': Fix segmentation fault in
|
|---|
| 445 | create_local_private_krb5_conf_for_domain.
|
|---|
| 446 |
|
|---|
| 447 |
|
|---|
| 448 | o Richard Sharpe <realrichardsharpe@gmail.com>
|
|---|
| 449 | * BUG 10097: MacOSX 10.9 will not follow path-based DFS referrals handed
|
|---|
| 450 | out by Samba.
|
|---|
| 451 |
|
|---|
| 452 |
|
|---|
| 453 | ######################################################################
|
|---|
| 454 | Reporting bugs & Development Discussion
|
|---|
| 455 | #######################################
|
|---|
| 456 |
|
|---|
| 457 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 458 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 459 |
|
|---|
| 460 | If you do report problems then please try to send high quality
|
|---|
| 461 | feedback. If you don't provide vital information to help us track down
|
|---|
| 462 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 463 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 464 | database (https://bugzilla.samba.org/).
|
|---|
| 465 |
|
|---|
| 466 |
|
|---|
| 467 | ======================================================================
|
|---|
| 468 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 469 | == The Samba Team
|
|---|
| 470 | ======================================================================
|
|---|
| 471 |
|
|---|
| 472 |
|
|---|
| 473 | ----------------------------------------------------------------------
|
|---|
| 474 |
|
|---|
| 475 |
|
|---|
| 476 | ==============================
|
|---|
| 477 | Release Notes for Samba 3.6.18
|
|---|
| 478 | August 14, 2013
|
|---|
| 479 | ==============================
|
|---|
| 480 |
|
|---|
| 481 |
|
|---|
| 482 | This is is the latest stable release of Samba 3.6.
|
|---|
| 483 |
|
|---|
| 484 |
|
|---|
| 485 | Changes since 3.6.17:
|
|---|
| 486 | ---------------------
|
|---|
| 487 |
|
|---|
| 488 | o Jeremy Allison <jra@samba.org>
|
|---|
| 489 | * BUG 9777: vfs_dirsort uses non-stackable calls, dirfd(), malloc instead
|
|---|
| 490 | of talloc and doesn't cope with directories being modified whilst reading.
|
|---|
| 491 |
|
|---|
| 492 |
|
|---|
| 493 | o Gregor Beck <gbeck@sernet.de>
|
|---|
| 494 | * BUG 9678: Windows 8 Roaming profiles fail.
|
|---|
| 495 |
|
|---|
| 496 |
|
|---|
| 497 | o Alexander Bokovoy <ab@samba.org>
|
|---|
| 498 | * BUG 9636: Fix parsing linemarkers in preprocessor output.
|
|---|
| 499 |
|
|---|
| 500 |
|
|---|
| 501 | o Björn Jacke <bj@sernet.de>
|
|---|
| 502 | * BUG 9880: Use of wrong RFC2307 primary group field.
|
|---|
| 503 | * BUG 9983: Fix output of syslog-facility check.
|
|---|
| 504 |
|
|---|
| 505 |
|
|---|
| 506 | o Ralph Wuerthner <ralphw@de.ibm.com>
|
|---|
| 507 | * BUG 10064: Linux kernel oplock breaks can miss signals.
|
|---|
| 508 |
|
|---|
| 509 |
|
|---|
| 510 | ######################################################################
|
|---|
| 511 | Reporting bugs & Development Discussion
|
|---|
| 512 | #######################################
|
|---|
| 513 |
|
|---|
| 514 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 515 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 516 |
|
|---|
| 517 | If you do report problems then please try to send high quality
|
|---|
| 518 | feedback. If you don't provide vital information to help us track down
|
|---|
| 519 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 520 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 521 | database (https://bugzilla.samba.org/).
|
|---|
| 522 |
|
|---|
| 523 |
|
|---|
| 524 | ======================================================================
|
|---|
| 525 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 526 | == The Samba Team
|
|---|
| 527 | ======================================================================
|
|---|
| 528 |
|
|---|
| 529 |
|
|---|
| 530 | ----------------------------------------------------------------------
|
|---|
| 531 |
|
|---|
| 532 |
|
|---|
| 533 | ==============================
|
|---|
| 534 | Release Notes for Samba 3.6.17
|
|---|
| 535 | August 05, 2013
|
|---|
| 536 | ==============================
|
|---|
| 537 |
|
|---|
| 538 |
|
|---|
| 539 | This is a security release in order to address
|
|---|
| 540 | CVE-2013-4124 (Missing integer wrap protection in EA list reading can cause
|
|---|
| 541 | server to loop with DOS).
|
|---|
| 542 |
|
|---|
| 543 | o CVE-2013-4124:
|
|---|
| 544 | All current released versions of Samba are vulnerable to a denial of
|
|---|
| 545 | service on an authenticated or guest connection. A malformed packet
|
|---|
| 546 | can cause the smbd server to loop the CPU performing memory
|
|---|
| 547 | allocations and preventing any further service.
|
|---|
| 548 |
|
|---|
| 549 | A connection to a file share, or a local account is needed to exploit
|
|---|
| 550 | this problem, either authenticated or unauthenticated if guest
|
|---|
| 551 | connections are allowed.
|
|---|
| 552 |
|
|---|
| 553 | This flaw is not exploitable beyond causing the code to loop
|
|---|
| 554 | allocating memory, which may cause the machine to exceed memory
|
|---|
| 555 | limits.
|
|---|
| 556 |
|
|---|
| 557 |
|
|---|
| 558 | Changes since 3.6.16:
|
|---|
| 559 | ---------------------
|
|---|
| 560 |
|
|---|
| 561 | o Jeremy Allison <jra@samba.org>
|
|---|
| 562 | * BUG 10010: CVE-2013-4124: Missing integer wrap protection in EA list
|
|---|
| 563 | reading can cause server to loop with DOS.
|
|---|
| 564 |
|
|---|
| 565 |
|
|---|
| 566 | ######################################################################
|
|---|
| 567 | Reporting bugs & Development Discussion
|
|---|
| 568 | #######################################
|
|---|
| 569 |
|
|---|
| 570 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 571 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 572 |
|
|---|
| 573 | If you do report problems then please try to send high quality
|
|---|
| 574 | feedback. If you don't provide vital information to help us track down
|
|---|
| 575 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 576 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 577 | database (https://bugzilla.samba.org/).
|
|---|
| 578 |
|
|---|
| 579 |
|
|---|
| 580 | ======================================================================
|
|---|
| 581 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 582 | == The Samba Team
|
|---|
| 583 | ======================================================================
|
|---|
| 584 |
|
|---|
| 585 |
|
|---|
| 586 | ----------------------------------------------------------------------
|
|---|
| 587 |
|
|---|
| 588 |
|
|---|
| 589 | ==============================
|
|---|
| 590 | Release Notes for Samba 3.6.16
|
|---|
| 591 | June 19, 2013
|
|---|
| 592 | ==============================
|
|---|
| 593 |
|
|---|
| 594 |
|
|---|
| 595 | This is is the latest stable release of Samba 3.6.
|
|---|
| 596 |
|
|---|
| 597 | Major enhancements in Samba 3.6.16 include:
|
|---|
| 598 |
|
|---|
| 599 | o Fix crash bug during Win8 sync (bug #9822).
|
|---|
| 600 | o Properly handle Oplock breaks in compound requests (bug #9722).
|
|---|
| 601 |
|
|---|
| 602 |
|
|---|
| 603 | Changes since 3.6.15:
|
|---|
| 604 | ---------------------
|
|---|
| 605 |
|
|---|
| 606 | o Michael Adam <obnox@samba.org>
|
|---|
| 607 | * BUG 9881: Link dbwrap_tool and dbwrap_torture against libtevent.
|
|---|
| 608 |
|
|---|
| 609 |
|
|---|
| 610 | o Jeremy Allison <jra@samba.org>
|
|---|
| 611 | * BUG 9722: Properly handle Oplock breaks in compound requests.
|
|---|
| 612 | * BUG 9822: Fix crash bug during Win8 sync.
|
|---|
| 613 |
|
|---|
| 614 |
|
|---|
| 615 | o Anand Avati <avati@redhat.com>
|
|---|
| 616 | * BUG 9927: errno gets overwritten in call to check_parent_exists().
|
|---|
| 617 |
|
|---|
| 618 |
|
|---|
| 619 | o David Disseldorp <ddiss@samba.org>
|
|---|
| 620 | * BUG 8997: Change libreplace GPL source to LGPL.
|
|---|
| 621 | * BUG 9900: is_printer_published GUID retrieval.
|
|---|
| 622 |
|
|---|
| 623 |
|
|---|
| 624 | o Peng Haitao <penght@cn.fujitsu.com>
|
|---|
| 625 | * BUG 9941: Fix a bug of drvupgrade of smbcontrol.
|
|---|
| 626 |
|
|---|
| 627 |
|
|---|
| 628 | o Volker Lendecke <vl@samba.org>
|
|---|
| 629 | * BUG 9868: Don't know how to make LIBNDR_PREG_OBJ.
|
|---|
| 630 |
|
|---|
| 631 |
|
|---|
| 632 | o SATOH Fumiyasu <fumiyas@osstech.co.jp>
|
|---|
| 633 | * BUG 9688: Remove "experimental" label on "max protocol=SMB2" parameter.
|
|---|
| 634 |
|
|---|
| 635 |
|
|---|
| 636 | o Andreas Schneider <asn@samba.org>
|
|---|
| 637 | * BUG 9881: Check for system libtevent.
|
|---|
| 638 |
|
|---|
| 639 |
|
|---|
| 640 | ######################################################################
|
|---|
| 641 | Reporting bugs & Development Discussion
|
|---|
| 642 | #######################################
|
|---|
| 643 |
|
|---|
| 644 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 645 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 646 |
|
|---|
| 647 | If you do report problems then please try to send high quality
|
|---|
| 648 | feedback. If you don't provide vital information to help us track down
|
|---|
| 649 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 650 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 651 | database (https://bugzilla.samba.org/).
|
|---|
| 652 |
|
|---|
| 653 |
|
|---|
| 654 | ----------------------------------------------------------------------
|
|---|
| 655 |
|
|---|
| 656 |
|
|---|
| 657 | ==============================
|
|---|
| 658 | Release Notes for Samba 3.6.15
|
|---|
| 659 | May 08, 2013
|
|---|
| 660 | ==============================
|
|---|
| 661 |
|
|---|
| 662 |
|
|---|
| 663 | This is is the latest stable release of Samba 3.6.
|
|---|
| 664 |
|
|---|
| 665 | Major enhancements in Samba 3.6.15 include:
|
|---|
| 666 |
|
|---|
| 667 | o Fix crash bug in Winbind (bug #9854).
|
|---|
| 668 |
|
|---|
| 669 |
|
|---|
| 670 | Changes since 3.6.14:
|
|---|
| 671 | ---------------------
|
|---|
| 672 |
|
|---|
| 673 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 674 | * BUG 9746: Fix "guest ok", "force user" and "force group" for guest users.
|
|---|
| 675 |
|
|---|
| 676 |
|
|---|
| 677 | o David Disseldorp <ddiss@samba.org>
|
|---|
| 678 | * BUG 9830: Fix panic in nt_printer_publish_ads.
|
|---|
| 679 |
|
|---|
| 680 |
|
|---|
| 681 | o Volker Lendecke <vl@samba.org>
|
|---|
| 682 | * BUG 9854: Fix crash bug in Winbind.
|
|---|
| 683 |
|
|---|
| 684 |
|
|---|
| 685 | o Andreas Schneider <asn@samba.org>
|
|---|
| 686 | * BUG 9817: Fix 'map untrusted to domain' with NTLMv2.
|
|---|
| 687 |
|
|---|
| 688 |
|
|---|
| 689 | ######################################################################
|
|---|
| 690 | Reporting bugs & Development Discussion
|
|---|
| 691 | #######################################
|
|---|
| 692 |
|
|---|
| 693 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 694 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 695 |
|
|---|
| 696 | If you do report problems then please try to send high quality
|
|---|
| 697 | feedback. If you don't provide vital information to help us track down
|
|---|
| 698 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 699 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 700 | database (https://bugzilla.samba.org/).
|
|---|
| 701 |
|
|---|
| 702 |
|
|---|
| 703 | -----------------------------------------------------------------------
|
|---|
| 704 |
|
|---|
| 705 |
|
|---|
| 706 | ==============================
|
|---|
| 707 | Release Notes for Samba 3.6.14
|
|---|
| 708 | April 29, 2013
|
|---|
| 709 | ==============================
|
|---|
| 710 |
|
|---|
| 711 |
|
|---|
| 712 | This is is the latest stable release of Samba 3.6.
|
|---|
| 713 |
|
|---|
| 714 | Major enhancements in Samba 3.6.14 include:
|
|---|
| 715 |
|
|---|
| 716 | o Certain xattrs cause Windows error 0x800700FF (bug #9130).
|
|---|
| 717 |
|
|---|
| 718 | Changes since 3.6.13:
|
|---|
| 719 | ---------------------
|
|---|
| 720 |
|
|---|
| 721 | o Jeremy Allison <jra@samba.org>
|
|---|
| 722 | * BUG 9130: Certain xattrs cause Windows error 0x800700FF.
|
|---|
| 723 | * BUG 9724: Use is_encrypted_packet() function correctly inside server.
|
|---|
| 724 | * BUG 9733: Fix 'smbcontrol close-share' is not working.
|
|---|
| 725 | * BUG 9747: Make sure that we only propogate the INHERITED flag when we are
|
|---|
| 726 | allowed to.
|
|---|
| 727 | * BUG 9748: Remove unneeded fstat system call from hot read path.
|
|---|
| 728 | * BUG 9811: Fix bug in old create temp SMB request. Only use VFS functions.
|
|---|
| 729 |
|
|---|
| 730 |
|
|---|
| 731 | o David Disseldorp <ddiss@samba.org>
|
|---|
| 732 | * BUG 9650: New or deleted CUPS printerqueues are not recognized by Samba.
|
|---|
| 733 | * BUG 9807: wbinfo: Fix segfault in wbinfo_pam_logon.
|
|---|
| 734 |
|
|---|
| 735 |
|
|---|
| 736 | o Volker Lendecke <vl@samba.org>
|
|---|
| 737 | * BUG 9727: wkssvc: Fix NULL pointer dereference.
|
|---|
| 738 | * BUG 9736: smbd: Tune "dir" a bit.
|
|---|
| 739 | * BUG 9775: Fix segfault for "artificial" conn_structs.
|
|---|
| 740 | * BUG 9809: RHEL SPEC: Package dbwrap_tool man page.
|
|---|
| 741 |
|
|---|
| 742 |
|
|---|
| 743 | o Andreas Schneider <asn@samba.org>
|
|---|
| 744 | * BUG 9139: Fix the username map optimization.
|
|---|
| 745 | * BUG 9699: Fix adding case sensitive spn.
|
|---|
| 746 | * BUG 9723: Add a tool to migrate latin1 printing tdbs to registry.
|
|---|
| 747 | * BUG 9735: Fix Winbind separator in upn to username conversion.
|
|---|
| 748 | * BUG 9766: Cache name_to_sid/sid_to_name correctly.
|
|---|
| 749 |
|
|---|
| 750 |
|
|---|
| 751 | Note about upgrading from older versions:
|
|---|
| 752 | -----------------------------------------
|
|---|
| 753 |
|
|---|
| 754 | It is still the case that there are printing tdbs (ntprinting.tdb, ntforms.tdb,
|
|---|
| 755 | ntdrivers.tdb) which are in latin1 or other encodings. When updating from
|
|---|
| 756 | Samba 3.5 or earlier to Samba 3.6 or 4.0 these tdbs need to be migrated to our
|
|---|
| 757 | new registry based printing management. This means during the migration we
|
|---|
| 758 | also need to do charset conversion. This can only been done manually cause we don't
|
|---|
| 759 | know in which encoding the tdb is. You have to specify the correct code page
|
|---|
| 760 | for the conversion, see iconv -l and Wikipedia [1] for the available codepages.
|
|---|
| 761 | The mostly used one is Windows Latin1 which is CP1252.
|
|---|
| 762 |
|
|---|
| 763 | We've extended the 'net printing dump' and 'net printing migrate' commands to
|
|---|
| 764 | define the encoding of the tdb. So you can correctly view the tdb with:
|
|---|
| 765 |
|
|---|
| 766 | net printing dump encoding=CP1252 /path/to/ntprinters.tdb
|
|---|
| 767 |
|
|---|
| 768 | or migrate it with e.g.:
|
|---|
| 769 |
|
|---|
| 770 | net printing migrate encoding=CP1252 /path/to/ntprinters.tdb
|
|---|
| 771 |
|
|---|
| 772 | If you migrate printers we suggest you do it in the following order.
|
|---|
| 773 |
|
|---|
| 774 | ntforms.tdb
|
|---|
| 775 | ntdrivers.tdb
|
|---|
| 776 | ntprinting.tdb
|
|---|
| 777 |
|
|---|
| 778 | Don't forget to rename, move or delete these files in /var/lib/samba after the
|
|---|
| 779 | migration.
|
|---|
| 780 |
|
|---|
| 781 | [1] https://en.wikipedia.org/wiki/Code_page
|
|---|
| 782 |
|
|---|
| 783 |
|
|---|
| 784 | ######################################################################
|
|---|
| 785 | Reporting bugs & Development Discussion
|
|---|
| 786 | #######################################
|
|---|
| 787 |
|
|---|
| 788 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 789 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 790 |
|
|---|
| 791 | If you do report problems then please try to send high quality
|
|---|
| 792 | feedback. If you don't provide vital information to help us track down
|
|---|
| 793 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 794 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 795 | database (https://bugzilla.samba.org/).
|
|---|
| 796 |
|
|---|
| 797 |
|
|---|
| 798 | ======================================================================
|
|---|
| 799 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 800 | == The Samba Team
|
|---|
| 801 | ======================================================================
|
|---|
| 802 |
|
|---|
| 803 |
|
|---|
| 804 | ----------------------------------------------------------------------
|
|---|
| 805 |
|
|---|
| 806 |
|
|---|
| 807 | ==============================
|
|---|
| 808 | Release Notes for Samba 3.6.13
|
|---|
| 809 | March 18, 2013
|
|---|
| 810 | ==============================
|
|---|
| 811 |
|
|---|
| 812 |
|
|---|
| 813 | This is is the latest stable release of Samba 3.6.
|
|---|
| 814 |
|
|---|
| 815 | Major enhancements in Samba 3.6.13 include:
|
|---|
| 816 |
|
|---|
| 817 | o Fix two resource leaks in winbindd (bug #9684).
|
|---|
| 818 | o Unlink after open causes smbd to panic (bug #9571).
|
|---|
| 819 |
|
|---|
| 820 |
|
|---|
| 821 | Changes since 3.6.12:
|
|---|
| 822 | --------------------
|
|---|
| 823 |
|
|---|
| 824 | o Jeremy Allison <jra@samba.org>
|
|---|
| 825 | * BUG 9519: Samba returns unexpected error on SMB posix open.
|
|---|
| 826 | * BUG 9585: Samba 3.6.x not correctly signing any but the last response in
|
|---|
| 827 | a compound request/response.
|
|---|
| 828 | * BUG 9586: smbd[29175]: disk_free: sys_popen() failed" message logged in
|
|---|
| 829 | /var/log/messages many times.
|
|---|
| 830 | * BUG 9587: Archive flag is always set on directories.
|
|---|
| 831 | * BUG 9588: ACLs are not inherited to directories for DFS shares.
|
|---|
| 832 | * BUG 9637: Renaming directories as guest user in security share mode
|
|---|
| 833 | doesn't work.
|
|---|
| 834 |
|
|---|
| 835 |
|
|---|
| 836 | o Björn Baumbach <bb@sernet.de>
|
|---|
| 837 | * BUG 9568: Add dbwrap_tool.1 manual page.
|
|---|
| 838 |
|
|---|
| 839 |
|
|---|
| 840 | o Ira Cooper <ira@samba.org>
|
|---|
| 841 | * BUG 9646: Make SMB2_GETINFO multi-volume aware.
|
|---|
| 842 |
|
|---|
| 843 |
|
|---|
| 844 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 845 | * BUG 9474: Downgrade v4 printer driver requests to v3.
|
|---|
| 846 |
|
|---|
| 847 |
|
|---|
| 848 | o David Disseldorp <ddiss@samba.org>
|
|---|
| 849 | * BUG 9378: Add extra attributes for AD printer publishing.
|
|---|
| 850 | * BUG 9658: Fix initial large PAC sess setup response.
|
|---|
| 851 |
|
|---|
| 852 |
|
|---|
| 853 | o Björn Jacke <bj@sernet.de>
|
|---|
| 854 | * BUG 7825: Fix GNU ld version detection with
|
|---|
| 855 | old gcc releases.
|
|---|
| 856 |
|
|---|
| 857 |
|
|---|
| 858 | o Daniel Kobras <d.kobras@science-computing.de>
|
|---|
| 859 | * BUG 9039: 'map untrusted to domain' treats WORKSTATION as bogus domain.
|
|---|
| 860 |
|
|---|
| 861 |
|
|---|
| 862 | o Guenter Kukkukk <kukks@samba.org>
|
|---|
| 863 | * BUG 9701: Fix vfs_catia module.
|
|---|
| 864 |
|
|---|
| 865 |
|
|---|
| 866 | o Volker Lendecke <vl@samba.org>
|
|---|
| 867 | * BUG 9541: Add support for posix_openpt.
|
|---|
| 868 |
|
|---|
| 869 |
|
|---|
| 870 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 871 | * Bug 9625: wbcAuthenticateEx gives unix times.
|
|---|
| 872 |
|
|---|
| 873 |
|
|---|
| 874 | o Andreas Schneider <asn@samba.org>
|
|---|
| 875 | * BUG 9574: Fix a possible null pointer dereference in spoolss.
|
|---|
| 876 | * BUG 9684: Fix two resource leaks in winbindd.
|
|---|
| 877 | * BUG 9686: Fix a possible buffer overrun in pdb_smbpasswd.
|
|---|
| 878 |
|
|---|
| 879 |
|
|---|
| 880 | o Pavel Shilovsky <piastry@etersoft.ru>
|
|---|
| 881 | * Bug #9571: Unlink after open causes smbd to panic.
|
|---|
| 882 |
|
|---|
| 883 |
|
|---|
| 884 | ######################################################################
|
|---|
| 885 | Reporting bugs & Development Discussion
|
|---|
| 886 | #######################################
|
|---|
| 887 |
|
|---|
| 888 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 889 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 890 |
|
|---|
| 891 | If you do report problems then please try to send high quality
|
|---|
| 892 | feedback. If you don't provide vital information to help us track down
|
|---|
| 893 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 894 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 895 | database (https://bugzilla.samba.org/).
|
|---|
| 896 |
|
|---|
| 897 |
|
|---|
| 898 | ======================================================================
|
|---|
| 899 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 900 | == The Samba Team
|
|---|
| 901 | ======================================================================
|
|---|
| 902 |
|
|---|
| 903 |
|
|---|
| 904 | ----------------------------------------------------------------------
|
|---|
| 905 |
|
|---|
| 906 |
|
|---|
| 907 | ==============================
|
|---|
| 908 | Release Notes for Samba 3.6.12
|
|---|
| 909 | January 30, 2013
|
|---|
| 910 | ==============================
|
|---|
| 911 |
|
|---|
| 912 |
|
|---|
| 913 | This is a security release in order to address
|
|---|
| 914 | CVE-2013-0213 (Clickjacking issue in SWAT) and
|
|---|
| 915 | CVE-2013-0214 (Potential XSRF in SWAT).
|
|---|
| 916 |
|
|---|
| 917 | o CVE-2013-0213:
|
|---|
| 918 | All current released versions of Samba are vulnerable to clickjacking in the
|
|---|
| 919 | Samba Web Administration Tool (SWAT). When the SWAT pages are integrated into
|
|---|
| 920 | a malicious web page via a frame or iframe and then overlaid by other content,
|
|---|
| 921 | an attacker could trick an administrator to potentially change Samba settings.
|
|---|
| 922 |
|
|---|
| 923 | In order to be vulnerable, SWAT must have been installed and enabled
|
|---|
| 924 | either as a standalone server launched from inetd or xinetd, or as a
|
|---|
| 925 | CGI plugin to Apache. If SWAT has not been installed or enabled (which
|
|---|
| 926 | is the default install state for Samba) this advisory can be ignored.
|
|---|
| 927 |
|
|---|
| 928 | o CVE-2013-0214:
|
|---|
| 929 | All current released versions of Samba are vulnerable to a cross-site
|
|---|
| 930 | request forgery in the Samba Web Administration Tool (SWAT). By guessing a
|
|---|
| 931 | user's password and then tricking a user who is authenticated with SWAT into
|
|---|
| 932 | clicking a manipulated URL on a different web page, it is possible to manipulate
|
|---|
| 933 | SWAT.
|
|---|
| 934 |
|
|---|
| 935 | In order to be vulnerable, the attacker needs to know the victim's password.
|
|---|
| 936 | Additionally SWAT must have been installed and enabled either as a standalone
|
|---|
| 937 | server launched from inetd or xinetd, or as a CGI plugin to Apache. If SWAT has
|
|---|
| 938 | not been installed or enabled (which is the default install state for Samba)
|
|---|
| 939 | this advisory can be ignored.
|
|---|
| 940 |
|
|---|
| 941 |
|
|---|
| 942 | Changes since 3.6.11:
|
|---|
| 943 | --------------------
|
|---|
| 944 |
|
|---|
| 945 | o Kai Blin <kai@samba.org>
|
|---|
| 946 | * BUG 9576: CVE-2013-0213: Fix clickjacking issue in SWAT.
|
|---|
| 947 | * BUG 9577: CVE-2013-0214: Fix potential XSRF in SWAT.
|
|---|
| 948 |
|
|---|
| 949 |
|
|---|
| 950 | ######################################################################
|
|---|
| 951 | Reporting bugs & Development Discussion
|
|---|
| 952 | #######################################
|
|---|
| 953 |
|
|---|
| 954 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 955 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 956 |
|
|---|
| 957 | If you do report problems then please try to send high quality
|
|---|
| 958 | feedback. If you don't provide vital information to help us track down
|
|---|
| 959 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 960 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 961 | database (https://bugzilla.samba.org/).
|
|---|
| 962 |
|
|---|
| 963 |
|
|---|
| 964 | ======================================================================
|
|---|
| 965 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 966 | == The Samba Team
|
|---|
| 967 | ======================================================================
|
|---|
| 968 |
|
|---|
| 969 |
|
|---|
| 970 | ----------------------------------------------------------------------
|
|---|
| 971 |
|
|---|
| 972 |
|
|---|
| 973 | ==============================
|
|---|
| 974 | Release Notes for Samba 3.6.11
|
|---|
| 975 | January 21, 2013
|
|---|
| 976 | ==============================
|
|---|
| 977 |
|
|---|
| 978 |
|
|---|
| 979 | This is is the latest stable release of Samba 3.6.
|
|---|
| 980 |
|
|---|
| 981 | Major enhancements in Samba 3.6.11 include:
|
|---|
| 982 |
|
|---|
| 983 | o defer_open is triggered multiple times on the same request (bug #9196).
|
|---|
| 984 | o Fix SEGV wh_n using second vfs module (bug #9471).
|
|---|
| 985 |
|
|---|
| 986 |
|
|---|
| 987 | Changes since 3.6.10:
|
|---|
| 988 | --------------------
|
|---|
| 989 |
|
|---|
| 990 | o Jeremy Allison <jra@samba.org>
|
|---|
| 991 | * BUG 9196: defer_open is triggered multiple times on the same request.
|
|---|
| 992 | * BUG 9550: Mask off signals the correct way from the signal handler.
|
|---|
| 993 |
|
|---|
| 994 |
|
|---|
| 995 | o Björn Baumbach <bb@sernet.de>
|
|---|
| 996 | * BUG 9569: ntlm_auth.1: Fix format and make examples visible.
|
|---|
| 997 |
|
|---|
| 998 |
|
|---|
| 999 | o Tsukasa Hamano <hamano@osstech.co.jp>
|
|---|
| 1000 | * BUG 9471: Fix SEGV when using second vfs module.
|
|---|
| 1001 |
|
|---|
| 1002 |
|
|---|
| 1003 | o Volker Lendecke <vl@samba.org>
|
|---|
| 1004 | * BUG 9548: Correctly detect O_DIRECT.
|
|---|
| 1005 | * BUG 9546: Fix aio_suspend detection on FreeBSD.
|
|---|
| 1006 |
|
|---|
| 1007 |
|
|---|
| 1008 | ######################################################################
|
|---|
| 1009 | Reporting bugs & Development Discussion
|
|---|
| 1010 | #######################################
|
|---|
| 1011 |
|
|---|
| 1012 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1013 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1014 |
|
|---|
| 1015 | If you do report problems then please try to send high quality
|
|---|
| 1016 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1017 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1018 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1019 | database (https://bugzilla.samba.org/).
|
|---|
| 1020 |
|
|---|
| 1021 |
|
|---|
| 1022 | ======================================================================
|
|---|
| 1023 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1024 | == The Samba Team
|
|---|
| 1025 | ======================================================================
|
|---|
| 1026 |
|
|---|
| 1027 |
|
|---|
| 1028 | ----------------------------------------------------------------------
|
|---|
| 1029 |
|
|---|
| 1030 |
|
|---|
| 1031 | ==============================
|
|---|
| 1032 | Release Notes for Samba 3.6.10
|
|---|
| 1033 | December 10, 2012
|
|---|
| 1034 | ==============================
|
|---|
| 1035 |
|
|---|
| 1036 |
|
|---|
| 1037 | This is is the latest stable release of Samba 3.6.
|
|---|
| 1038 |
|
|---|
| 1039 | Major enhancements in Samba 3.6.10 include:
|
|---|
| 1040 |
|
|---|
| 1041 | o Respond correctly to FILE_STREAM_INFO requests (bug #9460).
|
|---|
| 1042 | o Fix segfault when "default devmode" is disabled (bug #9433).
|
|---|
| 1043 | o Fix segfaults in "log level = 10" on Solaris (bug #9390).
|
|---|
| 1044 |
|
|---|
| 1045 |
|
|---|
| 1046 | Changes since 3.6.9:
|
|---|
| 1047 | --------------------
|
|---|
| 1048 |
|
|---|
| 1049 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1050 | * BUG 9236: ACL masks incorrectly applied when setting ACLs.
|
|---|
| 1051 | * BUG 9374: Allow smb2.acls torture test to pass against smbd with a POSIX
|
|---|
| 1052 | ACLs backend.
|
|---|
| 1053 |
|
|---|
| 1054 |
|
|---|
| 1055 | o Björn Baumbach <bb@sernet.de>
|
|---|
| 1056 | * BUG 9345: Manpages: Fix use of <smbconfoption> tag.
|
|---|
| 1057 |
|
|---|
| 1058 |
|
|---|
| 1059 | o Sumit Bose <sbose@redhat.com>
|
|---|
| 1060 | * BUG 9367: Use work around for 'winbind use default domain' only if it is
|
|---|
| 1061 | set.
|
|---|
| 1062 |
|
|---|
| 1063 |
|
|---|
| 1064 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 1065 | * BUG 9272: 'net ads join' does not provide AES keys in host keytab.
|
|---|
| 1066 | * BUG 9426: Lookup nametype 0x20 in rpc_pipe_open_tcp_port().
|
|---|
| 1067 | * BUG 9439: Fix ncacn_ip_tcp reconnection code for lsa lookups.
|
|---|
| 1068 | * BUG 9451: Allow to force DNS updates using net.
|
|---|
| 1069 |
|
|---|
| 1070 |
|
|---|
| 1071 | o David Disseldorp <ddiss@samba.org>
|
|---|
| 1072 | * BUG 9433: Fix segfault when "default devmode" is disabled.
|
|---|
| 1073 |
|
|---|
| 1074 |
|
|---|
| 1075 | o Volker Lendecke <vl@samba.org>
|
|---|
| 1076 | * BUG 9359: Optimization needed for SMB2 performance sensitive workloads.
|
|---|
| 1077 | * BUG 9422: Large read requests cause server to issue malformed reply.
|
|---|
| 1078 | * BUG 9439: Fix ncacn_ip_tcp reconnection code for lsa lookups.
|
|---|
| 1079 |
|
|---|
| 1080 |
|
|---|
| 1081 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 1082 | * BUG 9209: Improve the smb2.create.blob test.
|
|---|
| 1083 | * BUG 9272: 'net ads join' does not provide AES keys in host keytab.
|
|---|
| 1084 | * BUG 9390: Fix segfaults in "log level = 10" on Solaris.
|
|---|
| 1085 | * BUG 9402: lib/addns doesn't work with a bind9 server.
|
|---|
| 1086 |
|
|---|
| 1087 |
|
|---|
| 1088 | o Matthieu Patou <mat@matws.net>
|
|---|
| 1089 | * BUG 9418: Fix MD5 detection in the autoconf build.
|
|---|
| 1090 |
|
|---|
| 1091 |
|
|---|
| 1092 | o Andreas Schneider <asn@samba.org>
|
|---|
| 1093 | * BUG 8564: Fix segfault in pam_sm_authenticate().
|
|---|
| 1094 | * BUG 9326: Fix 'net ads join' message for the dns domain.
|
|---|
| 1095 | * BUG 9386: Winbind: Failover if netlogon pipe is not available.
|
|---|
| 1096 | * BUG 9436: Fix leaking sockets of SMB connections to a DC.
|
|---|
| 1097 |
|
|---|
| 1098 |
|
|---|
| 1099 | o Richard Sharpe <realrichardsharpe@gmail.com>
|
|---|
| 1100 | * BUG 9460: Respond correctly to FILE_STREAM_INFO requests.
|
|---|
| 1101 |
|
|---|
| 1102 |
|
|---|
| 1103 | ######################################################################
|
|---|
| 1104 | Reporting bugs & Development Discussion
|
|---|
| 1105 | #######################################
|
|---|
| 1106 |
|
|---|
| 1107 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1108 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1109 |
|
|---|
| 1110 | If you do report problems then please try to send high quality
|
|---|
| 1111 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1112 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1113 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1114 | database (https://bugzilla.samba.org/).
|
|---|
| 1115 |
|
|---|
| 1116 |
|
|---|
| 1117 | ======================================================================
|
|---|
| 1118 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1119 | == The Samba Team
|
|---|
| 1120 | ======================================================================
|
|---|
| 1121 |
|
|---|
| 1122 |
|
|---|
| 1123 | ----------------------------------------------------------------------
|
|---|
| 1124 |
|
|---|
| 1125 |
|
|---|
| 1126 | =============================
|
|---|
| 1127 | Release Notes for Samba 3.6.9
|
|---|
| 1128 | October 29, 2012
|
|---|
| 1129 | =============================
|
|---|
| 1130 |
|
|---|
| 1131 |
|
|---|
| 1132 | This is is the latest stable release of Samba 3.6.
|
|---|
| 1133 |
|
|---|
| 1134 | Major enhancements in Samba 3.6.9 include:
|
|---|
| 1135 |
|
|---|
| 1136 | o When setting a non-default ACL, don't forget to apply masks to
|
|---|
| 1137 | SMB_ACL_USER and SMB_ACL_GROUP entries (bug #9236).
|
|---|
| 1138 | o Winbind can't fetch user or group info from AD via LDAP (bug #9147).
|
|---|
| 1139 | o Fix segfault in smbd if user specified ports out for range (bug #9218).
|
|---|
| 1140 |
|
|---|
| 1141 |
|
|---|
| 1142 | Changes since 3.6.8:
|
|---|
| 1143 | --------------------
|
|---|
| 1144 |
|
|---|
| 1145 | o Michael Adam <obnox@samba.org>
|
|---|
| 1146 | * BUG 9173: Make SMB2 compound request create/delete_on_close/close work as
|
|---|
| 1147 | Windows.
|
|---|
| 1148 |
|
|---|
| 1149 |
|
|---|
| 1150 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1151 | * BUG 8966: Fix 'net rpc share allowedusers' to work with 2008r2.
|
|---|
| 1152 | * BUG 9016: Connection to outbound trusted domain goes offline.
|
|---|
| 1153 | * BUG 9117: 'smbclient' can't connect to a Windows 7 server using NTLMv2.
|
|---|
| 1154 | * BUG 9147: Winbind can't fetch user or group info from AD via LDAP.
|
|---|
| 1155 | * BUG 9174: Empty SPNEGO packet can cause smbd to crash.
|
|---|
| 1156 | * BUG 9189: SMB2 Create doesn't return correct MAX ACCESS access mask in
|
|---|
| 1157 | blob.
|
|---|
| 1158 | * BUG 9209: Parse of invalid SMB2 create blob can cause smbd crash.
|
|---|
| 1159 | * BUG 9213: Bad ASN.1 NegTokenInit packet can cause invalid free.
|
|---|
| 1160 | * BUG 9222: Signing cannot be disabled for SMB2 by design, so fix the
|
|---|
| 1161 | documentation instead.
|
|---|
| 1162 | * BUG 9236: When setting a non-default ACL, don't forget to apply masks to
|
|---|
| 1163 | SMB_ACL_USER and SMB_ACL_GROUP entries.
|
|---|
| 1164 |
|
|---|
| 1165 |
|
|---|
| 1166 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 1167 | * BUG 8788: Initialise ticket to ensure we do not invalid memory.
|
|---|
| 1168 |
|
|---|
| 1169 |
|
|---|
| 1170 | o Ira Cooper <ira@samba.org>
|
|---|
| 1171 | * BUG 9173: Compound requests should continue processing.
|
|---|
| 1172 |
|
|---|
| 1173 |
|
|---|
| 1174 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 1175 | * BUG 9177: pam_winbind: Match more return codes when wbcGetPwnam has failed.
|
|---|
| 1176 |
|
|---|
| 1177 |
|
|---|
| 1178 | o Björn Jacke <bj@sernet.de>
|
|---|
| 1179 | * BUG 3272: quota: Don't force the block size to 512.
|
|---|
| 1180 | * BUG 8107: Add some includes for poll.h.
|
|---|
| 1181 | * BUG 8146: Fix wrong test == syntax in configure.
|
|---|
| 1182 | * BUG 8344: Fix --with(out)-sendfile-support option handling in autoconf.
|
|---|
| 1183 | * BUG 9172: Add quota support for gfs2.
|
|---|
| 1184 |
|
|---|
| 1185 |
|
|---|
| 1186 | o Volker Lendecke <vl@samba.org>
|
|---|
| 1187 | * BUG 9188: Fix crash bug in idmap_hash.
|
|---|
| 1188 | * BUG 9268: Make tdb robust against improper CLEAR_IF_FIRST restart.
|
|---|
| 1189 |
|
|---|
| 1190 |
|
|---|
| 1191 | o Luca Lorenzetto <lorenzetto-luca@ubuntu-it.org>
|
|---|
| 1192 | * BUG 9013: Fix crash on null pam change pw response.
|
|---|
| 1193 |
|
|---|
| 1194 |
|
|---|
| 1195 | o Vladimir Marek <Vladimir.Marek@Oracle.COM>
|
|---|
| 1196 | * BUG 9192: Fix service control for non-internal services.
|
|---|
| 1197 |
|
|---|
| 1198 |
|
|---|
| 1199 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 1200 | * BUG 9173: Make SMB2 compound request create/delete_on_close/close work as
|
|---|
| 1201 | Windows.
|
|---|
| 1202 | * BUG 9196: Don't take 'state->te' as indication for "was_deferred".
|
|---|
| 1203 | * BUG 9209: Fix unitialized padding in smb2_create_blob_push_one().
|
|---|
| 1204 |
|
|---|
| 1205 |
|
|---|
| 1206 | o Matthieu Patou <mat@matws.net>
|
|---|
| 1207 | * BUG 9259: lib-addns: ensure that allocated buffer are pre set to 0.
|
|---|
| 1208 |
|
|---|
| 1209 |
|
|---|
| 1210 | o Rusty Russell <rusty@rustcorp.com.au>
|
|---|
| 1211 | * BUG 9268: Make robust against shrinking tdbs.
|
|---|
| 1212 |
|
|---|
| 1213 |
|
|---|
| 1214 | o Joachim Schmitz <schmitz@hp.com>
|
|---|
| 1215 | * BUG 8107: Fix poll replacement to become a msleep replacement.
|
|---|
| 1216 |
|
|---|
| 1217 |
|
|---|
| 1218 | o Andreas Schneider <asn@samba.org>
|
|---|
| 1219 | * BUG 8632: Fix builtin forms order to match Windows again.
|
|---|
| 1220 | * BUG 8769: Fix RAW printing for normal users.
|
|---|
| 1221 | * BUG 9112: Increase debug level for info that the db is empty.
|
|---|
| 1222 | * BUG 9154: Open printers with the right access mask.
|
|---|
| 1223 | * BUG 9171: Remove non-existent option '-Y' from winbindd manpage.
|
|---|
| 1224 | * BUG 9218: Fix segfault in smbd if user specified ports out for range.
|
|---|
| 1225 | * BUG 9231: Fix NT_STATUS_IO_TIMEOUT during slow import of printers into
|
|---|
| 1226 | registry.
|
|---|
| 1227 | * BUG 9280: Add support for reloading systemd services.
|
|---|
| 1228 |
|
|---|
| 1229 |
|
|---|
| 1230 | o Karolin Seeger <kseeger@samba.org>
|
|---|
| 1231 | * BUG 9165: Fix makerpms.sh on RHEL.
|
|---|
| 1232 |
|
|---|
| 1233 |
|
|---|
| 1234 | ######################################################################
|
|---|
| 1235 | Reporting bugs & Development Discussion
|
|---|
| 1236 | #######################################
|
|---|
| 1237 |
|
|---|
| 1238 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1239 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1240 |
|
|---|
| 1241 | If you do report problems then please try to send high quality
|
|---|
| 1242 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1243 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1244 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1245 | database (https://bugzilla.samba.org/).
|
|---|
| 1246 |
|
|---|
| 1247 |
|
|---|
| 1248 | ======================================================================
|
|---|
| 1249 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1250 | == The Samba Team
|
|---|
| 1251 | ======================================================================
|
|---|
| 1252 |
|
|---|
| 1253 |
|
|---|
| 1254 | ----------------------------------------------------------------------
|
|---|
| 1255 |
|
|---|
| 1256 |
|
|---|
| 1257 | =============================
|
|---|
| 1258 | Release Notes for Samba 3.6.8
|
|---|
| 1259 | September 17, 2012
|
|---|
| 1260 | =============================
|
|---|
| 1261 |
|
|---|
| 1262 |
|
|---|
| 1263 | This is is the latest stable release of Samba 3.6.
|
|---|
| 1264 |
|
|---|
| 1265 | Major enhancements in Samba 3.6.8 include:
|
|---|
| 1266 |
|
|---|
| 1267 | o Fix crash bug in smbd caused by a blocking lock followed by
|
|---|
| 1268 | close (bug #9084).
|
|---|
| 1269 | o Fix Winbind panic if we couldn't find the domain (bug #9135).
|
|---|
| 1270 |
|
|---|
| 1271 |
|
|---|
| 1272 | Changes since 3.6.7:
|
|---|
| 1273 | --------------------
|
|---|
| 1274 |
|
|---|
| 1275 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1276 | * BUG 9058: Fix smbstatus code dump when a file entry has delete tokens.
|
|---|
| 1277 | * BUG 9098: Fix refreshing of Kerberos tickets in Winbind.
|
|---|
| 1278 | * BUG 9124: Fix setting of "inherited" bit on inherited ACE's.
|
|---|
| 1279 |
|
|---|
| 1280 |
|
|---|
| 1281 | o Christian Ambach <ambi@samba.org>
|
|---|
| 1282 | * BUG 9137: Make 'smbclient allinfo' show the snapshot list.
|
|---|
| 1283 |
|
|---|
| 1284 |
|
|---|
| 1285 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 1286 | * BUG 9066: "Domain Users" incorrectly added as additional group on domain
|
|---|
| 1287 | members.
|
|---|
| 1288 | * BUG 9067: Use correct RID for "Domain Guests" primary group.
|
|---|
| 1289 |
|
|---|
| 1290 |
|
|---|
| 1291 | o David Binderman <dcb314@hotmail.com>
|
|---|
| 1292 | * BUG 9065: Fix bad call to memcpy source3/registry/regfio.c.
|
|---|
| 1293 |
|
|---|
| 1294 |
|
|---|
| 1295 | o David Disseldorp <ddiss@samba.org>
|
|---|
| 1296 | * BUG 9123: Fix lprng job tracking errors.
|
|---|
| 1297 |
|
|---|
| 1298 |
|
|---|
| 1299 | o Salvador I. Gonzalez <sgonzalez@codejunkie.net>
|
|---|
| 1300 | * BUG 9088: Fix smbclient/tarmode panic when connecting to Windows 2000
|
|---|
| 1301 | clients.
|
|---|
| 1302 |
|
|---|
| 1303 |
|
|---|
| 1304 | o Hargagan <shargagan@novell.com>
|
|---|
| 1305 | * BUG 9085: Fix NMB registration for a duplicate workstation.
|
|---|
| 1306 |
|
|---|
| 1307 |
|
|---|
| 1308 | o Björn Jacke <bj@sernet.de>
|
|---|
| 1309 | * BUG 9037: Open and netbsd have the md5 symbols in libc.
|
|---|
| 1310 | * BUG 9144: Fix nfs quota support with Linux nfs4 mounts.
|
|---|
| 1311 |
|
|---|
| 1312 |
|
|---|
| 1313 | o Volker Lendecke <vl@samba.org>
|
|---|
| 1314 | * BUG 9037: Fix name clash in MD5 causing the "net ads join" to fail on
|
|---|
| 1315 | T4 (sun4v) systems on Solaris 10.
|
|---|
| 1316 | * BUG 9058: Backport FSCTL codes from master.
|
|---|
| 1317 | * BUG 9084: Fix crash bug in smbd caused by a blocking lock followed by
|
|---|
| 1318 | close.
|
|---|
| 1319 | * BUG 9150: Valid open requests can cause smbd assert due to incorrect
|
|---|
| 1320 | oplock handling on delete requests.
|
|---|
| 1321 |
|
|---|
| 1322 |
|
|---|
| 1323 | o Herb Lewis <hlewis@panasas.com>
|
|---|
| 1324 | * BUG 9104: Fix identification of idle clients in Winbind to avoid crashes
|
|---|
| 1325 | and NDR parsing errors.
|
|---|
| 1326 |
|
|---|
| 1327 |
|
|---|
| 1328 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 1329 | * BUG 9058: Fix segfault in smbstatus.
|
|---|
| 1330 |
|
|---|
| 1331 |
|
|---|
| 1332 | o Andreas Schneider <asn@samba.org>
|
|---|
| 1333 | * BUG 9111: Fix compilation with newer MIT Kerberos which hides internal
|
|---|
| 1334 | symbols.
|
|---|
| 1335 | * BUG 9112: Fix flooding the logs with records we don't find in pcap.
|
|---|
| 1336 | * BUG 9122: Initialize the print backend after we setup winreg.
|
|---|
| 1337 | * BUG 9135: Fix Winbind panic if we couldn't find the domain.
|
|---|
| 1338 |
|
|---|
| 1339 |
|
|---|
| 1340 | ######################################################################
|
|---|
| 1341 | Reporting bugs & Development Discussion
|
|---|
| 1342 | #######################################
|
|---|
| 1343 |
|
|---|
| 1344 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1345 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1346 |
|
|---|
| 1347 | If you do report problems then please try to send high quality
|
|---|
| 1348 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1349 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1350 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1351 | database (https://bugzilla.samba.org/).
|
|---|
| 1352 |
|
|---|
| 1353 |
|
|---|
| 1354 | ======================================================================
|
|---|
| 1355 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1356 | == The Samba Team
|
|---|
| 1357 | ======================================================================
|
|---|
| 1358 |
|
|---|
| 1359 |
|
|---|
| 1360 | ----------------------------------------------------------------------
|
|---|
| 1361 |
|
|---|
| 1362 |
|
|---|
| 1363 | =============================
|
|---|
| 1364 | Release Notes for Samba 3.6.7
|
|---|
| 1365 | August 6, 2012
|
|---|
| 1366 | =============================
|
|---|
| 1367 |
|
|---|
| 1368 |
|
|---|
| 1369 | This is is the latest stable release of Samba 3.6.
|
|---|
| 1370 |
|
|---|
| 1371 | Major enhancements in Samba 3.6.7 include:
|
|---|
| 1372 |
|
|---|
| 1373 | o Fix resolving our own "Domain Local" groups (bug #9052).
|
|---|
| 1374 | o Fix migrating printers while upgrading from 3.5.x (bug #9026).
|
|---|
| 1375 |
|
|---|
| 1376 |
|
|---|
| 1377 | Changes since 3.6.6:
|
|---|
| 1378 | --------------------
|
|---|
| 1379 |
|
|---|
| 1380 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1381 | * BUG 8974: Fix kernel oplocks when uid(file) != uid(process).
|
|---|
| 1382 | * BUG 8989: Send correct responses to NT Transact Secondary when no data
|
|---|
| 1383 | and no params for the Trans2 calls are set.
|
|---|
| 1384 | * BUG 9034: Fix typo in set_re_uid() call when USE_SETRESUID selected in
|
|---|
| 1385 | configure.
|
|---|
| 1386 |
|
|---|
| 1387 |
|
|---|
| 1388 | o David Binderman <dcb314@hotmail.com>
|
|---|
| 1389 | * BUG 9062: rpcclient: Fix bad call to data_blob_const.
|
|---|
| 1390 |
|
|---|
| 1391 |
|
|---|
| 1392 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 1393 | * BUG 9026: Fix migrating printers while upgrading from 3.5.x.
|
|---|
| 1394 |
|
|---|
| 1395 |
|
|---|
| 1396 | o David Disseldorp <ddiss@samba.org>
|
|---|
| 1397 | * BUG 8719: Printing fails in function cups_job_submit.
|
|---|
| 1398 | * BUG 9026: Fix migrating printers while upgrading from 3.5.x.
|
|---|
| 1399 |
|
|---|
| 1400 |
|
|---|
| 1401 | o Olaf Flebbe <o.flebbe@science-computing.de>
|
|---|
| 1402 | * BUG 8552: Correct documentation of "case sensitive".
|
|---|
| 1403 |
|
|---|
| 1404 |
|
|---|
| 1405 | o Björn Jacke <bj@sernet.de>
|
|---|
| 1406 | * BUG 8996: Fix build without ads support.
|
|---|
| 1407 |
|
|---|
| 1408 |
|
|---|
| 1409 | o Volker Lendecke <vl@samba.org>
|
|---|
| 1410 | * BUG 9003: Fix posix acl on gpfs.
|
|---|
| 1411 | * BUG 9040: Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED
|
|---|
| 1412 | in error instead ofNT_STATUS_FILE_LOCK_CONFLICT.
|
|---|
| 1413 |
|
|---|
| 1414 |
|
|---|
| 1415 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 1416 | * BUG 9002: Don't turn negative cache entries into valid idmappings.
|
|---|
| 1417 | * BUG 9022: Make vfs_gpfs less verbose in get/set_xattr functions.
|
|---|
| 1418 | * BUG 9057: Fix bugs in SMB2 credit handling code.
|
|---|
| 1419 |
|
|---|
| 1420 |
|
|---|
| 1421 | o Jiri Popelka <jpopelka@redhat.com>
|
|---|
| 1422 | * BUG 9055: Fix build against CUPS 1.6.
|
|---|
| 1423 |
|
|---|
| 1424 |
|
|---|
| 1425 | o Jura Sasek <jiri.sasek@oracle.com>
|
|---|
| 1426 | * BUG 9037: Fix 'net ads join' on T4 (sun4v) systems on Solaris 10.
|
|---|
| 1427 |
|
|---|
| 1428 |
|
|---|
| 1429 | o Andreas Schneider <asn@samba.org>
|
|---|
| 1430 | * BUG 9052: Fix resolving our own "Domain Local" groups.
|
|---|
| 1431 |
|
|---|
| 1432 |
|
|---|
| 1433 | ######################################################################
|
|---|
| 1434 | Reporting bugs & Development Discussion
|
|---|
| 1435 | #######################################
|
|---|
| 1436 |
|
|---|
| 1437 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1438 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1439 |
|
|---|
| 1440 | If you do report problems then please try to send high quality
|
|---|
| 1441 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1442 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1443 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1444 | database (https://bugzilla.samba.org/).
|
|---|
| 1445 |
|
|---|
| 1446 |
|
|---|
| 1447 | ======================================================================
|
|---|
| 1448 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1449 | == The Samba Team
|
|---|
| 1450 | ======================================================================
|
|---|
| 1451 |
|
|---|
| 1452 |
|
|---|
| 1453 | ----------------------------------------------------------------------
|
|---|
| 1454 |
|
|---|
| 1455 |
|
|---|
| 1456 | =============================
|
|---|
| 1457 | Release Notes for Samba 3.6.6
|
|---|
| 1458 | June 25, 2012
|
|---|
| 1459 | =============================
|
|---|
| 1460 |
|
|---|
| 1461 |
|
|---|
| 1462 | This is is the latest stable release of Samba 3.6.
|
|---|
| 1463 |
|
|---|
| 1464 | Major enhancements in Samba 3.6.6 include:
|
|---|
| 1465 |
|
|---|
| 1466 | o Fix possible memory leaks in the Samba master process (bug #8970).
|
|---|
| 1467 | o Fix uninitialized memory read in talloc_free().
|
|---|
| 1468 | o Fix joining of XP Pro workstations to 3.6 DCs (bug #8373).
|
|---|
| 1469 |
|
|---|
| 1470 |
|
|---|
| 1471 | Changes since 3.6.5:
|
|---|
| 1472 | --------------------
|
|---|
| 1473 |
|
|---|
| 1474 | o Michael Adam <obnox@samba.org>
|
|---|
| 1475 | * BUG 8738: SMB2 server will not release unused shares.
|
|---|
| 1476 | * BUG 8749: Sign non guest sessions in SessionSetup.
|
|---|
| 1477 | * BUG 8921: Fix race writing registry values.
|
|---|
| 1478 |
|
|---|
| 1479 |
|
|---|
| 1480 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1481 | * BUG 8373: Fix joining of XP Pro workstations to 3.6 DCs.
|
|---|
| 1482 | * BUG 8627: Fix crash bug in dns_create_probe when dns_create_update fails.
|
|---|
| 1483 | * BUG 8723: Add pthread-based aio VFS module.
|
|---|
| 1484 | * BUG 8784: When calculating the share security mask, take priviliges into
|
|---|
| 1485 | account for the connecting user.
|
|---|
| 1486 | * BUG 8811: sd_has_inheritable_components segfaults on an SD that
|
|---|
| 1487 | se_access_check accepts.
|
|---|
| 1488 | * BUG 8837: Fix crash in smbd when deleting directory and veto files are
|
|---|
| 1489 | enabled.
|
|---|
| 1490 | * BUG 8857: Setting traverse rights fails to enable directory traversal when
|
|---|
| 1491 | acl_xattr in use.
|
|---|
| 1492 | * BUG 8882: Broken processing of %U with vfs_full_audit when force user is
|
|---|
| 1493 | set.
|
|---|
| 1494 | * BUG 8897: Make winbind_krb5_locator not only returning one IP address.
|
|---|
| 1495 | * BUG 8910: resolve_ads() code can return zero addresses and miss valid
|
|---|
| 1496 | DC IP addresses.
|
|---|
| 1497 | * BUG 8922: smbclient's tarmode insists on listing excluded directories.
|
|---|
| 1498 | * BUG 8953: Winbind can hang as nbt_getdc() has no timeout.
|
|---|
| 1499 | * BUG 8957: Typo in pam_winbindd code MUST fix.
|
|---|
| 1500 | * BUG 8970: Fix possible memory leaks in the Samba master process.
|
|---|
| 1501 | * BUG 8971: cleanup_timeout_fn() is called too often, on exiting when an
|
|---|
| 1502 | smbd is idle.
|
|---|
| 1503 | * BUG 8972: Directory group write permission bit is set if unix extensions
|
|---|
| 1504 | are enabled.
|
|---|
| 1505 |
|
|---|
| 1506 |
|
|---|
| 1507 | o Christian Ambach <ambi@samba.org>
|
|---|
| 1508 | * BUG 8406: Fix a return code check in Winbind.
|
|---|
| 1509 | * BUG 8807: Fix crash in dcerpc_lsa_lookup_sids_noalloc() crashes when
|
|---|
| 1510 | groups has more than 1000 groups.
|
|---|
| 1511 |
|
|---|
| 1512 |
|
|---|
| 1513 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 1514 | * BUG 8599: Only use SamLogonEx when we can get unencrypted session keys.
|
|---|
| 1515 | * BUG 8727: Fix smbclients with posix large reads.
|
|---|
| 1516 | * BUG 8943: Slow but responsive DC can lock up Winbind for > 10 minutes
|
|---|
| 1517 | at a time.
|
|---|
| 1518 |
|
|---|
| 1519 |
|
|---|
| 1520 | o Björn Baumbach <bb@sernet.de>
|
|---|
| 1521 | * BUG 7564: Fix default name resolve order in the manpage.
|
|---|
| 1522 | * BUG 8554, 8612, 8748: Add new printers to registry.
|
|---|
| 1523 | * BUG 8789: Remove whitespace in example samba.ldif.
|
|---|
| 1524 |
|
|---|
| 1525 |
|
|---|
| 1526 | o Alexander Bokovoy <ab@samba.org>
|
|---|
| 1527 | * BUG 8988: Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute().
|
|---|
| 1528 |
|
|---|
| 1529 |
|
|---|
| 1530 | o Alejandro Escanero Blanco <aescanero@gmail.com>
|
|---|
| 1531 | * BUG 8798: The primary rid should be in the groups rid array.
|
|---|
| 1532 |
|
|---|
| 1533 |
|
|---|
| 1534 | o Ira Cooper <samba@ira.wakeful.net>
|
|---|
| 1535 | * BUG 8729: Fix getpass regressions on Solaris/Illumos.
|
|---|
| 1536 | * BUG 8743: Fix configure.developer builds on Solaris.
|
|---|
| 1537 | * BUG 8910: Fix bad bugfix for bug #8910.
|
|---|
| 1538 | * BUG 8952: Fix negative SID->uid/gid cache handling.
|
|---|
| 1539 | * BUG 8995: Use fsp_persistent_id() as persistent_file_id part for SMB2.
|
|---|
| 1540 |
|
|---|
| 1541 |
|
|---|
| 1542 | o David Disseldorp <ddiss@samba.org>
|
|---|
| 1543 | * BUG 8762: Fix crash in printer_list_set_printer().
|
|---|
| 1544 |
|
|---|
| 1545 |
|
|---|
| 1546 | o Olaf Flebbe <o.flebbe@science-computing.de>
|
|---|
| 1547 | * BUG 8859: Fix assertion in reg_parse.
|
|---|
| 1548 |
|
|---|
| 1549 |
|
|---|
| 1550 | o Björn Jacke <bj@sernet.de>
|
|---|
| 1551 | * BUG 8732: Fix compile of krb5 locator on Solaris.
|
|---|
| 1552 | * BUG 8869: Remove outdated netscape ds 5 schema file.
|
|---|
| 1553 | * BUG 8978: Remove dependency on automake for 'make everything'.
|
|---|
| 1554 |
|
|---|
| 1555 |
|
|---|
| 1556 | o Steve Langasek <steve.langasek@ubuntu.com>
|
|---|
| 1557 | * BUG 8920: Fix null dereference in pdb_interface.
|
|---|
| 1558 |
|
|---|
| 1559 |
|
|---|
| 1560 | o Volker Lendecke <vl@samba.org>
|
|---|
| 1561 | * Fix uninitialized memory read in talloc_free().
|
|---|
| 1562 | * BUG 8567: Fix segfault in dom_sid_compare.
|
|---|
| 1563 | * BUG 8733: Delete streams on directories (streams_depot).
|
|---|
| 1564 | * BUG 8760: Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY.
|
|---|
| 1565 | * BUG 8836: Fix segfaults on "smbcontrol close-share" in aio_fork.
|
|---|
| 1566 | * BUG 8861: Fix a segfault with debug level 3 on Solaris.
|
|---|
| 1567 | * BUG 8904: Fix Winbind crash triggered by 'wbinfo --lookup-sids ""'.
|
|---|
| 1568 | * BUG 8998: Notify code can miss a ChDir.
|
|---|
| 1569 |
|
|---|
| 1570 |
|
|---|
| 1571 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 1572 | * BUG 8139: Ignore SMBecho errors (the server may not support it).
|
|---|
| 1573 | * BUG 8527: db_ctdb_traverse fails to traverse records created within the
|
|---|
| 1574 | current transaction.
|
|---|
| 1575 | * BUG 8311: Winzip occasionally can not read files out of an open winzip
|
|---|
| 1576 | dialog.
|
|---|
| 1577 | * BUG 8739: Fill the sids array of the info in
|
|---|
| 1578 | wbcAuthUserInfo_to_netr_SamInfo3().
|
|---|
| 1579 | * BUG 8749: Sign non guest sessions in SessionSetup.
|
|---|
| 1580 | * BUG 8995: Use fsp_persistent_id() as persistent_file_id part for SMB2.
|
|---|
| 1581 |
|
|---|
| 1582 |
|
|---|
| 1583 | o Matthieu Patou <mat@matws.net>
|
|---|
| 1584 | * BUG 8599: Set the can_do_validation6 also for trusted domain.
|
|---|
| 1585 | * BUG 8714: Catch with pid filename's change when config file is not
|
|---|
| 1586 | smb.conf.
|
|---|
| 1587 | * BUG 8734: Don't try to do clever thing if the username is not found while
|
|---|
| 1588 | authenticating through Winbind.
|
|---|
| 1589 | * BUG 8771: Winbind takes up to 20 minutes to change from DC 1 to DC 2.
|
|---|
| 1590 | * BUG 8975: Call dump_core_setup after command line option has been parsed.
|
|---|
| 1591 |
|
|---|
| 1592 |
|
|---|
| 1593 | o SATOH Fumiyasu <fumiyas@osstech.co.jp>
|
|---|
| 1594 | * BUG 8826: Prepend '/' to filename argument (docs).
|
|---|
| 1595 |
|
|---|
| 1596 |
|
|---|
| 1597 | o Andreas Schneider <asn@samba.org>
|
|---|
| 1598 | * BUG 8944 and 8567: Don't lookup the system user in pdb.
|
|---|
| 1599 |
|
|---|
| 1600 |
|
|---|
| 1601 | o Richard Sharpe <realrichardsharpe@gmail.com>
|
|---|
| 1602 | * BUG 8768: Honor SeTakeOwnershipPrivilege when file opened with
|
|---|
| 1603 | SEC_STD_WRITE_OWNER.
|
|---|
| 1604 | * BUG 8797: Correctly handle DENY ACEs when privileges apply.
|
|---|
| 1605 | * BUG 8822: Fix building out-of-tree modules.
|
|---|
| 1606 | * BUG 8945: vfs_acl_common discards errors from writing to the underlying
|
|---|
| 1607 | storage.
|
|---|
| 1608 | * BUG 8970: Fix possible memory leaks in the Samba master process.
|
|---|
| 1609 |
|
|---|
| 1610 |
|
|---|
| 1611 | o Simo Sorce <idra@samba.org>
|
|---|
| 1612 | * BUG 8915: Fix pam_winbind build against newer iniparser library.
|
|---|
| 1613 |
|
|---|
| 1614 |
|
|---|
| 1615 | o Joseph Tam <jtam.home@gmail.com>
|
|---|
| 1616 | * BUG 8877: Syslog broken owing to mistyping of debug_settings.syslog.
|
|---|
| 1617 |
|
|---|
| 1618 |
|
|---|
| 1619 | o Ralph Wuerthner <ralph.wuerthner@de.ibm.com>
|
|---|
| 1620 | * BUG 8845: Move print_backend_init() behind init_system_info().
|
|---|
| 1621 |
|
|---|
| 1622 |
|
|---|
| 1623 | ######################################################################
|
|---|
| 1624 | Reporting bugs & Development Discussion
|
|---|
| 1625 | #######################################
|
|---|
| 1626 |
|
|---|
| 1627 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1628 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1629 |
|
|---|
| 1630 | If you do report problems then please try to send high quality
|
|---|
| 1631 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1632 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1633 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1634 | database (https://bugzilla.samba.org/).
|
|---|
| 1635 |
|
|---|
| 1636 |
|
|---|
| 1637 | ======================================================================
|
|---|
| 1638 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1639 | == The Samba Team
|
|---|
| 1640 | ======================================================================
|
|---|
| 1641 |
|
|---|
| 1642 |
|
|---|
| 1643 | ----------------------------------------------------------------------
|
|---|
| 1644 |
|
|---|
| 1645 |
|
|---|
| 1646 | =============================
|
|---|
| 1647 | Release Notes for Samba 3.6.5
|
|---|
| 1648 | April 30, 2012
|
|---|
| 1649 | =============================
|
|---|
| 1650 |
|
|---|
| 1651 |
|
|---|
| 1652 | This is a security release in order to address
|
|---|
| 1653 | CVE-2012-2111 (Incorrect permission checks when granting/removing
|
|---|
| 1654 | privileges can compromise file server security).
|
|---|
| 1655 |
|
|---|
| 1656 | o CVE-2012-2111:
|
|---|
| 1657 | Samba 3.4.x to 3.6.4 are affected by a
|
|---|
| 1658 | vulnerability that allows arbitrary users
|
|---|
| 1659 | to modify privileges on a file server.
|
|---|
| 1660 |
|
|---|
| 1661 |
|
|---|
| 1662 | Changes since 3.6.4:
|
|---|
| 1663 | --------------------
|
|---|
| 1664 |
|
|---|
| 1665 |
|
|---|
| 1666 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1667 | * Fix incorrect permission checks when granting/removing
|
|---|
| 1668 | privileges (CVE-2012-2111).
|
|---|
| 1669 |
|
|---|
| 1670 |
|
|---|
| 1671 | ######################################################################
|
|---|
| 1672 | Reporting bugs & Development Discussion
|
|---|
| 1673 | #######################################
|
|---|
| 1674 |
|
|---|
| 1675 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1676 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1677 |
|
|---|
| 1678 | If you do report problems then please try to send high quality
|
|---|
| 1679 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1680 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1681 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1682 | database (https://bugzilla.samba.org/).
|
|---|
| 1683 |
|
|---|
| 1684 |
|
|---|
| 1685 | ======================================================================
|
|---|
| 1686 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1687 | == The Samba Team
|
|---|
| 1688 | ======================================================================
|
|---|
| 1689 |
|
|---|
| 1690 |
|
|---|
| 1691 | ----------------------------------------------------------------------
|
|---|
| 1692 |
|
|---|
| 1693 |
|
|---|
| 1694 | =============================
|
|---|
| 1695 | Release Notes for Samba 3.6.4
|
|---|
| 1696 | April 10, 2012
|
|---|
| 1697 | =============================
|
|---|
| 1698 |
|
|---|
| 1699 |
|
|---|
| 1700 | This is a security release in order to address
|
|---|
| 1701 | CVE-2012-1182 ("root" credential remote code execution).
|
|---|
| 1702 |
|
|---|
| 1703 | o CVE-2012-1182:
|
|---|
| 1704 | Samba 3.0.x to 3.6.3 are affected by a
|
|---|
| 1705 | vulnerability that allows remote code
|
|---|
| 1706 | execution as the "root" user.
|
|---|
| 1707 |
|
|---|
| 1708 |
|
|---|
| 1709 | Changes since 3.6.3:
|
|---|
| 1710 | --------------------
|
|---|
| 1711 |
|
|---|
| 1712 |
|
|---|
| 1713 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 1714 | *BUG 8815: PIDL based autogenerated code allows overwriting beyond of
|
|---|
| 1715 | allocated array (CVE-2012-1182).
|
|---|
| 1716 |
|
|---|
| 1717 |
|
|---|
| 1718 | ######################################################################
|
|---|
| 1719 | Reporting bugs & Development Discussion
|
|---|
| 1720 | #######################################
|
|---|
| 1721 |
|
|---|
| 1722 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1723 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1724 |
|
|---|
| 1725 | If you do report problems then please try to send high quality
|
|---|
| 1726 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1727 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1728 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1729 | database (https://bugzilla.samba.org/).
|
|---|
| 1730 |
|
|---|
| 1731 |
|
|---|
| 1732 | ======================================================================
|
|---|
| 1733 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1734 | == The Samba Team
|
|---|
| 1735 | ======================================================================
|
|---|
| 1736 |
|
|---|
| 1737 |
|
|---|
| 1738 | ----------------------------------------------------------------------
|
|---|
| 1739 |
|
|---|
| 1740 |
|
|---|
| 1741 | =============================
|
|---|
| 1742 | Release Notes for Samba 3.6.3
|
|---|
| 1743 | January 29, 2012
|
|---|
| 1744 | =============================
|
|---|
| 1745 |
|
|---|
| 1746 |
|
|---|
| 1747 | This is a security release in order to address
|
|---|
| 1748 | CVE-2012-0817 (Memory leak/Denial of service).
|
|---|
| 1749 |
|
|---|
| 1750 | o CVE-2012-0817:
|
|---|
| 1751 | The Samba File Serving daemon (smbd) in Samba versions
|
|---|
| 1752 | 3.6.0 to 3.6.2 is affected by a memory leak that can
|
|---|
| 1753 | cause a server denial of service.
|
|---|
| 1754 |
|
|---|
| 1755 |
|
|---|
| 1756 | Changes since 3.6.2:
|
|---|
| 1757 | --------------------
|
|---|
| 1758 |
|
|---|
| 1759 |
|
|---|
| 1760 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1761 | * BUG 8724: Fix memory leak in parent smbd on connection.
|
|---|
| 1762 |
|
|---|
| 1763 |
|
|---|
| 1764 | o Ira Cooper <samba@ira.wakeful.net>
|
|---|
| 1765 | * BUG 8724: Fix memory leak in parent smbd on connection.
|
|---|
| 1766 |
|
|---|
| 1767 |
|
|---|
| 1768 | ######################################################################
|
|---|
| 1769 | Reporting bugs & Development Discussion
|
|---|
| 1770 | #######################################
|
|---|
| 1771 |
|
|---|
| 1772 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1773 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1774 |
|
|---|
| 1775 | If you do report problems then please try to send high quality
|
|---|
| 1776 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1777 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1778 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1779 | database (https://bugzilla.samba.org/).
|
|---|
| 1780 |
|
|---|
| 1781 |
|
|---|
| 1782 | ======================================================================
|
|---|
| 1783 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1784 | == The Samba Team
|
|---|
| 1785 | ======================================================================
|
|---|
| 1786 |
|
|---|
| 1787 |
|
|---|
| 1788 | ----------------------------------------------------------------------
|
|---|
| 1789 |
|
|---|
| 1790 |
|
|---|
| 1791 | =============================
|
|---|
| 1792 | Release Notes for Samba 3.6.2
|
|---|
| 1793 | January 25, 2012
|
|---|
| 1794 | =============================
|
|---|
| 1795 |
|
|---|
| 1796 |
|
|---|
| 1797 | This is the latest stable release of Samba 3.6.
|
|---|
| 1798 |
|
|---|
| 1799 | Major enhancements in Samba 3.6.2 include:
|
|---|
| 1800 |
|
|---|
| 1801 | o Make Winbind receive user/group information (bug #8371).
|
|---|
| 1802 | o Several SMB2 fixes.
|
|---|
| 1803 |
|
|---|
| 1804 |
|
|---|
| 1805 | Changes since 3.6.1:
|
|---|
| 1806 | --------------------
|
|---|
| 1807 |
|
|---|
| 1808 |
|
|---|
| 1809 | o Michael Adam <obnox@samba.org>
|
|---|
| 1810 | * BUG 8528: Fix SEGFAULT from net registry export on not zero terminated
|
|---|
| 1811 | REG_SZ values.
|
|---|
| 1812 |
|
|---|
| 1813 |
|
|---|
| 1814 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1815 | * BUG 8541: readlink() on Linux clients fails if the symlink target is
|
|---|
| 1816 | outside of the share.
|
|---|
| 1817 | * BUG 8542: smbclient posix_open command fails to return correct info on
|
|---|
| 1818 | open file.
|
|---|
| 1819 | * BUG 8548: winbind_samlogon_retry_loop ignores logon_parameters flags.
|
|---|
| 1820 | * BUG 8561: Password change settings not fully observed.
|
|---|
| 1821 | * BUG 8562: Fix double free error in talloc.
|
|---|
| 1822 | * BUG 8614: Ensure we correctly calculate reply credits over all returned
|
|---|
| 1823 | SMB2 replies.
|
|---|
| 1824 | * BUG 8631: POSIX ACE x permission becomes rx following mapping to and from
|
|---|
| 1825 | a DACL.
|
|---|
| 1826 | * BUG 8636: When returning an ACL without SECINFO_DACL requested, we still
|
|---|
| 1827 | set SEC_DESC_DACL_PRESENT in the type field.
|
|---|
| 1828 | * BUG 8644: vfs_acl_xattr and vfs_acl_tdb modules can fail to add
|
|---|
| 1829 | inheritable entries on a directory with no stored ACL.
|
|---|
| 1830 | * BUG 8663: Fix deleting a symlink if the symlink target is outside of
|
|---|
| 1831 | * the share.
|
|---|
| 1832 | * BUG 8664: Fix renaming a symlink if the symlink target is outside of
|
|---|
| 1833 | the share.
|
|---|
| 1834 | * BUG 8673: Fix NT ACL issue.
|
|---|
| 1835 | * BUG 8674: Fix buffer overflow issue with AES encryption in samba traffic
|
|---|
| 1836 | analyzer.
|
|---|
| 1837 | * BUG 8679: recvfile code path using splice() on Linux leaves data in the
|
|---|
| 1838 | pipe on short write.
|
|---|
| 1839 | * BUG 8687: Fix typo in 'net memberships' usage.
|
|---|
| 1840 | * BUG 8710: Fix major leak with SMB2 in connections.tdb.
|
|---|
| 1841 | * Fix a crash bug in the spoolss code.
|
|---|
| 1842 | * Add new contributing FAQ announcing acceptance of corporate (C).
|
|---|
| 1843 |
|
|---|
| 1844 |
|
|---|
| 1845 | o Christian Ambach <ambi@samba.org>
|
|---|
| 1846 | * BUG 8444: Add an allocation pool to idmap_autorid.
|
|---|
| 1847 | * BUG 8585: Increase a debug level.
|
|---|
| 1848 |
|
|---|
| 1849 |
|
|---|
| 1850 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 1851 | * BUG 8623: Fix crash bug when trying to browse Samba printers.
|
|---|
| 1852 |
|
|---|
| 1853 |
|
|---|
| 1854 | o Björn Baumbach <bb@sernet.de>
|
|---|
| 1855 | * BUG 8580: Enable inotify if sys or kernel inotify is available.
|
|---|
| 1856 | * BUG 8618: Fix migrate printer code.
|
|---|
| 1857 |
|
|---|
| 1858 |
|
|---|
| 1859 | o Gregor Beck <gbeck@sernet.de>
|
|---|
| 1860 | * BUG 8528: Fix SEGFAULT from net registry export on not zero terminated
|
|---|
| 1861 | REG_SZ values.
|
|---|
| 1862 |
|
|---|
| 1863 |
|
|---|
| 1864 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 1865 | * BUG 7465: Remove pointless use_memory_krb5_ccache.
|
|---|
| 1866 | * BUG 8176: Fix perl path.
|
|---|
| 1867 | * BUG 8591: Fix marshalling of samr_ChangePasswordUser3.
|
|---|
| 1868 | * BUG 8692: libads: Fix malloc/talloc mismatch in
|
|---|
| 1869 | ads_keytab_verify_ticket().
|
|---|
| 1870 |
|
|---|
| 1871 |
|
|---|
| 1872 | o David Disseldorp <ddiss@suse.de>
|
|---|
| 1873 | * BUG 4942: DeletePrinterDriverEx deletes files in use.
|
|---|
| 1874 | * BUG 8575: Add systemd service files.
|
|---|
| 1875 | * BUG 8606: Fix intermittent print job failures caused by character
|
|---|
| 1876 | conversion errors.
|
|---|
| 1877 | * BUG 8697: Make DeletePrinterDriverEx remove printer driver files.
|
|---|
| 1878 |
|
|---|
| 1879 |
|
|---|
| 1880 | o Björn Jacke <bj@sernet.de>
|
|---|
| 1881 | * BUG 8531: Make DSO_EXPORTS_CMD more portable.
|
|---|
| 1882 | * BUG 8616: Allow to set TCP_NODELAYACK socket option on AIX.
|
|---|
| 1883 | * BUG 8652: Document the "ignore system acls" option of vfs_acl_xattr and
|
|---|
| 1884 | vfs_acl_tdb vfs modules.
|
|---|
| 1885 |
|
|---|
| 1886 |
|
|---|
| 1887 | o Frank Lahm <franklahm@googlemail.com>
|
|---|
| 1888 | * BUG 8419: Make VFS op "streaminfo" stackable.
|
|---|
| 1889 |
|
|---|
| 1890 |
|
|---|
| 1891 | o Volker Lendecke <vl@samba.org>
|
|---|
| 1892 | * BUG 8371: Make Winbind receive user/group information.
|
|---|
| 1893 | * BUG 8639: Fix the vfs_commit module.
|
|---|
| 1894 | * BUG 8686: Packet validation checks can be done before length validation
|
|---|
| 1895 | causing uninitialized memory read.
|
|---|
| 1896 |
|
|---|
| 1897 |
|
|---|
| 1898 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 1899 | * BUG 5326: Fix cli_write_and_x() against OS/2 print shares.
|
|---|
| 1900 | * BUG 8357: Grant credits in async interim responses (SMB2).
|
|---|
| 1901 | * BUG 8560: Make SMB2 handle compound request headers in the same way
|
|---|
| 1902 | as Windows.
|
|---|
| 1903 | * BUG 8573: Fix alignment in the non-extended-security negprot.
|
|---|
| 1904 | * BUG 8586: libsmb: Only align unicode pipe_name.
|
|---|
| 1905 | * BUG 8579: smb2_flush: Don't send uninitialized memory.
|
|---|
| 1906 | * BUG 8592: Don't limit the number of open dptrs for SMB2.
|
|---|
| 1907 | * BUG 8593: Fix a crash bug in cldap_socket_recv_dgram().
|
|---|
| 1908 | * BUG 8684: Try ctdbd_init_connection() as root.
|
|---|
| 1909 |
|
|---|
| 1910 |
|
|---|
| 1911 | o Masafumi Nakayama <MASA23@jp.ibm.com>
|
|---|
| 1912 | * BUG 563: Fix 'smbclient tar' for files greater than 8GB on BE machines.
|
|---|
| 1913 |
|
|---|
| 1914 |
|
|---|
| 1915 | o Matthieu Patou <mat@matws.net>
|
|---|
| 1916 | * BUG 8600: Make cldap work over IPv6.
|
|---|
| 1917 | * BUG 8674: Fix buffer overflow issue with AES encryption in samba traffic
|
|---|
| 1918 | analyzer.
|
|---|
| 1919 |
|
|---|
| 1920 |
|
|---|
| 1921 | o Andreas Schneider <asn@samba.org>
|
|---|
| 1922 | * BUG 8550: Fix setting the machine account password.
|
|---|
| 1923 | * BUG 8575: Add systemd service files.
|
|---|
| 1924 | * BUG 8608: Winbind: Don't fail on users without a uid.
|
|---|
| 1925 | * BUG 8628: libsmb: Don't duplicate Kerberos service tickets.
|
|---|
| 1926 | * BUG 8643: Add an update function for Winbind cache.
|
|---|
| 1927 | * BUG 8678: Fix Winbind segfault if we can't map the last user.
|
|---|
| 1928 |
|
|---|
| 1929 |
|
|---|
| 1930 | o Karolin Seeger <kseeger@samba.org>
|
|---|
| 1931 | * BUG 7705: Fix some RHEL packaging issues.
|
|---|
| 1932 |
|
|---|
| 1933 |
|
|---|
| 1934 | o Richard Sharpe <realrichardsharpe@gmail.com>
|
|---|
| 1935 | * BUG 8607: Improve configure.in so it can be used outside the Samba source
|
|---|
| 1936 | tree.
|
|---|
| 1937 |
|
|---|
| 1938 |
|
|---|
| 1939 | o Brad Smith <brad@comstyle.com>
|
|---|
| 1940 | * BUG 8525: Fix bug with sys_fseek() wrapper on *BSD / OS X).
|
|---|
| 1941 |
|
|---|
| 1942 |
|
|---|
| 1943 | o Henry Wong <henry@stuffedcow.net>
|
|---|
| 1944 | * BUG 8384: Fix Windows XP clients crashing smbd process every once in a
|
|---|
| 1945 | while.
|
|---|
| 1946 |
|
|---|
| 1947 |
|
|---|
| 1948 | ######################################################################
|
|---|
| 1949 | Reporting bugs & Development Discussion
|
|---|
| 1950 | #######################################
|
|---|
| 1951 |
|
|---|
| 1952 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 1953 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 1954 |
|
|---|
| 1955 | If you do report problems then please try to send high quality
|
|---|
| 1956 | feedback. If you don't provide vital information to help us track down
|
|---|
| 1957 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 1958 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 1959 | database (https://bugzilla.samba.org/).
|
|---|
| 1960 |
|
|---|
| 1961 |
|
|---|
| 1962 | ======================================================================
|
|---|
| 1963 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 1964 | == The Samba Team
|
|---|
| 1965 | ======================================================================
|
|---|
| 1966 |
|
|---|
| 1967 |
|
|---|
| 1968 | ----------------------------------------------------------------------
|
|---|
| 1969 |
|
|---|
| 1970 |
|
|---|
| 1971 | =============================
|
|---|
| 1972 | Release Notes for Samba 3.6.1
|
|---|
| 1973 | October 20, 2011
|
|---|
| 1974 | =============================
|
|---|
| 1975 |
|
|---|
| 1976 |
|
|---|
| 1977 | This is the latest stable release of Samba 3.6.
|
|---|
| 1978 |
|
|---|
| 1979 | Major enhancements in Samba 3.6.1 include:
|
|---|
| 1980 |
|
|---|
| 1981 | o Fix smbd crashes triggered by Windows XP clients (bug #8384).
|
|---|
| 1982 | o Fix a Winbind race leading to 100% CPU load (bug #8409).
|
|---|
| 1983 | o Several SMB2 fixes.
|
|---|
| 1984 | o The VFS ACL modules are no longer experimental but production-ready.
|
|---|
| 1985 |
|
|---|
| 1986 |
|
|---|
| 1987 | Changes since 3.6.0:
|
|---|
| 1988 | --------------------
|
|---|
| 1989 |
|
|---|
| 1990 |
|
|---|
| 1991 | o Michael Adam <obnox@samba.org>
|
|---|
| 1992 | * BUG 8368: Fix the fallback to the deprecated spelling idmap:script.
|
|---|
| 1993 |
|
|---|
| 1994 |
|
|---|
| 1995 | o Jeremy Allison <jra@samba.org>
|
|---|
| 1996 | * BUG 7509: smb_acl_to_posix: ACL is invalid for set (Invalid argument).
|
|---|
| 1997 | * BUG 8229: Fix 'widelinks' regression.
|
|---|
| 1998 | * BUG 8370: Fix vfs_chown_fsp.
|
|---|
| 1999 | * BUG 8412: Fix "saving as" of MS Office 2007 (Word) documents on Samba
|
|---|
| 2000 | shares with SMB2.
|
|---|
| 2001 | * BUG 8422: Fix infinite loop in ACL module code.
|
|---|
| 2002 | * BUG 8429: Compound SMB2 requests on an IPC connection can corrupt the
|
|---|
| 2003 | reply stream.
|
|---|
| 2004 | * BUG 8443: Be smarter about setting default permissions when a ACL_USER_OBJ
|
|---|
| 2005 | isn't given.
|
|---|
| 2006 | * BUG 8453: Fix smbclient segfaults when dialect option -m is used for
|
|---|
| 2007 | legacy dialects.
|
|---|
| 2008 | * BUG 8458: IE9 on Windows 7 cannot download files to samba 3.5.11 share.
|
|---|
| 2009 | * BUG 8473: smb2_find uses a hard coded max reply size of 0x10000 instead of
|
|---|
| 2010 | smb2_max_trans.
|
|---|
| 2011 | * BUG 8474: SMB2 create doesn't cope with an Apple client using NULL blob in
|
|---|
| 2012 | create.
|
|---|
| 2013 | * BUG 8476: Samba asserts when SMB2 client breaks the crediting rules.
|
|---|
| 2014 | * BUG 8477: Map to guest can return uninitialized blob of data.
|
|---|
| 2015 | * BUG 8493: DFS breaks zip file extracting unless "follow symlinks = no"
|
|---|
| 2016 | set.
|
|---|
| 2017 | * BUG 8494: Remove "experimental" label on VFS ACL modules.
|
|---|
| 2018 | * BUG 8507: smbd doesn't correctly honor the "force create mode" bits from a
|
|---|
| 2019 | cifsfs create.
|
|---|
| 2020 | * BUG 8509: Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER.
|
|---|
| 2021 | * BUG 8521: Winbind cache timeout expiry test was reversed.
|
|---|
| 2022 |
|
|---|
| 2023 |
|
|---|
| 2024 | o Christian Ambach <ambi@samba.org>
|
|---|
| 2025 | * BUG 8428: Fix wrong reply to DHnC (durable handle reconnect).
|
|---|
| 2026 | * BUG 8518: SMB2 create call returns incorrect file allocation size.
|
|---|
| 2027 |
|
|---|
| 2028 |
|
|---|
| 2029 | o Björn Baumbach <bb@sernet.de>
|
|---|
| 2030 | * BUG 8364: Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4.
|
|---|
| 2031 |
|
|---|
| 2032 |
|
|---|
| 2033 | o Bram <fnzon@lists.wizbit.be>
|
|---|
| 2034 | * BUG 7551: Return error of cli_push when 'put - /some/file' is used.
|
|---|
| 2035 |
|
|---|
| 2036 |
|
|---|
| 2037 | o Ira Cooper <ira@wakeful.net>
|
|---|
| 2038 | * BUG 8395: Optimize serverid_exists() for Solaris.
|
|---|
| 2039 | * BUG 8442: NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking
|
|---|
| 2040 | renames.
|
|---|
| 2041 |
|
|---|
| 2042 |
|
|---|
| 2043 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 2044 | * BUG 8401: registry/reg_format.c must include includes.h.
|
|---|
| 2045 | * BUG 7465: Fix 'net ads join -k' when KRB5CCNAME is not set.
|
|---|
| 2046 |
|
|---|
| 2047 |
|
|---|
| 2048 | o David Disseldorp <ddiss@suse.de>
|
|---|
| 2049 | * BUG 8480: acl_xattr can free an invalid pointer if no blob is loaded.
|
|---|
| 2050 | * BUG 8520: Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements.
|
|---|
| 2051 |
|
|---|
| 2052 |
|
|---|
| 2053 | o Wilco Baan Hofman <wilco@baanhofman.nl>
|
|---|
| 2054 | * BUG 8455: Fix uninitialized memory problem in group_sids_to_info3.
|
|---|
| 2055 |
|
|---|
| 2056 |
|
|---|
| 2057 | o Björn Jacke <bj@sernet.de>
|
|---|
| 2058 | * BUG 8256: Add man vfs_aio_fork.
|
|---|
| 2059 | * BUG 8363: Fix build of vfs_prealloc on SLES8.
|
|---|
| 2060 |
|
|---|
| 2061 |
|
|---|
| 2062 | o Volodymyr Khomenko <Volodymyr_Khomenko@dell.com>
|
|---|
| 2063 | * BUG 8515: Disallow "." in can_set_delete_on_close().
|
|---|
| 2064 |
|
|---|
| 2065 |
|
|---|
| 2066 | o Volker Lendecke <vl@samba.org>
|
|---|
| 2067 | * BUG 7864: Fix usage of cli_errstr().
|
|---|
| 2068 | * BUG 8334: smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes.
|
|---|
| 2069 | * BUG 8338: Add a fallback for missing open&x support in MAC OS/X Lion.
|
|---|
| 2070 | * BUG 8360: OS/2 sends an unexpected write&x/read&x chain.
|
|---|
| 2071 | * BUG 8385: Fix smbclient access to NT4 shares.
|
|---|
| 2072 | * BUG 8409: Fix a Winbind race leading to 100% CPU load.
|
|---|
| 2073 | * BUG 8420: Fix 'getent group' if trusted domains are not reachable.
|
|---|
| 2074 | * BUG 8433: Fix segfault in iconv.c.
|
|---|
| 2075 | * BUG 8455: Samba PDC is looking up only primary user group.
|
|---|
| 2076 |
|
|---|
| 2077 |
|
|---|
| 2078 | o Herb Lewis <hlewis@panasas.com>
|
|---|
| 2079 | * BUG 8365: Fix warning messages on Freebsd 4.6.2.
|
|---|
| 2080 |
|
|---|
| 2081 |
|
|---|
| 2082 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 2083 | * BUG 8407: SMB2 server can return requests out-of-order when processing
|
|---|
| 2084 | a compound request.
|
|---|
| 2085 | * BUG 8452: Check the wct of the incoming SMBnegprot responses.
|
|---|
| 2086 | * BUG 8473: smb2_find uses a hard coded max reply size of 0x10000 instead of
|
|---|
| 2087 | smb2_max_trans.
|
|---|
| 2088 | * BUG 8476: Don't call smbd_terminate_connection in
|
|---|
| 2089 | smb2_validate_message_id().
|
|---|
| 2090 | * BUG 8503: SMB2_OP_CANCEL requests don't have to be signed.
|
|---|
| 2091 | * BUG 8520: Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements.
|
|---|
| 2092 |
|
|---|
| 2093 |
|
|---|
| 2094 | o SATOH Fumiyasu <fumiyas@osstech.co.jp>
|
|---|
| 2095 | * BUG 8390: Fix the build of vfs_aixacl2.c.
|
|---|
| 2096 |
|
|---|
| 2097 |
|
|---|
| 2098 | o Andreas Schneider <asn@samba.org>
|
|---|
| 2099 | * BUG 8236: Empty notify servername.
|
|---|
| 2100 | * BUG 8351: While migrating forms, don't fail if the form already exists.
|
|---|
| 2101 |
|
|---|
| 2102 |
|
|---|
| 2103 | o Andrew Tridgell <tridge@samba.org>
|
|---|
| 2104 | * BUG 8384: Fix smbd crashes triggered by Windows XP clients.
|
|---|
| 2105 |
|
|---|
| 2106 |
|
|---|
| 2107 | ######################################################################
|
|---|
| 2108 | Reporting bugs & Development Discussion
|
|---|
| 2109 | #######################################
|
|---|
| 2110 |
|
|---|
| 2111 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 2112 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 2113 |
|
|---|
| 2114 | If you do report problems then please try to send high quality
|
|---|
| 2115 | feedback. If you don't provide vital information to help us track down
|
|---|
| 2116 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 2117 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 2118 | database (https://bugzilla.samba.org/).
|
|---|
| 2119 |
|
|---|
| 2120 |
|
|---|
| 2121 | ======================================================================
|
|---|
| 2122 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 2123 | == The Samba Team
|
|---|
| 2124 | ======================================================================
|
|---|
| 2125 |
|
|---|
| 2126 |
|
|---|
| 2127 | ----------------------------------------------------------------------
|
|---|
| 2128 |
|
|---|
| 2129 |
|
|---|
| 2130 | =============================
|
|---|
| 2131 | Release Notes for Samba 3.6.0
|
|---|
| 2132 | August 9, 2011
|
|---|
| 2133 | =============================
|
|---|
| 2134 |
|
|---|
| 2135 |
|
|---|
| 2136 | This is the first release of Samba 3.6.0.
|
|---|
| 2137 |
|
|---|
| 2138 | Major enhancements in Samba 3.6.0 include:
|
|---|
| 2139 |
|
|---|
| 2140 |
|
|---|
| 2141 | Changed security defaults
|
|---|
| 2142 | -------------------------
|
|---|
| 2143 |
|
|---|
| 2144 | Samba 3.6 has adopted a number of improved security defaults that will
|
|---|
| 2145 | impact on existing users of Samba.
|
|---|
| 2146 |
|
|---|
| 2147 | client ntlmv2 auth = yes
|
|---|
| 2148 | client use spnego principal = no
|
|---|
| 2149 | send spnego principal = no
|
|---|
| 2150 |
|
|---|
| 2151 | The impact of 'client ntlmv2 auth = yes' is that by default we will not
|
|---|
| 2152 | use NTLM authentication as a client. This applies to the Samba client
|
|---|
| 2153 | tools such as smbclient and winbind, but does not change the separately
|
|---|
| 2154 | released in-kernel CIFS client. To re-enable the poorer NTLM encryption
|
|---|
| 2155 | set '--option=clientusentlmv2auth=no' on your smbclient command line, or
|
|---|
| 2156 | set 'client ntlmv2 auth = no' in your smb.conf
|
|---|
| 2157 |
|
|---|
| 2158 | The impact of 'client use spnego principal = no' is that Samba will
|
|---|
| 2159 | use CIFS/hostname to obtain a kerberos ticket, acting more like
|
|---|
| 2160 | Windows when using Kerberos against a CIFS server in smbclient,
|
|---|
| 2161 | winbind and other Samba client tools. This will change which servers
|
|---|
| 2162 | we will successfully negotiate kerberos connections to. This is due
|
|---|
| 2163 | to Samba no longer trusting a server-provided hint which is not
|
|---|
| 2164 | available from Windows 2008 or later. For correct operation with all
|
|---|
| 2165 | clients, all aliases for a server should be recorded as a as a
|
|---|
| 2166 | servicePrincipalName on the server's record in AD. (For this reason,
|
|---|
| 2167 | this behavior change and parameter was also made in Samba 3.5.9)
|
|---|
| 2168 |
|
|---|
| 2169 | The impact of 'send spnego principal = no' is to match Windows 2008 and
|
|---|
| 2170 | not to send this principal, making existing clients give more consistent
|
|---|
| 2171 | behaviour (more likely to fall back to NTLMSSP) between Samba and
|
|---|
| 2172 | Windows 2008, and between Windows versions that did and no longer use
|
|---|
| 2173 | this insecure hint.
|
|---|
| 2174 |
|
|---|
| 2175 |
|
|---|
| 2176 | SMB2 support
|
|---|
| 2177 | ------------
|
|---|
| 2178 |
|
|---|
| 2179 | SMB2 support in 3.6.0 is fully functional (with one omission),
|
|---|
| 2180 | and can be enabled by setting:
|
|---|
| 2181 |
|
|---|
| 2182 | max protocol = SMB2
|
|---|
| 2183 |
|
|---|
| 2184 | in the [global] section of your smb.conf and re-starting
|
|---|
| 2185 | Samba. All features should work over SMB2 except the modification
|
|---|
| 2186 | of user quotas using the Windows quota management tools.
|
|---|
| 2187 |
|
|---|
| 2188 | As this is the first release containing what we consider
|
|---|
| 2189 | to be a fully featured SMB2 protocol, we are not enabling
|
|---|
| 2190 | this by default, but encourage users to enable SMB2 and
|
|---|
| 2191 | test it. Once we have enough confirmation from Samba
|
|---|
| 2192 | users and OEMs that SMB2 support is stable in wide user
|
|---|
| 2193 | testing we will enable SMB2 by default in a future Samba
|
|---|
| 2194 | release.
|
|---|
| 2195 |
|
|---|
| 2196 |
|
|---|
| 2197 | Internal Winbind passdb changes
|
|---|
| 2198 | -------------------------------
|
|---|
| 2199 |
|
|---|
| 2200 | Winbind has been changed to use the internal samr and lsa rpc pipe to get
|
|---|
| 2201 | local user and group information instead of calling passdb functions. The
|
|---|
| 2202 | reason is to use more of our infrastructure and test this infrastructure by
|
|---|
| 2203 | using it. With this approach more code in Winbind is shared.
|
|---|
| 2204 |
|
|---|
| 2205 |
|
|---|
| 2206 | New Spoolss code
|
|---|
| 2207 | ----------------
|
|---|
| 2208 |
|
|---|
| 2209 | The spoolss and the old RAP printing code have been completely
|
|---|
| 2210 | overhauled and refactored.
|
|---|
| 2211 |
|
|---|
| 2212 | All calls from lanman/printing code has been changed to go through the
|
|---|
| 2213 | spoolss RPC interfaces, this allows us to keep all checks in one place
|
|---|
| 2214 | and avoid special cases in the main printing code.
|
|---|
| 2215 | Printing code has been therefore confined within the spoolss code.
|
|---|
| 2216 |
|
|---|
| 2217 | All the printing code, including the spoolss RPC interfaces has been
|
|---|
| 2218 | changed to use the winreg RPC interfaces to store all data.
|
|---|
| 2219 | All data has been migrated from custom, arbitrary TDB files to the
|
|---|
| 2220 | registry interface. This transition allow us to present correct data to
|
|---|
| 2221 | windows client accessing the server registry through the winreg RPC
|
|---|
| 2222 | interfaces to query for printer data. Data is served out from a real
|
|---|
| 2223 | registry implementation and therefore arguably 100% forward compatible.
|
|---|
| 2224 |
|
|---|
| 2225 | Migration code from the previous TDB files formats is provided. This
|
|---|
| 2226 | code is automatically invoked the first time the new code is run on the
|
|---|
| 2227 | server. Although manual migration is also available using the 'net
|
|---|
| 2228 | printer migrate' command.
|
|---|
| 2229 |
|
|---|
| 2230 | These changes not only make all the spoolss code much more closer to
|
|---|
| 2231 | "the spec", it also greatly improves our internal testing of both
|
|---|
| 2232 | spoolss and winreg interfaces, and reduces overall code duplication.
|
|---|
| 2233 |
|
|---|
| 2234 | As part of this work, new tests have been also added to increase
|
|---|
| 2235 | coverage.
|
|---|
| 2236 |
|
|---|
| 2237 | This code will also allow, in future, an easy transition to split out
|
|---|
| 2238 | the spooling functions into a separate daemon for those OEMs that do not
|
|---|
| 2239 | need printing functionality in their appliances, reducing the code
|
|---|
| 2240 | footprint.
|
|---|
| 2241 |
|
|---|
| 2242 |
|
|---|
| 2243 | ID Mapping Changes
|
|---|
| 2244 | ------------------
|
|---|
| 2245 |
|
|---|
| 2246 | The id mapping configuration has been a source of much grief in the past.
|
|---|
| 2247 | For this release, id mapping has been rewritten yet again with the goal
|
|---|
| 2248 | of making the configuration more simple and more coherent while keeping
|
|---|
| 2249 | the needed flexibility and even adding to the flexibility in some respects.
|
|---|
| 2250 |
|
|---|
| 2251 | The major change that implies the configuration simplifications is at
|
|---|
| 2252 | the heart of the id mapping system: The separation of the "idmap alloc
|
|---|
| 2253 | system" that is responsible for the unix id counters in the tdb, tdb2
|
|---|
| 2254 | and ldap idmap backends from the id mapping code itself has been removed.
|
|---|
| 2255 | The sids_to_unixids operation is now atomic and encapsulates (if needed)
|
|---|
| 2256 | the action of allocating a unix id for a mapping that is to be created.
|
|---|
| 2257 | Consequently all idmap alloc configuration parameters have vanished and
|
|---|
| 2258 | it is hence now also not possible any more to specify an idmap alloc
|
|---|
| 2259 | backend different from the idmap backend. Each idmap backend uses its
|
|---|
| 2260 | own idmap unixid creation mechanism transparently.
|
|---|
| 2261 |
|
|---|
| 2262 | As a consequence of the id mapping changes, the methods that are used
|
|---|
| 2263 | for storing and deleting id mappings have been removed from the winbindd
|
|---|
| 2264 | API. The "net idmap dump/restore" commands have been rewritten to
|
|---|
| 2265 | not speak through winbindd any more but directly act on the databases.
|
|---|
| 2266 | This is currently available for the tdb and tdb2 backends, the implementation
|
|---|
| 2267 | for ldap still missing.
|
|---|
| 2268 |
|
|---|
| 2269 | The allocate_id functionality is preserved for the unix id creator of the
|
|---|
| 2270 | default idmap configuration is also used as the source of unix ids
|
|---|
| 2271 | for the group mapping database and for the posix attributes in a
|
|---|
| 2272 | ldapsam:editposix setup.
|
|---|
| 2273 |
|
|---|
| 2274 | As part of the changes, the default idmap configuration has been
|
|---|
| 2275 | changed to be more coherent with the per-domain configuration.
|
|---|
| 2276 | The parameters "idmap uid", "idmap gid" and "idmap range" are now
|
|---|
| 2277 | deprecated in favour of the systematic "idmap config * : range"
|
|---|
| 2278 | and "idmap config * : backend" parameters. The reason for this change
|
|---|
| 2279 | is that the old options only provided an incomplete and hence deceiving
|
|---|
| 2280 | backwards compatibility, which was a source of many problems with
|
|---|
| 2281 | upgrades. By introducing this change in configuration, it should be
|
|---|
| 2282 | brought to the conciousness of the users that even the simple
|
|---|
| 2283 | id mapping is not working exactly as in Samba 3.0 versions any more.
|
|---|
| 2284 |
|
|---|
| 2285 |
|
|---|
| 2286 | Endpoint Mapper
|
|---|
| 2287 | ---------------
|
|---|
| 2288 |
|
|---|
| 2289 | As Microsoft is more and more relying on endpoint mapper and we didn't have a
|
|---|
| 2290 | complete implementation we decided to create an instance for Samba. The
|
|---|
| 2291 | endpoint mapper is like a DNS server but for ports. If you want to talk to a
|
|---|
| 2292 | certain RPC service over TCP/IP, you just ask the endpoint mapper on which
|
|---|
| 2293 | port it is running. Then you can connect to the service and make sure that it
|
|---|
| 2294 | is running.
|
|---|
| 2295 |
|
|---|
| 2296 | The code is deactivated by default, because it needs more testing and it
|
|---|
| 2297 | doesn't scale yet. If you want to enable and test the endpoint mapper
|
|---|
| 2298 | you can set "rpc_server:epmapper = daemon" in the smb.conf file.
|
|---|
| 2299 |
|
|---|
| 2300 |
|
|---|
| 2301 | Internal restructuring
|
|---|
| 2302 | ----------------------
|
|---|
| 2303 |
|
|---|
| 2304 | Ongoing internal restructuring for better separation of internal subsystem to
|
|---|
| 2305 | achieve a faster build, smaller binaries and cleaner dependencies for the samba3
|
|---|
| 2306 | waf build.
|
|---|
| 2307 |
|
|---|
| 2308 |
|
|---|
| 2309 | SMB Traffic Analyzer
|
|---|
| 2310 | --------------------
|
|---|
| 2311 |
|
|---|
| 2312 | Added the new SMB Traffic Analyzer (SMBTA) VFS module protocol 2
|
|---|
| 2313 | featuring encryption, multiple arguments, and easier parseability. A new
|
|---|
| 2314 | tool 'smbta-util' has been created to control the encryption behaviour
|
|---|
| 2315 | of SMBTA. For compatibility, SMBTA by default operates on version 1.
|
|---|
| 2316 | There are programs consuming the data that the module sends.
|
|---|
| 2317 |
|
|---|
| 2318 | More information can be found on
|
|---|
| 2319 | http://holger123.wordpress.com/smb-traffic-analyzer/
|
|---|
| 2320 |
|
|---|
| 2321 |
|
|---|
| 2322 | NFS quota backend on Linux
|
|---|
| 2323 | --------------------------
|
|---|
| 2324 |
|
|---|
| 2325 | A new nfs quota backend for Linux has been added that is based
|
|---|
| 2326 | on the existing Solaris/FreeBSD implementation. This allows samba
|
|---|
| 2327 | to communicate correct diskfree information for nfs imports that
|
|---|
| 2328 | are re-exported as samba shares.
|
|---|
| 2329 |
|
|---|
| 2330 |
|
|---|
| 2331 | ######################################################################
|
|---|
| 2332 | Changes
|
|---|
| 2333 | #######
|
|---|
| 2334 |
|
|---|
| 2335 | smb.conf changes
|
|---|
| 2336 | ----------------
|
|---|
| 2337 |
|
|---|
| 2338 | Parameter Name Description Default
|
|---|
| 2339 | -------------- ----------- -------
|
|---|
| 2340 |
|
|---|
| 2341 | async smb echo handler New No
|
|---|
| 2342 | client ntlmv2 auth Changed Default Yes
|
|---|
| 2343 | client use spnego principal New No
|
|---|
| 2344 | ctdb locktime warn threshold New 0
|
|---|
| 2345 | idmap alloc backend Removed
|
|---|
| 2346 | log writeable files on exit New No
|
|---|
| 2347 | multicast dns register New Yes
|
|---|
| 2348 | ncalrpc dir New
|
|---|
| 2349 | send spnego principal New No
|
|---|
| 2350 | smb2 max credits New 8192
|
|---|
| 2351 | smb2 max read New 1048576
|
|---|
| 2352 | smb2 max trans New 1048576
|
|---|
| 2353 | smb2 max write New 1048576
|
|---|
| 2354 | username map cache time New 0
|
|---|
| 2355 | winbind max clients New 200
|
|---|
| 2356 |
|
|---|
| 2357 | The variable substitutions for %i and %I no longer
|
|---|
| 2358 | use IPv4 addresses mapped to IPv6, e.g. '::ffff:192.168.0.1',
|
|---|
| 2359 | if the host has IPv6 enabled. Now %i and %I contain just
|
|---|
| 2360 | '192.168.0.1'.
|
|---|
| 2361 |
|
|---|
| 2362 | Commit Highlights
|
|---|
| 2363 | -----------------
|
|---|
| 2364 |
|
|---|
| 2365 | o Michael Adam <obnox@samba.org>
|
|---|
| 2366 | * ID Mapping changes.
|
|---|
| 2367 |
|
|---|
| 2368 |
|
|---|
| 2369 | o Jeremy Allison <jra@samba.org>
|
|---|
| 2370 | * Implement SMB2 support.
|
|---|
| 2371 |
|
|---|
| 2372 |
|
|---|
| 2373 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 2374 | * Implement SMB2 support.
|
|---|
| 2375 |
|
|---|
| 2376 |
|
|---|
| 2377 | o Andreas Schneider <asn@samba.org>
|
|---|
| 2378 | * Add an Endpoint Mapper daemon.
|
|---|
| 2379 |
|
|---|
| 2380 |
|
|---|
| 2381 | Changes since 3.6.0rc3
|
|---|
| 2382 | ----------------------
|
|---|
| 2383 |
|
|---|
| 2384 | o Michael Adam <obnox@samba.org>
|
|---|
| 2385 | * BUG 8327: Fix the reload of the configuration, also reload activated
|
|---|
| 2386 | registry shares.
|
|---|
| 2387 | * BUG 8328: Cleanup of idmap_tdb2 code.
|
|---|
| 2388 |
|
|---|
| 2389 |
|
|---|
| 2390 | o Jeremy Allison <jra@samba.org>
|
|---|
| 2391 | * BUG 7462: Make SA_RESETHAND conditional on its existance.
|
|---|
| 2392 | * BUG 8324: smbclient cannot list directories from a big-endian machine.
|
|---|
| 2393 | * BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id.
|
|---|
| 2394 |
|
|---|
| 2395 |
|
|---|
| 2396 | o Christian Ambach <ambi@samba.org>
|
|---|
| 2397 | * BUG 8330: Fix NFSv4 ACL merging logic.
|
|---|
| 2398 |
|
|---|
| 2399 |
|
|---|
| 2400 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 2401 | * BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname.
|
|---|
| 2402 |
|
|---|
| 2403 |
|
|---|
| 2404 | o Björn Baumbach <bb@sernet.de>
|
|---|
| 2405 | * BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined.
|
|---|
| 2406 |
|
|---|
| 2407 |
|
|---|
| 2408 | o Alban Browaeys <prahal@yahoo.com>
|
|---|
| 2409 | * BUG 8341: Fix segfault in libsmbclient.
|
|---|
| 2410 |
|
|---|
| 2411 |
|
|---|
| 2412 | o Björn Jacke <bj@sernet.de>
|
|---|
| 2413 | * BUG 8362: Fix build issue on old glibc systems.
|
|---|
| 2414 |
|
|---|
| 2415 |
|
|---|
| 2416 | o Volker Lendecke <vlendec@samba.org>
|
|---|
| 2417 | * BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file.
|
|---|
| 2418 |
|
|---|
| 2419 |
|
|---|
| 2420 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 2421 | * BUG 8347: Fix regression for HP-UX, AIX and OSF.
|
|---|
| 2422 | * BUG 8357: Make sure we grant credits on async read/write operations.
|
|---|
| 2423 | * BUG 8358: Fix a bug in run_poll_events().
|
|---|
| 2424 |
|
|---|
| 2425 |
|
|---|
| 2426 | Changes since 3.6.0rc2
|
|---|
| 2427 | ----------------------
|
|---|
| 2428 |
|
|---|
| 2429 | o Michael Adam <obnox@samba.org>
|
|---|
| 2430 | * BUG 8213: Fixes in idmap_autorid.
|
|---|
| 2431 | * BUG 8217: Do not stat-check the share path in 'net conf addshare'.
|
|---|
| 2432 | * BUG 8281: Fix build of examples/VFS/*.
|
|---|
| 2433 |
|
|---|
| 2434 |
|
|---|
| 2435 | o Jeremy Allison <jra@samba.org>
|
|---|
| 2436 | * BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb
|
|---|
| 2437 | module.
|
|---|
| 2438 | * BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes"
|
|---|
| 2439 | is set.
|
|---|
| 2440 | * BUG 8219: Fix SMB Panic from Windows 7 client.
|
|---|
| 2441 | * BUG 8254: Fix "acl check permissions = no".
|
|---|
| 2442 | * BUG 8293: Fix log file rotating in SMB2.
|
|---|
| 2443 | * BUG 8304: Fix uninitialized variable in error path.
|
|---|
| 2444 | * BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all
|
|---|
| 2445 | locks.
|
|---|
| 2446 | * BUG 8310: toupper_ascii() is broken on big-endian systems.
|
|---|
| 2447 | * BUG 8314: Fix smbd crash with unknown user.
|
|---|
| 2448 |
|
|---|
| 2449 |
|
|---|
| 2450 | o Christian Ambach <ambi@samba.org>
|
|---|
| 2451 | * BUG 8231: Fix crash bug in 'net cache get'.
|
|---|
| 2452 | * BUG 8244: Fix copying files larger than 2 GB to a Samba share.
|
|---|
| 2453 | * BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl.
|
|---|
| 2454 | * BUG 8278: Fix smbd panic when CTDB is unhealthy.
|
|---|
| 2455 | * BUG 8286: Fix smbd crash on premature end of smb2 conn.
|
|---|
| 2456 |
|
|---|
| 2457 |
|
|---|
| 2458 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 2459 | * BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd.
|
|---|
| 2460 | * Mark 'time offset' parameter as deprecated.
|
|---|
| 2461 |
|
|---|
| 2462 |
|
|---|
| 2463 | o Gregor Beck <gbeck@sernet.de>
|
|---|
| 2464 | * BUG 8193: Add new command 'enumerate_recursive'.
|
|---|
| 2465 | * BUG 8253: Fix Winbind panic if verify_idpool() fails.
|
|---|
| 2466 |
|
|---|
| 2467 |
|
|---|
| 2468 | o Kai Blin <kai@samba.org>
|
|---|
| 2469 | * BUG 8289: Fix possible XSS attack (CVE-2011-2694).
|
|---|
| 2470 | * BUG 8290: Fix Cross-Site Request Forgery in SWAT (CVE-2011-2522).
|
|---|
| 2471 |
|
|---|
| 2472 |
|
|---|
| 2473 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 2474 | * BUG 7888: Deal with buggy 3.0 based PDCs.
|
|---|
| 2475 | * BUG 8214: Fix smbd crash on printer driver upgrade.
|
|---|
| 2476 | * BUG 8235: Fix smbd crash on startup caused by migrate_printer().
|
|---|
| 2477 |
|
|---|
| 2478 |
|
|---|
| 2479 | o Björn Jacke <bj@sernet.de>
|
|---|
| 2480 | * BUG 8262: Fix build of vfs_commit.
|
|---|
| 2481 |
|
|---|
| 2482 |
|
|---|
| 2483 | o GÃŒnter Kukkukk <linux@kukkukk.com>
|
|---|
| 2484 | * BUG 8305: Fix segfault in nmbd when using 'smbtree ...'..
|
|---|
| 2485 |
|
|---|
| 2486 |
|
|---|
| 2487 | o Volker Lendecke <vl@samba.org>
|
|---|
| 2488 | * BUG 7841: Explicitly pass domain_sid to wbint_LookupRids().
|
|---|
| 2489 | * BUG 8102: Do not allow to change file ACLs from normal domusers.
|
|---|
| 2490 | * BUG 8247: Fix Coverity ID 2582: FORWARD_NULL.
|
|---|
| 2491 |
|
|---|
| 2492 |
|
|---|
| 2493 | o Herb Lewis <hlewis@panasas.com>
|
|---|
| 2494 | * BUG 8216: Make Winbind returning correct results with 'sids2xids'.
|
|---|
| 2495 |
|
|---|
| 2496 |
|
|---|
| 2497 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 2498 | * BUG 8102: Do not allow to change file ACLs from normal domusers.
|
|---|
| 2499 | * BUG 8195: Make rpc client code working against NT4 servers.
|
|---|
| 2500 | * BUG 8224: Fix the build on FreeBSD.
|
|---|
| 2501 | * BUG 8226: Use c99 initializers which are supported by old gcc 2.95
|
|---|
| 2502 | compilers.
|
|---|
| 2503 | * BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes.
|
|---|
| 2504 | * BUG 8264: Fix Valgrind bugs in svcctl.
|
|---|
| 2505 | * BUG 8276: Close all sockets attached to a subnet in close_subnet().
|
|---|
| 2506 | * BUG 8292: Fix a major architectural flaw in the SMB2 server code.
|
|---|
| 2507 |
|
|---|
| 2508 |
|
|---|
| 2509 | o Andreas Schneider <asn@samba.org>
|
|---|
| 2510 | * BUG 8215: Fix Winbind unix username lookup.
|
|---|
| 2511 | * BUG 8240: Fix Valgrind warnings in winreg/spoolss code.
|
|---|
| 2512 |
|
|---|
| 2513 |
|
|---|
| 2514 | Changee since 3.6.0rc1
|
|---|
| 2515 | ----------------------
|
|---|
| 2516 |
|
|---|
| 2517 | o Michael Adam <obnox@samba.org>
|
|---|
| 2518 | * BUG 8200: Add support for multiple writeable ldap idmap domains.
|
|---|
| 2519 |
|
|---|
| 2520 |
|
|---|
| 2521 | o Jeremy Allison <jra@samba.org>
|
|---|
| 2522 | * BUG 6911: Fix Kerberos authentication from Vista to Samba.
|
|---|
| 2523 | * BUG 7054: Fix X account flag when "pwdlastset" is "0".
|
|---|
| 2524 | * BUG 8133: Fix strange behavior for the file (whose filename first
|
|---|
| 2525 | character is period ) in SMB2 case.
|
|---|
| 2526 | * BUG 8144: Fix setting timestamp when touching files with CIFS clients.
|
|---|
| 2527 | * BUG 8150: Ban "dos charset = utf8".
|
|---|
| 2528 | * BUG 8153: Fix setting up getaddrinfo on IPv6-only machines.
|
|---|
| 2529 | * BUG 8156: Fix 'net ads join' using the user's Kerberos ticket.
|
|---|
| 2530 | * BUG 8157: Fix parsing a cups printcap file.
|
|---|
| 2531 | * BUG 8163: Fix our asn.1 parser to handle negative numbers.
|
|---|
| 2532 | * BUG 8175: Fix smbd deadlock.
|
|---|
| 2533 | * BUG 8191: Split the ACE flag mapping between nfs4 and Windows into two
|
|---|
| 2534 | separate functions.
|
|---|
| 2535 | * BUG 8197: Winbind does not properly detect when a DC connection is dead.
|
|---|
| 2536 | * BUG 8203: Winbind needs to reset the DC connection if an RPC times out.
|
|---|
| 2537 |
|
|---|
| 2538 |
|
|---|
| 2539 | o Christian Ambach <ambi@samba.org>
|
|---|
| 2540 | * BUG 8152: Fix smbd crash in release_ip().
|
|---|
| 2541 |
|
|---|
| 2542 |
|
|---|
| 2543 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 2544 | * BUG 8151: Deprecate security parameters.
|
|---|
| 2545 |
|
|---|
| 2546 |
|
|---|
| 2547 | o Gregor Beck <gbeck@sernet.de>
|
|---|
| 2548 | * BUG 8191: nfs4_acls: Pass ACE_FLAG_INHERITED_ACE up to the client/down
|
|---|
| 2549 | from the client.
|
|---|
| 2550 | * BUG 8192: Fix parsing of multiple flags in 'smbcacls'.
|
|---|
| 2551 |
|
|---|
| 2552 |
|
|---|
| 2553 | o Sumit Bose <sbose@redhat.com>
|
|---|
| 2554 | * BUG 8142: Fix typos in LDAP schema files.
|
|---|
| 2555 |
|
|---|
| 2556 |
|
|---|
| 2557 | o Holger Hetterich <hhetter@novell.com>
|
|---|
| 2558 | * BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer.
|
|---|
| 2559 | * BUG 8154: Actually make use of SMBTA subversion numbers.
|
|---|
| 2560 |
|
|---|
| 2561 |
|
|---|
| 2562 | o Björn Jacke <bj@sernet.de>
|
|---|
| 2563 | * BUG 7998: Remove warning if IOV_MAX is not defined.
|
|---|
| 2564 |
|
|---|
| 2565 |
|
|---|
| 2566 | o Jim McDonough <jmcd@samba.org>
|
|---|
| 2567 | * BUG 8166: Don't lockout users when offline.
|
|---|
| 2568 |
|
|---|
| 2569 |
|
|---|
| 2570 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 2571 | * BUG 8140: talloc: Fix Valgrind false positives and other backports.
|
|---|
| 2572 | * BUG 8141: Fix wrong permissions on lp_ncalrpc_dir().
|
|---|
| 2573 |
|
|---|
| 2574 |
|
|---|
| 2575 | o Andreas Schneider <asn@samba.org>
|
|---|
| 2576 | * BUG 8155: Fix registering only named pipes on EPM for a service.
|
|---|
| 2577 |
|
|---|
| 2578 |
|
|---|
| 2579 | o Volker Lendecke <vl@samba.org>
|
|---|
| 2580 | * BUG 8159: Fix memory corruption in fetching cli->server_domain from the
|
|---|
| 2581 | server.
|
|---|
| 2582 | * BUG 8185: "security=server" does not obey guest login field.
|
|---|
| 2583 | * BUG 8189: Support shadow copy display over SMB2.
|
|---|
| 2584 | * BUG 8199: Fix potential crash in smbd handling smb2.
|
|---|
| 2585 |
|
|---|
| 2586 |
|
|---|
| 2587 | o Samuel Thibault <sthibault@debian.org>
|
|---|
| 2588 | * BUG 7998: Fix build on Hurd.
|
|---|
| 2589 |
|
|---|
| 2590 |
|
|---|
| 2591 | Changes since 3.6.0pre3
|
|---|
| 2592 | -----------------------
|
|---|
| 2593 |
|
|---|
| 2594 | o Jeremy Allison <jra@samba.org>
|
|---|
| 2595 | * BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open.
|
|---|
| 2596 | * BUG 8112: POSIX extension opens of a directory are denied with EISDIR.
|
|---|
| 2597 | * Remove fstrings from client struct.
|
|---|
| 2598 | * BUGFIX when converting from safe_strcpy to strlcpy.
|
|---|
| 2599 | * Fix off-by-one calculations with strlcpy.
|
|---|
| 2600 | * Ensure we always write the correct incoming mid into the share mode table
|
|---|
| 2601 | entries.
|
|---|
| 2602 | * Fix the SMB2 oplock showstopper.
|
|---|
| 2603 |
|
|---|
| 2604 |
|
|---|
| 2605 | o Christian Ambach <christian.ambach@de.ibm.com>
|
|---|
| 2606 | * Convert user-specified domain to uppercase in libsmb.
|
|---|
| 2607 |
|
|---|
| 2608 |
|
|---|
| 2609 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 2610 | * BUG 8132: Fix filling printers location field when using cups.
|
|---|
| 2611 | * Fix Coverity CID #2302: FORWARD_NULL.
|
|---|
| 2612 | * Fix cups_pull_comment_location().
|
|---|
| 2613 | * Fix double free of cups request.
|
|---|
| 2614 | * Make cups_pull_comment_location() work again.
|
|---|
| 2615 | * Fix potential crash bug in display_print_driver3().
|
|---|
| 2616 |
|
|---|
| 2617 |
|
|---|
| 2618 | o Volker Lendecke <vl@samba.org>
|
|---|
| 2619 | * Properly clean up in pthreadpool_init in case of failure.
|
|---|
| 2620 | * Make plaintext session setup async.
|
|---|
| 2621 | * Reduce fd load in Winbind children.
|
|---|
| 2622 | * Avoid a potential 100% CPU loop in Winbind.
|
|---|
| 2623 | * Tune broadcast namequeries for unique names.
|
|---|
| 2624 | * Properly deal with exited winbind children.
|
|---|
| 2625 | * Fix dup_smb2_vec3.
|
|---|
| 2626 | * Fix return check in nss_wins.
|
|---|
| 2627 |
|
|---|
| 2628 |
|
|---|
| 2629 | Changes since 3.6.0pre2
|
|---|
| 2630 | -----------------------
|
|---|
| 2631 |
|
|---|
| 2632 | o Michael Adam <obnox@samba.org>
|
|---|
| 2633 | * Fix build of tdb2.
|
|---|
| 2634 |
|
|---|
| 2635 |
|
|---|
| 2636 | o Jeremy Allison <jra@samba.org>
|
|---|
| 2637 | * BUG 8083: "inherit owner = yes" doesn't interact correctly with
|
|---|
| 2638 | vfs_acl_xattr or vfs_acl_tdb module.
|
|---|
| 2639 | * BUG 8088: rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs
|
|---|
| 2640 | are null.
|
|---|
| 2641 | * Correctly detect and deny symlinks anywhere in a path (not just the last
|
|---|
| 2642 | component) if "follow symlinks = no".
|
|---|
| 2643 |
|
|---|
| 2644 |
|
|---|
| 2645 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 2646 | * BUG 8106: Fix the build of 'smbget' on HP NonStop.
|
|---|
| 2647 | * Fix timeout in rpc_pipe_open_tcp_port().
|
|---|
| 2648 | * Fix the build of "--with-profiling-data".
|
|---|
| 2649 | * Fix the AIX 5.3 build.
|
|---|
| 2650 |
|
|---|
| 2651 |
|
|---|
| 2652 | o Sergey Korsak <skif@1plus1.net>
|
|---|
| 2653 | * BUG #8099: setpwent() actually does endpwent() and vice versa on FreeBSD.
|
|---|
| 2654 |
|
|---|
| 2655 |
|
|---|
| 2656 | o Volker Lendecke <vl@samba.org>
|
|---|
| 2657 | * BUG 8066: Fix wrong output in 'smbget'.
|
|---|
| 2658 | * Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470,
|
|---|
| 2659 | 2471, 2478.
|
|---|
| 2660 | * nsswitch: Add 'wbinfo --lookup-sids'.
|
|---|
| 2661 | * nsswitch: Add 'wbinfo --sids-to-unix-ids'.
|
|---|
| 2662 | * Fix smbd with the async echo responder.
|
|---|
| 2663 | * Fix the build of vfs_gpfs.c.
|
|---|
| 2664 | * Add a 10-second timeout for the 445 or netbios connection to a DC.
|
|---|
| 2665 | * Many pthreadpool fixes.
|
|---|
| 2666 |
|
|---|
| 2667 |
|
|---|
| 2668 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 2669 | * BUG 7383: Listen on IPv6 addresses with IPV6_ONLY.
|
|---|
| 2670 |
|
|---|
| 2671 |
|
|---|
| 2672 | o Rusty Russell <rusty@rustcorp.com.au>
|
|---|
| 2673 | * Fix transaction recovery area for converted tdbs.
|
|---|
| 2674 |
|
|---|
| 2675 |
|
|---|
| 2676 |
|
|---|
| 2677 | Changes since 3.6.0pre1
|
|---|
| 2678 | -----------------------
|
|---|
| 2679 |
|
|---|
| 2680 | o Michael Adam <obnox@samba.org>
|
|---|
| 2681 | * ID Mapping changes.
|
|---|
| 2682 | * Add "--option" to 'testparm'.
|
|---|
| 2683 |
|
|---|
| 2684 |
|
|---|
| 2685 | o Jeremy Allison <jra@samba.org>
|
|---|
| 2686 | * BUG 7080: Quota only shown when logged as root.
|
|---|
| 2687 | * BUG 7863: Unlink may unlink wrong file when hardlinks are involved.
|
|---|
| 2688 | * BUG 7996: Sgid bit lost on folder rename.
|
|---|
| 2689 | * BUG 8040: Fix smbclient segfault with Cyrillic netbios names.
|
|---|
| 2690 | * Fix crash bug on smbd shutdown when using FOPENDIR().
|
|---|
| 2691 | * Ensure we don't return an incorrect access mask.
|
|---|
| 2692 | * Fix bug against the new Mac client.
|
|---|
| 2693 | * Fix leak in error path.
|
|---|
| 2694 | * Fix error where Windows client spoolss returns WERR_INVALID_DATA.
|
|---|
| 2695 |
|
|---|
| 2696 |
|
|---|
| 2697 | o Christian Ambach <christian.ambach@de.ibm.com>
|
|---|
| 2698 | * Fix a segfault in the krb5 locator plugin.
|
|---|
| 2699 | * Enable sharesec for registry shares.
|
|---|
| 2700 |
|
|---|
| 2701 |
|
|---|
| 2702 | o Andrew Bartlett <abartlet@samba.org>
|
|---|
| 2703 | * Fix memory leak in "security=share" and "force user".
|
|---|
| 2704 |
|
|---|
| 2705 |
|
|---|
| 2706 | o Björn Baumbach <bb@sernet.de>
|
|---|
| 2707 | * BUG 7875: Fix 'nmbd --port'.
|
|---|
| 2708 | * BUG 7880: cmd_spoolss_deletedriver() returned without checking all
|
|---|
| 2709 | architectures.
|
|---|
| 2710 |
|
|---|
| 2711 |
|
|---|
| 2712 | o Gregor Beck <gbeck@sernet.de>
|
|---|
| 2713 | * Add new 'net idmap check' command.
|
|---|
| 2714 | * Add new 'net idmap delete' command.
|
|---|
| 2715 | * Fix segfault on missing input file in 'net idmap restore'.
|
|---|
| 2716 |
|
|---|
| 2717 |
|
|---|
| 2718 | o Olly Betts <olly@survex.com>
|
|---|
| 2719 | * Fix 'net usersidlist' not to skip every other user.
|
|---|
| 2720 |
|
|---|
| 2721 |
|
|---|
| 2722 | o GÃŒnther Deschner <gd@samba.org>
|
|---|
| 2723 | * BUG 7690: Retry DNS updates when connection to one nameserver has failed.
|
|---|
| 2724 | * BUG 7945: Let winbind try to use samlogon validation level 6.
|
|---|
| 2725 | * Fix Coverity ID 2041.
|
|---|
| 2726 | * Fix potential crash bug in spoolss_PrinterEnumValues push path.
|
|---|
| 2727 | * Internal restructuring.
|
|---|
| 2728 | * Don't wipe out all printer drivers when only one should be deleted.
|
|---|
| 2729 | * Fix winbindd_dual_pam_auth_samlogon() for NT4 domains.
|
|---|
| 2730 |
|
|---|
| 2731 |
|
|---|
| 2732 | o David Disseldorp <ddiss@suse.de>
|
|---|
| 2733 | * BUG 7915: Fix cups pcap reload with no printers.
|
|---|
| 2734 | * BUG 8040: Fix smbclient segfault with Cyrillic netbios names.
|
|---|
| 2735 | * Fix memory leak in print_cups.c.
|
|---|
| 2736 | * Remove duplicate cups response processing code.
|
|---|
| 2737 | * Follow force user/group for driver IO.
|
|---|
| 2738 | * Initiate pcap reload from parent smbd.
|
|---|
| 2739 | * Reload shares after pcap cache fill.
|
|---|
| 2740 |
|
|---|
| 2741 |
|
|---|
| 2742 | o Björn Jacke <bj@sernet.de>
|
|---|
| 2743 | * BUG 8033: Add explicit configure option whether or not to enable dmapi
|
|---|
| 2744 | support.
|
|---|
| 2745 |
|
|---|
| 2746 |
|
|---|
| 2747 | o Volker Lendecke <vl@samba.org>
|
|---|
| 2748 | * BUG 7917: Fix bug in chain_reply.
|
|---|
| 2749 | * BUG 7940: Fall back for utimes calls.
|
|---|
| 2750 | * BUG 8009: Fix getting username in 'net rap session'.
|
|---|
| 2751 | * BUG 8010: Use jenkins hash for str_checksum.
|
|---|
| 2752 | * BUG 8042: Fix file creation on OS/X.
|
|---|
| 2753 | * Fix numerous Coverity IDs.
|
|---|
| 2754 | * Fix a memory leak in check_sam_security_info3.
|
|---|
| 2755 | * Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable.
|
|---|
| 2756 | * Make "net sam list [users|workstations]" list only the right things.
|
|---|
| 2757 | * Fix a potential memleak in secrets_fetch_trusted_domain_password.
|
|---|
| 2758 | * Use the right credentials in check_netlogond_security.
|
|---|
| 2759 | * Add support for AF_NETLINK addr notifications.
|
|---|
| 2760 | * Fork multiple Winbind children per domain.
|
|---|
| 2761 | * Fix a deadlock between smbd and ctdbd.
|
|---|
| 2762 | * Add 'wbinfo --dc-info'.
|
|---|
| 2763 | * Make "nmbd socket dir" configurable.
|
|---|
| 2764 | * Fix a valgrind error.
|
|---|
| 2765 | * Fix a memleak in receive_getdc_response.
|
|---|
| 2766 |
|
|---|
| 2767 |
|
|---|
| 2768 | o Nikolay Martynov <mar.kolya@gmail.com>
|
|---|
| 2769 | * BUG 8010: Fix inode generation so nautilus can count total dir size
|
|---|
| 2770 | correctly.
|
|---|
| 2771 |
|
|---|
| 2772 |
|
|---|
| 2773 | o Stefan Metzmacher <metze@samba.org>
|
|---|
| 2774 | * BUG 7567: Fix printing from Windows 7.
|
|---|
| 2775 | * BUG 7899: Don't return "-1" on success in 'net rpc vampire keytab'.
|
|---|
| 2776 | * BUG 7944: Catch lookup_names/sids schannel errors over ncacn_ip_tcp.
|
|---|
| 2777 | * Don't grant SEC_STD_DELETE always to the owner of a file.
|
|---|
| 2778 | * Fix segfaults on addrchange errors in Winbind.
|
|---|
| 2779 | * Allow machine accounts as members in groupdb.
|
|---|
| 2780 |
|
|---|
| 2781 |
|
|---|
| 2782 | o Jonathan Nieder <jrnieder@gmail.com>
|
|---|
| 2783 | * BUG 6837: Make "rlimit_max below minimum Windows limit" notification less
|
|---|
| 2784 | scary.
|
|---|
| 2785 |
|
|---|
| 2786 |
|
|---|
| 2787 | o Andreas Schneider <asn@samba.org>
|
|---|
| 2788 | * Add an Endpoint Mapper daemon.
|
|---|
| 2789 | * Add IPv6 support for the endpoint mapper.
|
|---|
| 2790 | * Free unused memory in the rpc server.
|
|---|
| 2791 | * Fix possible segfaults in svcctl server.
|
|---|
| 2792 | * Fix possible segfault with client_id in rpc server.
|
|---|
| 2793 | * Add a 'svcctl shutdown' function to rpc server.
|
|---|
| 2794 | * Fix a resource leak in net_afs.
|
|---|
| 2795 | * Fix a resource leak in smbta-util.
|
|---|
| 2796 | * Fix possible resource leak in net_usershare.
|
|---|
| 2797 | * Fix possible resource leak in 'smbget'.
|
|---|
| 2798 | * Fix possible resource leak in 'smbfilter'.
|
|---|
| 2799 | * Fix a possible null pointer dereference in smbd.
|
|---|
| 2800 |
|
|---|
| 2801 |
|
|---|
| 2802 | o Pavel Shilovsky <piastry@etersoft.ru>
|
|---|
| 2803 | * BUG 7928: Fix problems with "kernel oplocks" option set to "no".
|
|---|
| 2804 | * Ensure we send the direct levelII oplock break to the correct fid.
|
|---|
| 2805 |
|
|---|
| 2806 |
|
|---|
| 2807 | o Simo Sorce <idra@samba.org>
|
|---|
| 2808 | * Fix private libdir and codepages paths.
|
|---|
| 2809 |
|
|---|
| 2810 |
|
|---|
| 2811 | o Andrew Tridgell <tridge@samba.org>
|
|---|
| 2812 | * Fix a valgrind error.
|
|---|
| 2813 |
|
|---|
| 2814 |
|
|---|
| 2815 | ######################################################################
|
|---|
| 2816 | Reporting bugs & Development Discussion
|
|---|
| 2817 | #######################################
|
|---|
| 2818 |
|
|---|
| 2819 | Please discuss this release on the samba-technical mailing list or by
|
|---|
| 2820 | joining the #samba-technical IRC channel on irc.freenode.net.
|
|---|
| 2821 |
|
|---|
| 2822 | If you do report problems then please try to send high quality
|
|---|
| 2823 | feedback. If you don't provide vital information to help us track down
|
|---|
| 2824 | the problem then you will probably be ignored. All bug reports should
|
|---|
| 2825 | be filed under the Samba 3.6 product in the project's Bugzilla
|
|---|
| 2826 | database (https://bugzilla.samba.org/).
|
|---|
| 2827 |
|
|---|
| 2828 |
|
|---|
| 2829 | ======================================================================
|
|---|
| 2830 | == Our Code, Our Bugs, Our Responsibility.
|
|---|
| 2831 | == The Samba Team
|
|---|
| 2832 | ======================================================================
|
|---|
| 2833 |
|
|---|
