Changeset 230 for branches


Ignore:
Timestamp:
May 26, 2009, 6:48:33 PM (16 years ago)
Author:
Herwig Bauernfeind
Message:

Update 3.2 branch to 3.2.7

Location:
branches/samba-3.2.x
Files:
5 edited

Legend:

Unmodified
Added
Removed

  • branches/samba-3.2.x/WHATSNEW.txt

    r228 r230  
    1                    ==============================
    2                    Release Notes for Samba 3.2.6
    3                          December 10, 2008
    4                    ==============================
     1                   =============================
     2                   Release Notes for Samba 3.2.7
     3                         January 05, 2009
     4                   =============================
    55
    66
    7 This is a bug fix release of the Samba 3.2 series.
     7This is a security release in order to address CVE-2009-0022.
    88
    9 Major enhancements included in Samba 3.2.6 are:
     9   o CVE-2009-0022
     10     In Samba 3.2.0 to 3.2.6, in setups with registry shares enabled,
     11     access to the root filesystem ("/") is granted
     12     when connecting to a share called "" (empty string)
     13     using old versions of smbclient (before 3.0.28).
    1014
    11   o Fix Winbind crash bugs.
    12   o Fix moving of readonly files.
    13   o Fix "write list" in setups using "security = share".
    14   o Fix access to cups-printers with cups 1.3.4.
    15   o Fix timeouts in setups with large groups.
    16   o Fix several bugs concerning Alternate Data Streams.
    17   o Add new SMB traffic analyzer VFS module.
     15The original security announcement for this and past advisories can
     16be found http://www.samba.org/samba/security/
    1817
    1918
    … …  
    2221#######
    2322
    24 Changes since 3.2.5
     23Changes since 3.2.6
    2524-------------------
    2625
    2726
    2827o   Michael Adam <obnox@samba.org>
    29     * BUG 5677: Fix test_{shlibs,nss_modules,pam_modules} on Solaris.
    30     * BUG 5765: Fix installlibs on solaris by using portable "test -r".
    31     * Fix potential segfault in vfs_tsmsm.
    32     * Don't list the domain twice when expanding internal aliases.
    33     * Fix the output of "getent group" when "winbind use default domain = yes"
    34       with "security = ads".
    35     * Add domain prefix to username in lookup_groupmem().
    36     * Prevent negative GM/ cache entries due to broken connections.
    37     * Fix crash in sync_eventlog_params().
    38     * Fix timeouts when calling 'getgrent'.
    39     * Fix smbd hanging on Solaris when winbindd closes socket.
    40 
    41 
    42 o   Jeremy Allison <jra@samba.org>
    43     * BUG 1254: Fix "write list" in setups using "security = share".
    44     * BUG 5080: Fix access to cups-printers with cups 1.3.4.
    45     * BUG 5737: Fix Winbind crash in an unusual failure mode.
    46     * BUG 5783: Fix FindFirst where search pattern equals the mangled filename.
    47     * BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file
    48       disposition.
    49     * BUG 5797: Fix moving of readonly files.
    50     * BUG 5814: Fix Winbind crash bug while doing "rescan_trusted_domain".
    51     * BUG 5818: Sort ACEs in smbcacl output properly and honor inheritance.
    52     * BUG 5825: Fix account locking with LDAP backend.
    53     * BUG 5826: Fix truncated filenames when accessing old servers.
    54     * BUG 5889: Fix "delete veto files = no".
    55     * BUG 5891: Fix smbd crash when viewing the eventlog exported by "eventlog
    56       list".
    57     * BUG 5900: Fix vfs_readonly.
    58     * BUG 5903: Fix vfs_streams_xattr breaking contents of files.
    59     * BUG 5904: Fix libnss_wins causing SIGABRT while servicing getaddrinfo()
    60       request.
    61     * BUG 5914: Fix build failure: redefinition of struct name_list.
    62     * BUG 5937: Fix filenames with "*" char hiding other files.
    63     * BUG 5953: Fix smbclient crashes.
    64     * Fix rename_open_files.
    65     * Restructure VFS SMB traffic analyzer VFS module.
    66     * Correctly fix smbclient to terminate on eof from server.
    67     * Unify access checks for lsa server functions.
    68     * Remove the requirement for ldap call made as root.
    69     * Cope with MAXIMUM_ALLOWED_ACCESS requests when opening handles.
    70     * Fix net rpc vampire, based on an *amazing* piece of debugging work by
    71       "Cooper S. Blake" <the_analogkid@yahoo.com>.
    72     * Fix Coverity IDs 456, 574, 592, 606 and 607.
    73     * Fix net rpc vampire.
    74 
    75 
    76 o   Gerald (Jerry) Carter <jerry@samba.org>
    77     * Use the same prerequisite for DDNS update as Windows XP.
    78     * Make "lwinet ads dns register" honor the "interfaces" parameter.
    79 
    80 
    81 o   Steven Danneman <steven.danneman@isilon.com>
    82     * Fix extended DN parse error when AD object does not have a SID.
    83 
    84 
    85 o   Guenther Deschner <gd@samba.org>
    86     * BUG 5888: Fix PNP_GetHwProfInfo().
    87     * BUG 5957: Do not abort rename process on valid rename script.
    88     * BUG 5898: Fix 'net rpc shutdown'.
    89     * Fix duplicate installation of cifs.upcall.
    90     * Fix _srvsvc_NetShareAdd segfault.
    91     * Ensure consistency when reporting password complexity.
    92     * Fix _lsa_GetUserName.
    93     * Fix access check in _samr_QuerySecurity().
    94     * _samr_DeleteUser needs to wipe out the user_handle on success.
    95     * NetGroupEnum_r needs to handle servers with no groups.
    96 
    97 
    98 o   Mathias Dietz <MDIETZ@de.ibm.com>
    99     * Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so.
    100 
    101 
    102 o   Dina Fine <dina@exanet.com>
    103     * BUG 5908: Fix internal change notify on shared directory.
    104 
    105 
    106 o   Nils Goroll <nils.goroll@hamburg.de>
    107     * BUG 5135 and 5446: Prevent calling POSIX ACL vfs methods on zfs share.
    108 
    109 
    110 o   Henning Henkel <henning.henkel@fh-furtwangen.de>
    111     * BUG 5929: Fix building of vfs_prealloc with option --with-cluster-support
    112       and GPFS.
    113 
    114 
    115 o   Holger Hetterich <hhetter@novell.com>
    116     * Add new VFS module to analyze SMB traffic
    117 
    118 
    119 o   Tomasz Krasuski <kr0tki@poczta.onet.pl>
    120     * BUG 5928: Fix 'testparm --version'.
    121 
    122 
    123 o   Jeff Layton <jlayton@redhat.com>
    124     * Have uppercase_string return success on NULL pointer in mount.cifs.
    125     * Make mount.cifs return codes match the return codes for /bin/mount.
    126     * Use lock/unlock_mtab scheme from util-linux-ng mount prog in mount.cifs.
    127 
    128 
    129 o   Volker Lendecke <vl@samba.org>
    130     * BUG 5691: Fig smbd panic on Solaris.
    131     * BUG 5778: Check if strlcpy and strlcat are already defined.
    132     * BUG 5840: Fix segfault in "rpcclient lsaaddacctrights".
    133     * BUG 5860: Fix nasty error message for overlong strings in safe_strcpy.
    134     * Fix a potential NULL deref in found by the IBM Checker.
    135     * Fix an uninitialized variable found by the IBM Checker.
    136     * Fix an unlikely memleak found by the IBM Checker.
    137     * Fix some missing error handlings.
    138     * Add workaround for domain joins using a netbios name which is different
    139       from the hostname.
    140     * Fix crash bug when freeing a non-malloc'ed buffer if the client sends a
    141       non-encrypted packet with the crypto state set.
    142     * Fix trans2findfirst for the large directory optimization.
    143     * Fix checking for presence of cups-devel and correct cups-devel test for
    144       HAVE_IPRINT.
    145 
    146 
    147 o   Derrell Lipman <derrell.lipman@unwireduniverse.com>
    148     * BUG 5805: Don't close stdout when calling setup_logging multiple times.
    149 
    150 
    151 o   Stefan Metzmacher <metze@samba.org>
    152     * Fix setting of trust password using 'net rpc trustdom add'.
    153     * Fix several issues in vfs_streams_xattr and vfs_stream_depot.
    154     * Return an error instead of crashing when no realm is given (trigerred by
    155       "net ads info -S 127.8.7.6" (where 127.8.7.6 doesn't exist)
    156       and "disable netbios = yes").
    157 
    158 
    159 o   Jim McDonough <jmcd@samba.org>
    160     * Fix the new vfs_smb_traffic_analyzer build for static links.
    161 
    162 
    163 o   TAKAHASHI Motonobu <monyo@samba.gr.jp>
    164     * BUG 5901: Fix default for streams_depot location.
    165 
    166 
    167 o   Tim Prouty <tim.prouty@isilon.com>
    168     * Fix several build warnings.
    169 
    170 
    171 o   Andreas Schneider <mail@cynapses.org>
    172     * Delete the krb5 ccname variable from the PAM environment if set.
    173     * Fix circular dependency error with autoconf 2.6.3.
    174 
    175 
    176 o   Martin Schwenke <martin@meltin.net>
    177     * Add @CIFSUPCALL_PROGS@ to "all" target so cifs.upcall gets built at
    178       compile time rather than install time.
    179 
    180 
    181 o   Davide Sfriso <sfriso@virgilio.it>
    182     * BUG 5906: Fix Winbind crash when calling 'getent group'.
    183 
    184 
    185 o   Dan Sledz <dsledz@isilon.com>
    186     * Add FreeBSD configure check for backtrace_symbols.
    187     * Fix logging to syslog.
    188     * Allow SYSLOG_FACILITY to be modified with a new configure option called
    189       --with-syslog-facility.
    190 
    191 
    192 o   Yasuma Takeda <yasuma@osstech.co.jp>
    193     * BUG 5909: Fix MS-DFS on Vista clients.
    194     * BUG 5944: Fix starting of nmbd with "socket address" set to "".
    195 
    196 
    197 o   Andrew Tridgell <tridge@samba.org>
    198     * Fix segfault on startup with trusted domains.
    199     * Re-add "winbind:ignore domains" parameter.
    200 
    201 
    202 o   Jelmer Vernooij <jelmer@samba.org>
    203     * Avoid freeing fsp twice when opening new_file fails (Debian #431696).
     28    * Fix for CVE-2009-0022.
    20429
    20530

  • branches/samba-3.2.x/source/Makefile

    r228 r230  
    2020smbtorture4_path=
    2121
    22 LIBS=
     22LIBS=-lsocket -lsyslog -lurpo
    2323CC=gcc
    2424SHLD=shared-libraries-disabled

  • branches/samba-3.2.x/source/VERSION

    r228 r230  
    2626SAMBA_VERSION_MAJOR=3
    2727SAMBA_VERSION_MINOR=2
    28 SAMBA_VERSION_RELEASE=6
     28SAMBA_VERSION_RELEASE=7
    2929
    3030########################################################

  • branches/samba-3.2.x/source/include/version.h

    r228 r230  
    22#define SAMBA_VERSION_MAJOR 3
    33#define SAMBA_VERSION_MINOR 2
    4 #define SAMBA_VERSION_RELEASE 6
    5 #define SAMBA_VERSION_OFFICIAL_STRING "3.2.6"
     4#define SAMBA_VERSION_RELEASE 7
     5#define SAMBA_VERSION_OFFICIAL_STRING "3.2.7"
    66#define SAMBA_VERSION_STRING samba_version_string()

  • branches/samba-3.2.x/source/smbd/service.c

    r137 r230  
    237237
    238238        if (!lp_registry_shares()) {
     239                return -1;
     240        }
     241
     242        if ((servicename == NULL) || (*servicename == '\0')) {
    239243                return -1;
    240244        }
Note: See TracChangeset for help on using the changeset viewer.