samba 2:4.11.1+dfsg-3ubuntu1 source package in Ubuntu

Changelog

samba (2:4.11.1+dfsg-3ubuntu1) focal; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/VERSION.patch: Update vendor string to "Ubuntu".
    - debian/smb.conf;
      + Add "(Samba, Ubuntu)" to server string.
      + Comment out the default [homes] share, and add a comment about
        "valid users = %s" to show users how to restrict access to
        \\server\username to only username.
    - debian/samba-common.config:
      + Do not change priority to high if dhclient3 is installed.
    - d/control, d/rules: Disable glusterfs support because it's not in main.
      MIR bug is https://launchpad.net/bugs/1274247
    - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch:
      change nfs service name from nfs to nfs-kernel-server
      (LP #722201)
      [Adopted the Debian version and added a couple of extra hunks
      we had]
    - d/p/ctdb-config-enable-syslog-by-default.patch:
      enable syslog and systemd journal by default
  * Dropped:
    - Add apport hook:
      + Created debian/source_samba.py.
      + debian/rules, debian/samba-common-bin.install: install hook.
      [In 2:4.9.4+dfsg-2]
    - Removed patches already applied upstream:
      + d/p/nsswitch-Add-try_authtok-option-to-pam_winbind.patch
        [Removed in 2:4.10.7+dfsg-1]
      + d/p/s3-auth-ignore-create_builtin_guests-failing-without.patch
        [Removed in 4.9.5+dfsg-1]
    - d/p/add-so-version-to-private-libraries: refreshed to remove fuzz
      [Refreshed in 2:4.1.17+dfsg-1]
    - d/control: Updated build dependencies (already updated in Debian):
      + tdb >= 1.3.17
      + talloc >= 2.1.15
      + tevent >= 0.9.38
      + ldb >= 1.5.3
    - d/samba-common.docs: README is now README.md
      [In 2:4.10.7+dfsg-1]
    - d/libsmbclient.symbols: update symbols for this version
    - d/libwbclient0.symbols: update symbols for this version
    - d/ctdb.install: new binary ctdb_local_daemons
      [In 2:4.10.7+dfsg-1]
    - d/samba-dev.install: use globbing for the header files with
      exceptions for wbclient.h and libsmbclient.h, which belong in
      other packages.
      [In 2:4.10.7+dfsg-1]
    - d/rules: fix globbing used to move the dckeytab python module to the
      samba package, and add a comment explaining why this is being done.
      [In 2:4.10.7+dfsg-1]
    - Switch to python3 (in 2:4.10.7+dfsg-1):
      + d/rules: calculate the ldb version using python3, and drop the
        "really" bit since the real 1.5.x series is being used now.
      + d/rules: make sure python3 is used for the build
      + d/rules: adjust globbing to remove the python3 version of tevent.so
      + d/rules: drop PYVERS, unused
      + d/control: adjust dependencies (build and runtime) for python3
      + d/python3-samba.install, d/control: new python3-samba package
        (LP #1440381)
      + d/control, d/python-samba.install: get rid of python-samba, which is py2
      + d/python3-samba.lintian-overrides: use the same overrides we had for
        python-samba, now deleted.
      + d/samba-dev.install, d/samba-libs.install: update file list
      + d/t/control, d/t/python-smoke: use python3
      + d/control: use ${python3:Depends} now instead of the python 2
        counterpart for samba and samba-common-bin.
    - d/control: drop suggests for python-gpgme, it's no longer available.
      [In 2:4.10.7+dfsg-1]
    - d/gbp.conf, d/watch, r/README.source: updated for 4.10
      [In 2:4.10.7+dfsg-1]
    - d/control: update cmocka build-depends to >= 1.1.3
      [In 2:4.10.7+dfsg-1]
    - d/samba-libs.install: bump passdb minor to 0.27.2
      [In 2:4.10.7+dfsg-1]
    - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d
      to allow pid file to exist (LP #1821775)
      [In 2:4.10.7+dfsg-1]
    - Allow proper ctdb initalization (LP #1828799):
      + d/ctdb.dirs: added /var/lib/ctdb/* directories
      + d/ctdb.postrm: remove leftovers from:
        /var/lib/ctdb/{state,persistent,volatile,scripts}
      [In 2:4.10.7+dfsg-1]
    - d/rules: installing provided config examples and helper scripts
    - Examples of NFS HA CTDB config files + helper script:
      + d/ctdb.example.enable.nfs.sh
      + d/ctdb.example.nfs-common
      + d/ctdb.example.nfs-kernel-server
      + d/ctdb.example.services
      + d/ctdb.example.sysctl-nfs-static-ports.conf
      [In 2:4.10.7+dfsg-1]
    - debian/rules: Make DEB_HOST_ARCH_CPU initialized through
      dpkg-architecture (Closes: #931138)
      [In 2:4.10.7+dfsg-1]
    - d/control: update ldb build-deps to 1.5.5
      [In 2:4.10.7+dfsg-1]
    - SECURITY UPDATE: restricted share escape by user (LP #1842533)
      [fixed upstream in 4.11.0rc2]
      + debian/patches/CVE-2019-10197-01-v4-10.patch: smbd: separate
        out impersonation debug info into a new function.
      + debian/patches/CVE-2019-10197-02-v4-10.patch: smbd: make sure that
        change_to_user_internal() always resets current_user.done_chdir
      + debian/patches/CVE-2019-10197-03-v4-10.patch: smbd: make sure we
        reset current_user.{need,done}_chdir in become_root()
      + debian/patches/CVE-2019-10197-04-v4-10.patch: selftest: make
        fsrvp_share its own independent subdirectory
      + debian/patches/CVE-2019-10197-05-v4-10.patch:
        test_smbclient_s3.sh: add regression test for the no permission
        on share root problem
      + debian/patches/CVE-2019-10197-06-v4-10.patch: smbd: split
        change_to_user_impersonate() out of change_to_user_internal()
      + CVE-2019-10197
  * Added:
    - d/control: drop python3-matplotlib. It's only used in
      script/attr_count_read which is not installed with the
      samba packages.

samba (2:4.11.1+dfsg-3) unstable; urgency=medium

  * Add some python dependencies:
    - python3-matplotlib : samba-tool visualize
    - python3-markdown   : samba-tool domain schemaupgrade
    - python3-dnspython  : samba-tool dns
  * Only build with default python3 (Closes: #943635)

samba (2:4.11.1+dfsg-2) unstable; urgency=high

  * New upstream security release
    - CVE-2019-10218: Malicious servers can cause Samba client code to return
      filenames containing path separators to calling code.
    - CVE-2019-14833: When the password contains multi-byte (non-ASCII)
      characters, the check password script does not receive the full password
      string.

samba (2:4.11.1+dfsg-1) unstable; urgency=medium

  * New upstream release

samba (2:4.11.0+dfsg-11) unstable; urgency=medium

  * Stop building with spotlight support which pulls glib (Closes: #941654)
  * Force quota support (Closes: #941899)
  * Standards-Version: 4.4.1, no change

samba (2:4.11.0+dfsg-10) unstable; urgency=medium

  * Add libwbclient-dev to samba-dev depends as samba-util was moved there
    (Closes: #941750)

samba (2:4.11.0+dfsg-9) unstable; urgency=medium

  * Remove versioned depends on libtdb-dev (>= 2) and add libldb-dev (>= 2:2)

samba (2:4.11.0+dfsg-8) unstable; urgency=medium

  * d/gbp.conf: sign-tags = True
  * Do not check smb.conf with testparm when server role=active directory domain
    controller (Closes: #931734)
  * Force one job during configure step with -j 1 (Closes: #941467).
    Not setting -j leads to default which is number of cpus

samba (2:4.11.0+dfsg-7) unstable; urgency=medium

  * Always evaluate WAF_NO_PARALLEL to ensure correct value (Closes: #941467)
  * This version is built with talloc from sid (Closes: #940963)

samba (2:4.11.0+dfsg-6) unstable; urgency=medium

  * Do not run waf configure in parallel. Fix FTBFS on arm (Closes: #941467)

samba (2:4.11.0+dfsg-5) experimental; urgency=medium

  * d/gitlabracadabra.yml: only_allow_merge_if_pipeline_succeeds: false
  * Remove patches:
    - "build: Remove tests for _readdir() and __readdir()"
    - "build: Remove tests for rdchk()"
    - "build: Remove tests for _pwrite() and __pwrite()"
  * Add patches by Ralph Boehme:
    - "wscript: remove all checks for _FUNC and __FUNC"
    - "wscript: split function check to one per line and sort alphabetically"

samba (2:4.11.0+dfsg-4) experimental; urgency=medium

  * Use the same arches for librados-dev than libcephfs-dev (Fix missing
    build-depends on alpha and sh4)
  * Split vfsmods:Recommends substvar into
    {vfsceph,vfsglusterfs,vfssnapper}:Recommends to make the code more readable
    and fix FTBFS on linux platforms without ceph (hppa and sparc64, and also
    alpha and sh4)
  * Add patch for "build: Remove tests for _readdir() and _readdir()", to
    hopefully fix FTBFS on armel

samba (2:4.11.0+dfsg-3) experimental; urgency=medium

  * Try to fix FTBFS on armel (armhf is fixed):
    - Add patch for build: Remove tests for rdchk()

samba (2:4.11.0+dfsg-2) experimental; urgency=medium

  * d/gitlabracadabra.yml: Add samba-team/libsmb2
  * Try to fix FTBFS on armel and armhf:
    - Add patch for build: Remove tests for _pwrite() and __pwrite()

samba (2:4.11.0+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * Upload to experimental
  * New upstream major release
    - Update d/gbp.conf, d/watch and d/README.source for 4.11
    - Import upstream release
    - Update fix-nfs-service-name-to-nfs-kernel-server.patch
    - Bump build-depends talloc >= 2.2.0, tdb >= 1.4.2, tevent >= 0.10.0 and
      ldb >= 2:2.0.7
    - libsamba-passdb.so bumped to 0.28.0
    - libnon-posix-acls is now a subsystem
    - Drop libparse-pidl-perl package (Closes: #939419)
    - Add new files to d/*.install
    - Move libsamba-util.so.* to libwbclient0, to avoid circular dependencies
    - Move libsamba-util deps to libwbclient0
  * Add build-Remove-tests-for-getdents-and-getdirentries.patch, to fix FTBFS on
    armel and armhf
  * salsa-ci: Build on experimental

  [ John Paul Adrian Glaubitz ]
  * Disable cephfs support on architectures where it's not stable
    (Closes: #940697)

  [ Louis van Belle ]
  * d/control, d/samba.install: added libtasn1-bin, libtasn1-6-dev to build
    dumpmscat
  * d/control, d/rules: Enable spotlight (TimeMachine)
  * d/control: Bump libtdb-dev (>= 2) in samba-dev deps
  * Update libwbclient0.symbols
  * d/rules: adjust LDB_DEPENDS

samba (2:4.10.8+dfsg-1) unstable; urgency=medium

  * Upload to unstable
  * New upstream release:
    - CVE-2019-10197: Combination of parameters and permissions can allow user
      to escape from the share path definition

samba (2:4.10.7+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * New upstream release
    - Update patches
    - Drop nsswitch-Add-try_authtok-option-to-pam_winbind.patch, merged
    - libsamba-passdb.so bumped to 0.27.2
    - Update symbols
    - Update installed files
  * samba-libs: Fix Breaks+Replaces: libndr-standard0 (<< 2:4.0.9)
    (Closes: #910242)
  * Add missing Breaks+Replace found by piuparts (Closes: #929217)
  * Enable vfs_nfs4acl_xattr (Closes: #930540)
  * ctdb:
    - enable ceph and etcd recovery lock
    - Downgrade ctdb_mutex_ceph_rados_helper shlibdeps to recommends
  * Add gitlabracadabra.yml
  * Update salsa-ci.yml

  [ Rafael David Tinoco ]
  * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
    (Closes: #931138)
  * CTDB NFS fixes from Ubuntu (Closes: #929931, LP: #722201):
    - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
      name from nfs to nfs-kernel-server
    - ctdb-config: depend on /etc/ctdb/nodes file
    - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
      allow pid file to exist
    - added /var/lib/ctdb/* directories
    - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
    - Add examples of NFS HA CTDB config files + helper script

  [ Mathieu Parent ]
  * Update d/gbp.conf, d/watch and d/README.source for 4.10
  * Drop ctdb-config-depend-on-etc-default-nodes-file.patch, merged upstream
  * Bump build-depends talloc >= 2.1.16, tdb >= 1.3.18, tevent >= 0.9.39 and
    ldb >= 2:1.5.5
  * Bump libcmocka-dev builddep to 1.1.3
  * d/rules: Remove 1.5.1+really prefix from LDB_DEPENDS
  * d/copyright:
    - s/GPL-3+/GPL-3.0+/ and s/LGPL-3+/LGPL-3.0+/
    - Move License details to end of file
    - Add waf licences
    - Add lib/replace licences
    - Update lib/{ldb,talloc,tdb} licences
  * Move to Python3 (from Ubuntu)
  * Bump debhelper from old 11 to 12.
  * Standards-Version: 4.4.0
  * Replace all reference of /var/run to /run (Closes: #934540)
  * Replace python shbang by python3 in d/*.py

 -- Andreas Hasenack <email address hidden>  Fri, 29 Nov 2019 18:00:22 -0300

Upload details

Uploaded by:
Andreas Hasenack
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
samba_4.11.1+dfsg.orig.tar.xz 11.2 MiB 7c216494de193661d28b9bfc9fc10d81576ee12559fdbe20a4beb4a7cc251b0b
samba_4.11.1+dfsg-3ubuntu1.debian.tar.xz 249.5 KiB a84258701181f091e971bb4bda4c98bfdba0a9db650145b270401cd8e1e3c39e
samba_4.11.1+dfsg-3ubuntu1.dsc 4.3 KiB 6c62d43da954b5403eb0dd49d2d17ac10ea3b6a6dba2778ca9e94a5e232ebc15

View changes file

Binary packages built by this source

ctdb: clustered database to store temporary data

 CTDB is a cluster implementation of the TDB database used by Samba and other
 projects to store temporary data. If an application is already using TDB for
 temporary data it is very easy to convert that application to be cluster aware
 and use CTDB instead.
 .
 CTDB provides the same types of functions as TDB but in a clustered fashion,
 providing a TDB-style database that spans multiple physical hosts in a cluster.
 .
 Features include:
  * CTDB provides a TDB that has consistent data and consistent locking across
    all nodes in a cluster.
  * CTDB is very fast.
  * In case of node failures, CTDB will automatically recover and repair all TDB
    databases that it manages.
  * CTDB is the core component that provides pCIFS ("parallel CIFS") with
    Samba3/4.
  * CTDB provides HA features such as node monitoring, node failover, and IP
    takeover.
  * CTDB provides a reliable messaging transport to allow applications linked
    with CTDB to communicate to other instances of the application running on
    different nodes in the cluster.
  * CTDB has pluggable transport backends. Currently implemented backends are
    TCP and Infiniband.
  * CTDB supports a system of application specific management scripts, allowing
    applications that depend on network or filesystem resources to be managed in
    a highly available manner on a cluster.

ctdb-dbgsym: debug symbols for ctdb
libnss-winbind: Samba nameservice integration plugins

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file and printer sharing with
 Microsoft Windows, OS X, and other Unix systems. Samba can also function
 as an NT4-style domain controller, and can integrate with both NT4 domains
 and Active Directory realms as a member server.
 .
 This package provides nss_winbind, a plugin that integrates
 with a local winbindd server to provide user/group name lookups to the
 system; and nss_wins, which provides hostname lookups via both the NBNS and
 NetBIOS broadcast protocols.

libnss-winbind-dbgsym: debug symbols for libnss-winbind
libpam-winbind: Windows domain authentication integration plugin

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file and printer sharing with
 Microsoft Windows, OS X, and other Unix systems. Samba can also function
 as an NT4-style domain controller, and can integrate with both NT4 domains
 and Active Directory realms as a member server.
 .
 This package provides pam_winbind, a plugin that integrates with a local
 winbindd server to provide Windows domain authentication to the system.

libpam-winbind-dbgsym: debug symbols for libpam-winbind
libsmbclient: shared library for communication with SMB/CIFS servers

 This package provides a shared library that enables client applications
 to talk to Microsoft Windows and Samba servers using the SMB/CIFS
 protocol.

libsmbclient-dbgsym: debug symbols for libsmbclient
libsmbclient-dev: development files for libsmbclient

 This package provides the development files (static library and headers)
 required for building applications against libsmbclient, a library that
 enables client applications to talk to Microsoft Windows and Samba servers
 using the SMB/CIFS protocol.

libwbclient-dev: Samba winbind client library - development files

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file and printer sharing with
 Microsoft Windows, OS X, and other Unix systems.
 .
 This package provides the development files (static library and headers)
 required for building applications against libwbclient, a library for client
 applications that interact via the winbind pipe protocol with a Samba
 winbind server.

libwbclient0: Samba winbind client library

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file and printer sharing with
 Microsoft Windows, OS X, and other Unix systems.
 .
 This package provides a library for client applications that interact
 via the winbind pipe protocol with a Samba winbind server.

libwbclient0-dbgsym: debug symbols for libwbclient0
python3-samba: Python 3 bindings for Samba

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains Python 3 bindings for most Samba libraries.

python3-samba-dbgsym: debug symbols for python3-samba
registry-tools: tools for viewing and manipulating the Windows registry

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains tools for viewing and manipulating the binary
 "registry" found on Windows machines, both locally and remote.

registry-tools-dbgsym: debug symbols for registry-tools
samba: SMB/CIFS file, print, and login server for Unix

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file and printer sharing with
 Microsoft Windows, OS X, and other Unix systems. Samba can also function
 as an NT4-style domain controller, and can integrate with both NT4 domains
 and Active Directory realms as a member server.
 .
 This package provides the components necessary to use Samba as a stand-alone
 file and print server or as an NT4 or Active Directory domain controller.
 For use in an NT4 domain or Active Directory realm, you will also need the
 winbind package.
 .
 This package is not required for connecting to existing SMB/CIFS servers
 (see smbclient) or for mounting remote filesystems (see cifs-utils).

samba-common: common files used by both the Samba server and client

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file and printer sharing with
 Microsoft Windows, OS X, and other Unix systems.
 .
 This package contains common files used by all parts of Samba.

samba-common-bin: Samba common files used by both the server and the client

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains the common files that are used by both the server
 (provided in the samba package) and the client (provided in the samba-clients
 package).

samba-common-bin-dbgsym: debug symbols for samba-common-bin
samba-dbgsym: debug symbols for samba
samba-dev: tools for extending Samba

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains include files shared by the various Samba-based
 libraries.

samba-dsdb-modules: Samba Directory Services Database

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains LDB plugins which add support for various Active
 Directory features to the LDB library.

samba-dsdb-modules-dbgsym: debug symbols for samba-dsdb-modules
samba-libs: Samba core libraries

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains the shared libraries.

samba-libs-dbgsym: debug symbols for samba-libs
samba-testsuite: test suite from Samba

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains programs for testing the reliability and speed
 of SMB servers, Samba in particular.

samba-testsuite-dbgsym: debug symbols for samba-testsuite
samba-vfs-modules: Samba Virtual FileSystem plugins

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 Virtual FileSystem modules are stacked shared libraries extending the
 functionality of Samba. Some examples are:
  * vfs_acl_xattr: Save NTFS-ACLs in Extended Attributes
  * vfs_audit: record selected Samba VFS operations in the system log
  * vfs_readonly: Make a Samba share read only for a specified time period
  * vfs_recycle: Give the same effect as the Recycle Bin on Windows computers
  * vfs_shadow_copy2: Expose snapshots to Windows clients as shadow copies
  * vfs_worm: Disallow writes for older file
 .
 Note: The runtime dependencies of vfs_ceph and vfs_snapper are moved to
 Recommends.

samba-vfs-modules-dbgsym: debug symbols for samba-vfs-modules
smbclient: command-line SMB/CIFS clients for Unix

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file and printer sharing with
 Microsoft Windows, OS X, and other Unix systems.
 .
 This package contains command-line utilities for accessing Microsoft
 Windows and Samba servers, including smbclient, smbtar, and smbspool.
 Utilities for mounting shares locally are found in the package
 cifs-utils.

smbclient-dbgsym: debug symbols for smbclient
winbind: service to resolve user and group information from Windows NT servers

 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft Windows, OS X,
 and other Unix systems. Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package provides winbindd, a daemon which integrates authentication
 and directory service (user/group lookup) mechanisms from a Windows
 domain on a Linux system.
 .
 Winbind based user/group lookups via /etc/nsswitch.conf can be enabled via
 the libnss-winbind package. Winbind based Windows domain authentication can
 be enabled via the libpam-winbind package.

winbind-dbgsym: debug symbols for winbind