-
samba (2:4.18.6+dfsg-1ubuntu2.1) mantic-security; urgency=medium
* SECURITY UPDATE: SMB clients can truncate files with read-only
permissions
- debian/patches/CVE-2023-4091-*.patch
- CVE-2023-4091
* SECURITY UPDATE: Samba AD DC password exposure to privileged users and
RODCs
- debian/patches/CVE-2023-4154-*.patch
- CVE-2023-4154
* SECURITY UPDATE: rpcecho development server allows Denial of Service
via sleep() call on AD DC
- debian/patches/CVE-2023-42669-*.patch
- CVE-2023-42669
* SECURITY UPDATE: Samba AD DC Busy RPC multiple listener DoS
- debian/patches/CVE-2023-42670-*.patch
- CVE-2023-42670
-- Marc Deslauriers <email address hidden> Tue, 10 Oct 2023 12:25:20 -0400
-
samba (2:4.18.6+dfsg-1ubuntu2) mantic; urgency=medium
* No-change rebuild with glusterfs 10.3 (LP: #2035127)
-- Andreas Hasenack <email address hidden> Wed, 13 Sep 2023 09:57:01 -0300
-
samba (2:4.18.6+dfsg-1ubuntu1) mantic; urgency=medium
* Merge with Debian unstable (LP: #2031655, LP: #2031619). Remaining changes:
- debian/control: Ubuntu i386 binary compatibility:
+ drop ceph support
+ enable the liburing vfs module, except on i386 where liburing is
not available
- d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
samba AD DC provisioning and domain join tests with internal DNS
(LP #1977746, LP #2011745)
* Dropped:
- build-depend on libglusterfs-dev only on !i386 arches
[In 2:4.18.5+dfsg-2]
- Add changes to fix uncaught exception when updating old password
containing regex metacharacters by simplifying samba-tool password
redaction (LP #2002949).
+ d/p/lib-cmdline-Return-if-the-commandline-was-redacted-i.patch
+ d/p/lib-cmdline-Also-redact-newpassword-in-samba_cmdline.patch
+ d/p/lib-cmdline-Also-burn-the-password2-parameter-if-giv.patch
+ d/p/samba-tool-Use-samba.glue.get_burnt_cmdline-rather-t.patch
+ d/p/python-Add-glue.burn_commandline-method.patch
+ d/p/python-Move-PyList_AsStringList-to-common-code-so-we.patch
+ d/p/python-Remove-const-from-PyList_AsStringList.patch
[Fixed upstream in 4.18.6]
* Added:
- d/control: adjust breaks/replaces for file move that Debian did in
4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
file conflict in a dist-upgrade from earlier Ubuntu releases, like
Kinetic (LP: #2024663)
- d/rules: ceph is not available in Ubuntu i386, disable it
-- Andreas Hasenack <email address hidden> Thu, 17 Aug 2023 09:52:00 -0300
-
samba (2:4.18.5+dfsg-1ubuntu2) mantic; urgency=medium
* Add changes to fix uncaught exception when updating old password
containing regex metacharacters by simplifying samba-tool password
redaction (LP: #2002949).
- d/p/lib-cmdline-Return-if-the-commandline-was-redacted-i.patch
- d/p/lib-cmdline-Also-redact-newpassword-in-samba_cmdline.patch
- d/p/lib-cmdline-Also-burn-the-password2-parameter-if-giv.patch
- d/p/samba-tool-Use-samba.glue.get_burnt_cmdline-rather-t.patch
- d/p/python-Add-glue.burn_commandline-method.patch
- d/p/python-Move-PyList_AsStringList-to-common-code-so-we.patch
- d/p/python-Remove-const-from-PyList_AsStringList.patch
-- Michal Maloszewski <email address hidden> Fri, 28 Jul 2023 00:55:03 +0200
-
samba (2:4.18.5+dfsg-1ubuntu1) mantic; urgency=medium
* Merge with Debian unstable (LP: #2028265, LP: #2027716). Remaining
changes:
- debian/control: Ubuntu i386 binary compatibility:
+ drop ceph support
+ enable the liburing vfs module, except on i386 where liburing is
not available
+ build-depend on libglusterfs-dev only on !i386 arches
- d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
samba AD DC provisioning and domain join tests with internal DNS
(LP #1977746, LP #2011745)
- d/t/util: reload instead of restarting samba, as it's quicker and
has the same effect we want in this test
-- Andreas Hasenack <email address hidden> Thu, 20 Jul 2023 10:15:22 -0300
-
samba (2:4.18.3+dfsg-3ubuntu1) mantic; urgency=medium
* Merge with Debian unstable (LP: #2018054). Remaining changes:
- debian/control: Ubuntu i386 binary compatibility:
+ drop ceph support
+ enable the liburing vfs module, except on i386 where liburing is
not available
+ build-depend on libglusterfs-dev only on !i386 arches
- d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
samba AD DC provisioning and domain join tests with internal DNS
(LP #1977746, LP #2011745)
* Added changes:
- d/t/util: reload instead of restarting samba, as it's quicker and
has the same effect we want in this test
-- Andreas Hasenack <email address hidden> Thu, 22 Jun 2023 11:59:19 -0300
-
samba (2:4.17.7+dfsg-1ubuntu1) lunar; urgency=medium
* Merge with Debian unstable (LP: #2014052). Remaining changes:
- debian/control: Ubuntu i386 binary compatibility:
+ drop ceph support
+ enable the liburing vfs module, except on i386 where liburing is
not available
+ build-depend on libglusterfs-dev only on !i386 arches
- d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
samba AD DC provisioning and domain join tests with internal DNS
(LP #1977746, LP #2011745)
-- Andreas Hasenack <email address hidden> Fri, 31 Mar 2023 15:26:11 -0300
