The branch, master has been updated via 7604118 add references to https://bugzilla.samba.org/show_bug.cgi?id=14901 from 8375dbc add a reference to the regression fixes at https://bugzilla.samba.org/show_bug.cgi?id=14899
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master - Log ----------------------------------------------------------------- commit 76041187b55e10febd033ce7087c3ef4c6160af1 Author: Stefan Metzmacher <me...@samba.org> Date: Thu Nov 11 21:23:05 2021 +0100 add references to https://bugzilla.samba.org/show_bug.cgi?id=14901 ----------------------------------------------------------------------- Summary of changes: posted_news/20211108-113640.4.15.2.body.html | 6 ++++++ security/CVE-2020-25717.html | 10 ++++++++++ 2 files changed, 16 insertions(+) Changeset truncated at 500 lines: diff --git a/posted_news/20211108-113640.4.15.2.body.html b/posted_news/20211108-113640.4.15.2.body.html index 7ebb6a3..4370442 100644 --- a/posted_news/20211108-113640.4.15.2.body.html +++ b/posted_news/20211108-113640.4.15.2.body.html @@ -21,6 +21,12 @@ as there are important behaviour changes for There's sadly a regression that "allow trusted domains = no" prevents winbindd from starting, fixes are available at <a href="https://bugzilla.samba.org/show_bug.cgi?id=14899">bug #14899</a>. +</p><p> +Please also notice the additional fix and advanced example +for the 'username map [script]' based fallback from +'DOMAIN\user' to 'user'. See +<a href="https://bugzilla.samba.org/show_bug.cgi?id=14901">bug #14901</a> and +<a href="https://gitlab.com/samba-team/samba/-/merge_requests/2251">Gitlab merge request 2251</a>. </p> <p> diff --git a/security/CVE-2020-25717.html b/security/CVE-2020-25717.html index 8371c90..49811db 100644 --- a/security/CVE-2020-25717.html +++ b/security/CVE-2020-25717.html @@ -94,6 +94,16 @@ Please consult 'man 5 smb.conf' for further details on 'username map' or 'username map script'. Also note that in the above example '\' refers to the default value of the 'winbind separator' option. +[Added 2021-11-11] + There's sadly a regression that "allow trusted domains = no" + prevents winbindd from starting, fixes are available at + https://bugzilla.samba.org/show_bug.cgi?id=14899 + + Please also notice the additional fix and advanced example + for the 'username map [script]' based fallback from + 'DOMAIN\user' to 'user'. See + https://bugzilla.samba.org/show_bug.cgi?id=14901 and + https://gitlab.com/samba-team/samba/-/merge_requests/2251 ============ Beyond Samba -- Samba Website Repository