The annotated tag, samba-4.17.11 has been created at 3b739b9a155415ba9cf8434bf4204a76c6020108 (tag) tagging f3e7be14a36722d3281274d5c46c928f074026df (commit) replaces samba-4.17.10 tagged by Jule Anger on Thu Sep 7 11:00:54 2023 +0200
- Log ----------------------------------------------------------------- samba: tag release samba-4.17.11 -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEgfXigyvSVFoYl7cTqplEL7aAtiAFAmT5kUYACgkQqplEL7aA tiCBzBAApHBuxwsTjVuF/H1Xute6mIWRmKZRBlgOGkjv0462VRT0qVyNgPzIQBfH 04Nb8T2FlQ7Ej5v6hVoSBcKhGjbGjdf+t302g+hpY7wLRFl/r34+fhJulVNS4FgD xngI3fy89i8gncCuiU1mzK+L1VqE35qwpgdHwh00lT0vvMnfoPr989ZQUd6qJc0F LX+ziPZj3MZBn8Yebk8TUDZ6SajDQXQfYVFfQ/Ck3jv/6RmmhU3mYyQjKiJHGo6J ssLi9tVbyTbCLJr/BXTH8AvUbSeqOg7po7syRyKqIoPlXwODzJuPGB73V+UG8ftw t/jHIETKX7FKLWAsgF50pYMZuepXY2C25w1YHIYYbF4rYV6SvJIO7DgpRPdKYhcN VRUebd0wVh1pTd27gyoiJgx2Oc7UK9BhOXIbv3kFS4bDe4mUqsh3Jm5CX1838KUJ FF1DZiIz1XM5g8WU6+adk+t4FqpDgXx8hdYYG0aEWuBFDhS5eE9dRpZ/iIcStMH2 KNgVGw9d3MlrK0QKMFM3HbRAOzpkL1NrFEuJ0TB9ZT0tt52g2XulbeJOytkRFhJu guTpMatRFb6HbCv1RTGxBJMEjwy04kr5brYJLM0UoZH6oqFIkaDDinUKf3oEC+Wy J6LHLV0gaCaVvfJnuSdr8rRy4Kvilcna2SXe6z3VjsPmgsep0Pc= =F7ST -----END PGP SIGNATURE----- Andrew Bartlett (27): dsdb: Add new function samdb_system_container_dn() dsdb: Use samdb_system_container_dn() in samldb.c dsdb: Use samdb_get_system_container_dn() to get Password Settings Container s4-rpc_server/lsa: Use samdb_system_container_dn() in dcesrv_lsa_get_policy_state() s4-rpc_server/netlogon: Use samdb_system_container_dn() in fill_trusted_domains_array() s4-rpc_server/backupkey: Use samdb_system_container_dn() in set_lsa_secret() s4-rpc_server/backupkey: Use samdb_system_container_dn() in get_lsa_secret() dsdb: Use samdb_system_container_dn() in dsdb_trust_*() dsdb: Use samdb_system_container_dn() in pdb_samba_dsdb_*() s4-rpc_server/drsuapi: Add tmp_highest_usn tracking to replication log s4-rpc_server/drsuapi: Improve debugging of invalid DNs s4-rpc_server/drsuapi: Improve debug message for drs_ObjectIdentifier_to_dn_and_nc_root() failure s4-dsdb: Improve logging for drs_ObjectIdentifier_to_dn_and_nc_root() s4-rpc_server/drsuapi: Remove rudundant check for valid and non-NULL ncRoot_dn s4-torture/drs: Save the server dnsname on the DcConnection object s4-torture/drs: Create temp OU with a unique name per test s4-torture/drs: Use addCleanup() in getchanges.py for OU handling s4-torture/drs: Add a test matching Azure AD Connect REPL_OBJ behaviour s4-torture/drs: Add test demonstrating that a GetNCChanges REPL_OBJ will not reset the replication cookie s4-torture/drs: Add test showing that if present in the set the NC root leads and tmp_highest_usn moves s4-rpc_server/drsuapi: Only keep and invalidate replication cycle state for normal replication s4-rpc_server/drsuapi: Fix indentation in GetNCChanges() s4-rpc_server/drsuapi: Avoid modification to ncRoot input variable in GetNCChanges s4-rpc_server/drsuapi: Rename ncRoot -> untrusted_ncRoot to avoid misuse s4-rpc_server/drsuapi: Update getnc_state to be != NULL s4-rpc_server/drsuapi: Ensure logs show DN for replicated objects, not (null) s4-rpc_server/drsupai: Avoid looping with Azure AD Connect by not incrementing temp_highest_usn for the NC root Arvid Requate (2): For Bug #9959: local talloc frame for next commit Bug #9959: Don't search for CN=System Jeremy Allison (11): s3: smbd: Sanitize any "server" and "share" components of SMB1 DFS paths to remove UNIX separators. s3: smbd: Deliberately currupt an uninitialized pointer. s3: torture: Add SMB1-TRUNCATED-SESSSETUP test. s3: smbd: Ensure srvstr_pull_req_talloc() always NULLs out *dest. s3: smbd: Uncorrupt the pointer we were using to prove a crash. s3: smbd: Ensure all callers to srvstr_pull_req_talloc() pass a zeroed-out dest pointer. s3: torture: Add a test doing an SMB1 negotiate+exit. s3: smbd: Add missing 'return;'s in exit paths in reply_exit_done(). s3: smbd: init_smb1_request() isn't being passed zero'ed memory from any codepath. s3: torture: Add SMB1-NEGOTIATE-TCON that shows the SMB1 server crashes on the uninitialized req->session. s3: smbd: Ensure init_smb1_request() zeros out what the incoming pointer points to. Jones Syue (2): vfs_aio_pthread: fix segfault if samba-tool ntacl get mdssvc: Do an early talloc_free() in _mdssvc_open() Jule Anger (3): VERSION: Bump version up to Samba 4.17.11... WHATSNEW: Add release notes for Samba 4.17.11. VERSION: Disable GIT_SNAPSHOT for the 4.17.11 release. Martin Schwenke (16): ctdb-build: Use pcap-config when available ctdb-build: Add --enable-pcap configure option ctdb-common: Move a misplaced comment ctdb-common: Do not use raw socket when ENABLE_PCAP is defined ctdb-common: Fix a warning in the pcap code ctdb-common: Stop a pcap-related crash on error ctdb-common: Use pcap_get_selectable_fd() ctdb-common: Improve/add debug ctdb-tools: Improve/add debug ctdb-common: Add packet type detection to pcap-based capture ctdb-common: Support "any" interface for pcap-based capture ctdb-common: Support IB in pcap-based capture ctdb-scripts: Add debugging variable CTDB_KILLTCP_DEBUGLEVEL ctdb-common: Improve error handling ctdb-common: Replace pcap_open_live() by lower level calls ctdb-common: Set immediate mode for pcap capture MikeLiu (1): vfs_aio_pthread: use SMB_VFS_NEXT_OPENAT() in aio_pthread_openat_fn() Noel Power (5): s3/utils: avoid erronous NO MEMORY detection selftest: Add new dfs share (with widelinks enabled) sefltest: Add new regression test dfs with widelinks = yes s3/modules: Add flag indicating if connected share is a dfs share s3/modules: Fix DFS links when widelinks = yes Ralph Boehme (11): smbd: don't leak the fsp if close_file_smb() fails mdssvc: set query state for continued queries to SLQ_STATE_RUNNING mdssvc: fix long running backend queries mdssvc: add and use SL_PAGESIZE mdssvc: fix enforcement of "elasticsearch:max results" tests/mdssvc: match hits:total:value to be the actual amount of entries in hits mdssvc: reduce pagesize to 50 mdssvc: prepare for returning timestamps with sub-seconds granularity mdssvc: fix date marshalling mdssvc: fix returning file modification date for older Mac releases mdssvc: better support for search with mdfind from Macs Stefan Metzmacher (10): vfs_aio_pthread: don't crash without a pthreadpool s4:torture/ndr: add tests for DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED librpc/rpc: let dcerpc_read_ncacn_packet_next_vector() handle fragments without any payload dcerpc.idl: fix definitions for DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED payload s4:torture/smb2: let torture_smb2_con_sopt() use smb2_connect() s4:torture/smb2: let us have a common torture_smb2_con_share() s4:torture/smb2: make it possible to pass existing_conn to smb2_connect_ext() s4:torture/smb2: add smb2.multichannel.bugs.bug_15346 s3:smbd: always clear filter_subreq in smb2srv_client_mc_negprot_next() s3:smbd: fix multichannel connection passing race Volker Lendecke (1): smbXcli: Pass negotiate contexts through smbXcli_negprot_send/recv ----------------------------------------------------------------------- -- Samba Shared Repository