The annotated tag, tdb-1.4.14 has been created
at a76a793127c912e88c80ab0d245d7ff29589f62a (tag)
tagging 823ed52d5c561d8598da251154571402a307b367 (commit)
replaces tevent-0.17.0
tagged by Jule Anger
on Thu Aug 7 17:07:21 2025 +0200
- Log -----------------------------------------------------------------
tdb: tag release tdb-1.4.14
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEEkUejOXGVGO6QEby1R5ORYRMIQCUFAmiUwSkACgkQR5ORYRMI
QCUA6QgAmnFtYXyNaG9++tiU4otUgczuBpOIyBaB6bY2gQ3+aGG2j6LLZ/Z9ZtA6
toaL5QmesPQP8ViH7PItAn/m7mw2X7TSjuCBb/cVF9PCTMOf9w4l0iEdJAqmTaAX
kDJYHXCiMlhqRHwhH9kpnnAXtuik4tF6SLmvgjMO7SJqBT/spTFwab/qr2ymwjqd
OpXpyjO2DNwS+v87GtUNYYSxJV+jaLMGLzZEcfj8v9bpC2wJ0SAHsmBeMI6NBaX/
Muw2iC546H2nGN+V+CTFq/WqnVEaLXfTpoxFEuY1lG9huEzecDReMCpcKl2Pi16s
UrX6vPXbIwSRo1dXMheYlwF0S7P16g==
=STkX
-----END PGP SIGNATURE-----
Aleksandr Sharov (1):
Add check for the GPO link to have at least two attributes separated by
semicolumn. Allows to handle empty links.
Andreas Schneider (20):
s3:utils: Fix memory leaks in test_ntlm_in_both()
s3:utils: Fix memory leaks in test_lm_ntlm_broken()
s3:utils: Fix memory leaks in test_lmv2_ntlmv2_broken()
s3:utils: Fix memory leaks in test_ntlm_in_lm()
s3:utils: Fix memory leaks in manage_ntlm_server_1_request()
s3:utils: Allocate memory on the frame in ntlm_auth main function.
gitlab-ci: Update build instructions for Coverity
coverity: Add some documentation for the modelling file
coverity: Add makefile to build/test the modelling file
coverity: Rename README to README.md
coverity: Update README.md
coverity: Add some additional check for strequal()
auth:creds: Make sure when parsing username that realm is uppercase
auth:creds: Always store the ccache name
auth:creds: Add cli_credentials_get_out_ccache_name()
librpc:gse: Implement storing tickets into an emtpy ccache
lib:cmdline: Check if we have a valid default ccache
docs-xml: Update documentation for --use-kerberos and --use-krb5-ccache
s3:tests: Fix shellcheck warning of test_wbinfo_lookuprids_cache.sh
s3:tests: Use bash and disable history expansion for
test_wbinfo_lookuprids_cache.sh
Anoop C S (5):
s3/smbd: Conditionally define smb2_request_to_snum()
vfs_ceph: Add ctime processing to SMB_VFS_FNTIMES
vfs_ceph: Handle the special case of UTIME_NOW
vfs_ceph_new: Handle the special case of UTIME_NOW
third_party/quic_ko_wrapper: Remove unused config check
Daniel Widrick (1):
s3:winbind: Correct spelling in debug messages related to ADS
Douglas Bagnall (2):
dsdb: fix bug 15872, use-after-free
librpc:bcrypt_rsakey_blob: exponent and modulus lengths can't be zero
Gary Lockyer (13):
librpc/idl: Add idl for msDS-KeyCredentialLink
gitignore: remove clang-format
librpc/idl: Add idl for BCRYPT_RSAKEY_BLOB
librpc/idl: update keycredlink comments
librpc/idl: Add idl for tpm20_rsakey_blob
librpc: keycredlink support X509 public keys
s4:kdc: Fix clang-tidy error in db-glue.c
s4:kdc:sdb: Add support for key trust public keys
s4:kdc Support for key trust authentication
librpc:ndr:keycredlink fix CID 1660828
librpc:ndr:keycredlink clean up includes
s4:kdc:db-glue talloc steal pub_key data
librpc:ndr:keycredlink don't require that kmi be a talloc_context
Günther Deschner (5):
s3-winbindd: Fix internal winbind dsgetdcname calls w.r.t. domain name
s3-selftest: add tests for "net ads kerberos" commands
s3-net: fix "net ads kerberos" krb5ccname handling
s3-selftest: fix test_wbinfo_lookuprids_cache.sh
lib/tdb: let tdbtool return error on failure
Jule Anger (1):
tdb: version 1.4.14
Martin Schwenke (14):
ctdb-common: Fix includes to make file standalone
ctdb-tests: Reformat with "shfmt -w -p -i 0 -fn"
ctdb-common: Require separate initialisation of tunable defaults
ctdb-tests: Add logging support to the tunables unit test
ctdb-common: Log a message if the tunables file does not exist
ctdb-common: Log tunables filename instead of function name
ctdb-tests: Allow tunables unit test to process a second file
ctdb-common: Add tunable directory loading
ctdb-tests: Add tests for tunables directory loading
ctdb-server: Whitespace fixes
ctdb-server: Load optional tunables.d/ directory
ctdb-tests: Fix CID 1373387 - Time of check time of use (TOCTOU)
ctdb-tcp: Fix CID 1291643 - Resource leak (RESOURCE_LEAK)
ctdb-tests: Fix CID 1659221 - Error handling issues (CHECKED_RETURN)
Michael Adam (1):
s3:passdb: Fix CIDs 1596750,1596751 uninitialized pointer read
Michael Saxl (1):
rpc registry: add ProductType for AD DC
Pavel Filipenský (12):
selftest: Make '$prefix' absolute path and remove '$prefix_abs'
selftest:s3: Fix prefix in setup functions
selftest:s4: Fix prefix in setup functions
selftest: Remove prefix_abs from ctx hash key
selftest:s4: Delete no longer used hash key 'prefix_abs' from ctx
tests: Replace PREFIX_ABS with PREFIX
selftest: Remove no longer used PREFIX_ABS from environment
tests: Rename local variable: prefix_abs -> prefix
s3:winbindd: Resolve dc name using CLDAP also for ROLE_IPA_DC
docs-xml: Make smb.conf 'server role' value consistent with ROLE_IPA_DC
in libparam
s3:netlogon: IPA DC is the PDC as well - allow ROLE_IPA_DC in
_netr_DsRGetForestTrustInformation()
s3:utils: Allow ROLE_IPA_DC to allow to use Kerberos in gensec
Rabinarayan Panigrahi (2):
vfs_virsufilter: Fix the invocation of SMB_VFS_NEXT_CONNECT
libcli/security: use talloc_free at the end of sub-tests
Ralph Boehme (46):
libads: fix get_kdc_ip_string() ...
tests: expand SMB3 POSIX test for Windows illegal characters behaviour
libsmb: add flags to struct file_info
libsmb: set finfo->flags.posix in parse_finfo_posix_info()
libsmb: use parse_finfo_posix_info in is_bad_finfo_name()
smbd: pass dirfsp instead of conn and dptr to smbd_dirptr_lanman2_entry()
and get_lanman2_dir_entry()
smbd: avoid mangling names in smbd_dirptr_lanman2_match_fn() for POSIX
libcli/smb: move cli_session_dump_keys() to libsmb
libcli/smb: make smbXcli_session_dump_keys() usable for the server side
libcli/smb: also dump signing_algo in smbXcli_session_dump_keys()
s4/libcli/smb2: pass lp_ctx to smb2_session_init() and remember debug
encryption settings
s4/libcli/smb2: dump encryption keys if enabled
libcli/smb2: dump encryption key in format for Wireshark
~/.wireshark/smb2_seskey_list
smbd: now also use smbXcli_session_dump_keys() in the server
libcli/smb: use talloc_asprintf_addbuf() in smbXcli_session_dump_keys()
s3/libads: get rid of additional loop calling
add_failed_connection_entry()
libads: check for if DCs are in paused state when processing CLDAP replies
s3/libsmb: check command in make_dc_info_from_cldap_reply()
s3/libsmb: check the negative-conn-cache in resolve_ads()
s3/dbwrap_watch: avoid leaking backend db handle in traverses
smbd: fix include order in smbXsrv_open.c
smbtorture: add test smb2.replay.durable-reconnect-replay1
smbtorture: add test smb2.replay.durable-reconnect-replay2
smbtorture: add test smb2.replay.durable-reconnect-replay3
smbtorture: add test smb2.replay.replay-twice-durable
smbd: simplify create_action handling
smbd: move create_action handling to smbd_smb2_create_after_exec()
smbd: add some debugging to smbXsrv_open_[lookup|set]_replay_cache()
smbd: move DH2Q context processing to its own function
smbd: simplify create-replay
smbd: move create_action to smbXsrv_open_global0
smbd: invert logic when handling pending create in
smb2srv_open_lookup_replay_cache()
smbd: make the replay cache record an index on the global open table
smbd: add and use smbXsrv_open_replay_cache_key_buf
smbd: add smbXsrv_session to smbXsrv_open
smbd: add smbXsrv_tcon to smbXsrv_open
smbd: Add session_global_id and tcon_global_id to smbXsrv_open_global0
smbd: implement session check from MS-SMB2 3.3.5.9 Receiving an SMB2
CREATE Request
libndr: add support for unions to ndr_pull_struct_blob_noalloc() and
ndr_push_struct_into_fixed_blob()
smbd: make create-replay cache disk backed
smbd: also delete replay cache record in smbXsrv_open_cleanup()
smbd: reformat smbXsrv_open_global_traverse() function pointer args
smbd: return replay-cache records in smbXsrv_open_global_traverse()
net: handle replay records in `net serverid wipedbs`
net: add `net tdb smbXsrv wipedbs` alias for `net serverid wipedbs`
docs: document serverid command
Samuel Cabrero (11):
s3:winbind: Fix debug message
python:tests/nss: Add NSS group enumeration test
s3:winbind: Delegate normalize_name_map to the idmap child in
wb_next_grent
s3:winbind: Delegate normalize_name_map to the idmap child in
winbindd_getgrnam
s3:winbind: Delegate normalize_name_map to the idmap child in
winbindd_getgrgid
s3:winbind: Remove unused fill_grent()
s3:winbind: Delegate normalize_name_unmap to the idmap child in
winbindd_getgrnam
s3:winbind: Delegate normalize_name_unmap to the idmap child in
winbindd_getpwnam
s3:winbind: Delegate normalize_name_unmap to the idmap child in
winbindd_getgroups
s3:winbind: Initialize and setup idmap child in winbindd_getpwnam()
s3:winbind: Initialize and setup idmap child in winbindd_getgrnam()
Shachar Sharon (12):
profile: dynamic per-share in-memory counters
profile: defined helper macros for per-share counters
profile: collect per-share counters from TDB
profile: reset per-share counters
param: allow per-share profiling mode
smbd: init per-share profile counters
smbd: smb2-operations per-share profile counters
status: dump per-share profile counters
status: dump only relevant sections of per-share
s3/smb_prometheus_endpoint: export per-share profile stats
vfs_default: use per-share profile macros
vfs_ceph_new: use per-share profile macros
Shweta Sodani (2):
vfs_ceph_new: cleanup to async path
s3:smbd: Fix CID 1449599 replacing memcpy to memmove to avoid overflow
Shwetha K Acharya (1):
source3/printing: Fix CID 1273086 - Resource Leak
Srinivas Rao V (1):
smbd: fix mode being sent to possibly_set_archive
Stefan Metzmacher (55):
s4:torture/smb2: let max_async_credits tests start the loop only when
everything is ready
s4:torture/smb2: force a disconnect on all connections as async_credits
tests
s4:torture/smb2: add explicit timeout handling to async_credits tests
lib/tsocket: make use of tevent_req_set_cleanup_fn() instead of
talloc_set_destructor()
lib/tsocket: allow only one tstream_disconnect_send/recv
lib/tsocket: add tstream_monitor_send/recv infrastructure
lib/tsocket: implement tstream_bsd_monitor_send/recv
libcli/named_pipe_auth: add tstream_npa_monitor_send/recv
async_sock: move samba_socket_{poll,sock,poll_or_sock}_error() from
util_net.c to async_sock.c
async_sock: add wait_for_error_send/recv
libcli/smb: merge smb_transport library into cli_smb_common
libcli/smb: introduce smbXcli_transport_bsd
libcli/smb: let smbXcli_conn_create() call smbXcli_transport_bsd()
libcli/smb: pass smbXcli_transport to smbXcli_conn_create()
s3:libsmb: pass smbXcli_transport to cli_state_create()
s3:libsmb: let cli_connect_sock_recv() return smbXcli_transport
s3:winbindd: let cm_open_connection() call smbXcli_transport_bsd()
s3:winbindd: let find_dc() call smbXcli_transport_bsd()
s3:libsmb: let smbsock_any_connect() return smbXcli_transport
s4:libcli: let struct smbcli_socket hold struct smbXcli_transport instead
of sockfd
s3:libsmb: let smbsock_any_connect_recv return smbXcli_transport
s3:libsmb: let smbsock_connect() return smbXcli_transport
s3:libsmb: let smbsock_connect_recv() return smbXcli_transport
libcli/smb: let smbXcli_transport_bsd() take an fd by reference
libcli/smb: add smbXcli_conn_monitor_{send,recv,once}()
s3:client: make use of smbXcli_conn_monitor_once()
libcli/smb: abstract transport function calls
libcli/smb: make read_smb_more non-static
libcli/smb: add smbXcli_transport_tstream()
libcli/smb: add smbXcli_transport_bsd_tstream()
s3:libsmb: add 'client smb transport:force_bsd_tstream = yes' option
selftest: don't skip smb2.bench
s3:selftest: run smb2.{bench,connect,credits,ioctl,rw} over bsd-tstream
s3:winbindd: avoid using any netlogon call to get a dc name
libcli/smb: define SMB_TRANSPORT_TYPE_QUIC
lib/param: allow smb_transport[s]_parse() to handle 'quic'
system_gnutls: print the found gnutls version and detected features
third_party: import quic from https://github.com/lxin/quic.git
s4:lib/tls: add tstream_tls_params_quic_{prepare,enabled() and
tstream_tls_quic_handshake[_{send,recv}]()
s3:smbd: add support for SMB_TRANSPORT_TYPE_QUIC
s3:libsmb: add support for SMB_TRANSPORT_TYPE_QUIC
third_party: import ngtcp2 v1.13.0 from
https://github.com/ngtcp2/ngtcp2.git
third_party: add quic_ko_wrapper to simulate IPPROTO_QUIC sockets
selftest: use quic_ko_wrapper if available
selftest: let 'fileserver' support quic
s3:selftest: run smb2.{bench,connect,credits,ioctl,rw} over
quic_ko_wrapper
lib/tsocket: optimize tdgram_recvfrom_done() into tdgram_recvfrom_send()
s4:lib/tls: add tstream_tls_ngtcp2_connect_send/recv
s3:libsmb: add support for userspace quic support using ngtcp2
s3:selftest: run smb2.{bench,connect,credits,ioctl,rw} over quic-ngtcp2
s3:conncache: improve debugging for the negative connection cache
winbindd: always use winbind_add_failed_connection_entry() wrapper
winbindd: blacklist servers returning ACCESS_DENIED/authoritative=0
s3:libads: let cldap_ping_list() check for a blacklisted server name
s3:libads: let get_kdc_ip_string() check for a blacklisted server name
Vinit Agnihotri (1):
s3:lib: Fix CID 1497484 use-after-free.
Volker Lendecke (9):
tevent: Fix Coverity ID 1649526 Dereference before null check
tevent: Fix Coverity ID 1649524 Dereference before null check
tevent: Fix 1649525 Use of 32-bit time_t
libsmb: Move cli_smbwrite() to source3/torture
libsmb: Move cli_smb() to source3/torture
libsmb: Slightly simplify cli_tcon_andx_done()
auth: Remove unused session_info_set_session_key()
auth: Direct variable initialization
ctdb: Fix a stuck cluster lock holder after a delayed leader bcast
Xavi Hernandez (1):
iconv: fixed coverity issue CID1609382
-----------------------------------------------------------------------
--
Samba Shared Repository
