The annotated tag, talloc-2.4.4 has been created
at d2130a7d07d4ca033ed7c9cc67ca3c0cecaed76a (tag)
tagging 51d05da70e8461834396d361eead807127751b76 (commit)
replaces samba-4.23.0rc1
tagged by Björn Jacke
on Tue Jan 20 17:00:39 2026 +0100
- Log -----------------------------------------------------------------
talloc: tag release talloc-2.4.4
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEEkUejOXGVGO6QEby1R5ORYRMIQCUFAmlvpqcACgkQR5ORYRMI
QCW3wQgAoDStyu8pLSZaNYFqdL09Qo5JolMnt7oCORgp0vLE+4nyKqodwbyQzGZn
hBIhJLdlDxLbCc6F7zwzU/2ucZhiE7QQsf0TeVOdX3b7BU2bVWT2A6nHNvVG9MGD
ca77VD5AfPMckYv81afvZCM1Sl8xN2ONljFjouXUDKgNXFLPAqJeLUPZfbo9Zy+y
5psERw5sepaE4dDAMn+iyQ5yK13C1neuLQf9X80D6lQdiuYRyEAxfPndlEoutjKq
tTyK+FdiMrBDmoNzPZGwMsfifOp1ThG5HR81PC90wDec7Tg0EAAuKq6S1+ez1VM3
BHmWTscBDSkXBPwVL5CbnTuiA/piGw==
=DSR0
-----END PGP SIGNATURE-----
Andreas Schneider (12):
coverity: Fix running coverity in our pipeline
lib:talloc: Remove obsolete web page
lib:tdb: Remove obsolete web page
auth:creds: Allow to reset the realm by passing NULL
auth:creds: Also uppercase realm set via a callback
auth:creds: Allow to reset the principal by passing NULL to set_principal
auth:creds: Keep the password secret
auth:creds: Keep password secret in cmdline_get_userpassword()
s3:utils: Keep password secret in ntlm_auth get_password()
auth:creds: Validate realm names in set_realm and set_principal
auth:creds: Make sure to uppercase the realm of a principal
auth:creds: Update the documentation for set_principal and set_realm
Anoop C S (5):
vfs: Convert pread, pwrite and fsync recv interfaces to macros
s3/include: Define SMBPROFILE_*_ASYNC_STATE_X macros
s3/smbd: Use SMBPROFILE_IOBYTES_ASYNC_STATE_X macro
vfs_ceph_new: Use already available SMBPROFILE_*_X macros
vfs_default: Use already available SMBPROFILE_*_X macros
Björn Baumbach (1):
third_party: fix libquic build on older systems
Douglas Bagnall (54):
pytests: move dsdb_dn tests out of common
pytests: test normalise_int32 against out-of-range numbers
py:common: normalise_int32 checks bit size
py/common: add cmp_with_nones() helper function
python:samdb: replace dsdb_Dn with stricter types
pytest:dsdb_dn: fix binary test
pytest:dsdb_dn: expand and rework tests
s4:pytest:repl_rodc: use BinaryDn not dsdb_dn
pytest:krb5_base: use BinaryDn not dsdb_dn
dbcheck: use new dsdb_dn types
dbcheck: make deleted_objects check case-insensitive
samba_kcc: use dsdb_dn_guess()
samba_kcc: log when msDS-HasInstantiatedNCs is not BinaryDn
python: add KeyCredentialLinkDn BinaryDn subtype
python: add helpers to construct KeyCredentialLinkDn objects
pytest: add key_credential_link_Dn tests
pytest:repl_rodc: avoid using dsdb_dn.get_bytes
py:samdb: drop unused methods (get_binary_integer, get_bytes)
py:samdb: add get_linearized to dsdb_dn
python:samdb: remove dsdb_Dn alias
python:ndr: improve type annotation and docs for pack/unpack
python:models: add key credential link DN to domain fields
python:key_credential_link: old python compatibility
man samba-tool: don't suggest non-existent option in synopsis.
man samba-tool: user keytrust
man samba-tool: computer keytrust
samba-tool: add decorator to catch exception types
python:models: do not re-use mutable defaults
python:key_credential_link: add descriptive methods
py:tests: test key_credential_link module
samba-tool: add verbose flag to @exception_to_command_error
py:key_credential_links: allow encoding=='auto'
py:key_credential_list: add kcl_in_list function
py:key_credential_link: filter_kcl_list helper for samba-tool
samba-tool: Command.message() can print multiple lines
samba-tool: add user keytrust command
samba-tool computer: remove unused imports
samba-tool: copy user_keytrust to computer keytrust
pytest: adapt user_keytrust tests to be objectclass agnostic
pytest: run user_keytrust tests as computer keytrust tests
pytest:samba-tool group: remove unused imports
python:build: do not allow sizeof(int) != 4
dsdb:password_hash.c: restrict crypt hash to proper forms
domsid: be less alarmed by non-SID
auth: fix docs for cli_credentials_get_password_and_obtained()
auth: avoid strcmp(x, NULL)
utils/smbtree: do not crash with no password (-N)
s4:smb_composite: session_setup_nt1() handles no password
s4:smb_composite: session_setup_old() handles no password
winbindd:migrate_secrets_tdb_to_ldb() handles no client password
s3:smbd: slightly improve no sockets panic message
s4:libsocket: better diagnostics for no interfaces
pytest: safe_tarfile: accept NotADirectoryError as bad path rejection
python:tarfile: notes about extraction_filter
Gary Lockyer (3):
third_party:ngtcp2 Fix compilation with clang-20
third_party:quic Fix compilation with clang-20
third_party:quic_ko_wrapper Fix compilation with clang-20
Günther Deschner (7):
nsswitch: support all known DS lookup flags in wbclient's
wbcLookupDomainController()
libcli/smb: Fix CID #710784 Resource leak
s3-utils: Fix CID #1517309 Resource leak in net offlinejoin code.
s3-vfs_fruit: add 'fruit:veto_localized' option
examples/libsmbclient: Fix CID #1273089 Resource leak
nsswitch/libwbclient: Fix CID #1034853 Resource leak
nsswitch/libwbclient: Fix CID #1034862 Resource leak
Jennifer Sutton (25):
ldb: Fix maybe-uninitialized warning
libcli: Fix maybe-uninitialized warning
s3:lib: Initialize pointer to NULL
lib:async_req: Initialize variables
lib:crypto: Remove trailing whitespace
lib:crypto: Don’t pass null pointer to memcpy()
tests/krb5: Remove redundant line
ldb: Do not return None from __str__()
schema: Add Validated-Write-Computer Extended Right from Windows Server
2016
s4:setup: Fix spelling
pidl: Validate Python bytes objects
python:samba: Raise an exception if we can’t parse a Markdown operation
setup:adprep: Import the latest
{Domain-Wide,Forest-Wide,Read-Only-Domain-Controller,Schema}-Updates.md
s4:dsdb:tests: Use sAMAccountName GUID constant
s4:dsdb:tests: Reformat ACEs to be more readable
s4:dsdb:tests: Correct test name
s4:dsdb:tests: Correct unprefixed f‐string
s4:dsdb: Allow an SPN value to match the original dNSHostName with
Validated Write
s4:dsdb:acl: Fix LDB flags comparison
s4:dsdb:tests: Remove outdated comment
s4:dsdb: Remove outdated comments
lib:compression: Fix code spelling
s4:dsdb:tests: Add get_creds() method
s4:dsdb: Implement msDS-KeyCredentialLink attribute
s4:dsdb:tests: Add tests for msDS-KeyCredentialLink attribute
Jule Anger (2):
VERSION: Bump version up to 4.24.0pre1...
WHATSNEW: Start release notes for Samba 4.24.0pre1.
Michael Adam (1):
lib: docs: talloc: fix a wrong cd command
Rabinarayan Panigrahi (2):
winbindd: CID 1508963 Fixing print statement for time_t
CID 1509059 winbind: Fixing print statement for time_t
Ralph Boehme (22):
smbclient: fix handling errors from do_put in mput
libads: fix get_kdc_ip_string()
winbindd: use find_domain_from_name_noinit() in find_dns_domain_name()
tldap: use tevent_req_set_endtime() to terminate LDAP searches
idmap_ad: add and use ldap_timeout and fix LDAP server failover
libads: reverse termination condition in netlogon_pings_done()
libads: change netlogon_pings() behaviour wrt to min_servers parameter
s3/rpc_server/dfs: fix creating a DFS link
vfs_xattr_tdb: fix dangling symlink detection
pylibsmb: add SMB2_FIND_ID_BOTH_DIRECTORY_INFO
python/tests: also populate self.server in calls LibsmbTests setup()
CI: add Python test samba.tests.dcerpc.dfs.DfsTests.test_dfs_reparse_tag
smbd: return correct reparse tag DFS when listing directories
smbtorture: add test smb2.lease.lock2
smbd: avoid granting "H"-only lease
smbd: make file_has_brlocks() public
s3/locking: modernize file_has_brlocks()
s3/locking: fix checking for byterange locks when granting RH lease
smbtorture: add test smb2.lease.lock3
smbd: when going to truncate the file, explicitly set the filesize to 0
smbtorture: add test "smb2.lease.sharing_violation"
smbd: improve lease break when handling overwrite create disposition
Shachar Sharon (1):
tdbtorture: Fix CID 1034816: proper calloc usage
Shweta Sodani (1):
lib/util: Fix CID 1414760 - Memory leak
Stefan Metzmacher (3):
s4:lib/tls: let tstream_tls_params_server_lpcfg() use
lpcfg_dns_hostname() internally
s4:lib/tls: set GNUTLS_SAN_DNSNAME for self-signed certificates
s4:lib/tls: add additional dns hostnames as GNUTLS_SAN_DNSNAME for
self-signed certificates
Vinit Agnihotri (10):
utils: Fix memory leak CID:1499405
compression/tests: Fix possible out of bound access CID:1517301
s4:torture: Add new target 'w2k16'
s4:torture/smb2: Restore original sd for every test case finish
s4:torture/smb2: Mark smb2.acl.SDFLAGSVSCHOWN as not supported for windows
s4:torture/smb2: Fix torture test case smb2.acls.ACCESS_BASED
lib:util: Fix resourse leak CID#1412633
lib: Fix memory leak CID#1469247
pdb_ldap: Fix memory leak CID#1363095
s3:eventlog: Fix print statement CID#1509023
Volker Lendecke (49):
lib: Move file_lines_ploadv() to lib/util/
ctdb: Use file_lines_ploadv()
lib: Make file_ploadv() static
tldap: Fix CID 1664062: Error handling issues (CHECKED_RETURN)
smbd: Fix CID 1664060: Incorrect expression (IDENTICAL_BRANCHES)
libcli: Introduce helper var in smbXcli_negprot_smb2_subreq()
tls: Add tstream_tls_params_verify_peer()
libcli: Add tls_verify_peer_state to smbXcli_transport
lib: tstream_tls_verify_peer_trusted()
libsmb: Negotiate SMB2_ACCEPT_TRANSPORT_LEVEL_SECURITY over quic
docs: Fix "server smb encrypt" for SMB3+
smbd: Shed a nested if-expression
smbd: Fix a typo
smbd: Make a few encryption-related functions static to smbstatus
smbd: Add a comment matching the other flags
smbd: Modernize DEBUGs
smbd: Avoid an "else"
smbd: Switch from a != to a ==
param: Fix whitespace
smbd: Pass smbXsrv_connection to lp_server_smb_encrypt()
smbd: Add the "server smb encryption over quic" parameter
smbd: Reply with SMB2_ACCEPT_TRANSPORT_LEVEL_SECURITY if we trust quic
smbd: Don't request SMB-level encryption over trusted quic
param: Add "client smb encryption over quic"
libsmb: Add "smb_encryption_over_quic" to smb311_capabilities
libsmb: Avoid smb-level encryption if quic is trusted
dsdb: Fix CID 1665142, Null pointer dereferences (FORWARD_NULL)
dsdb: Align an integer type
lib: Re-add dlclose(handle) when module initialization failed
lib: tevent_req_set_endtime() can fail
smbd: Align an integer type
smbd: Align integer types
tls: Fix whitespace
tls: Fix a printf sign mismatch
tls: Make tstream_tls_params_quic_enabled a bit easier to read
vfs: Slightly streamline streams_xattr_renameat()
vfs_streams_xattr: Add some overflow protection to pread and pwrite
vfs: Simplify fruit_unlink_rsrc_stream()
dnsserver: Align an integer type
libsmb: Save a few lines with direct var initialization
libsmb: Use tevent_req_nterror() properly
lib: Fix whitespace
lib: Remove unused interpret_string_addr_prefer_ipv4()
tls: Reorder macro for easier readability
libsmb: Remove an unnecessary cast
libsmb: Make dsgetdcname print flags in one DEBUG
libsmb: Make map_fnum_to_smb2_handle type-safe
libsmb: Slightly clarify format in set/get_secdesc
lib: Add talloc_realloc_zero()
-----------------------------------------------------------------------
--
Samba Shared Repository
