The annotated tag, tdb-1.4.15 has been created
at b7f19a45a83bef89d49860418ea52ba4c9f6f1d7 (tag)
tagging c05d12c4fefa0272fb06a040ff8ba2b03ab42fb3 (commit)
replaces talloc-2.4.4
tagged by Björn Jacke
on Tue Jan 20 17:02:10 2026 +0100
- Log -----------------------------------------------------------------
tdb: tag release tdb-1.4.15
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEEkUejOXGVGO6QEby1R5ORYRMIQCUFAmlvpwIACgkQR5ORYRMI
QCX4dgf7BG8w61xCXgLvU6p/FHJiTnAsb0RS05PJDJyEPcHpqdytKTtT26JJwojc
QMJw5IT1eOqaZfaOJsuRmYqHXVvALpxVyue2rBlhfiUxvkoMbbMlBJFxNwAeD5mh
pVa5++bPm8WzZY0IGKski14z/pIckbvCObewMCtmfyB/u8tupPDqXKmfMbCl7zAl
EEXL1ZDSy1A8KrdlUbvyVgBLnABeGAAhNDPbn9/BnqC17LE2/vVjw7lz7nCNTVR1
2qq4D0Q8OMitAKXkq8E7VyeF5Of82SAWj6BVHQMU4Em6VBe6EtCSfLjJMUXfWX9P
IivetgFqlBqsI0bYrOEe33hgrKMeeg==
=EBRc
-----END PGP SIGNATURE-----
Alexander Bokovoy (3):
krb5: handle GSS-Proxy credentials lifetime
ctdb: fix build against PCP 7.0.0
Fix crash in DLZ plugin for incorrect setup
Andreas Schneider (83):
s3:net: Pass down the server from cmdline to sync_pw2keytabs()
s4:torture: Fix stack buffer overflow in test_dirlease_oplocks()
bootstrap: Remove unused ubuntu1804 images
bootstrap: Use minimal image for Fedora
bootstrap: Use slim images for Debian
selftest: Do not use wrappers for samba.tests.docs
s4:tests: Use the command line option '--use-kerberos'
s4:auth: Fix trailing white spaces in gensec_gssapi.c
s4:auth: Fix 'no delegation' logic in gensec_gssapi_start()
third_party: Bump version for socket_wrapper
ctdb: Fix redefinitoin of pmdaResult
lib:crypto: Use gnutls_cipher_encrypt3() if possible
lib:crypto: Use gnutls_cipher_decrypt3() if possible
s3:libsmb: Fix heap-use-after-free in py_cli_notify_get_changes()
s3:utils: Use a talloc stackframe for diagnose_ntlm_auth()
s3:util: Pass a memory context to get_challenge for ntlm_auth tests
tests: Run `dd` without any preloaded libraries
Add missing include needed for cmocka.h
s4:kdc: Fix cmocka.h include
third_party: Update cmocka to version 1.1.8
lib:replace: There is special code already to check for HAVE_PRCTL
lib:replace: Remove trailing spaces
lib:replace: Implement setproctitle() based on PRCTL_MM_MAP
nsswitch: Fix memory leak in wbinfo_xids_to_sids()
lib:ldb:tools: Remove trailing spaces in cmdline.c
lib:ldb:tools: Do not leak memory in ldb_cmdline_process_internal()
s3:passdb: Fix memory leak in pdb_default_add_groupmem()
s3:passdb: Fix memory leak in pdb_default_del_groupmem()
s3:client: Use talloc to avoid memory leaks in smbspool
lib:ldb:tests: Avoid memory leaks in ldb_kv_ops test
lib:ldb:tests: Fix memory leaks in ldb_lmdb_free_list_test
nsswitch: Do not leak memory in wbinfo_pam_logon() of wbinfo
s3:client: Make cmd_iosize() static
s3:client: Always goto out (destructor) in do_cd()
s3:client: Do not call exit() in cmd_quit()
s3:client: Only allocate the stackframe once in process_stdin()
s3:client: Use a stackframe in process_command_string()
s3:client: Pass down a talloc context to process()
s3:client: Pass down a talloc context to do_host_query()
s3:client: Pass down a talloc context to do_message_op()
s3:client: Pass down a talloc context to do_tar_op()
s3:client: Pass down a talloc context to process_command_string()
s3:client: Pass a talloc context down to cmd_*() functions
s3:client: Pass down a talloc context to do_cd()
s3:client: Use a long living memory context for cli_cm_open()
s3:libsmb: Add a talloc context to the internal data structure
s3:libsmb: Use a long living context for cli_resolve_path()
s3-client: Use the passed down memory context for cli_connect_nb()
s3:winbind: Improve logging for query_user_list()
lib:replace: Remove trailing spaces in README
lib:replace: Implement memset_explicit()
Replace memset_s() with memset_explicit()
lib:replace: Remove memset_s()
s3:smbd: Fix segfault in smb2_reply
s3:printing: Load the shares for [printers] in samba-bgqd
docs-xml: Improve the samba-bgqd manpage
s3:mdssvc: Remove support for tracker sparql support
bootstrap: Remove libtracker-sparql-2
selftest: Add blackbox claims test to knownfail_mit_kdc
selftest: Create libdir in setup_clusteredmember()
python:tests: Use random users for user_auth_policy.py
python:tests: Use random users for user_auth_silo.py
python:tests: Use random users for domain_auth_silo.py
python:tests: Add debug output to test_query_filter_enum()
python:tests: Take INTERDOMAIN_TRUST into account
libcli:ldap: Do not declare cm_print_error()
s4:dsdb: Do not declare cm_print_error()
wscript: Fix double quoting for USING_SYSTEM_MITKRB5
s3:libads: Set a request timeout for Kerberos requests
s3:libads: Set udp_preference_limit = 0 for MIT Kerberos
Revert "ldb: User hexchars_upper from replace.h"
python:tests: Fix ProcessPoolExecutor with Python 3.14
third_party: Update socket_wrapper to version 1.5.2
bootstrap: Update Fedora to version 43
selftest: Add some hardlinks for testing SMB3 posix extensions
s4:torture: Implement posix extension tests for libsmbclient
libsmbclient: Fix negotiating posix_extensions
s3:libsmb: Call the correct function in smbc_fgetxattr()
s3:include: Fix the smbc_fgetxattr() documentation in libsmbclient
s3:libsmb: Rework check_negative_conn_cache()
source3:tests: Fix all shellcheck errors found in test_net_tdb.sh
s3:tests: Add debug output to test_net_tdb.sh
s3:tests: Use awk for parsing hexkeys
Andrew Walker (2):
CVE-2025-9640: Add torture test for inserting hole in stream
CVE-2025-9640: s3/modules/vfs_streams_xattr fix unitialized write
Anoop C S (8):
source3/utils: Follow up to the fix for CID 1508980
source3/passdb: Follow up to the fix for CID 1508970
smbd: Fix CID 1665417, UNUSED_VALUE in openat_pathref_fsp_dot()
vfs_ceph_new: Use integer value instead of boolean
vfs_gpfs: Fix CID 1666430 Control flow issues (DEADCODE)
vfs_ceph_new: Fix a regression in SMB_VFS_GETWD
vfs_ceph_new: Add explicit log entry for libcephfs proxy status
vfs_ceph_new: Improve log entries in vfs_cephfs_load_lib()
Björn Jacke (2):
release.sh: also replace "y acute" character with html entity
tdb: version 1.4.15
David Mulder (1):
Remove previous himmelblau integration attempt
Douglas Bagnall (70):
librpc:idl: add windows event 5136 object change
dsdb:audit:test: test msDS-KeyCredentialLink change logging
dsdb: audit: replace local min() with libreplace MIN()
dsdb:audit: password_change loggers take a new flag argument
dsdb:audit: log if msDS-KeyCredentialLink changed
dsdb:audit: bump minor version of password logs (1.1 -> 1.2)
dsdb:audit log: cmocka unit tests for KCL
WHATSNEW: auth info audit logging
docs: smb.conf: add auth info audit logging
CVE-2025-10230: s4/tests: check that wins hook sanitizes names
CVE-2025-10230: s4:wins: restrict names fed to shell
lib:replace: Add test for memset_explicit()
docs-xml:smb.conf: fix a sentence
s4:cracknames: initialise a string variable
pytest: test auth.user_session with principals
s4:torture:kdc-canon: test each combination only once
s4:kdc: improve a comment
s4:kdc: avoid a leak on error
s4:kdc: flatten samba_kdc_lookup_client dollar fallback
s4:kdc: do not fallback to "$$" if user is "$"
s4:kdc: allocate fallback realm later, closer to use
loadparm: add "kdc name match implicit dollar without canonicalization"
tests: run krb5.kdc tests on ad_dc_ntvfs without implicit dollar match
pytests: rename KRB_ERR_TKT_NYV as KDC_ERR_TKT_NYV
pytest:krb5: errcode errors include names
pytest:krb5: print error names on error
pytests: add TestCase.get_server_param() method
pytest: krb5 tests remember implicit dollar option
pytest:krb5: ms-kile-client tests notice lack of dollar matching
pytest: krb5 alias tests: expect no machine$ match on ad_dc_ntvfs
pytests: krb5 raw tests use TestCase.get_server_param()
s4/torture:kdc-canon understands no-implicit-dollar setting
s4:kdc:principal lookup will soon succeed on ad_dc_ntvfs
s4:kdc: do not match principal + '$' if smb.conf says not to
s4:kdc: avoid reusing a variable name
autobuild: run ntvfs krb5 tests on MIT build
selftest: move knownfail.d/krb5-no-dollar to expectedfail.d
s4:selftest: move tests that want to be last, last
s3:selftest:tests.py: remove unused imports
selftest: use common and simpler code to read config.h
manpages:smb.conf:nt hash store: remove a stray word
s3:vfs_ceph_new: use #ifdef, not #if HAVE_CEPH_ASYNCIO
python subunit: add dummy addDuration methods
dsdb:password_hash: fix a typo
dsdb:password_hash: reject password reset with UNWILLING_TO_PERFORM
ldb: add "policy hints" controls to be used by password_hash module
dsdb:password_hash: notice "policy hints" control
pytest:dsdb:passwords: guess ldaps and ldap hosts from each other
pytest:dsdb:password: test policy_hints oid
dsdb:password_hash: "policy hints" resets honour minPwdAge
dsdb:password_hash: policy_hints control makes resets check history
dsdb:password_hash: fix policy_hint controlled reset return codes
WHATSNEW: update for policy hints
selftest: we no longer use 'testscenarios' or 'subunit.tests.testsuite'
torture: do not zero members more than once
samba-tool gpo: remove unused import
pytest:krb5:as_canonicalization debug formatting
kdc: match implicit dollar without canon affects AS_REQ client only
tests: run more kdc tests with no implicit $ without canonicalization
pytest:krb5 as_canonicalization checks no implicit $ return code
loadparm: add "kdc require canonicalization"
s4:kdc: honour "kdc require canonicalization = yes"
tests: schema_dc krb5 tests with 'require canonicalization = yes'
pytest:krb5: notice require canonicalization option
s4:test: fix kdc-heimdal simple tests for 'require canonicalization'
s4:test: fix kdc-canon-heimdal tests for 'require canonicalization'
pytest:krb5: as_canonicalization recognises require canon option
pytest:krb5:ms_kile: adjust for 'require canonicalization'
pytest:krb5:as_req: adjust for 'require canonicalization'
ci:autobuild: add MIT schema_dc krb5 tests
Ekaterine Papava (1):
Georgian translation for tools
Frediano Ziglio (1):
s3:ntlm_auth: Fix typo in error message (protools -> protocols)
Gary Lockyer (31):
third_party:heimdal: import lorikeet-heimdal-202508180154
s4:auth:sam Fix key trust attribute name
s4:kdc:db-glue binary dn changes
tests:krb5 Add key trust tests
s4:kdc:sdb_to_hdb key trust support
s4:kdc:sdb_to_hdb: Fix CID 1665466
third_party:heimdal: import lorikeet-heimdal-202509242121
tests:audit_log_pass_change refactor the tests
tests:audit_log_pass_change add tests for auth info logging
s4:dsdb:audit_log log auth info changes
s4:dsdb:audit_log change action for auth info
s4:dsdb:audit_log clean up doc comments
config: add strong certificate binding enforcement
config: add certificate backdating compensation
selftest: Add certificate binding configuration
python:domain:user Add altSecurityIdentities
tests:s4:kdc Add tests for pkinit certificate mapping
s4:kdc:sdb Support Windows flexible cert mappings
s4:kdc:sdb_to_hdb strong/flexible certificate mappings
s4:kdc:db-glue-tests Fix CID 1666664
s4:torture:vfs:fruit fix Clang compilation issue
third_party:heimdal: import lorikeet-heimdal-202510192136
config: add kdc always include pac
selftest:fl2008r2dc set "kdc always generate pac"" to no
s4:kdc:test add tgs tests to fl2008r2dc env
s4:kdc:tests: support "kdc always generate pac"
s4:kdc always include the PAC
s3:winbindd fix race condition in terminate_child
Update WHATSNEW with kerberos changes
s4:client:http_test fix Non-boolean returned
s3:utils:status_json fix Non-boolean returned
Günther Deschner (14):
s4-torture: add test for FILE_NOTIFY_CHANGE_SECURITY
s3-smbd: send notifications for ACL changes
s3-selftest: add tests for winbindd_cache.tdb sanity
s3-winbindd: Fix winbind NDR caching.
s3-winbind: make wcache_store_seqnum static
s3-winbindd: make initialize_winbindd_cache() static
s3-winbindd: provide one wcache_open() function for all tdb opens
s3-winbindd: make sure we always have WINBINDD_CACHE_VERSION in
winbindd_cache.tdb
docs-xml: fix manpage for "net offlinejoin requestodj"
s3-selftest: mention in-memory ccache usage when nothing is provided
s3-selftest: verify KRB5CCNAME presence after kinit using klist
s3-selftest: Activate "net ads kerberos kinit" tests with
--use-krb5-ccache
s3-net: properly setup krb5 ccache name via --use-krb5-ccache
doc-xml: Document "net ads kerberos" commands
Jennifer Sutton (30):
s4:kdc: Correct spelling
docs-xml: Correct documentation
tests/krb5: Remove unused method
tests/krb5: Remove unused imports
tests/krb5: Add tests for the Object SID certificate security extension
s4:kdc: Correct comments
s4:kdc: Correct debug messages
s4:kdc: Move talloc_steal() back to function end
s4:kdc: Don’t leak pub_keys.keys
third_party/heimdal: Import lorikeet-heimdal-202510122217 (commit
c2d91bdde528ba018da27b88baa22b46f323f659)
s4:kdc: Implement Object SID certificate security extension
docs-xml: Document SID extension certificate mappings
python:tests: Fix code spelling
samba-tool: Fix comments
python: Factor out asn.1 methods into their own module
samba-tool: Add subcommand to generate Certificate Signing Requests with
SID extension
docs-xml: Document samba-tool subcommand to generate Certificate Signing
Requests
python:tests: Correct test class name
wscript: Fix help text spelling
tests/krb5: Add TD_CMS_DIGEST_ALGORITHMS constant
tests/krb5: Construct signed_attrs correctly
s4:torture:auth: Fix PAC checksum test
s4:torture: Simplify booleans
s4:torture: Fix code spelling
s4:selftest: Remove ‘extra_options’
loadparm: Add ‘krb5 acceptor report canonical client name’ option
auth:kerberos: Do not fail if PAC account name doesn’t match ticket
principal name
s4:torture:auth: Do not break client principal
s4:auth: Implement ‘krb5 acceptor report canonical client name’ option
for Heimdal
selftest: Disable ‘krb5 acceptor report canonical client name’ for
fl2008r2dc environment
John Mulligan (4):
vfs: add files to access the varlink keybridge API
build: add '--with-varlink' configure option
vfs_ceph_new: add keybridge and ceph fscrypt support
manpages/vfs_ceph_new: document fscrypt and keybridge options
John Thacker (7):
wireshark-pidl: Reduce false positive warnings when compiling
wireshark-pidl: Reduce Perl strict warnings
wireshark-pidl: Warn appropriately on unsupported switch_is discriminants
wireshark-pidl: Check for undefined SwitchType first
wireshark-pidl: Fix filter names for subcontext length fields
wireshark-pidl: Do not calculate functions replaced by manual code
wireshark-pidl: Don't warn about unused hfs used in CODE blocks
Lin Liu (1):
tdb: Fix parse_hex during `tdbtool storehex`
Martin Schwenke (16):
ctdb-ib: Replace uses of sprintf()
ctdb-pmda: Do not directly support CTDB_SOCKET environment variable
ctdb-common: Factor out checking of CTDB_TEST_MODE
ctdb-common: Only respect CTDB_SOCKET in CTDB_TEST_MODE
ctdb-common: Factor out new function run_event_fail()
ctdb-common: Make run_event return full script list
ctdb-event: Don't replace an existing result with NULL
ctdb-event: Replace "no data" event scripts with previous data
ctdb-tests: Reformat with "shfmt -w -i 0 -fn "
ctdb-event: Improve error message
ctdb-tests: Improve setup_ctdb_base() to fix local_daemons.sh bug
ctdb-tests: Don't hard code creation of $CTDB_BASE/events/legacy/
ctdb-daemon: Fix a crash due to a failed updateip
ctdb-tests: Add an event script unit test for updateip
ctdb-scripts: Avoid printing a message if no connections
ctdb-scripts: Avoid failing updateip when IP is not assigned
Michael Tokarev (1):
s4/dlz: add support for bind 9.20
Mike L (1):
s4:kdc/db-glue: Use realloc_p macro
MikeLiu (1):
s3:net: fix "net ads group"
Noel Power (5):
Add basic cmocka unit tests for pthreadpool
Add unit cmocka tests for pthreadpool_tevent
lib/pthreadpool: fix free of already freed glue object
lib/pthreadpool: Fix possible concurrent access to pool->glue_list
lib/pthreadpool: protect jobs list from concurrent thread access
Pavel Filipenský (31):
selftest: Add the short name for localvampiredc to hosts file
tests: Add test for 'net ads join' to a preferred DC
s3:script: Avoid UnicodeDecodeError for samba-log-parser processing whole
directory
selftest: Add a test for recycle:touch,touch_mtime,keeptree
vfs_recycle: Fix trailing whitespace in vfs_recycle.c
vfs_recycle: Make recycle:touch/touch_mtime work again if
recycle:keeptree is set
lib/util: Refactor data_blob.{h,c}
lib/util: Change comments to Doxygen in data_blob.h
lib/util: Set "PREDEFINED = DOXYGEN" in Doxyfile
lib/util: Move talloc_keep_secret.c from samba-util to samba-util-core
lib/util: Add data_blob_..._s() functions that call talloc_keep_secret()
lib/util: Avoid overwriting talloc chunk name in talloc_keep_secret()
lib/util: Fix trailing white spaces in tests/data_blob.c
lib/util: Add tests for the new secure data_blob_..._s() functions
librpc: Fix trailing white spaces in dcerpc.c
auth: Use new data_blob_..._s() functions and remove talloc_keep_secret()
libcli/auth: Zero out password in smbencrypt.c
nsswitch/libwbclient: Zero memory in libwbclient
libcli:auth: Fix trailing whitespaces in ntlm_check.c
auth: Fix typo "pass-though" -> "pass-through"
s4: Fix trailing whitespaces in sesssetup.c
lib/krb5_wrap: Zero sensitive memory in krb5_samba.c
lib/krb5_wrap: Check memory allocation in smb_krb5_get_smb_session_key()
auth: Fix trailing whitespaces in gssapi_pac.c
auth/kerberos: Check memory allocation in gssapi_get_session_key()
auth/kerberos: Zero sensitive memory in gssapi_pac.c
auth/credentials: Zero memory in credentials_ntlm.c
source3/auth: Zero memory in auth_util.c
auth/ntlmssp: Zero sensitive memory in gensec_ntlmssp.c
auth/ntlmssp: Add missing memory allocation checks is ntlmssp_client.c
auth/ntlmssp: Zero memory in ntlmssp_client.c
Pawan Sahu (3):
smbd: Introduce struct vfs_pthread_pool_job_state
smbd: Add vfswrap_check_async_with_thread_creds() helper
gpfs: Fetch GPFS DOS attributes asynchronously
Rabinarayan Panigrahi (12):
nmbd: Fixing CID 1509039 for time_t in DEBUG statement
nmbd: Fixing CID 1508948 for time_t in DEBUG statement
winbindd: Fixing CID 1508950 for time_t in DEBUG statement
passdb: Fixing CID 1508970 for time_t in DEBUG statement
passdb: Fixing CID 1508971 for time_t in DEBUG statement
utils: Fixing CID 1508980 for time_t in DEBUG statement
utils: Fixing CID 1509034 for time_t in DEBUG statement
utils: Fixing CID 1509038 for time_t in DEBUG statement
nmbd: Fixing CID 1509046 for time_t in DEBUG statement
libsmb: Fixing CID 1509051 for time_t in DEBUG statement
smbd: Fixing CID 1509052 for time_t in DEBUG statement
passdb: Fixing CID 1509029 for time_t in DEBUG statement
Ralph Boehme (47):
mdssvc: call mangle_reset_cache()
smbtorture: fix locking offset in test_fruit_locking_conflict()
smbd: don't use sticky write times on POSIX handles
smbtorture: add test vfs.fruit.readonly-exclusive-lock
smbtorture: add test vfs.fruit.case_insensitive_find
vfs_fruit: add option "fruit:posix_opens = yes|no" (default: yes)
smbd: hang posix brl per-handle check on the pathname
smbd: hang directory pattern matching case sensitivity on the pathname
vfs_fruit: ignore Set-ACL requests with zero ACEs
mdssvc: fix running test command manually
mdssvc: fix filtering by share path prefix
mdssvc: implement elasticsearch:default_fields
smbd: move calling fsp_set_gen_id() to fsp_bind_smb()
smbd: use op->global->open_global_id for the
share_mode_entry.share_file_id
s3/locking: comment reformatting
smbd-notifyd: call set_remote_machine_name()
smbd-cleanupd: call set_remote_machine_name() and reopen_logs()
smbd-scavenger: call set_remote_machine_name()
s3/rpc_server: fix "log file = %m"
smbd: fix handing of oplock_request and INTERNAL_OPEN_ONLY
s3:smbd: remove an else branch in exit_server_common()
smbd: remove remnants from write cache handling which was removed a long
time ago
smbd: move lp_locking() check inside file_has_brlocks()
smbd: avoid clobbering the file size, use info instead
smbstatus: avoid a crash with --json output if the access_mask has
SEC_STD_WRITE_OWNER
smbtorture: fix smb2.durable-v2-open.open-lease and
smb2.durable-v2-open.persistent-open-lease
smbtorture: correctly handle scale-out shares in
smb2.durable-v2-open.create-blob
smbtorture: correctly handle scale-out shares in
smb2.durable-v2-open.[persistent-]open-oplock
smbtorture: add test "smb2.lease.lease-epoch"
smbd: only increment lease epoch if a lease was granted
smbtorture: fix regression in smb2.bench
mdssvc: reduce a log level to DEBUG
mdssvc: add a test for parsing Spotlight date ranges
mdssvc: add support for parsing date ranges
vfs_fruit: psd->dacl can be NULL, use orig_num_aces
mdssvc: support a wider range of years [0000,9999] in $time.iso
smbtorture: fix a test rundown
smbXsrvdump: catch exception from unparsable records
net/serverid: initialize state->open_db
smbd: distinguish "no record" from "bad record" in
smbXsrv_open_global_lookup()
smbd: reshuffle requested/granted lease level logic of Directory Leases
s3/locking: simplify reset_share_mode_entry()
smbd: pass fsp to vfs_default_durable_reconnect_check_stat()
smbd: remove redundant initialisation
smbd: set fsp->is_sparse in vfs_default_durable_reconnect()
smbtorture: add test "smb.lease.two-leases"
mdssvc: make a copy of the elasticsearch:default_fields
SATOH Fumiyasu (1):
vfs_btrfs: Log the correct fd value
Samuel Cabrero (19):
vfs: Add VFS_OPEN_HOW_RESOLVE_NO_XDEV flag
vfs: Bump VFS interface version after adding VFS_OPEN_HOW_RESOLVE_NO_XDEV
vfs: Use RESOLVE_NO_XDEV by default on all shares
selftest/Samba3: nt4_dc* use vfs_default:VFS_OPEN_HOW_RESOLVE_NO_XDEV=no
vfs: Pass the RESOLVE_NO_XDEV from upper layers to openat2() syscall
smbd: Refactor reopen_from_fsp(), factor out name based reopen
smbd: Refactor reopen_from_fsp(), factor out automounter mountpoint check
smbd: Refactor reopen_from_fsp(), factor out pathref based
smbd: Fix crossing direct automounter mount points
vfs:aio_pthread: Handle VFS_OPEN_HOW_RESOLVE_NO_XDEV flag
vfs:ceph: Allow VFS_OPEN_HOW_RESOLVE_NO_XDEV flag
vfs:ceph_new: Allow VFS_OPEN_HOW_RESOLVE_NO_XDEV flag
vfs:glusterfs: Allow VFS_OPEN_HOW_RESOLVE_NO_XDEV
vfs:shadow_copy2: Allow RESOLVE_NO_XDEV flag
vfs:streams_depot: Allow VFS_OPEN_HOW_RESOLVE_NO_XDEV flag
vfs:fruit: Allow RESOLVE_NO_XDEV flag
vfs:streams_xattr: Allow VFS_OPEN_HOW_RESOLVE_NO_XDEV
s3:tests: Add testparm tests for "sync machine password to keytab" option
s3:testparm: Fix "sync machine password to keytab" validation
Shachar Sharon (12):
samr: Fix CID 1035506: close slave fd (REASOURCE_LEAK)
tdbtorture: Fix CID 1034815,1034816: protect from out-of-bounds access
buildtools: fixed broken build with FIPS-enabled host
vfs_ceph_new: dont use ceph_ll_nonblocking_readv_writev for fsync_send
vfs_ceph_new: proper failure-handling in chdir and getwd
vfs_ceph_new: limit to 80-chars lines
vfs_ceph_new: improved debug logging
vfs_ceph_new: do explicit 'ceph_init' call
vfs_aio_ratelimit: rate-limiting module for async I/O
s3:selftest: test vfs_aio_ratelimit module
docs-xml/manpages: doc for 'vfs_aio_ratelimit' module
WHATSNEW: update with vfs_aio_ratelimit details
Shweta Sodani (4):
nsswitch/libwbclient: Fix CID #1034861 Resource leak
nsswitch/libwbclient: Fix CID #1034858, #1034859, #1034860 Resource leak
lib/util: Fix CID 1414760 - Resource leak
vfs_ceph_new: use vfs_ceph_iget/vfs_ceph_iput in vfs_ceph_disk_free
Shwetha K Acharya (3):
s3:shadow_copy: CID 1449539 talloc_realloc and error handling
vfs_streams_xattr: Fix CID 1667323 Resource Leak
vfs_streams_xattr: Fix CID 1667321 REVERSE_INULL
Stefan Metzmacher (8):
rpc_server: Remove the source4 implementation of wkssvc
Happy New Year 2026!
lib/async_req: let async_connect_send() pass the fd to
{before,after}_connect hooks
s3:lib/util_sock: allow {before,after}_connect hooks to be passed to
open_socket_out_send()
s3:smb2_negprot: make use of xconn->transport.type !=
SMB_TRANSPORT_TYPE_NBT
s4:torture/smb2: fix using uninitialized memory in
test_lease_dynamic_share()
s4:torture/smb2: let bench.c tests use the initial connection of just
once is needed
s4:torture/smb2: add smb2.bench.write test
Vinit Agnihotri (8):
s3:lib:util_tdb: Add format identifier for 64-bit integer pack/unpack
lib:util: Add APIs for fetch/store int64/uint64 values to/from tdb
printing: Update version for print database
printing: Define and use methods to fetch/store time in share cache
printing: Fix use of time_t CID#1508987
printing: Fix use of time_t CID#1509036
printing: Fix use of time_t CID#1509005
printing: Fix coverity issue CID#1669074 (Unchecked return value)
Volker Lendecke (251):
lib: Use talloc_realloc_zero() in a few obvious places
lib: Fix Coverity ID 1509061 Use of 32-bit time_t
libsmb: Remove sync smb1cli_trans and _echo wrappers
libsmb: Slightly simplify cli_tcon_andx_done()
vfs: Add some const to make in/out params more obvious
libsmb: Avoid an "else"
winbindd: Simplify parse_domain_user()
printing: Fix an uninitialized read
lib: Fix the build on FreeBSD
smbd: Add openat_pathref_fsp_dot()
smbd: Fix Bug 15897
wkssvc3: Return ACCESS_DENIED where source4 does it
wkssvc3: Return RNG_ERROR where source4 does it
winbind: Initialize idmap in winbindd_getgroups
lib: Remove an #include "includes.h"
lib: Add a safeguard for misconfigured directory permissions
vfs_fruit: Slightly simplify readdir_attr_meta_finderi_stream()
lib: Slightly simplify ad_read_rsrc_adouble()
lib: Fix typos
vfs_fruit: Make struct allocation in fruit_freaddir_attr() more common
lib: Avoid a talloc_zero in afpinfo_new()
lib: Simplify data definitions
vfs_fruit: Modernize a DEBUG
vfs_fruit: Fix signed/unsigned comparison warnings
vfs_fruit: Use all_zero() to check for an all-0 buffer
lib: Add adouble_buf_parse()
vfs_fruit: Implement fstatat
vfs_fruit: Call fruit_fstatat() from fruit_[l]stat()
vfs_streams_depot: Use NEXT_UNLINKAT when deleting a stream
vfs_fake_acls: Introduce fake_acls_fuidgid()
vfs_fake_acls: Reduce indentation in fake_acls_stat()
vfs_fake_acls: Reduce indentation in fake_acls_lstat()
vfs_fake_acls: Reduce indentation in fake_acls_stat()
vfs_fake_acls: Implement fake_acls_fstatat()
vfs_fake_acls: Call fake_acls_fstatat() from fake_acls_[l]stat()
vfs_fake_acls: Fix error path return in fake_acls_fstatat()
test: Fix shadow copy streams xattr test
test: Fix fruit test for local netatalk interop
smbd: Simplify samba_private_attr_name()
vfs: Do an early TALLOC_FREE in streams_xattr_openat()
vfs: Make a copy of get_ea_value_fsp() in streams_xattr
vfs: Make streams_xattr_get_ea_value_fsp fill a struct of its own
vfs: Simplify streams_xattr_get_ea_value_fsp()
vfs: Simplify streams_xattr_get_ea_value_fsp()
vfs: Pass xattr functions through helpers in streams_xattr
vfs: Pass streams_xattr_config to fsetxattr_multi()
vfs: Pass streams_xattr_config to get_xattr_size_fsp()
vfs: Pass streams_xattr_config to streams_xattr_get_ea_value_fsp()
vfs: Pass streams_xattr_config to fgetxattr_multi()
vfs: Pass streams_xattr_config to fremovexattr_multi()
vfs_streams: Add "streams_xattr:max xattrs per stream" parameter
vfs: Protect against an empty stream prefix
vfs: Add the streams_xattr:ext_prefix parameter
vfs: Fix a few signed/unsigned warnings
vfs: Implement larger streams in multiple xattrs
smbd: Slightly simplify reply_ntrename()
smbd: Fix a copy&paste error in a comment
smbd: Fix indentation in reply_ntrename()
smbd: Move a variable declaration closer to its use
smbd: Use fsp_str_dbg() in DEBUGs
smbd: Slightly simplify smbd_do_qfilepathinfo()
vfs: Rename "srcfsp"->"src_dirfsp" and "dstfsp"->"dst_dirfsp"
smbd: Modernize DEBUGs
smbd: Pass "dirfsp" and the new relname to smb_set_file_unix_hlink()
smbd: Simplify hardlink_internals()
smbd: Reduce indentation in smb2_parse_file_rename_information()
smbd: Align [smb|smb2]_file_link_information code
smbd: Remove a few unnecessary NULL checks
smbd: Remove a temp variable used only once
smbd: Use fsp_is_alternate_stream()
smbd: Consolidate [smb|smb2]_file_link_information code
smbd: Simplify hardlink_internals()
smbd: Return newname from smb2_parse_file_rename_information()
smbd: Fix indentation of rename_internals[_fsp] params
smbd: Pass src_dirfsp, src_relname and raw newname to
rename_internals_fsp()
smbd: Simplify rename_internals_fsp()
smbd: Move a variable declaration closer to its use
smbd: Pass fsp instead of filename for parent to file_set_dosmode
smbd: Slightly simplify mkdir_internal()
smbd: Pass fsp instead of filename for parent to mkdir_internals()
smbd: Pass fsp instead of filename for parent to possibly_set_archive()
smbd: Pass fsp instead of filename for parent to open_file_ntcreate()
smbd: Pass fsp instead of filename for parent to open_directory()
smbd: Slightly simplify rename_internals
vfs_streams_xattr: Return whether a stream name is ::$DATA
vfs: Add SMB_VFS_RENAME_STREAM
vfs: Add streams_xattr implementation of rename_stream()
vfs: Add streams_depot implementation of rename_stream()
smbd: Rewrite rename_internals_fsp()
smbd: Remove unused parameters from rename_internals_fsp()
smbd: Remove an unnecessary return;
smbd: Remove unused parameters from rename_internals()
smbd: Remove "dst_original_lcomp" from
smb2_parse_file_rename_information()
vfs: Remove streams_xattr_renameat()
vfs: Remove streams_depot_renameat()
smbd: Remove "dst_original_lcomp" from
smb2_parse_file_rename_information()
smbd: Simplify smb2_parse_file_rename_information()
smbd: Simplify smb2_parse_file_rename_information()
WHATSNEW: Mention MR 4212
vfs: Fix smb_full_audit_parent_pathname()
vfs: Remove connectpath function
vfs: Remove audit_file function
smbd: Remove an unused struct member
vfs: Simplify vfs_gpfs_get_real_filename_at()
smbd: Make get_real_filename_full_scan_at() static
smbd: Remove an obsolete comment
printing: Fix trailing whitespace
s3: Replace a few calls to TALLOC() with talloc_array()
s3: Replace a few calls to TALLOC() with talloc_size()
s3: Remove the now-unused TALLOC() macro
vfs: Fix trailing whitespace
s3: Replace TALLOC_SIZE() with talloc_size()
s3: talloc_destroy() -> TALLOC_FREE()
s3: Remove TALLOC_REALLOC() macro
lib: Remove duplicate #define of TALLOC_FREE()
smbd: Fix a comment
smbd: Modernize DEBUGs
smbd: Fix a few possible buffer read overruns
lib: Remove an ancient prototype
lib: Remove some unused code #ifdef'ed out for more than 10 years
lib: "boolean == true" looks strange :-)
lib: Simplify num_parameters() with ARRAY_SIZE()
lib: Fix bitmap_talloc()'s parameter to unsigned
lib: Add some const to bitmap functions
samr_server: Remove an obsolete and confusing comment
smbd: Fix a typo
lib: Fix whitespace
auth: Simplify check_account()
vfs: Remove some code duplication
smbd: Make file_name_hash() static
smbd: Modernize a DEBUG
smbd: README.Coding for file_name_hash()
vfs: Fix trailing whitespace
smbd: Replace a ZERO_STRUCT with a direct struct initialization
smbd: Fix some whitespace
examples: Fix trailing whitespace
smbd: Save lines in conn_new()
lib: Fix trailing whitespace
dfs_server: Use talloc_asprintf_strlower_m()
dfs_server: Modernize DEBUGs
smbd: Move file_fsp() to smb1_utils.c
lib: Introduce cp_smb_basename() helper function
smbd: Make file_name_hash() return bool
smbd: Make fsp_smb_fname_link() return bool
smbd: Make fsp_attach_smb_fname() return bool
smbd: Make fsp_set_smb_fname() return bool
smbd: Make fsp_new() return a files_struct
smbd: Make fsp_set_gen_id() static
smbd: Fix a comment
smbd: Factor out openat_pathref_fsp_simple_openat()
smbd: Change open_rootdir_pathref_fsp() to return a smb_filename
ci: Don't run on private rackspace runner
ctdb: Fix ctdb startup with inconsistent cluster lock settings
tests: Make recycle:touch test less flakey
lib: Fix some whitespace
smbd: Simplify map_nt_perms
smbd: Add some const where possible
smbd: Remove unused #defines
smbd: Remove #defines used just once
smbd: Remove an unnecessary include
lib: Simplify sys_acl_to_text() with talloc_asprintf_addbuf()
smbd: Avoid a memset with a struct initialization
lib: Remove two unused functions
smbd: A TCP port is uint16, fix variable type
lib: Save lines with direct initialization
libcli: Fix error path memleaks
libcli: Add missing NULL checks
pysmbd: Silence a signed/unsigned warning
smbd: Remove an unnecessary talloc_strdup()
smbd: Remove unused posix_sys_acl_blob_get_file()
smbd: Modernize DEBUGs
lib: Add timespec_equal()
smbd: Modernize some very ugly DEBUGs
lib: Reduce indentation
smbd: Remove the one-line conn_free() wrapper function
smbd: Move utok_string() into smbd
credentials: Remove duplicate prototypes
lib: Remove a few unused #defines
smbd: Reduce indentation with an early return;
smb: Modernize a few DEBUGs
smbd: Reduce indentation
smbd: Use a direct struct initialization
lib: Remove some code #ifdef'ed out for more than 20 years
lib: Reduce indentation with an early return
smbd: Make arguments to open_file_ntcreate a bit easier to read
librpc: Directly initialize variables
smbd: Simplify callers of messaging_send()
lib: Don't call a function to initialize an empty DATA_BLOB
librpc: Slightly simplify dcerpc_binding_build_tower()
lib: Remove unnecessary assignments
libcli: Initialize a variable at declaration time
libndr: Fix two small error path memleaks
librpc: Use a direct struct initialization
vfs_commit: Make dbytes and dthresh size_t
vfs_commit: Reduce indentation with early returns
vfs_commit: Some README.Coding changes
vfs_commit: Do initial eof calculation on demand
smbd: Fix a typo
smbd: Remove an unneeded return;
smbd: Avoid an else in vfs_valid_pwrite_range()
smbd: Simplify vfs_valid_pwrite_range()
lib: Move a few smb-related constant #defines to common code
lib: Remove explicitly dropping capabilities before exec
lib: Remove KERNEL_OPLOCK_CAPABILITY
lib: Remove LEASE_CAPABILITY
lib: Add capability-specific functions
lib: Replace calls to [set|drop]_effective_capability
lib: Remove [set|drop]_effective_capability and enum smbd_capability
lib: Fix the build on solaris
smbd: Modernize a few DEBUGs
smbd: Factor out handling of dfree command into a separate function
smbd: Reduce indentation in handle_dfree_command with early returns
smbd: Add a NULL check for dfree command output
smbd: Replace dfree command output parsing with sscanf
smbd: Reduce indentation with an early return
smbd: Add a NULL check for get quota command output
smbd: Scan output of get quota command with sscanf
smbd: Remove unused STR_TO_SMB_BIG_UINT
libgpo: Use ISDOT/ISDOTDOT
loadparm: Modernize DEBUGs
loadparm: Simplify canonicalize_servicename()
torture: Apply some "static const"
smbd: Fix a panic message
lib: Reduce indentation with an early return
auth: Avoid a memset with calloc
ldb: Avoid a few memset()s with direct structs
printing: Simplify move_driver_to_download_area()
lib: Remove the pointless unix_format() macro
srvsvc: Move valid_share_pathname() to where it's used
lib: Remove a function unused since 2016
vfs_fruit: Modernize DEBUGs
vfs_fruit: Introduce a helper variable
vfs_fruit: Fix short-term error path talloc leaks
vfs_fruit: Move two variable declarations closer to their use
vfs_fruit: Introduce two helper variables
printing: Modernize a few DEBUGs
printing: Slightly simplify move_driver_file_to_download_area()
printing: A little bit of README.Coding in nt_printing.c
printing: Remove indentation with a "goto done"
printing: Simplify driver_unix_convert()
printing: Apply some const
printing: Fix file_version_is_newer()
printing: Make file_version_is_newer() more precise
printing: Simplify file_version_is_newer()
printing: Make structures const static
printing: Simplify mapping permissions
printing: Inline oneliners used just once
lib: Remove &data_blob_null refs
lib: Remove extern const data_blob_null
lib: Move a variable declaration closer to its use
lib: Delay get_iconv_handle() in strchr_m()
Xavi Hernandez (1):
s3/rpc_server/samr: fix CID 1509008 - time_t truncation
-----------------------------------------------------------------------
--
Samba Shared Repository
