88baa2674c02b6c4c1df6e13e97569017a02d483 to 95feae2a075c2456e230d4603819cd666e3f3d8b · Debian Samba Team / samba · GitLab

Commits on Source 102

424d4d2b VERSION: Bump version up to 4.9.3...
Nov 08, 2018
7a542190 lib:util: Fix DEBUGCLASS pointer initializiation
Nov 12, 2018
7f8740c0 winbindd: Fix crash when taking profiles
Nov 16, 2018
b6585b6f s4:torture/vfs/fruit: torture writing AFP_AfpInfo stream
Nov 16, 2018
4672656d vfs_fruit: move a comment to the right place
Nov 16, 2018
5420863d vfs_fruit: validation of writes on AFP_AfpInfo stream
Nov 16, 2018
299e6edd torture: Fix the 32-bit build
Nov 19, 2018
e71252ec s3:selftest: split "raw.session" and "smb2.session"
Nov 20, 2018
052df0f6 s3:selftest: also run smb2.session torture testsuite against ad_member
Nov 20, 2018
4f5af7ba libcli/smb: add smb2cli_session_require_signed_response()
Nov 20, 2018
cd8ea322 libcli/smb: maintain require_signed_response in smbXcli_req_state
Nov 20, 2018
6ca7a8a2 libcli/smb: defer singing check a little bit
Nov 20, 2018
6c3577a5 libcli/smb: use require_signed_response in smb2cli_conn_dispatch_incoming()
Nov 20, 2018
ff0db7ec s4:torture/smb2/session: invalidate credential cache
Nov 20, 2018
2b164eca s4:torture/smb2/session: require a signed session setup reauth response
Nov 20, 2018
f2c456aa s4:torture/smb2/session: add force_signing to test_session_expire1i
Nov 20, 2018
77cf7167 s4:torture/smb2/session: session reauth response must be signed
Nov 20, 2018
041e0945 s3:smb2_sesssetup: check session_info security level before it gets talloc_move'd
Nov 20, 2018
7cd5db7a ctdb-tests: Make the debug hung script test cope with unreadable stacks
Nov 20, 2018
a96d403f VERSION: Bump version up to 4.9.3...
Nov 25, 2018
bf596c14 CVE-2018-14629 dns: CNAME loop prevention using counter
Nov 25, 2018
6e84215d CVE-2018-16841 heimdal: Fix segfault on PKINIT with mis-matching principal
Nov 25, 2018
4783b9d6 CVE-2018-16841 selftest: Check for mismatching principal in certficate...
Nov 25, 2018
f40e1b3b CVE-2018-16852 dcerpc dnsserver: Verification tests
Nov 25, 2018
05f867db CVE-2018-16852 dcerpc dnsserver: Ensure properties are handled correctly
Nov 25, 2018
c78ca8b9 CVE-2018-16852 dcerpc dnsserver: refactor common properties handling
Nov 25, 2018
f33f52c3 CVE-2018-16851 ldap_server: Check ret before manipulating blob
Nov 25, 2018
4aabfecd CVE-2018-16853 build: The Samba AD DC, when build with MIT Kerberos is experimental
Nov 25, 2018
862d4909 CVE-2018-16857 selftest: Prepare to allow override of lockout duration in password_lockout tests
Nov 25, 2018
31198d39 CVE-2018-16857 PEP8: fix E305: expected 2 blank lines after class or function definition, found 1
Nov 25, 2018
4d0fd1a4 CVE-2018-16857 selftest: Split up password_lockout into tests with and without a call to sleep()
Nov 25, 2018
fe8e05a9 CVE-2018-16857 PEP8: fix E127: continuation line over-indented for visual indent
Nov 25, 2018
9cb6b4e9 CVE-2018-16857 PEP8: fix E251: unexpected spaces around keyword / parameter equals
Nov 25, 2018
ec9cc4ed CVE-2018-16857 tests: Sanity-check password lockout works with default values
Nov 25, 2018
4f86beea CVE-2018-16857 dsdb/util: Correctly treat lockOutObservationWindow as 64-bit int
Nov 25, 2018
d12b02c7 CVE-2018-16857 dsdb/util: Fix lockOutObservationWindow for PSOs
Nov 25, 2018
60b2cd50 CVE-2018-16857 dsdb/util: Add better default lockOutObservationWindow
Nov 25, 2018
bec29625 WHATSNEW: Add release notes for Samba 4.9.3.
Nov 25, 2018
40c057c9 VERSION: Disable GIT_SNAPSHOT for the 4.9.3 release.
Nov 25, 2018
9e05ff6b Merge tag 'samba-4.9.3' into v4-9-test
Nov 27, 2018
b3d376b7 VERSION: Bump version up to 4.9.4.
Nov 27, 2018
a816ca40 PEP8: fix E231: missing whitespace after ','
Dec 04, 2018
517df6d3 dirsync: Allow arbitrary length cookies
Dec 04, 2018
f4105adc sync_passwords: Remove dirsync cookie logging for continuous operation
Dec 04, 2018
f678c6f0 ldb_controls: Add some talloc error checking for controls
Dec 04, 2018
739ce2c7 s4:torture/smb2/session: test smbXcli_session_set_disconnect_expired() works
Dec 04, 2018
2332c99c libcli/smb: don't overwrite status code
Dec 04, 2018
d2a6e3e1 CVE-2018-16853: Fix kinit test on system lacking ldbsearch
Dec 04, 2018
09f9bb28 CVE-2018-16853: The ticket in check_policy_as can actually be a TGS
Dec 04, 2018
a2f4d49c CVE-2018-16853: Add a test to verify s4u2self doesn't crash
Dec 04, 2018
a26e6160 CVE-2018-16853: Do not segfault if client is not set
Dec 04, 2018
b2ef0e08 CVE-2018-16853: fix crash in expired passowrd case
Dec 04, 2018
6a549df2 ctdb-daemon: Exit with error if a database directory does not exist
Dec 05, 2018
850a5521 CVE-2018-14629: Tests to expose regression from dns cname loop fix
Dec 10, 2018
53b2e9af CVE-2018-14629 dns: fix CNAME loop prevention using counter regression
Dec 10, 2018
7cc1a8d9 selftest: test wbinfo -n and --gid-info with "NT Authority"
Dec 10, 2018
cf7e9d3d libcli/security: add dom_sid_lookup_is_predefined_domain()
Dec 10, 2018
fd91429b winbindd: add some braces
Dec 10, 2018
ac2c24cc winbindd: fix predefined domains routing in find_lookup_domain_from_sid()
Dec 10, 2018
1d0e4511 winbindd: Route predefined domains through the BUILTIN domain child
Dec 10, 2018
f53459c9 s3:libads: Add net ads leave keep-account option
Dec 13, 2018
8eaf7922 vfs_error_inject: add pwrite
Dec 13, 2018
1cf55de5 vfs_error_inject: add EBADF error
Dec 13, 2018
6f8ea0a0 s4:torture: add a test-suite for VSS
Dec 13, 2018
0244de24 s3:script/tests: add a test for VSS write behaviour
Dec 13, 2018
0e355e38 vfs_shadow_copy2: add _already_converted arg to shadow_copy2_strip_snapshot_internal()
Dec 13, 2018
256d488b vfs_shadow_copy2: add shadow_copy2_strip_snapshot_converted
Dec 13, 2018
e60c9431 vfs_shadow_copy2: nicely deal with attempts to open previous version for writing
Dec 13, 2018
1f897e6c s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs.
Dec 13, 2018
3295cc8b s3:selftest: add a VSS test reading a stream
Dec 13, 2018
88863119 s3:smbd: prepare filename_convert_internal() for twrp
Dec 13, 2018
f8c144fa s3:smbd: add twrp processing to filename_convert_internal()
Dec 13, 2018
baf1e0f3 s3:smbd: add twrp args to filename_convert()
Dec 13, 2018
fa2a9c3b s3:smbd: pass down twrp from SMB2_CREATE to filename_convert()
Dec 13, 2018
d18c5775 vfs_shadow_copy2: in fstat also convert fsp->fsp_name and fsp->base_fsp->fsp_name
Dec 13, 2018
9da8cd02 WHATSNEW: Add release notes for Samba 4.9.4.
Dec 20, 2018
f1a0c835 VERSION: Disable GIT_SNAPSHOT for the 4.9.4 release.
Dec 20, 2018
844dc32d New upstream version 4.9.4+dfsg
Dec 22, 2018
d7ccf243 Revert "Add patches for previous fixes"
Dec 22, 2018
bed833b4 Revert "CVE-2018-16857 dsdb/util: Add better default lockOutObservationWindow"
Dec 22, 2018
798893ee Revert "CVE-2018-16857 dsdb/util: Fix lockOutObservationWindow for PSOs"
Dec 22, 2018
b80f15d8 Revert "CVE-2018-16857 dsdb/util: Correctly treat lockOutObservationWindow as 64-bit int"
Dec 22, 2018
f43a2085 Revert "CVE-2018-16857 tests: Sanity-check password lockout works with default values"
Dec 22, 2018
e5282649 Revert "CVE-2018-16857 PEP8: fix E251: unexpected spaces around keyword / parameter equals"
Dec 22, 2018
f6f2432f Revert "CVE-2018-16857 PEP8: fix E127: continuation line over-indented for visual indent"
Dec 22, 2018
b5d28491 Revert "CVE-2018-16857 selftest: Split up password_lockout into tests with and...
Dec 22, 2018
7069d0eb Revert "CVE-2018-16857 PEP8: fix E305: expected 2 blank lines after class or...
Dec 22, 2018
0092508e Revert "CVE-2018-16857 selftest: Prepare to allow override of lockout duration...
Dec 22, 2018
501a3868 Revert "CVE-2018-16853 build: The Samba AD DC, when build with MIT Kerberos is experimental"
Dec 22, 2018
599959ab Revert "CVE-2018-16852 dcerpc dnsserver: refactor common properties handling"
Dec 22, 2018
0aebef3e Revert "CVE-2018-16852 dcerpc dnsserver: Ensure properties are handled correctly"
Dec 22, 2018
cb3b952f Revert "CVE-2018-16852 dcerpc dnsserver: Verification tests"
Dec 22, 2018
afbb0923 Revert "CVE-2018-16851 ldap_server: Check ret before manipulating blob"
Dec 22, 2018
8d80596b Revert "CVE-2018-16841 selftest: Check for mismatching principal in certficate...
Dec 22, 2018
3c9b15fe Revert "CVE-2018-16841 heimdal: Fix segfault on PKINIT with mis-matching principal"
Dec 22, 2018
065a10c4 Revert "CVE-2018-14629 dns: CNAME loop prevention using counter"
Dec 22, 2018
387327d8 Merge tag 'upstream/4.9.4+dfsg'
Dec 22, 2018
e48511a2 Changelog for previous commits
Dec 22, 2018
cbdbf5e6 s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration
Dec 22, 2018
11c53c78 ignore create_builtin_guests() failing without a valid idmap configuration...
Dec 22, 2018

2 additional commits have been omitted to prevent performance issues.