Сопровождающий Evgeny Sinelnikov в ветке p8: Информация

- Backport latest security release fixed CVE-2021-3156 to p8/c8/c8.1 branches
  without sudo python plugin due it not compatible with python3.5
- Update to latest security release of the Samba 4.9
- Security fixes:
  + CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD Directory not automatic
  + CVE-2019-14907: Crash after failed character conversion at log level 3 or above
  + CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC
- Update to latest security release of the Samba 4.9
- Security fixes:
  + CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD Directory not automatic
  + CVE-2019-14907: Crash after failed character conversion at log level 3 or above
  + CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC
- Rebuild with headers from release of Samba-4.9.18 for p8/c8.1
- Update to last security winter release
- Security fixes:
  + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server
  + CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC
- Update to last security winter release
- Security fixes:
  + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server
  + CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC
- Rebuild with headers from release of Samba-4.9.17 for p8/c8.1
- Update to last winter release of samba-4.9 (closes: 37245)
- Fix print using spoolss with kerberos credentials: SAMBA#13939
- username/password authentication doesn't work with CUPS and smbspool: SAMBA#14128
- Update to last winter release of samba-4.9 (closes: 37245)
- Fix print using spoolss with kerberos credentials: SAMBA#13939
- username/password authentication doesn't work with CUPS and smbspool: SAMBA#14128
- Rebuild with headers from release of Samba-4.9.16 for p8/c8.1
- Partial fixes for SMBLoris vulnerability on smbd (W-2019-0061)
  + Add smbd read timeout parameter (default 3000)
  + Set max smbd processes to 768
- Partial fixes for SMBLoris vulnerability on smbd (W-2019-0061)
  + Add smbd read timeout parameter (default 3000)
  + Set max smbd processes to 768
- Update to the 1.4.8 release for samba-4.9.14
- Update to second security autumn release
- Security fixes:
  + CVE-2019-10218 Client code can return filenames containing path separators
  + CVE-2019-14833 Samba AD DC check password script does not receive the full password
  + CVE-2019-14847 User with "get changes" permission can crash AD DC LDAP server via dirsync
- Update to second security autumn release
- Security fixes:
  + CVE-2019-10218 Client code can return filenames containing path separators
  + CVE-2019-14833 Samba AD DC check password script does not receive the full password
  + CVE-2019-14847 User with "get changes" permission can crash AD DC LDAP server via dirsync
- Rebuild with headers from release of Samba-4.9.15 for p8/c8.1
- Rebuild with latest version on libldb-1.4.8
- Apply from upstream SSSD#3917 Double free error in tev_curl (Closes: 36841)
- Update to first security autumn release
- Security fixes:
  + CVE-2019-10197 Permissions check deny can allow user to escape from the share
- Update to first security autumn release for domain controller release
- Security fixes:
  + CVE-2019-10197 Permissions check deny can allow user to escape from the share
- Rebuild with headers from release of Samba-4.9.13 for p8/c8.1
- Disable ubt macros due binary package identity changes
- Disable ubt macros due binary package identity changes
- Disable ubt macros due binary package identity changes
- Updated to 0.9.23.
- Update to the 1.4.7 release for samba-4.9.10
- Update to latest release of samba-4.9 with ldb 1.4.7
- Fix join with don't exists machine account (SAMBA#14007)
- Update to latest release of samba-4.9 with ldb 1.4.7
- Fix join with don't exists machine account (SAMBA#14007)
- Update to new upstream release
- Fix sssd-ad System error during access deny to sysvol when it not replicated
  or not configured with 'samba-tool ntacl sysvolreset' command
- Rebuild with headers from release of Samba-4.9.11 for p8/c8.1
- Rebuild with latest samba-DC package
- backport to p8
- Fixed certificates renewal.
- Update to new upstream release
- Fix sssd-ad System error during access deny to sysvol when it not replicated
  or not configured with 'samba-tool ntacl sysvolreset' command
- Update to latest winter release
- Disable ubt macros due binary package identity change
- Update to latest of 5.2 release
- Build for kernel-image-std-def-4.9.155-alt0.M80P.1.
- Build for kernel-image-un-def-4.19.16-alt0.M80P.1.
- Build for kernel-image-un-def-4.19.16-alt0.M80P.1.
- Build for kernel-image-std-def-4.9.155-alt0.M80P.1.
- Change group access for private directory due effective mask with acl
- Change group access for private directory due effective mask with acl
- Disable ubt macros due binary package identity changes
- Add lost VMMRC.rc due manual install on ix86
- Build for Sisyphus
- Build for kernel-image-std-def-4.9.146-alt0.M80P.1.
- Build for kernel-image-un-def-4.14.88-alt0.M80P.1.
- Build for kernel-image-std-def-4.9.146-alt0.M80P.1.
- Build for kernel-image-un-def-4.14.88-alt0.M80P.1.
- Update to autumn security release
- Clean test module of third_party/iso8601 and subunit modules
- Security fixes:
  + CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD Internal DNS server
  + CVE-2018-16841 Double-free in Samba AD DC KDC with PKINIT
  + CVE-2018-16851 NULL pointer de-reference in Samba AD DC LDAP server
  + CVE-2018-16853 Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported)
- Update to autumn security release
- Clean test module of third_party/iso8601 and subunit modules
- Security fixes:
  + CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD Internal DNS server
  + CVE-2018-16841 Double-free in Samba AD DC KDC with PKINIT
  + CVE-2018-16851 NULL pointer de-reference in Samba AD DC LDAP server
  + CVE-2018-16853 Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported)
- Rebuild with headers from security release of Samba-4.7.12 for p8
- Apply patches from 4.9.11 sources tree
- Disable ubt macros due binary package identity changes
- Update to first autumn release
- Update to first autumn release
- Disable ubt macros due binary package identity change
- Rebuild with headers from new release of Samba-4.7.11 for p8
- Disable ubt macros due binary package identity changes
- Rebuild next release without ubt macros due binary package identity changes
- Fix automatically connect to domain naming master improvement
- Build for branch p8
- 2.1.12 -> 2.1.14
- Build package for Python3
- 1.3.15 -> 1.3.16
- Build package for Python3
- 0.9.36 -> 0.9.37
- Build package for Python3
- Build with subpackage for Python3
- Update to latest summer release
- Build with subpackage for Python3
- Update to latest summer release
- Build with subpackage for Python3
- Rebuild with headers from new release of Samba-4.7.10 for p8
- Build for branch p8
- Build upstream version 1.16.3 with Python3 bindings for p8
  + Dropped patch `nss: skip incomplete groups instead of bailing out',
    included by upstream
  + Refreshed become_user patch (unit test passes now)
- Rebuild with samba-4.7.8 and libldb-1.2.3
- Fix python requires (by mrdrew@)
- Avoid client libraries requires to samba-common
- Fix build against new python Sisyphus release with libnsl2
- Split samba-DC-common to separate samba-DC-common-tools
- Fix build against new python Sisyphus release with libnsl2
- Update to latest security release of krb5-1.14
- Security fixes:
  + CVE-2017-11368 Fix a KDC denial of service vulnerability caused by unset
    status strings
  + CVE-2017-11462 Preserve GSS contexts on init/accept failure
- Update to second spring release
- Update to second spring release
- Rebuild with headers from new release of Samba-4.6.15 for p8
- Update to latest stable release
- Revert libwbclient-sssd interface to version 0.13 for samba-4.6
- Update to spring security release
- Security fixes:
  + CVE-2018-1050 Codenomicon crashes in spoolss server code
  + CVE-2018-1057 Unprivileged user can change any user (and admin) password
- Update to spring security release
- Security fixes:
  + CVE-2018-1050 Codenomicon crashes in spoolss server code
  + CVE-2018-1057 Unprivileged user can change any user (and admin) password
- Rebuild with headers from new release of Samba-4.6.14 for p8
- Update to second winter release with common bugfixes
- Update to second winter release with common bugfixes
- Rebuild with headers from new release of Samba-4.6.13
- Fix logrotate insecure parent directory permissions (closes: 34335)
- Fix trouble with incomplete group object found during initgroups
- Fix trouble with joined machine account moving when it already exists.
  Move it only if the admin specified an explicit OU (Samba bug #12696)
- Fix trouble with joined machine account moving when it already exists.
  Move it only if the admin specified an explicit OU (Samba bug #12696)
- Update to first winter release with common bugfixes (closes: 33210)
- Update to first winter release with common bugfixes (closes: 33210)
- Rebuild with headers from new release of Samba-4.6.12
- Backport sssd to stable branches
- Backport security version (1.9.1) (Fixes: CVE-2017-14727)
- Second autumn security release (Fixes: CVE-2017-14746, CVE-2017-15275)
- Second autumn security release (Fixes: CVE-2017-14746, CVE-2017-15275)
- Rebuild with headers from new release of Samba-4.6.11
- Update to release for samba-4.7.0 with tevent-0.9.33
- New version for samba-4.6.10 and samba-4.7.2
- fix recursive implementation of string.subst (ALT #34215)
- Update for third autumn release with common bugfixes
- Update for third autumn release with common bugfixes
- Rebuild with headers from new release of Samba-4.6.10
- Fix KDC not works in configuration with trusted domain (samba bug #13078)
- Rebuild with libusb-compat-devel due needs for stk500v2 (ALT #33937)
- Backport 4.0.1 with enabled AVR target to p8 branch.
- Update for autumn security release:
  + CVE-2017-12150 (SMB1/2/3 connections may not require signing where they
   should)
  + CVE-2017-12151 (SMB3 connections don't keep encryption across DFS redirects)
  + CVE-2017-12163 (Server memory information leak over SMB1)
- Update for autumn security release:
  + CVE-2017-12150 (SMB1/2/3 connections may not require signing where they
   should)
  + CVE-2017-12151 (SMB3 connections don't keep encryption across DFS redirects)
  + CVE-2017-12163 (Server memory information leak over SMB1)
- Rebuild with headers from new release of Samba-4.6.8
- valid_ipv4addr: Allow 0 in last byte. (closes: #33795)
- Clean code from old merged chunks
- Enable parallel build
- Clean code from old merged chunks
- Rebuild with clean from old merged chunk samba code
- Update to latest release with:
 + SSSD Kerberos credentials manager (sssd-kcm)
 + SSSD Certficate Mapping Library (libsss_certmap)
- Update to last version with nonstandard speeds on port support (ALT #33688)
- Add avrdude-devel with static development library
- Build with universal build tag (aka ubt macros)
- Update to summer security release
- Security fixes:
  + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation
  (Samba binaries built against MIT Kerberos are not vulnerable.)
- Update to summer security release
- Security fixes:
  + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation
- Rebuild with headers from new release of Samba-4.6.6
- Update to first spring release 1.14.5
- Udpate to first summer release
- Remove conflict samba-DC-libs with samba-libs
- Adjust python module requirement to samba-DC-common-libs
- Add conflict python-module-samba-DC with python-module-samba
- Rebuild with headers from new release of Samba-4.6.5
- Rebuild with splited samba-DC-libs for branch p8
- Remove hacks with ldb samba modules path search via LDB_LIBRARY_PATH
  by additional --with-samba-modulesdir configure option (closes: #33427)
- Fix PAM config with pam_localuser.so
- Update to first summer security release
- Update to spring security release ((Fixes: CVE-2017-1000367)
- Update to latest spring release
- Update to second spring security release
- Fix longtime initialization bug in ldb proxy
- Security fixes:
  + CVE-2017-7494 Remote code execution from a writable share
- Update to second spring security release
- Fix longtime initialization bug in ldb proxy
- Security fixes:
  + CVE-2017-7494 Remote code execution from a writable share
- Rebuild with headers from new release of Samba-4.6.4
- Udpate to second spring release
- Udpate to second spring release
- Remove conflict winbind with libwbclient-sssd due upgrade problems
- Rebuild with headers from new release of Samba-4.6.3
- Support for New and Reenter new Password for pam_sss
- Fix problem with failed to create kerberos keytab during join to domain
- Fix problem with failed to create kerberos keytab during join to domain
- Support sssd password with pam_sss

Ветки
sisyphus	115
sisyphus_e2k	47
sisyphus_mipsel	45
sisyphus_riscv64	95
p10	118
p10_e2k	49
p9	126
p9_e2k	43
p9_mipsel	48
p8	58
c9f2	126
c7	42

Репозиторий: p8

Сопровождающий Evgeny Sinelnikov в ветке p8: Информация