Сопровождающий Evgeny Sinelnikov в ветке p9: Информация

- Update to latest release with support for fd-passing via unix sockets
- Add public libsocket_wrapper_noop library

- new version 1.1.4

- Update to the 2.3.2 with backported all C code changes from ldb-2.4.1
- Fix overflow timestring test for 32 bits platforms

- Add support samba-tool-plus alternative for samba-dc build with heimdal.

- Revert reverted patch with change owner/permissions of user deskprofile path
  due it still needed.

- Add support samba-tool-plus alternatives for various samba-dc and
  samba-dc-mitkrb5 builds with Heimdal and MIT Kerberos respectively.

- Added support for Kerberos authentication via use_kerberos.patch

- Fixed typo in screensaver setting in Russian translations
- Improve English translation of gsettings strings
- Fix authetication method bug for gsetting oprtion:
  org.gnome.Vino.authentication-methods

- Adjust local policy templates
- Add control system-policy for gpupdate

- Added exception for org.gnome.Vino authentication-methods
- Fixed bug for alternative-port in org.gnome.Vino

- Update to latest security release of Samba 4.14
- Fix performance regressions in lsa_LookupSids3/LookupNames4 since Samba 4.9 by
  using an explicit database handle cache and address a signifcant in database
  access in the AD DC since Samba 4.12.
- Fix an unuthenticated user can crash the AD DC KDC by omitting the server name
  in a TGS-REQ (Fixes: CVE-2021-3671).

- Update to latest stable release with bugfixes and improvements:
 + Sudo now can handle the getgroups() function returning a different
   number of groups for subsequent invocations.

- Fix the ability to add user_of_subject to user_identities
- Refactoring the addition_to_user_identities_user_of_subject function

- Fix net ads join segmentation fault problem if ldap SRV host record not found.

- Fix Shortcuts applier double running in user context
- Add LogonUser variable to expand_windows_var() function
- Add support of path variable expansion to Shortcuts applier

- Fix using obsoleted in samba-4.14 cmd_user_create class with renamed
  cmd_user_add class (closes: 40557)
- Add conflicts with old samba package provided python3(samba.netcmd.user)

- Update to latest release of Samba 4.14 with smbd and samba-tool fixes

- Initial build

- Update to new release
- Add admx-lint check with special workaround:
  https://github.com/altlinux/admx-lint/issues/1

- Update to latest release 91.0-4472.164
- Add admx-lint check with special workaround:
  https://github.com/altlinux/admx-lint/issues/1
- Convert UTF-16 chrome.adm files to UTF-8

- Add new categories and policies:
 + SSHD and Systemd categories
 + Windows policies mapping support (applied for GSettings only yet)
- Add admx and adml files checking via admx-lint

- Fix GSettings applier user part support
- Add support additional firefox appliers
- Add new windows policies mapping capability feature ruled by:
  Software\BaseALT\Policies\GPUpdate\WindowsPoliciesMapping
- Improve drop privileges mechanism with fork and dbus session

- Don't stop with error if DESTDIR already exists

- Update to latest release

- Update to latest release

- Update to latest release.

- Initial build for ALT Sisyphus

- new version 0.7

- Update to latest release

- Update to the 2.3.0 for latest samba-4.14.2 security release

- Update to latest release of Samba 4.14 with ensure POSIX default ACL
  is mapped into returned Windows ACL for directory handles and fix
  uninitialized memory read in process_symlink_open() when used with
  vfs_shadow_copy2() for smbd.

- Add sssd-drop-privileges control
- Fix sssd-ad-gpo-access-control with more appropriate designations

- Apply internal, domain and service fixes from upstream.
- Add compatibility support of unprivileged mode with "user = _sssd"
  due from sssd-2.4.2 default user is set to root.

- Update to new release with russian translation
- Set right URL of upstream project

- Update to latest release
- Fix installation to /usr/share/PolicyDefinitions
- Set right License and URL of upstream project

- Fixed apt transaction on distro-branch upgrade.

- Update to latest release

- Set TRIK_STUDIO_VERSION to package version for cmake build.
- Add HomeLocation prefix in invariantPath() substitution for paths started with
  .config and .local substrings for backward compatibility.
- Remove user directories from system config options (set to default):
  + pathToGeneratorRoot to ~/.local/share/trik-studio/
  + pathToLogs to ~/.config/trik-studio/logs/

- Enable boot branding for all platforms

- Add support 'fuid' automatic mode option for method cdrom
- Fix potential memory overflow in welcome string
- Set PREFIX to "/" for nfs and cifs methods due its mounted to image root

- Update image_url with PREFIX for automatic methods (cdrom, disk, nfs and cifs)
  with mounted image directory using in cp-metadata script (closes: 39788)

- Use same image top directory location as Metadata for cdrom, disk, nfs and
  cifs methods in case when sources.list packages replaced in other subdirectory
  with other stage2 files.

- fix fusermount control with common use of builtin mode
- add fuse.conf generated by fuse-3.10.2

- update to latest release requires by newest gvfs from gnome project (fixes: 39759)

- Update to the 2.1.5 for latest samba-4.12.14 security release

- Update to latest security release of the Samba 4.12
- Security fixes:
  + CVE-2020-27840: Heap corruption via crafted DN strings
  + CVE-2021-20277: Out of bounds read in AD DC LDAP server

- Fixate that upstream fixed the memory leak in the
  simple access provider (fixes: OVE-20210209-0001)

- Update to latest release of Samba 4.12 with minor fixes.
- Remove not needed anymore smbd_conn private library.

- Set NetworkManager Native as default if NetworkManager exists.

- Fixate that upstream fixed the memory leak in the
  simple access provider (fixes: OVE-20210209-0001)

- Add krb5_use_subdomain_realm=True to support upnSuffixes for trusted domains
- Allow to set case_sensitive=Preserving in subdomain section
- Add auto_private_groups to subdomain_inherit
- Add /var/lib/sss/.cache directory for gencache.tdb using samba gpo libraries

- Update to latest release of Samba 4.12

- Update to latest security release (fixes: CVE-2021-3156) (closes: 39615)
- Added sudo-python package with Sudo Python Plugin API
- Added sudo-logsrvd package with High-performance log server

- Update to the 2.1.4 for latest samba-4.12.6 release

- Updated to upstream commit 8171778c835b6be517c314cf23dd1f5ae061a117.

- Spotlight searches against an SMB server mdfind utility in samba-common-tools
  conflicts with gnustep-gworkspace due it also includes mdfind (closes: 39295)

- Reapply patch with ignore GPO if SecEdit/GptTmpl.inf is missing

- Backported to P9.

- Build with bzip2 compression method support
- Massive apply security patches from Fedora and openSUSE
- Fixes:
  + CVE-2014-8139 CRC32 verification heap-based buffer overread
  + CVE-2014-8140 out-of-bounds write issue in test_compr_eb()
  + CVE-2014-8141 getZip64Data() out-of-bounds read issues
  + CVE-2014-9913 buffer overflow in zipinfo
  + CVE-2014-9636 out-of-bounds read or write and crash
  + CVE-2015-7696 fix for heap overflow
  + CVE-2015-7697 fix infinite loop when extracting empty bzip2 data
  + CVE-2016-9844 buffer overflow in zipinfo in similar way like fix for CVE-2014-9913
  + CVE-2018-1000035 heap based buffer overflow when opening password protected files
  + CVE-2018-18384 buffer overflow, when a ZIP archive specially crafted

- Update to latest stable security release of the Samba 4.11
- Security fixes:
  + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify
  + CVE-2020-14323: Unprivileged user can crash winbind
  + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records

- Update to latest stable security release of the Samba 4.11

- Initial build for Sisyphus

- Fix control_subst_with_file_check regression and improve default
  variants of controls facilities use it

- Fixed compatibility upgrade trigger condition

- Avoid dependency to gpupdate-setup due gpupdate mechanism is not mandatory.

- Add sshd-allow-groups-list
- Fix authentication method (system-auth) selection and some number of typos

- Update to latest stable security release of the Samba 4.11
- Security fixes:
  + CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon")
    https://www.samba.org/samba/security/CVE-2020-1472.html

- Update to new release

- Update to latest release (Fixes: CVE-2019-18634)

- Update to new release 1.4
- Add support ALT images list directly from:
  https://getalt.org/raspi/os_list_imagingutility_alt.json
  It will work until the "Add ALT image link" issue closes:
  https://github.com/raspberrypi/rpi-imager/issues/95

- Update alterator-gpupdate l10n for ajax compatibilty.

- Add support of alterator web interface aka ajax support
- Remove BuildArch is noarch due ajax part of module

- Initial build of Synergy 1 as separate package

- Update to latest beta of development branch v2
- Stable release build as conflicts package synergy1

- Validate that each used filename in the role directory ends with .role
  extension. Not validated files skips.

- Add default libnss-role roles for users, powerusers and localadmins in separated
  package: alterator-roles-common - common files for alterator-roles (not implemented yet).
- user-groups and admin-groups saved temporary for compatibility.
- Create aditional groups during alterator-roles-common install:
 + everyone (with prefered guid 98)
 + localadmins (with prefered guid 101)
 + powerusers (with prefered guid 102)
 + guests (with prefered guid 103)
 + accountops (with prefered guid 104)
 + serverops (with prefered guid 105)
 + printops (with prefered guid 106)
 + backupops (with prefered guid 107)
 + replicators (with prefered guid 108)
 + networkops (with prefered guid 109)
 + remote (with prefered guid 110)

- Disable ldb_lmdb_free_list_test on ppc64le (Samba#14404)

- Update to latest stable security release of the Samba 4.11
- Security fixes:
  + CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC
                    LDAP Server with ASQ, VLV and paged_results
  + CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume excessive CPU
  + CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV
  + CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd

- Rebuild with libldb-2.0.12

- Fix version and update to official release

- Fix an error in system-policy.filetrigger in 1.9.0-alt1.

- Rewrite PAM rules for sss system-auth method with new pam-config-1.9.0 scheme
  using pam_localuser.so to separate configuration for local and remote users.
- Added dependency sssd-client to pam-config-1.9.0 supported configurable
  session substack system-policy.
- Added dependency sssd-ad to winbind-idmap for compatibility installation.

- Add ad_gpo_access_control default as permissive for sssd.conf

- Add support gpupdate_computer method

- Fix roleadd installation
- Correct show of project version

- Add sssd-ad-gpo-access-control control

- Add multiple appliers, part of which marks as experimental yet

- Update admx according to gpupdate-0.7.0 release

- Add support system-policy for PAM settings

- Add predefined profile name for ad-domain-controller
- Improve popup information after group policy management apply
- Require appropriate alterator-l10n version

- net-iptables: Add host mode support (Closes: #38505)

- Add Native NetworkManager control mode support (closes: #38455)

- The first and hopefully not the last release of 2020
- Support MT25QU256 for Baikal-M firmware

- Apply patches from fedora:
  + Add use the new des_crypt56_gnutls() and remove builtin DES crypto
  + Remove DES support if MIT Kerberos version does not support it
  + Create working private krb5.conf due it used by DNS update tool and should
    have enough details to authenticate with GSS-TSIG when running nsupdate

- Update to the 2.0.10 for latest samba-4.11.8 release

- Update to latest stable security release of the Samba 4.11
- Security fixes:
  + CVE-2020-10700: Fix use-after-free in AD DC LDAP server when ASQ and paged_results combined
  + CVE-2020-10704: Fix LDAP Denial of Service (stack overflow) in Samba AD DC

- Rebuild with libldb-2.0.10

- Update to latest release without crypt replace
- Set license to LGPLv3+

- Build new version for python3.8.
- Build without python2 (now libpytalloc is on python3).
- Clean up changelog.

- Update to latest release without crypt replace

- Update to the 2.0.9 for latest samba-4.11 releases

- Update to latest spring release of Samba 4.11
- Fix search with scope ONE and small result sets with ldb-2.0.9

- Update to 2.2.3

- Fixed compatibility with Samba 4.11
- Backported fix Pylint with python3: Remove subclassing from object

- Build without tests for python module due module tdb build for python3 only

- Transfer to python3.

- v5.5 -> v5.6.

- Update to last security winter release
- Security fixes:
  + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server
  + CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC

- Update to the 1.5.6 for newest samba-4.10 releases

- Update to second security autumn release
- Security fixes:
  + CVE-2019-10218 Client code can return filenames containing path separators
  + CVE-2019-14833 Samba AD DC check password script does not receive the full password
  + CVE-2019-14847 User with "get changes" permission can crash AD DC LDAP server via dirsync

- Rebuild with latest version libldb-1.5.6

- Remove dynamic libraries defected by design

- Update to latest of 5.2 release with support kernel-5.3.x (Closes: 37351)

- Build for kernel-image-un-def-5.3.6-alt1.

- Build for kernel-image-std-def-4.19.79-alt1.

- Build for kernel-image-un-def-5.3.6-alt1.

- Build for kernel-image-std-def-4.19.79-alt1.

- Update to autumn security release (closes: 37334)
- Code execution with euid==0 in rare box configurations (fixes: CVE-2019-14287)
- Fix post script for sudowheel control in case of upgrade in not default state

- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Fix build on 32-bits platforms

- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Fix build on 32-bits platforms

- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Build new version for ghc8.6.4.

- Build new version for ghc8.6.4.

- Build new version for ghc8.6.4.

- Build new version for ghc8.6.4.

- Build new version for ghc8.6.4.

- Build new version for ghc8.6.4.

- Build new version for ghc8.6.4.

- Spec created by cabal2rpm 0.20_11

- updated with the help of cabal2gear.

- Spec created by cabal2rpm 0.20_11

- Initial build for Sisyphus
- Spec created by cabal2rpm 0.20_11

- Spec created by cabal2rpm 0.20_11

- Build new version for ghc8.6.4.

- Spec created by cabal2rpm 0.20_11
- Add build dependency to colour

- Spec created by cabal2rpm 0.20_11
- Add build dependency to ansi-terminal

- Build new version for ghc8.6.4.

- Spec created by cabal2rpm 0.20_11
- Add build dependency to ansi-wl-pprint and transformers-compat

- Add manpage for hadfs
- Update hadfs with options parser