-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 27 Jan 2023 11:15:01 +0300 Source: samba Architecture: source Version: 2:4.17.5+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 1023606 Changes: samba (2:4.17.5+dfsg-1) unstable; urgency=medium . * new upstream stable/bugfix release. From WHATSNEW.txt: * BUG 14808: smbc_getxattr() return value is incorrect. * BUG 15172: Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly. * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors. * BUG 15226: samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS (Closes: #1023606). * BUG 15236: smbd crashes if an FSCTL request is done on a stream handle. * BUG 15277: DFS links don't work anymore on Mac clients since 4.17. * BUG 15283: vfs_virusfilter segfault on access, directory edgecase (accessing NULL value). * BUG 15240: CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes). * BUG 15243: %U for include directive doesn't work for share listing (netshareenum) (the fix was in debian before). * BUG 15266: Shares missing from netshareenum response in samba 4.17.4 (the fix was in debian before). * BUG 15269: ctdb: use-after-free in run_proc. * BUG 15280: irpc_destructor may crash during shutdown. * BUG 15286: auth3_generate_session_info_pac leaks wbcAuthUserInfo. * BUG 15268: smbclient segfaults with use after free on an optimized build * BUG 15282: smbstatus leaking files in msg.sock and msg.lock. * BUG 15164: Leak in wbcCtxPingDc2. * BUG 15265: Access based share enum does not work in Samba 4.16+. * BUG 15267: Crash during share enumeration. * BUG 15271: rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer. * BUG 15281: Avoid relying on C89 features in a few places. * remove patches applied upstream: - reload-registry-shares-after-reloading-services.patch - rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch * d/control: Standards-Version: 4.6.2 (no changes) * d/control: put all doc-generating build-deps into one line * little prep for cross-compilation - build-depend on python3:any and python3-dev:any - build-depend on libpython3-dev for actual module building, and use arch-specific python3-config from there - set and export _PYTHON_SYSCONFIGDATA_NAME to get foreign-arch values provided by libpython3-dev (also helps when python itself is foreign) - depend on perl:any not just perl - export CC/CPP/LD/PKGCONFIG for ./configure (buildtools.mk) * d/gbp.conf: unignore branch * d/control: samba, ctdb, winbind: do not depend on lsb-base (the script is in sysvinit-utils now) * d/control: drop unused build-dep on libncurses5-dev Checksums-Sha1: 1f00ac6787ee5c10a52f452874790595c2b23dd3 4397 samba_4.17.5+dfsg-1.dsc 9e0a01759c8fbc4b8b2257e1bbb46534bf6dc2f6 18421936 samba_4.17.5+dfsg.orig.tar.xz 164797f3da3f9a303de0cd3172554a5dd456530d 267556 samba_4.17.5+dfsg-1.debian.tar.xz deefef73933b5a300624ced9fb1ca87787b4baff 5991 samba_4.17.5+dfsg-1_source.buildinfo Checksums-Sha256: a1daeef815c551f62d0d19af97026fbf7272d33916a6bcb811d12019e9bcb05b 4397 samba_4.17.5+dfsg-1.dsc dd80e994a367b17fe9823494ad55ac36a9027857c7132653d730351327546cfd 18421936 samba_4.17.5+dfsg.orig.tar.xz e392b8133c103b26a2944a59b8cc4df16a3771e2784a2da28521edc41c7ef871 267556 samba_4.17.5+dfsg-1.debian.tar.xz e10229bc8f03d29dce89eca6c5b2dbe3241e0a46873b8233bde16e8b96900339 5991 samba_4.17.5+dfsg-1_source.buildinfo Files: 7aa6c6bc2f13d144a9375972fa02b12f 4397 net optional samba_4.17.5+dfsg-1.dsc bafc00114421c479883dd2b003d28cfa 18421936 net optional samba_4.17.5+dfsg.orig.tar.xz 6795c05b19d7089c324dd3d4b601337b 267556 net optional samba_4.17.5+dfsg-1.debian.tar.xz 81768d3f6a2b65e46c24963f96288be8 5991 net optional samba_4.17.5+dfsg-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmPTiEoPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5ZI8MIAIGE5ar+H8r77TZzZp6kO4fj9J0gQJzI/dm7 7NRnZVBxkdXQHP7oCb/Rj0OFUvqYWxkBr8tiITN7/A7o1pmvvD/ruy/CrWPwY8vW AlwlNuW0ogYRHQnw38DJn8NSReTFCEOdde9Qu9nd+PyKoRLFHclYjPcEmTf+lA5a vbetAJxo9FM1wPy2M0NxQqh8bTLKzmegXfY4W0i+mKoKzHQxiWeRv7TxqxlRWDKv tWQpQpa+d5w/xQw48DapxL8mKUnbME2Y2fzA2lucYdudfcCAAVsvaHx67p3qX7ax 0IweTX7VSkUQUBIEp5izz34eo4wLrhXV5um1KxJ3HuUxU2/m+dE= =C352 -----END PGP SIGNATURE-----