~ubuntu-branches/ubuntu/oneiric/samba/oneiric-security : changes

~ubuntu-branches/ubuntu/oneiric/samba/oneiric-security » Changes from revision 149

From Revision 149 to 130

Rev	Summary	Authors	Tags	Date
149	* SECURITY UPDATE: Authenticated user can take ownership of ... * SECURITY UPDATE: Authenticated user can take ownership of arbitrary files and directories - debian/patches/CVE-2012-2111.patch: Remove excessive permissions granted in account related Local Security Authority remote procedure calls. Based on upstream patch. - CVE-2012-2111	Tyler Hicks	2:3.5.11~dfsg-1ubuntu2.3	12 years ago
148	* SECURITY UPDATE: Unauthenticated remote code execution via * SECURITY UPDATE: Unauthenticated remote code execution via RPC calls (LP: #978458) - debian/patches/CVE-2012-1182-1.patch: Fix PIDL compiler to generate code that uses the same value for array allocation and array length checks. Based on upstream patch. - debian/patches/CVE-2012-1182-2.patch: Regenerate PIDL generated files with the patched PIDL compiler - CVE-2012-1182	Tyler Hicks	2:3.5.11~dfsg-1ubuntu2.2	12 years ago
147	debian/patches/fix-debuglevel-name-conflict.patch: debian/patches/fix-debuglevel-name-conflict.patch: Re-add patch that was mistakenly dropped. (LP: #529714)	Chuck Short	2:3.5.11~dfsg-1ubuntu2	12 years ago
146	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/patches/error-trans.fix-276472: - Add the translation of Unix Error code -ENOTSUP to NT Error Code - NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cups breaks to push the package to also upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp.	Marc Deslauriers	2:3.5.11~dfsg-1ubuntu1	12 years ago
145	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + Dropped: - debian/patches/fix-upstream-lp-738968.patch: Fixed upstream. - debian/patches/fix-debuglevel-name-conflict.patch: Fixed upstream.	Chuck Short	2:3.5.9~dfsg-1ubuntu1	12 years ago
144	releasing version 2:3.5.8~dfsg-5ubuntu2 releasing version 2:3.5.8~dfsg-5ubuntu2	Steve Langasek	2:3.5.8~dfsg-5ubuntu2	12 years ago
143	debian/samba-common.dhcp: revert wrong check for executabili... debian/samba-common.dhcp: revert wrong check for executability of /etc/init/smbd.conf. With the previous change, samba would never be signalled for the config file update.	Steve Langasek		12 years ago
142	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + debian/patches/fix-upstream-lp-738968.patch: Fix connection to EMC Celerra NAS version 5.6.50. (LP: #738968) + debian/patches/fix-debuglevel-name-conflict.patch: Fix issue with the "debug_level" variable name in libnss_wins.so conflicting with the "debug_level" global variable that some applications. (LP: #529714)	Chuck Short	2:3.5.8~dfsg-5ubuntu1	12 years ago
141	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + debian/patches/fix-upstream-lp-738968.patch: Fix connection to EMC Celerra NAS version 5.6.50. (LP: #738968) + debian/patches/fix-debuglevel-name-conflict.patch: Fix issue with the "debug_level" variable name in libnss_wins.so conflicting with the "debug_level" global variable that some applications. (LP: #529714)	Chuck Short	2:3.5.8~dfsg-2ubuntu1	12 years ago
140	* debian/patches/fix-debuglevel-name-conflict.patch: * debian/patches/fix-debuglevel-name-conflict.patch: + Fix issue with the "debug_level" variable name in libnss_wins.so conflicting with the "debug_level" global variable that some applications use (LP: #529714)	Chow Loong Jin	2:3.5.8~dfsg-1ubuntu2.2	12 years ago
139	debian/samba.smbd.upstart: Do not attempt to start smbd unti... debian/samba.smbd.upstart: Do not attempt to start smbd until network device is up, previously smbd was starting too early and often failing. (LP: #771305)	Dave Walker (Daviey)	2:3.5.8~dfsg-1ubuntu2.1	13 years ago
138	debian/patches/fix-upstream-lp-738968.patch: Fix connection debian/patches/fix-upstream-lp-738968.patch: Fix connection to EMC Celerra NAS version 5.6.50. (LP: #738968)	Chuck Short	2:3.5.8~dfsg-1ubuntu2	13 years ago
137	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + Dropped: - debian/patches/fix-windows7-print-connection.patch: Merged upstream. - debian/patches/security-CVE-2011-0719.patch: Merged upstream.	Chuck Short	2:3.5.8~dfsg-1ubuntu1	13 years ago
136	* debian/patches/fix-windows7-print-connection.patch: Fix * debian/patches/fix-windows7-print-connection.patch: Fix error "0x000003e6" when trying to connect a Windows 7 printer to a domain. (LP: #674216) * debian/samba-common.dhcp: Take in account of the upstart script. (LP: #652065)	Chuck Short	2:3.5.6~dfsg-5ubuntu3	13 years ago
135	* SECURITY UPDATE: denial of service via missing range check... * SECURITY UPDATE: denial of service via missing range checks on file descriptors - debian/patches/security-CVE-2011-0719.patch: validate miscellaneous file descriptors. - CVE-2011-0719	Marc Deslauriers	2:3.5.6~dfsg-5ubuntu2	13 years ago
134	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp.	Chuck Short	2:3.5.6~dfsg-5ubuntu1	13 years ago
133	* Fix exit code of pre-start script in nmbd upstart script. ... * Fix exit code of pre-start script in nmbd upstart script. (LP: #707563) * Skip testparm run if smb.conf does not exist in nmbd upstart script.	Jelmer Vernooij	2:3.5.6~dfsg-4ubuntu3	13 years ago
132	debian/samba.nmbd.upstart: create /var/run/samba directory b... debian/samba.nmbd.upstart: create /var/run/samba directory before running testparm. Fixes start-up of nmb after boot. (LP: #596064) Thanks to Jelmer Vernooij.	Chuck Short	2:3.5.6~dfsg-4ubuntu2	13 years ago
131	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp.	Chuck Short	2:3.5.6~dfsg-4ubuntu1	13 years ago
130	debian/samba.if-up: Only run if /etc/init.d/smbd is installe... debian/samba.if-up: Only run if /etc/init.d/smbd is installed. (LP: #659499)	Chuck Short	2:3.5.6~dfsg-3ubuntu3	13 years ago

Older »