samba 2:4.11.1+dfsg-3ubuntu1 source package in Ubuntu

Changelog

samba (2:4.11.1+dfsg-3ubuntu1) focal; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/VERSION.patch: Update vendor string to "Ubuntu".
    - debian/smb.conf;
      + Add "(Samba, Ubuntu)" to server string.
      + Comment out the default [homes] share, and add a comment about
        "valid users = %s" to show users how to restrict access to
        \\server\username to only username.
    - debian/samba-common.config:
      + Do not change priority to high if dhclient3 is installed.
    - d/control, d/rules: Disable glusterfs support because it's not in main.
      MIR bug is https://launchpad.net/bugs/1274247
    - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch:
      change nfs service name from nfs to nfs-kernel-server
      (LP #722201)
      [Adopted the Debian version and added a couple of extra hunks
      we had]
    - d/p/ctdb-config-enable-syslog-by-default.patch:
      enable syslog and systemd journal by default
  * Dropped:
    - Add apport hook:
      + Created debian/source_samba.py.
      + debian/rules, debian/samba-common-bin.install: install hook.
      [In 2:4.9.4+dfsg-2]
    - Removed patches already applied upstream:
      + d/p/nsswitch-Add-try_authtok-option-to-pam_winbind.patch
        [Removed in 2:4.10.7+dfsg-1]
      + d/p/s3-auth-ignore-create_builtin_guests-failing-without.patch
        [Removed in 4.9.5+dfsg-1]
    - d/p/add-so-version-to-private-libraries: refreshed to remove fuzz
      [Refreshed in 2:4.1.17+dfsg-1]
    - d/control: Updated build dependencies (already updated in Debian):
      + tdb >= 1.3.17
      + talloc >= 2.1.15
      + tevent >= 0.9.38
      + ldb >= 1.5.3
    - d/samba-common.docs: README is now README.md
      [In 2:4.10.7+dfsg-1]
    - d/libsmbclient.symbols: update symbols for this version
    - d/libwbclient0.symbols: update symbols for this version
    - d/ctdb.install: new binary ctdb_local_daemons
      [In 2:4.10.7+dfsg-1]
    - d/samba-dev.install: use globbing for the header files with
      exceptions for wbclient.h and libsmbclient.h, which belong in
      other packages.
      [In 2:4.10.7+dfsg-1]
    - d/rules: fix globbing used to move the dckeytab python module to the
      samba package, and add a comment explaining why this is being done.
      [In 2:4.10.7+dfsg-1]
    - Switch to python3 (in 2:4.10.7+dfsg-1):
      + d/rules: calculate the ldb version using python3, and drop the
        "really" bit since the real 1.5.x series is being used now.
      + d/rules: make sure python3 is used for the build
      + d/rules: adjust globbing to remove the python3 version of tevent.so
      + d/rules: drop PYVERS, unused
      + d/control: adjust dependencies (build and runtime) for python3
      + d/python3-samba.install, d/control: new python3-samba package
        (LP #1440381)
      + d/control, d/python-samba.install: get rid of python-samba, which is py2
      + d/python3-samba.lintian-overrides: use the same overrides we had for
        python-samba, now deleted.
      + d/samba-dev.install, d/samba-libs.install: update file list
      + d/t/control, d/t/python-smoke: use python3
      + d/control: use ${python3:Depends} now instead of the python 2
        counterpart for samba and samba-common-bin.
    - d/control: drop suggests for python-gpgme, it's no longer available.
      [In 2:4.10.7+dfsg-1]
    - d/gbp.conf, d/watch, r/README.source: updated for 4.10
      [In 2:4.10.7+dfsg-1]
    - d/control: update cmocka build-depends to >= 1.1.3
      [In 2:4.10.7+dfsg-1]
    - d/samba-libs.install: bump passdb minor to 0.27.2
      [In 2:4.10.7+dfsg-1]
    - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d
      to allow pid file to exist (LP #1821775)
      [In 2:4.10.7+dfsg-1]
    - Allow proper ctdb initalization (LP #1828799):
      + d/ctdb.dirs: added /var/lib/ctdb/* directories
      + d/ctdb.postrm: remove leftovers from:
        /var/lib/ctdb/{state,persistent,volatile,scripts}
      [In 2:4.10.7+dfsg-1]
    - d/rules: installing provided config examples and helper scripts
    - Examples of NFS HA CTDB config files + helper script:
      + d/ctdb.example.enable.nfs.sh
      + d/ctdb.example.nfs-common
      + d/ctdb.example.nfs-kernel-server
      + d/ctdb.example.services
      + d/ctdb.example.sysctl-nfs-static-ports.conf
      [In 2:4.10.7+dfsg-1]
    - debian/rules: Make DEB_HOST_ARCH_CPU initialized through
      dpkg-architecture (Closes: #931138)
      [In 2:4.10.7+dfsg-1]
    - d/control: update ldb build-deps to 1.5.5
      [In 2:4.10.7+dfsg-1]
    - SECURITY UPDATE: restricted share escape by user (LP #1842533)
      [fixed upstream in 4.11.0rc2]
      + debian/patches/CVE-2019-10197-01-v4-10.patch: smbd: separate
        out impersonation debug info into a new function.
      + debian/patches/CVE-2019-10197-02-v4-10.patch: smbd: make sure that
        change_to_user_internal() always resets current_user.done_chdir
      + debian/patches/CVE-2019-10197-03-v4-10.patch: smbd: make sure we
        reset current_user.{need,done}_chdir in become_root()
      + debian/patches/CVE-2019-10197-04-v4-10.patch: selftest: make
        fsrvp_share its own independent subdirectory
      + debian/patches/CVE-2019-10197-05-v4-10.patch:
        test_smbclient_s3.sh: add regression test for the no permission
        on share root problem
      + debian/patches/CVE-2019-10197-06-v4-10.patch: smbd: split
        change_to_user_impersonate() out of change_to_user_internal()
      + CVE-2019-10197
  * Added:
    - d/control: drop python3-matplotlib. It's only used in
      script/attr_count_read which is not installed with the
      samba packages.

samba (2:4.11.1+dfsg-3) unstable; urgency=medium

  * Add some python dependencies:
    - python3-matplotlib : samba-tool visualize
    - python3-markdown   : samba-tool domain schemaupgrade
    - python3-dnspython  : samba-tool dns
  * Only build with default python3 (Closes: #943635)

samba (2:4.11.1+dfsg-2) unstable; urgency=high

  * New upstream security release
    - CVE-2019-10218: Malicious servers can cause Samba client code to return
      filenames containing path separators to calling code.
    - CVE-2019-14833: When the password contains multi-byte (non-ASCII)
      characters, the check password script does not receive the full password
      string.

samba (2:4.11.1+dfsg-1) unstable; urgency=medium

  * New upstream release

samba (2:4.11.0+dfsg-11) unstable; urgency=medium

  * Stop building with spotlight support which pulls glib (Closes: #941654)
  * Force quota support (Closes: #941899)
  * Standards-Version: 4.4.1, no change

samba (2:4.11.0+dfsg-10) unstable; urgency=medium

  * Add libwbclient-dev to samba-dev depends as samba-util was moved there
    (Closes: #941750)

samba (2:4.11.0+dfsg-9) unstable; urgency=medium

  * Remove versioned depends on libtdb-dev (>= 2) and add libldb-dev (>= 2:2)

samba (2:4.11.0+dfsg-8) unstable; urgency=medium

  * d/gbp.conf: sign-tags = True
  * Do not check smb.conf with testparm when server role=active directory domain
    controller (Closes: #931734)
  * Force one job during configure step with -j 1 (Closes: #941467).
    Not setting -j leads to default which is number of cpus

samba (2:4.11.0+dfsg-7) unstable; urgency=medium

  * Always evaluate WAF_NO_PARALLEL to ensure correct value (Closes: #941467)
  * This version is built with talloc from sid (Closes: #940963)

samba (2:4.11.0+dfsg-6) unstable; urgency=medium

  * Do not run waf configure in parallel. Fix FTBFS on arm (Closes: #941467)

samba (2:4.11.0+dfsg-5) experimental; urgency=medium

  * d/gitlabracadabra.yml: only_allow_merge_if_pipeline_succeeds: false
  * Remove patches:
    - "build: Remove tests for _readdir() and __readdir()"
    - "build: Remove tests for rdchk()"
    - "build: Remove tests for _pwrite() and __pwrite()"
  * Add patches by Ralph Boehme:
    - "wscript: remove all checks for _FUNC and __FUNC"
    - "wscript: split function check to one per line and sort alphabetically"

samba (2:4.11.0+dfsg-4) experimental; urgency=medium

  * Use the same arches for librados-dev than libcephfs-dev (Fix missing
    build-depends on alpha and sh4)
  * Split vfsmods:Recommends substvar into
    {vfsceph,vfsglusterfs,vfssnapper}:Recommends to make the code more readable
    and fix FTBFS on linux platforms without ceph (hppa and sparc64, and also
    alpha and sh4)
  * Add patch for "build: Remove tests for _readdir() and _readdir()", to
    hopefully fix FTBFS on armel

samba (2:4.11.0+dfsg-3) experimental; urgency=medium

  * Try to fix FTBFS on armel (armhf is fixed):
    - Add patch for build: Remove tests for rdchk()

samba (2:4.11.0+dfsg-2) experimental; urgency=medium

  * d/gitlabracadabra.yml: Add samba-team/libsmb2
  * Try to fix FTBFS on armel and armhf:
    - Add patch for build: Remove tests for _pwrite() and __pwrite()

samba (2:4.11.0+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * Upload to experimental
  * New upstream major release
    - Update d/gbp.conf, d/watch and d/README.source for 4.11
    - Import upstream release
    - Update fix-nfs-service-name-to-nfs-kernel-server.patch
    - Bump build-depends talloc >= 2.2.0, tdb >= 1.4.2, tevent >= 0.10.0 and
      ldb >= 2:2.0.7
    - libsamba-passdb.so bumped to 0.28.0
    - libnon-posix-acls is now a subsystem
    - Drop libparse-pidl-perl package (Closes: #939419)
    - Add new files to d/*.install
    - Move libsamba-util.so.* to libwbclient0, to avoid circular dependencies
    - Move libsamba-util deps to libwbclient0
  * Add build-Remove-tests-for-getdents-and-getdirentries.patch, to fix FTBFS on
    armel and armhf
  * salsa-ci: Build on experimental

  [ John Paul Adrian Glaubitz ]
  * Disable cephfs support on architectures where it's not stable
    (Closes: #940697)

  [ Louis van Belle ]
  * d/control, d/samba.install: added libtasn1-bin, libtasn1-6-dev to build
    dumpmscat
  * d/control, d/rules: Enable spotlight (TimeMachine)
  * d/control: Bump libtdb-dev (>= 2) in samba-dev deps
  * Update libwbclient0.symbols
  * d/rules: adjust LDB_DEPENDS

samba (2:4.10.8+dfsg-1) unstable; urgency=medium

  * Upload to unstable
  * New upstream release:
    - CVE-2019-10197: Combination of parameters and permissions can allow user
      to escape from the share path definition

samba (2:4.10.7+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * New upstream release
    - Update patches
    - Drop nsswitch-Add-try_authtok-option-to-pam_winbind.patch, merged
    - libsamba-passdb.so bumped to 0.27.2
    - Update symbols
    - Update installed files
  * samba-libs: Fix Breaks+Replaces: libndr-standard0 (<< 2:4.0.9)
    (Closes: #910242)
  * Add missing Breaks+Replace found by piuparts (Closes: #929217)
  * Enable vfs_nfs4acl_xattr (Closes: #930540)
  * ctdb:
    - enable ceph and etcd recovery lock
    - Downgrade ctdb_mutex_ceph_rados_helper shlibdeps to recommends
  * Add gitlabracadabra.yml
  * Update salsa-ci.yml

  [ Rafael David Tinoco ]
  * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
    (Closes: #931138)
  * CTDB NFS fixes from Ubuntu (Closes: #929931, LP: #722201):
    - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
      name from nfs to nfs-kernel-server
    - ctdb-config: depend on /etc/ctdb/nodes file
    - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
      allow pid file to exist
    - added /var/lib/ctdb/* directories
    - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
    - Add examples of NFS HA CTDB config files + helper script

  [ Mathieu Parent ]
  * Update d/gbp.conf, d/watch and d/README.source for 4.10
  * Drop ctdb-config-depend-on-etc-default-nodes-file.patch, merged upstream
  * Bump build-depends talloc >= 2.1.16, tdb >= 1.3.18, tevent >= 0.9.39 and
    ldb >= 2:1.5.5
  * Bump libcmocka-dev builddep to 1.1.3
  * d/rules: Remove 1.5.1+really prefix from LDB_DEPENDS
  * d/copyright:
    - s/GPL-3+/GPL-3.0+/ and s/LGPL-3+/LGPL-3.0+/
    - Move License details to end of file
    - Add waf licences
    - Add lib/replace licences
    - Update lib/{ldb,talloc,tdb} licences
  * Move to Python3 (from Ubuntu)
  * Bump debhelper from old 11 to 12.
  * Standards-Version: 4.4.0
  * Replace all reference of /var/run to /run (Closes: #934540)
  * Replace python shbang by python3 in d/*.py

 -- Andreas Hasenack <email address hidden>  Fri, 29 Nov 2019 18:00:22 -0300