samba 2:4.12.5+dfsg-3ubuntu1 source package in Ubuntu

Changelog

samba (2:4.12.5+dfsg-3ubuntu1) groovy; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/p/VERSION.patch: Update vendor string to "Ubuntu".
    - debian/smb.conf;
      + Add "(Samba, Ubuntu)" to server string.
      + Comment out the default [homes] share, and add a comment about
        "valid users = %s" to show users how to restrict access to
        \\server\username to only username.
    - debian/samba-common.config:
      + Do not change priority to high if dhclient3 is installed.
    - d/control, d/rules: Disable glusterfs support because it's not in main.
      MIR bug is https://launchpad.net/bugs/1274247
    - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch:
      change nfs service name from nfs to nfs-kernel-server
      (LP #722201)
    - d/p/ctdb-config-enable-syslog-by-default.patch:
      enable syslog and systemd journal by default
    - debian/rules: Ubuntu i386 binary compatibility:
      + drop ceph support
      + disable the following binary packages:
        - ctdb
        - libnss-winbind
        - libpam-winbind
        - python3-samba
        - samba
        - samba-common-bin
        - samba-testsuite
        - winbind
    - debian/control: Ubuntu i386 binary compatibility:
      + drop ceph support
    - debian/rules: Ubuntu i386 binary compatibility:
      + re-enable the following binary packages:
        - libnss-winbind
        - samba-common-bin
        - python3-samba
        - winbind
    - d/control: add a versioned libgnutls28-dev build-depends to reduce
      the amount of in-tree crypto code that is built
  * Dropped:
    - d/gbp.conf, d/watch, d/README.source: update for 4.12
      [In 2:4.12.3+dfsg-1]
    - d/control: bump build-depends:
      + ldb: 2.1.2
      + tevent: 0.10.2
      + tdb: 1.4.3
      + talloc: 2.3.1
      [In 2:4.12.3+dfsg-1]
    - d/smbclient.install: add new binary mdfind and its manpage
      [In 2:4.12.3+dfsg-1]
    - d/samba-dev.install, d/samba-libs.install: new lib
      libdcerpc-server-core
      [In 2:4.12.3+dfsg-1]
    - d/samba-libs.install: new library libtalloc-report-printf
      [In 2:4.12.3+dfsg-1]
    - d/libwbclient0.install: remove libaesni, no longer built when
      gnutls provides AES CMAC
      [In 2:4.12.3+dfsg-1]
    - d/libsmbclient.symbols, d/libwbclient0.symbols: update symbols
      [In 2:4.12.3+dfsg-1]
    - d/p/build-Remove-tests-for-getdents-and-getdirentries.patch
      [Dropped in 2:4.12.3+dfsg-1]
    - d/p/wscript-remove-all-checks-for-_FUNC-and-__FUNC.patch
      [Dropped in 2:4.12.3+dfsg-1]
    - d/p/wscript-split-function-check-to-one-per-line-and-sor.patch
      [Dropped in 2:4.12.3+dfsg-1]

samba (2:4.12.5+dfsg-3) unstable; urgency=high

  * Add Breaks: sssd-ad-common (<< 2.3.0), due to libndr so bump
    (Closes: #963971)
  * Add patch traffic_packets: fix SyntaxWarning: "is" with a literal
    (Closes: #964165)
  * Add patch Rename mdfind to mdsearch (Closes: #963985)

samba (2:4.12.5+dfsg-2) unstable; urgency=high

  * Add missing symbol (path_expand_tilde)

samba (2:4.12.5+dfsg-1) unstable; urgency=high

  * New upstream security release:
    - CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD
      DC LDAP Server with ASQ, VLV and paged_results
    - CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
      excessive CPU
    - CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
      paged_results and VLV.
    - CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.
    - Bump build-depends ldb >= 2.1.4

samba (2:4.12.3+dfsg-2) unstable; urgency=medium

  * Upload to unstable

samba (2:4.12.3+dfsg-1) experimental; urgency=medium

  * New upstream major version (Closes: #963106)
    - Update d/gbp.conf, d/watch and d/README.source for 4.12
    - Drop merged patches
    - Bump build-depends talloc >= 2.3.1, tdb >= 1.4.3, tevent >= 0.10.2 and
      ldb >= 2.1.3
    - Upstream fixes:
      + pygpo: use correct method flags
        (Closes: #963242, #961585, #960171, #956428)
      + CVE-2020-10700: A use-after-free flaw was found in the way samba AD DC
        LDAP servers, handled 'Paged Results' control is combined with the 'ASQ'
        control. A malicious user in a samba AD could use this flaw to cause
        denial of service (Closes: #960189)
      + CVE-2020-10704: A flaw was found when using samba as an Active Directory
        Domain Controller. Due to the way samba handles certain requests as an
        Active Directory Domain Controller LDAP server, an unauthorized user can
        cause a stack overflow leading to a denial of service. The highest
        threat from this vulnerability is to system availability
        (Closes: #960188)
    - intel aes-ni no more needed as GnuTLS is used
    - Install new files
    - Update symbols
    - Update samba-libs.lintian-overrides
  * d/control: Remove unused libattr1-dev Build-Depends (Closes: #953915)

 -- Andreas Hasenack <email address hidden>  Fri, 31 Jul 2020 11:07:47 -0300