4.10.209 Apr 2019 06:05 minor feature: CVE-2019-3870: pysmbd: Ensure a zero umask is set for smbd.mkdir(). CVE-2018-14629: rpc: winreg: Remove implementations of SaveKey/RestoreKey.
4.10.105 Apr 2019 07:45 minor feature: py/kcc_utils: py2.6 compatibility. libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response. regfio: Improve handling of malformed registry hive files. ctdb-version: Simplify version string usage. lib: Make fd_load work for non-regular files. dbcheck in the middle of the tombstone garbage collection causes. Replication failures, dbcheck: add --selftest-check-expired-tombstones Cmdline option. ndr_spoolss_buf: out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(). s4/messaging: undefined reference in linking. LibMESSAGING-samba4.so. acl_read: regression for empty lists. s4:dlz make b9_has_soa check dc=@ node. s3:client: printing via smbspool backend with kerberos auth. s4:librpc: installation of Samba. s3:lib: the demessage for adding cache entries. s3:utils: Add apos;smbstatus -L --resolve-uids apos; to show username. s3:lib: the demessage for adding cache entries. s3:waf: the detection of makdev() macro on Linux. ctdb-build: Drop creation of.distversion in tarball. ctdb-packaging: Test package requires tcpdump, ctdb package Should not own system library directory.
4.9.421 Dec 2018 06:45 minor feature: Libcli/smb: Don apos;t overwrite status code. wbinfo --group-info apos;NT AUTHORITY System apos; does not work. Session setup reauth fails to sign response. vfs_fruit: Validation of writes on AFP_AfpInfo stream. vfs_shadow_copy2: Nicely deal with attempts to open previous Version for writing. Restoring previous version of stream with vfs_shadow_copy2 fails With NT_STATUS_OBJECT_NAME_INVALID fsp- gt;base_fsp- gt;fsp_name. CVE-2018-16853: S4U2Self crash with MIT KDC build. s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs. winbindd: crash when taking profiles. CVE-2018-14629 dns: CNAME loop prevention using counter Regression. apos;samba-tool user syscpasswords apos; fails on a domain with many DCs. CVE-2018-16853: Do not segfault if client is not set. lib:util: DECLASS pointer initializiation. ctdb-daemon: Exit with error if a database directory does not Exist. s3:libads: Add net ads leave keep-account option.
4.9.328 Nov 2018 03:15 minor feature: CVE-2018-16841: heimdal: segfault on PKINIT with Mis-matching principal. CVE-2018-16853: build: The Samba AD DC, when build with MIT Kerberos is experimental, CVE-2018-16857: dsdb/util: Correctly treat. LockOutObservationWindow as 64-bit int. CVE-2018-16857 PEP8: E305: Expected 2 blank lines after Class or function definition, found 1. CVE-2018-14629: dns: CNAME loop prevention using counter. CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS management. CVE-2018-16851: ldap_server: Check ret before manipulating blob.
4.9.209 Nov 2018 03:16 minor feature: Dsdb: Add comments explaining the limitations of our current Backlink behaviour. problems running domain backups (handling SMBv2, sites). problems running domain backups (handling SMBv2, sites). testparm: crashes with PANIC: Messaging not initialized on SLES 12 SP3. Make vfs_fruit able to cleanup AppleDouble files. File saving with vfs_fruit on samba gt;= 4.8.5. Enabling vfs_fruit looses FinderInfo. Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR. CTDB recovery record resurrection from inactive nodes and. Simplify vacuuming. examples: the smb2mount build. libtevent: build due to missing open_memstream on Illiumos. winbindd_cache: timeout calculation for sid lt;- gt;name cache. dsdb encrypted_secrets: Allow quot;ldb:// and quot;mdb:// quot; in file path. Extended DN SID component missing for member after switching Group membership. Return STATUS_SESSION_EXPIRED error encrypted, if the request Was encrypted. python: Allow forced signing via smb.SMB(). lib:socket: If returning early, set ifaces. ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept Utf8 encoded unicode. testparm: crashes with PANIC: Messaging not initialized on SLES 12 SP3. smbd: DELETE_ON_behaviour on files with READ_ONLY. Attribute. waf: Add -fstack-clash-protection. winbind: segfault if an invalid passdb backend is Configured. in CTDB event handling. Misbehaving nodes are sometimes not banned.
4.8.525 Aug 2018 11:25 minor feature: Python: pysmbd: Additional error path leak. libsmbclient: Initialize written value before use. ldb: Refuse to build Samba against a newer minor version of Ldb. s3: libsmbclient: cli_splice() fallback when reading less Than a complete file. Using quot;sendfile = yes quot; with SMB2 can cause CPU spin. ldb: Release LDB 1.3.6. libsmbclient: Initialize written in cli_splice_fallback(). Durable Handles reconnect fails in a cluster when the cluster fs uses different device ids. s3: smbd: Always set vuid in check_user_ok(). vfs_fruit: Delete 0 byte size streams if AAPL is enabled. Fail renaming file if that file has open streams. lib: smb_threads: access before init. s3: smbd: path check in. Smbd_smb2_create_durable_lease_check(). samba-tool trust: Support discovery via netr_GetDcName. ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler. vfs_ceph: Don apos;t lie about flock support. deadlock with ctdb_mutex_ceph_rados_helper. ctdb: build on FreeBSD and AIX. libsmb: CID 1438243 (Unchecked return value), CID 1438244 Unsigned compared against 0), CID 1438245 (Dereference before null check), CID 1438246 (Unchecked return value). vfs_fruit: a panic if fruit_access_check detects a locking. Conflict. The current position in the dns name was not advanced past the apos;. apos; character. samba-tool domain trust: trust compatibility to Windows Server 1709 and FreeIPA. systemd: Only start smb when network interfaces are up. quotas with SMB2. s3/smbd: Ensure quota code is only called when quota support. Detected. s3/libsmb: Explicitly set delete_on_token for rmdir. krb5_plugin: Install plugins to krb5 modules dir. s3:winbind: Do not lookup local system accounts in AD. Don apos;t use CTDB_BROADCAST_VNNMAP. ctdb-daemon: Only consider client ID for local database attach. s3:client: Add quot;--quiet quot; option to smbclient. s3: vfs: time_audit: handling of token_blob in Smb_time_audit_offload_read_recv().
4.8.415 Aug 2018 20:45 minor feature: CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against Returns from malicious servers. CVE-2018-1140: ldbsearch apos;(distinguishedName=abc) apos; and DNS query With escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140 CVE-2018-10918: cracknames: DoS (NULL pointer de-ref) when. Not servicePrincipalName is set on a user. CVE-2018-10919: acl_read: unauthorized attribute access via Searches. CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via quot;ntlm auth quot. CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in. Ltdb_index_dn_attr().
4.8.327 Jun 2018 06:05 minor feature: s3: smbd: SMB2-FLUSH against directories. s3: smbd: printing: Re-implement delete-on-semantics for Print files missing since 3.5.x. python: talloc frame use in make_simple_acl(). heimdal: lib/krb5: Do not fail set_config_files due to parse Error. ldb: One-level search was incorrectly falling back to full DB Scan. ldb: Save a copy of the index result before calling the Callbacks. No Backtrace given by Samba apos;s AD DC by default. ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory on duplicated add. s3:smbd: interaction between chown and SD flags. building Samba with gcc 8.1. several mem leaks in ldb_index ldb_search ldb_tdb. libgpo: the build --without-ads. Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN. broken server side GENSEC_FEATURE_LDAP_STYLE handling. NTLMSSP NTLM2 packet check failed due to invalid signature!). smbd: Flush dfree memcache on service reload. krb5_wrap: keep_old_entries logic for older Kerberos. Libraries. Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN. building Samba with gcc 8.1. s3:utils: Do not segfault on error in DoDNSUpdate(). krb5_plugin: Add winbind localauth plugin for MIT Kerberos. ldb: memory leak on module context.
4.8.217 May 2018 17:45 minor feature: s3: smbd: Generic for incorrect reporting of stream dos Attributes on a directory. ceph: VFS: Add asynchronous fsync to ceph module, fake using Synchronous call. s3: libsmbclient: hard-coded connection error return of ETIMEDOUT. ldb: Release ldb 1.3.3: s4-lsa: use-after-free in LSA server. winbindd: Do re-connect if the RPC call fails in the passdb. Case. s3:cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers. s3:cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd Unclean process shutdown. vfs_ceph: add fake async pwrite/pread send/recv hooks. ctdb-client: Remove ununsed functions from old client code. printing: Return the same error code as windows does on upload Failures. After update to 4.8.0 DC failed with quot;Failed to find our own NTDS Settings objectGUID quot. nsswitch: memory leak in winbind_open_pipe_sock() when the. Privileged pipe is not accessable. s4:lsa_lookup: remove TALLOC_FREE(state) after all Dcesrv_lsa_Lookup Names,Sids _base_map() calls. s3: VFS: memory leak in vfs_ceph. rpc_server: NetSessEnum with stale sessions. s3:smbspool: cmdline argument handling.
4.8.127 Apr 2018 15:45 minor feature: s3: ldap: Ensure the ADS_STRUCT pointer doesn apos;t get freed on Error, we don apos;t own it here. s3: smbd: possible directory fd leak if the underlying OS Doesn apos;t support fdopendir(). Round-tripping ACL get/set through vfs_fruit will increase the Number of ACE entries without limit. s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically Decredit. s3: smbd: Files or directories can apos;t be opened DELETE_ON_ without delete access. s3: smbd: memory leak in vfswrap_getwd(). s3: smbd: Unix extensions attempts to change wrong field in Fchown call. ms_schema/samba-tool visualize: python2.6 incompatibility. invocation of gnutls_aead_cipher_encrypt(). Windows 10 cannot logon on Samba NT4 domain. winbindd: Recover loss of netlogon secure channel in case the Peer DC is rebooted. s3:smbd: Don apos;t use the directory cache for SMB2/3. ctdb-client: in client code. ctdb-scripts: Drop quot;net serverid wipe quot; from 50.samba event Script. s3: lib: messages: Don apos;t use the result of sec_init() before Calling sec_init(). libads: the build apos;--without-ads apos. winbind: Keep quot;force_reauth quot; in invalidate_cm_connection, Add apos;smbcontrol disconnect-dc apos. vfs_virusfilter: CIDs 1428738-1428740. dsdb: CID 1034966 Uninitialized scalar variable. rpc_server: core dump in dfsgetinfo. smbclient: notify. smbd panic if the client-supplied channel sequence number Wraps. Windows 10 cannot logon on Samba NT4 domain. lib/util: Remove unused apos;#include lt;sys/syscall.h gt; apos; from Tests/tfork.c. build errors with cc from developerstudio 12.5 on Solaris. the picky-developer build on FreeBSD 11. s3:modules: the build of vfs_aixacl2.c. s3:smbd: map nterror on smb2_flush errorpath. lib:replace: linking when libtirpc-devel overwrites system Headers. winbindd: apos;wbinfo --name-to-sid apos; returns misleading result on Invalid query. s3:passdb: Do not return OK if we don apos;t have pinfo set up. Allow AESNI to be used on all processor supporting AESNI.
4.7.508 Feb 2018 05:45 minor feature: This is a major in Samba apos;s ActiveDirectory domain Controller code. It might happen that AD objects have missing or broken Linked attributes. This could lead to broken group memberships e.g. All Samba AD domain controllers set up with Samba 4.6 or lower and then. Upgraded to 4.7 are affected. The corrupt database can be with apos;samba-tool dbcheck --cross-ncs -- apos. smbd tries to release not leased oplock during oplock II. Downgrade. copying file with empty FinderInfo from Windows client to Samba share with fruit. build: Deal with recent glibc sunrpc header removal. Make Samba work with tirpc and libnsl2. vfs_ceph: Add fs_capabilities hook to avoid local statvfs. Kerberos: PKINIT: Can apos;t decode algorithm parameters in. ClientPublicValue. ctdb-recovery-helper: Deregister message handler in error Paths. samba: Only use async signal-safe functions in signal handler. Kerberos: PKINIT: Can apos;t decode algorithm parameters in ClientPublicValue. repl_meta_data: linked attribute corruption on databases With unsorted links on expunge. dbcheck: Add functionality to the Corrupt database. smbd panic when chdir returns error during exit. Make Samba work with tirpc and libnsl2. POSIX ACL support on HPUX and possibly other big-endian OSs.
4.7.423 Dec 2017 05:05 minor feature: s3: smbclient: Implement apos;volume apos; command over SMB2. s3: libsmb: valgrind read-after-free error in Cli_smb2__fnum_recv(). s3: libsmb: reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient. Build man page for vfs_zfsacl.8 with Samba. repl_meta_data: Allow delete of an object with dangling. Backlinks. s4:samba: default to be running samba as a deamon. Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3, vfs_zfsacl: compilation error. quot;smb encrypt quot; setting changes are not fully applied until full. Smbd restart. winbindd: idmap_rid dependency on trusted domain list. vfs_fruit: Proper VFS-stackable conversion of FinderInfo. winbindd: Dependency on trusted-domain list in winbindd in Critical auth codepath. repl_meta_data: removing of backlink on deleted objects. ctdb: sock_daemon leaks memory. TCP tickles not getting synchronised on CTDB restart. winbindd: winbind parent and child share a ctdb connection. pthreadpool: deadlock. pthreadpool: starvation after fork. messaging: Always register the unique id. broken linked attribute handling. The KDC on an RWDC doesn apos;t send error replies in some Situations. libnet_join: apos;net rpc oldjoin apos. g_lock conflict detection broken when processing stale entries. s3:smb2_server: allow logoff,, unlock, cancel and echo on expired sessions. s3:libads: net ads keytab list fails with quot;Key table name. Malformed quot. crash in pthreadpool thread after failure from pthread_create. s4:samba: Allow samba daemon to run in foreground. third_party: Link the aesni-intel library with quot;-z noexecstack quot. vfs_glusterfs: include glusterfs/api/glfs.h without relying on quot;-I quot; options.
4.7.322 Nov 2017 20:25 minor feature: CVE-2017-14746: s3: smbd: SMB1 use-after-free crash. CVE-2017-15275: s3: smbd: Chain code can return uninitialized Memory when talloc buffer is grown.
4.7.216 Nov 2017 19:45 minor feature: Non-smbd processes using kernel oplocks can hang smbd. python: use communicate to Popen deadlock. smbd on disk file corruption under heavy threaded load. tevent: version 0.9.34. s3: smbd: delete-on-after smb2_find.
4.6.821 Sep 2017 11:45 minor feature: s3: smbd: a read after free if a chained SMB1 call goes Async. CVE-2017-12163: s3:smbd: Prevent client short SMB1 write from Writing server memory to file. s3/smbd: Let non_widelink_open() chdir() to directories Directly. CVE-2017-12151: Keep required encryption across SMB3 dfs Redirects. CVE-2017-12150: Some code path don apos;t enforce smb signing When they should.
4.6.711 Aug 2017 01:05 minor feature: s3: smbd: a read after free if a chained SMB1 call goes async. s4-cldap/netlogon: Match Windows 2012R2 and return NETLOGON_NT_VERSION_5 when version unspecified. s3/smbd: Let non_widelink_open() chdir() to directories directly. s3/notifyd: Ensure notifyd doesn apos;t return from. Smbd_notifyd_init. vfs_fruit: Add fruit:model = lt;modelname gt; parametric option. vfs_ceph: cephwrap_chdir(). idmap_ad: Retry query_user exactly once if we get TLDAP_SERVER_DOWN. s3: libsmb: use-after-free when accessing pointer, smbd: a connection run-down race condition. winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change. s3:smbd: consistently use talloc_tos() memory for. Rpc_pipe_open_interface(). smbcacls: Don apos;t fail against a directory on Windows using SMB2. s4-dsdb/netlogon: Allow missing ntver in cldap ping. dnsserver: Stop dns_name_equal doing OOB read. s3:client: The smbspool krb5 wrapper needs negotiate for Authentication. ctdb-common: Set -on-exec when creating PID file.
4.6.507 Jun 2017 15:45 minor feature: s3: VFS: Catia: Ensure path name is also converted. s3:smbcacls add prompt for password. vfs_acl_xattr tdb: Ensure create mask is at least 0666 if Ignore_system_acls is set. Wrong sid- gt;uid mapping for SIDs residing in sIDHistory. vfs_fruit: lp_case_sensitive() does not return a bool. s3/smbd: Update exclusive oplock optimisation to the lease area. s3/smbd: exclusive lease optimisation. Allow passing trusted domain password as plain-text to PASSDB Layer. systemd: detection of libsystemd. ctdb-readonly: Avoid a tight loop waiting for revoke to Complete. ctdb-logging: Initialize DELEVEL before changing the value. notify: ordering of events in notifyd. idmap_rfc2307: Lookup of more than two SIDs fails. samba-tool: Let apos;samba-tool user syncpasswords apos; report deletions Immediately. s3: smbd: inotify_map_mask_to_filter incorrectly indexes an Array. vfs_expand_msdfs tries to open the remote address as a file Path. apos;ctdb nodestatus apos; incorrectly displays status for all nodes with Wrong exit code. ctdb-common: crash in logging initialisation.
4.6.124 Mar 2017 07:05 minor feature: CVE-2017-2619: Symlink race permits opening files outside share Directory. CVE-2017-2619: Symlink race permits opening files outside share Directory.
4.5.501 Feb 2017 06:05 minor feature: Ctdb-locking: Explicitly unlock record/db in lock helper. vfs_default: Unlock the right file in copy chunk. ctdb-scripts: remaining uses of quot;ctdb gratiousarp quot. /etc/iproute2/rt_tables gets populated with multiple apos;default apos; entries.
4.5.420 Jan 2017 06:05 minor feature: Rename_internals_fsp missing ACL permission-check on destination Folder. lib: security: se_access_check() incorrectly processes owner Rights (S-1-3-4) DENY ace entries. s3: ntlm_auth: Don apos;t corrupt the output stream with de messages. s3: libsmb: Add cli_smb2_ftruncate(), plumb into Cli_ftruncate(). s3/smbd: Remove a misleading error message. vfs_fruit: quot;fruit:resource quot; option spelling, but not Behaviour. ctdbd_conn: a resource leak. smbd/ioctl: match WS2016 ReFS set compression behaviour. pam: Map more NT password errors to PAM errors. winbindd: Use idmap cache in xids2sids. messaging: dead but not cleaned-up-yet destination sockets. kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: An Internal error occurred (with MIT krb5). printing: building with CUPS version older than 1.7. s3:libads: Include system /etc/krb5.conf if we use MIT Kerberos. ctdb ip.
4.5.320 Dec 2016 13:25 minor feature: CVE-2016-2123: DNS vuln ZDI-CAN-3995. CVE-2016-2125: Don apos;t send delegated credentials to all servers. CVE-2016-2126: auth/kerberos: Only allow known checksum types in Check_pac_checksum().
4.5.208 Dec 2016 17:05 minor feature: Vfs:glusterfs: Preallocate result for glfs_realpath. s3: vfs: Remove files/directories after the streams are deleted. s3: vfs_streams_depot: Use conn- gt;connectpath not conn- gt;cwd. s3/smbd: the last resort check that sets the file type Attribute. dsdb: Create RID Set as SYSTEM. dbcheck: Correct message for orphaned backlinks. build: build with perl on debian sid. errors in extended operations (like allocating a RID Set). spoolss: Use correct values for secdesc and devmode pointers. objectclass_attrs: Only abort on a missing attribute when an Attribute is both MUST and replicated. provision,dlz-bind: Add support for BIND 9.11.x. ctdb-locking: Reset real-time priority in lock helper. ctdb-scripts: calculation of CTDB_BASE. ctdb-recovery: Avoid NULL dereference in failure case. s3:smbd: Only pass UCF_PREP_CREATEFILE to filename_convert() if we may create a new file. ctdb-scripts: Debian init in samba eventscript. samba_tool/fsmo: Allocate RID Set when seizing RID manager. s4-auth: Don apos;t check for NULL saltPrincipal if it doesn apos;t need it. upgradeprovision: Remove objectCategory from constructed attrs. collect_tombstones: Allow links to recycled objects to be. Deleted. s3-printing: Correctly encode CUPS printer URIs. s3-printing: Allow printer names longer than 16 chars. nss_wins: errno values for HOST_NOT_FOUND. s3-winbind: Do not return NO_MEMORY if we have an empty user List. s3:spoolss: Add support for COPY_FROM_DIRECTORY in AddPrinterDriverEx. ctdb-packaging: Move CTDB tests to /usr/local/share/ctdb/tests/. smbd: In ntlm auth, do not map empty domain in case of. user@realm. ctdb-conn: Add missing variable initialization.
4.5.104 Nov 2016 19:05 minor feature: Smbd contacts a domain controller for each session. messaging subsystem crash. REGRESSION: smbd segfaults on startup, tevent context being Freed. s3: cldap: cldap_multi_netlogon_send() fails with one bad IPv6 Address. s3: libsmb: cut and paste error using the wrong structure Type. Setting specific logger levels in smb.conf makes apos;samba-tool drs Showrepl apos; crash. Tombstone expunge does not remove old links. s3-printing: migrate printer code. s3/smbd: In call_trans2qfilepathinfo call lstat when dealing With posix pathnames. s3/smbd: Set FILE_ATTRIBUTE_DIRECTORY as necessary. quot;DriverVersion quot; registry backend parsing incorrect in spoolss. smbd/ioctl: Match WS2016 ReFS get compression behaviour. ctdb-protocol: marshalling for GET_DB_SEQNUM control Request. ctdb-recovery-helper: Add missing initialisation of ban_credits. CTDB PID file handling is too weak. gencache: Bail out of stabilize if we can not get the allrecord Lock. smbd: Reset O_NONBLOCK on open files. glusterfs: Avoid tevent_internal.h. source3/lib/msghdr.c, line 208: syntax error before or at: spoolss: caching of printername- gt;sharename. REGRESSION: smbd segfaults on startup, tevent context being Freed. Let winbindd discard expired kerberos when built against internal) heimdal. s3/winbindd: using default domain with user@domain.com. Format. winbind: passing idmap failure from wb_sids2xids back to Callers. nss_wins has incorrect function definitions for gethostbyname, s3-lib: G substitution in AD member environment. s3-utils: loading smb.conf in smbcquotas. kcc: Don apos;t check schedule if None. Tombstone expunge does not remove old links. vfs_glusterfs: a memory leak in connect path. CTDB IP takeover does not complete if there are no public Addresses configured. ctdb-packaging: systemd network dependency. CTDB PID file handling is too weak. smbcquotas: error message listing quotas. s3-sysquotas: Correctly restore path when finding mount point. cliquota: param count when setting fs quota.
4.5.009 Sep 2016 02:52 major feature: This is the first stable release of the Samba 4.5 release series. NEW FEATURES/CHANGES: Support for LDAP_SERVER_NOTIFICATION_OID; KCC improvements for sparse network replication; VLV - Virtual List View; DRS Replication for the AD DC; samba-tool drs replicate with new options; replPropertyMetaData Changes; linked attributes on deleted objects; improved AD DC performance; other dbcheck improvements; Tombstone Reanimation; multiple DNS Forwarders on the AD DC; password quality plugin support in the AD DC; pwdLastSet is now correctly honoured; net ads dns unregister; samba-tool improvements; SMB 2.1 Leases enabled by default; Open File Description (OFD) Locks; Password sync as Active Directory domain controller; Python crypto requirements; SmartCard/PKINIT improvements; CTDB changes; new shadow_copy2 options (shadow:snapprefix and shadow:delimiter). REMOVED FEATURES: "only user" and "username" parameters. UPGRADING: NTLMv1 authentication disabled by default. KNOWN ISSUES: Bug 12204 - Samba fails to replicate schema 69.
4.4.508 Jul 2016 19:45 minor feature: CVE-2016-2119: client side SMB2 signing downgrade. Total dcerpc response payload more than 0x400000.
4.4.411 Jun 2016 10:25 minor feature: SMB3 multichannel: Add implementation of missing channel sequence Number verification. smbd:: Only remove kernel share modes if they had been Taken at open. notifyd: Prevent NULL deref segfault in notifyd_peer_destructor. s3: auth: Move the declaration of struct dom_sid tmp_sid to Function level scope. s3:rpcclient: Make apos;--pw-nt-hash apos; option work. s3:libsmb/clifile: Use correct value for MaxParameterCount for Setting EAs. case sensitivity over SMB2 or above. s3:libnet:libnet_join: Add netbios aliases as SPNs. vfs_fruit: Add an option that allows disabling POSIX rename Behaviour. s3-smbd: Support systemd 230. source3: Honor the core soft limit of the OS. SMB3 multichannel: Add implementation of missing channel sequence Number verification. s3:client:smbspool_krb5_wrapper: the non clearenv build. s3-kerberos: Avoid entering a password change dialogue also when Using MIT. ldb-samba/ldb_matching_rules: CID 1349424 - Uninitialized Pointer read. dbwrap_ctdb: ENOENT- gt;NT_STATUS_NOT_FOUND. Correctly set cli- gt;raw_status for libsmbclient in SMB2 code. s3:smbd: anonymous authentication if signing is mandatory. libcli/auth: Let msrpc_parse() return talloc apos;ed empty strings. NTLM Authentication with squid. s3:rpcclient: make use of SMB_SIGNING_IPC_DEFAULT. pdb: segfault in pdb_ldap for missing gecos. Allow apos;samba-tool fsmo apos; to cope with empty or missing fsmo Roles. packaging: Set default limit for core file size in service Files. s3-net: Convert the key_name to UTF8 during migration. s3-smbspool: Log to stderr. heimdal: Encode/decode kvno as signed integer. s3-quotas: sysquotas_4B quota fetching for BSD. smbd: dfree: Ignore quota if not enforced. init: Set core file size to unlimited by default. memory leak in share mode locking.
4.4.306 May 2016 04:25 minor feature: Idmap_hash: Only allow the hash module for default idmap config. s3: libsmb: error where short name length was read as 2 Bytes, should be 1. returning of ldb.MessageElement. cleanupd: Restart as needed. s3:winbindd:idmap: check loadparm in domain_has_idmap_config() Helper as well. libsmb/pysmb: Add pytalloc-util dependency to the build. winbind: CID 1357100: Unchecked return value. nwrap: the build on Solaris. vfs_catia: memleak. smbd: Avoid large reads beyond EOF. s3:wscript: pylibsmb depends on pycredentials. NT_STATUS_ACCESS_DENIED when accessing Windows public share. Only validate MIC if quot;map to guest quot; is not being used. auth/ntlmssp: Add ntlmssp_ client,server :force_old_spnego Option for testing. NetAPP SMB servers don apos;t negotiate NTLMSSP_SIGN. Allow anonymous smb connections. ads_sasl_spnego_gensec_bind(KRB5). apos;wbinfo -u apos; and apos;net ads search apos. nss_wins: the hostent setup. build: Mark explicit dependencies on pytalloc-util. the smb2_setinfo to handle FS info types and FSQUOTA Infolevel. configure: Don apos;t check for inotify on illumos. vfs_acl_common: Avoid setting POSIX ACLs if quot;ignore system acls quot; is set. smbcquotas: print quot;NO LIMIT quot; only if returned quota value is 0. libads: Record session expiry for spnego sasl binds. Mask general purpose signals for notifyd.
4.3.524 Feb 2016 03:16 minor feature: s3: smbd: posix_acls: check for setting u:g:o entry on a Filesystem with no ACL support. s3: smbd: timestamp rounding inside SMB2 create. s3:utils/smbget: recursive download. s3:smbd/oplock: Obey kernel oplock setting when releasing Oplocks. s3-parm: Clean up defaults when removing global parameters. s3:smbd: Ignore initial allocation size for directory creation. lib/tsocket: Work around sockets not supporting FIONREAD. ctdb: Remove error messages after kernel security update CVE-2015-8543). param: str_list_v3 to accept quot;; quot; again. Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4. s3:smbd:open: Skip redundant call to file_set_dosmode when. Creating a new file. winbindd: Handle expired sessions correctly. s3-client: Add a KRB5 wrapper for smbspool. vfs_shadow_copy2: case where snapshots are outside the Share. smbclient: Query disk usage relative to current directory. smbd: Show correct disk size for different quota and dfree block Sizes. smbcacls: uninitialized variable. ctdb-scripts: Drop use of quot;smbcontrol winbindd ip-dropped... quot. loadparm: memory leak.
4.3.413 Jan 2016 03:15 minor feature: Doc: a typo in the smb.conf manpage, explanation of idmap Config. s3:smbd: a corner case of the symlink verification. s3: libsmb: Correctly initialize the list head when keeping a List of primary followed by DFS connections. Reduce the memory footprint of empty string options. Update lastLogon and lastLogonTimestamp. vfs_fruit: Enable POSIX directory rename semantics. Copying files with vfs_fruit fails when using vfs_streams_xattr Without stream preand type suf. smbd: Make quot;hide dot files quot; option work with quot;store dos Attributes = yes quot. lib/async_req: Do not install async_connect_send_test. Crash: Bad talloc magic value - access after free. samba-tool: uncaught exception if no fSMORoleOwner Attribute is given. docs: some typos in the idmap backend section. docs: typos in man vfs_gpfs. smbd: Do not disable quot;store dos attributes quot; on-the-fly.
4.3.317 Dec 2015 03:15 minor feature: CVE-2015-8467: samdb: Match MS15-096 behaviour for UserAccountControl. CVE-2015-3223: LDAP 00 search expression attack DoS. CVE-2015-5252: insufficient symlink verification (file Access outside the share). CVE-2015-5299: s3-shadow-copy2: missing access check on Snapdir. CVE-2015-5330: remote read memory exploit in LDB. CVE-2015-5296: Add man in the middle protection when forcing Smb encryption on the client side.
4.3.127 Oct 2015 22:45 minor feature: s3: smbd: our access-based enumeration on quot;hide unreadable quot; to match Windows. smbd: file name buflen and padding in notify repsonse. s3: smbd: mkdir race condition. s3: smbd: opening/creating :stream files on the root share. Directory. s3: smbd: NULL pointer introduced by previous apos;raw apos; s3: lsa: lookup_name() logic for unqualified (no DOMAIN Component) names is incorrect. s3: smbd: a crash in unix_convert(). vfs_fruit: Return value of ad_pack in vfs_fruit.c. s3:locking: Initialize lease pointer in Share_mode_traverse_fn(). s3:smbstatus: Add stream name to share_entry_forall(). s3:lib: Validate domain name in lookup_wellknown_name(). kerberos: Make sure we only use prompter type when available. winbind: loop. source3/lib/msghdr.c: compiling error on Solaris. s3:ctdbd_conn: make sure we destroy tevent_fd before closing The socket. s4:lib/messaging: Use apos;msg.lock apos; and apos;msg.sock apos; for messaging Related subdirs. lib/param: hiding of FLAG_SYNONYM values. nss_winbind: hang on Solaris on big groups. build: Use as-needed linker flag also on OpenBSD. s3: dfs: a crash when the dfs targets are disabled. pam_winbind: a segfault if initialization fails. net: a crash with apos;net ads keytab create apos. vfs_commit: set the fd on open before calling SMB_VFS_FSTAT.
4.2.409 Sep 2015 12:05 minor feature: Smbd: SMB3 functionality of "smb encrypt". lib: replace: Add strsep function (missing on Solaris). stream names with colon with "fruit:encoding = native". vfs:fruit: Implement copyfile style copy_chunk. s3-net: Use talloc array in share allowedusers. vfs_fruit: Handling of empty resource fork. auth/credentials: If credentials have principal set, they are Not anonymous anymore. s3-smbd: Reset protocol in smbXsrv_connection_init_tables Failure paths. ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM. ctdb-daemon: Improve error handling for running event scripts. lib: rundown of open_socket_out(). Avoid quoting problems in user's DNs. s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup. s3-util: Compare the maximum allowed length of a NetBIOS name. s3:lib: some corner cases of open_socket_out_cleanup(). Backport dcesrv_netr_DsRGetDCNameEx2. s3:libsmb: a in conversion of ea list to ea array. s4:rpc_server/netlogon: for NetApp. s3-auth: "map to guest = Bad uid". s3-smbd: Leave sys_disk_free() if dfree command is used. s3-auth: a possible null pointer dereference. ctdb-scripts: Support monitoring of interestingly named VLANs on bonds. ctdb-daemon: Check if updates are in flight when releasing all IPs. ctdb-build: building of PCP PMDA module. s3: winbindd: TALLOC_FREE of uninitialized groups variable.
4.2.229 May 2015 01:45 minor bugfix: s3:mbXsrv:refactor duplicate code into smbXsrv_session_clear_and_logoff(). gencache:don't fail gencache_stabilize if there were records to delete. s3:libsmbclient:After getting attribute server, ensure main srv pointer is still valid. s4:rpc:Refactor dcesrv_alter() function into setup and send steps. s3:smbd:Incorrect file size returned in the response of. FILE_SUPERSEDE Create". Mangled names do not work with acl_xattr. nmbd rewrites browse.dat when not required. vfs_fruit:add option "nfs_aces" that controls the NFS ACEs stuff. s3:mbd:Add missing tevent_req_nterror. vfs:kernel_flock and named streams. vfs_gpfs:Error code path doesn't call END_PROFILE. s4:libcli/finddcs_cldap:continue processing CLDAP until all addresses are used. ctdb:check for talloc_asprintf() failure.:. spoolss:purge the printer name cache on name change. CTDB statd-callout does not scale. vfs_fruit:also map characters below 0x20. ctdb:Coverity fix for CID 1291643. Multiplexed RPC connections are not handled by DCERPC server. Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors. ctdb-scripts:Fix bashism in ctdbd_wrapper script. ctdb:Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553. SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted. s3:inbindd:make sure we remove pending io requests before closing client sockets. Fix panic triggered by smbd_smb2_request_notify_done() - gt; smbXsrv_session_find_channel() in smbd. 'sharesec' output no longer matches input format. waf:Fix systemd detection. CTDB:Fix portability issues. CTDB:Fix some IPv6-related issues. CTDB statd-callout does not scale. 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values. libads:record service ticket endtime for sealed ldap connections. lib/util:Include DEBUG macro in internal header files before samba_util.h.
4.2.117 Apr 2015 01:25 minor bugfix: s3:winbind:grent: Don't stop group enumeration when a group has no gid. build:wafadmin: Fix use of spaces instead of tabs. s3-winbind: Fix cached user group lookup of trusted domains. s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields. s3: client: "client use spnego principal = yes" code checks wrong name. s3: lib: libsmbclient: If reusing a server struct, check every cli- gt;timout miliseconds if it's still valid before use. s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case. Fix lots of winbindd zombie processes on Solaris platform. s3: libsmbclient: Add missing talloc stackframe. backupkey: Explicitly link to gnutls and gcrypt. backupkey: Use ndr_pull_struct_blob_all(). vfs_fruit: Enhance handling of malformed AppleDouble files. Initialize dwFlags field of DNS_RPC_NODE structure. docs/idmap_rid: Remove deprecated base_rid from example. waf: Fix the build on openbsd. talloc: Version 2.1.2. s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors. Update libwbclient version to 0.12. spoolss: Retrieve published printer GUID if not in registry. replace: Remove superfluous check for gcrypt header. s4-process_model: Do not close random fds while forking. s3-passdb: Fix 'force user' with winbind default domain. brlock: Use 0 instead of empty initializer list. lib: texpect: Fix the build on Solaris. libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation. Backport subunit changes.
4.1.1724 Feb 2015 03:45 security: CVE-2015-0240: talloc free on uninitialized stack pointer in netlogon server could lead to security vulnerability. CVE-2015-0240: s3-netlogon: Make sure we do not deference a NULL pointer.
4.1.1617 Jan 2015 20:45 minor feature: CVE-2014-8143: dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl.
4.1.1513 Jan 2015 19:45 minor feature: libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does. Fix profiles tool. idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo. pam_winbind: Fix warn_pwd_expire implementation. s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses. nsswitch: Fix soname of linux nss_, s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control. s3:smb2_server: Allow reauthentication without signing. Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'. Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'. winbind: Retry LogonControl RPC in ping-dc after session expiration. s3-lib: Do not require a password with --use-ccache. s3-smbclient: Return success if we listed the shares. s3-smbstatus: Fix exit code of profile output.
4.1.1402 Dec 2014 09:45 minor feature: Revert buildtools/wafadmin/Tools/perl.py back to upstream state. nmbd fails to accept "--piddir" option. s3-nmbd: Fix netbios name truncation. s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path. s3: nmbd: Ensure NetBIOS names are only 15 characters stored. Cleanup add_string_to_array and usage. spoolss: Fix handling of bad EnumJobs levels. spoolss: Fix jobid in level 3 EnumJobs response. s4-dns: Add support for BIND 9.10. nss_winbind: Add getgroupmembership for FreeBSD. pdb_tdb: Fix a TALLOC/SAFE_FREE mixup. pidl/wscript: Remove --with-perl-, s3:smbd: Fix file corruption using "write cache size != 0". vfs_glusterfs: Remove "integer fd" code and store the glfs pointers. s3-keytab: Fix keytab array NULL termination. S3: source3/smbd/process.c::srv_send_smb() returns true on the error path.
4.1.1321 Oct 2014 03:18 minor feature: s3:smbd:open_file: Use a more natural check. s3: winbindd: Old NT Domain code sets struct winbind_domain- gt;alt_name to be NULL. Ensure this is safe with modern AD-DCs. pthreadpool: Slightly serialize jobs. s3: smbd: Open logic fix. s3: nmbd: Ensure the main nmbd process doesn't create zombies. s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers. s3: smb2cli: Query info return length check was reversed. s3-libnet: Make sure we do not overwrite precreated SPNs. docs: Mention incompatibility between kernel oplocks and streams_xattr. Fix unstrcpy. s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0). vfs_media_harmony: Fix a crash bug. registry: Don't leave dangling transactions. s3-winbindd: Use correct realm for trusted domains in idmap child. idmap_rfc2307: Fix a crash after connection problem to DC. s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call. s3-libnet: Add libnet_join_get_machine_spns(). s3-libads: Add all machine account principals to the keytab. nmbd: Send waiting status to systemd. libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL. nsswitch: Skip groups we were not able to map.
4.1.1103 Aug 2014 13:01 security: CVE-2014-3560: Fix unstrcpy macro length. Samba 4.0.0 to 4.1.10 are affected by a remote code execution attack on unauthenticated nmbd NetBIOS name services. A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon. It may be possible to use this to generate a remote code execution vulnerability as the superuser (root).
4.0.2103 Aug 2014 13:00 security: CVE-2014-3560: Fix unstrcpy macro length. Samba 4.0.0 to 4.1.10 are affected by a remote code execution attack on unauthenticated nmbd NetBIOS name services. A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon. It may be possible to use this to generate a remote code execution vulnerability as the superuser (root).
4.0.2003 Aug 2014 12:58 major bugfix: s3: smb2: Fix 'xcopy /d' with samba shares. Samba won't start on a machine configured with only IPv4. s3: SMB2: Fix leak of blocking lock records in the database. SMB1 blocking locks can fail notification on unlock, causing client timeout. s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap(). wbcCredentialCache fails if challenge_blob is not first. rid_array used before status checked - segmentation fault due to null pointer dereference. printing: Fix purge of all print jobs. net/doc: Make clear that net vampire is for NT4 domains only. autobuild: Delete NSS_MODULES in "make clean". msg_channel: Fix a 100 CPU loop. smbstatus: Fix an uninitialized variable. 'RW2' smbtorture test fails when -N is set to 2 due to the invalid status check in the second client. smbd: Avoid double-free in get_print_db_byname. ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory(). wbcCredentialCache fails if challenge_blob is not first. Backport autobuild/selftest fixes from master. s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX().