--- /dev/null
+samba (2:4.22.0+dfsg-1) unstable; urgency=medium
+
+ * new upstream release
+ * samba-libs: provide libndr5 too (with a compat symlink)
+ * add libsamba-security-private.so link for freeipa testsuite
+ (Closes: #1099340)
+ * d/samba-vfs-ceph.install: install also ceph_new vfs module
+ (Closes: #1098670)
+ * d/*.install: s@/*/@/${DEB_HOST_MULTIARCH}/@
+ * d/source/lintian-overrides: add dh-exec-useless-usage *DEB_HOST_MULTIARCH*
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 07 Mar 2025 00:02:26 +0300
+
+samba (2:4.22.0~rc1+dfsg-1) experimental; urgency=medium
+
+ * d/control: remove vorlon@ from Uploaders.
+ Thank you, dear friend, for all the work you've done. RIP!
+ * new upstream release candidate
+ Closes: #1084559 (crypt module removal in python 3.13)
+ * remove patches which has been applied upstream
+ * fix-nfs-service-name-to-nfs-kernel-server.patch:
+ refresh, remove now-unneeded hunk
+ * revert-ldb-use-hexchars_upper-from-replace.h.patch
+ to avoid linking libldb2 with libreplace
+ * replace-xpg-strerror.patch
+ to avoid linking other libs with libreplace
+ * d/rules: fixup component versions
+ * libtalloc, libtevent, libtdb, libldb: symbols: add new versions
+ * libldb2.symbols: add new version
+ * samba-libs: libndr.so soname bump to 6, add new symbols
+ * samba-libs: add libutil-crypt-private-samba.so.0
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 07 Feb 2025 12:37:12 +0300
+
+samba (2:4.21.3+dfsg-6) unstable; urgency=medium
+
+ * d/genshlibs: remove the special-case for libsmbclient0 since
+ we expand t64:Provides in d/control directly
+ * d/control: add ${t64:Provides} comments
+ * d/control: more t64 work: for libtevent0t64, break libtevent0
+ not <<${source:Version} but <<${binary:Version}, because source
+ is samba not tevent (Closes: #1092881)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 12 Jan 2025 23:16:00 +0300
+
+samba (2:4.21.3+dfsg-5) unstable; urgency=medium
+
+ * the Fixing Big Mishaps release.
+
+ * d/rules: fix talloc, tevent, tdb subpackages version numbers, add epoch
+
+ Due to a mistake, I screwed up sub-packages versions completely,
+ by using the wrong variable when generating the versions, - so
+ all mentioned packages had version number of ldb, not their own.
+
+ Fix this.
+
+ Unfortunately, the wrong version is larger than all the correct ones.
+ To compensate, use the same epoch number as is already used by current
+ samba package (2:).
+
+ While at it, use common variable to hold the +samba version suffix.
+
+ * d/*.symbols: mark most recent version markers with 2: epoch too
+
+ * d/control,d/rules: ensure we use the most recent libtalloc/libtevent/libtdb
+ for now, to compensate for the wrong versions.
+
+ * d/control: add explicit Provides of non-t64 libs
+
+ Apparentlty due to usage of both t64 and pre-t64 packages
+ (with different build profiles), debhelper is not populating
+ necessary values for ${t64:Provides}. So libtevent0t64 is
+ not providing libtevent0 on the relevant architectures.
+ Ditto for libsmbclient0 providing libsmbclient.
+
+ Add explicit arch-specific Provides: for libsmbclient0 and
+ libtevent0t64.
+
+ List only the affected release architectures in there.
+
+ This removes the only user of X-Time64-Compat control field
+ in debian.
+
+ * d/rules: do not install wscript_build in examples
+
+ * d/control: fix libtevent wrong build profile when building for mjt's
+ repository. Does not affect debian thankfully. The problem is that
+ libtevent0t64 slipped into the repository for older (before-trixie)
+ distributions, where t64 migration hasn't been completed. This should
+ not cause actual problems as a problem is only possible when upgrading
+ to the new debian (or ubuntu) release where t64 transition has happened,
+ and during such upgrade, new libtevent0t64 will be pulled in - thanks to
+ the first big mistake above, since it now has 2: epoch.
+ * d/control: add Breaks for libtevent0t64 on mjt repo. This also
+ does not affect debian, but makes my life definitely easier.
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 12 Jan 2025 00:17:49 +0300
+
+samba (2:4.21.3+dfsg-4) unstable; urgency=medium
+
+ * Revert "d/control: mark arch-all perl and python packages with :native
+ for now" - it worked just fine on local build but fails on buildds?
+ * d/control: add :native alternative for arch-all perl & python packages
+ for now, to help cross-building samba on bookworm and before
+ (no difference for trixie). Use foo:native|foo alternative to work
+ around dpkg/apt disparity in handling :native deps.
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 11 Jan 2025 11:47:04 +0300
+
+samba (2:4.21.3+dfsg-2) unstable; urgency=medium
+
+ * ctdb-failover-statd_callout-PATH_MAX-workaround.patch
+ another tweak for hurd (for missing PATH_MAX)
+ * d/control: add a note about ntp & signd socket, replace ntp with ntpsec
+ * d/control: provide ability to cross-build samba finally
+ (using qemu-user helper)
+ * d/control: mark arch-all perl and python packages with :native for now
+ (to help cross-building on bookworm)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 10 Jan 2025 23:23:31 +0300
+
+samba (2:4.21.3+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=6750:
+ After 'machine password timeout' /etc/krb5.keytab is not updated
+ - https://bugzilla.samba.org/show_bug.cgi?id=15697:
+ Compound rename from Mac clients can fail with
+ NT_STATUS_INTERNAL_ERROR if the file has a lease
+ - https://bugzilla.samba.org/show_bug.cgi?id=15701:
+ More possible replication loops against Azure AD
+ - https://bugzilla.samba.org/show_bug.cgi?id=15724:
+ vfs crossrename seems not work correctly
+ - https://bugzilla.samba.org/show_bug.cgi?id=15755:
+ Avoid event failure race when disabling an event script
+ - https://bugzilla.samba.org/show_bug.cgi?id=15758:
+ Segfault in vfs_btrfs
+ - https://bugzilla.samba.org/show_bug.cgi?id=15765:
+ Fix heap-user-after-free with association groups
+ - https://bugzilla.samba.org/show_bug.cgi?id=15771:
+ Memory leak wbcCtxLookupSid
+ * d/patches/: specify more Forwarded: urls
+ * d/patches/: source3-lib-util_sec.c-include-grp.h-for-setgroups.patch >
+ include-grp.h-for-setgroups-in-a-few-places.patch:
+ add 1 more place for setgroups()
+ * d/rules: remember last versions of ldb/talloc/tevent/tdb, reality check
+ * d/control: since we don't use debconf anymore, no need
+ to (build-)depend on po-debconf either
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 06 Jan 2025 21:20:31 +0300
+
+samba (2:4.21.2+dfsg-4) unstable; urgency=medium
+
+ * d/rules: guard building compile_et target with !mitkrb5
+ * source3-lib-util_sec.c-include-grp.h-for-setgroups.patch for hurd ftbfs
+ * build talloc/tevent/tdb from samba source:
+ - import talloc, tevent and tdb packaging into samba
+ - stop shipping internal-to-samba libpytalloc-util development files
+ * d/copyright: mention myself for d/*
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 01 Dec 2024 22:28:05 +0300
+
+samba (2:4.21.2+dfsg-3) unstable; urgency=medium
+
+ * Revert "d/rules: as of 4.17, no need to explicitly build intermediate
+ targets anymore". It is still a problem with samba 4.21, it just were
+ hidden.
+ * ldb-no-replace.diff: avoid embedding rpath to private samba libs
+ for libldb.so
+ * heimdal-spelling.patch: remove (forgotten, applied upstream)
+ * d/patches/* update dep3 metadata
+ * add-missing-libs-deps.diff: update to include more missing deps
+ (as submitted upstream)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 28 Nov 2024 22:28:27 +0300
+
+samba (2:4.21.2+dfsg-2) unstable; urgency=medium
+
+ * resurrect python3-ldb (removed in previous release)
+ The removal of python3-ldb were unwarranted, as long as libldb
+ itself is stand-alone, lets keep its python bindings stand-alone
+ too.
+ * d/rules: s/execute_after_dh_install/execute_after_dh_install-arch/
+ since it is arch-specific
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 26 Nov 2024 18:56:17 +0300
+
+samba (2:4.21.2+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=14356
+ protocol error - Unclear debug message "pad length mismatch"
+ for invalid bind packet
+ - https://bugzilla.samba.org/show_bug.cgi?id=15320
+ Update CTDB to track all TCP connections to public IP addresses
+ - https://bugzilla.samba.org/show_bug.cgi?id=15425
+ NetrGetLogonCapabilities QueryLevel 2 needs to be implemented
+ - https://bugzilla.samba.org/show_bug.cgi?id=15732
+ smbd fails to correctly check sharemode against OVERWRITE dispositions
+ - https://bugzilla.samba.org/show_bug.cgi?id=15740
+ gss_accept_sec_context() from Heimdal does not imply GSS_C_MUTUAL_FLAG
+ with GSS_C_DCE_STYLE
+ - https://bugzilla.samba.org/show_bug.cgi?id=15749
+ winbindd should call process_set_title() for locator child
+ - https://bugzilla.samba.org/show_bug.cgi?id=15752
+ winexe no longer works with samba 4.21
+ - https://bugzilla.samba.org/show_bug.cgi?id=15754
+ Panic in close_directory
+ * d/control: add python3-cryptography to python3-samba Depends
+ (Closes: #1086768)
+ * d/control: move python3-gpg recommends from python3-samba to samba-ad-dc
+ * d/control: extend libpcap-dev from hurd-i386 to hurd-any (Closes: #1087409)
+ * ship winexe binary (Closes: #1081269).
+ New Build-Depends: gcc-mingw-w64-i686-win32 gcc-mingw-w64-x86-64-win32
+ * d/control: provide Breaks/Replaces for winexe in kali linux (#1081269)
+ * swallow python3-ldb by python3-samba (and remove python3-ldb-dev)
+ * d/rules: drop mis-using --bundled-libraries configure option
+ * d/samba.postinst: replace test for /usr/bin/deb-systemd-helper file
+ with "command -v" (lintian)
+ * d/libldb2.lintian-overrides: remove overrides which were needed for compat
+ symlink (compat for older ldb in separate source)
+ * d/samba.install: stop shipping log2pcap.1 (the tool is not installed)
+ * d/rules: rename LDB_* vars to ldb-, and use common var for -Vldb:Version
+ * move-msg.sock-from-var-lib-samba-to-run-samba.patch: update
+ to cover failing tests too
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 25 Nov 2024 21:38:17 +0300
+
+samba (2:4.21.1+dfsg-2) unstable; urgency=medium
+
+ * d/control: add Recommends: samba-ad-dc for samba for now
+ to avoid breaking existing installs
+ * d/samba.postrm: stop unmasking of samba-ad-dc
+ (it is already done in postinst)
+ * d/samba.postinst,d/samba.maintscripts: remove samba-ad-dc
+ startup files and stop the service (Closes: #1085617)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 25 Oct 2024 12:30:52 +0300
+
+samba (2:4.21.1+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release
+ * d/salsa-ci.yml: disable reprotest vary build_path
+ * d/control: Build-Depend on python3-setuptools (Closes: #1080851)
+ * d/rules: stop providing compat symlink for old ldb
+ modules location for old sssd
+ * d/changelog: mention closing of #835404 by 4.21.0-1
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 14 Oct 2024 21:21:50 +0300
+
+samba (2:4.21.0+dfsg-1) unstable; urgency=medium
+
+ * switch to 4.21 branch
+ * update to 4.21.0 (new upstream)
+ (Closes: #835404)
+ * fix-nfs-service-name-to-nfs-kernel-server.patch: refresh
+ * Force-LDB-as-standalone.patch: remove (ldb is always internal now)
+ * d/rules: ldb lib is now private by default, expose it as public
+ * d/rules: ldb uses LDB_VERSION variable now, not VERSION
+ * tilde-in-version.diff: remove (applied upstream)
+ * heimdal-spelling.patch: disable for now
+ * d/rules: s/vendor-name/vendor-suffix/
+ * d/ctdb.install: no more sudoers file
+ * d/samba-libs.symbols, d/control, d/samba-libs.install: libndr4=>libndr5
+ This requires sssd to be rebuilt
+ * samba-{libs,dev}.install, python3-{samba,ldb).install: refresh libs
+ (with lintian-overrides)
+ * samba-libs.install, samba-dev.install: new (semi-public) library:
+ libsamba-policy.so (used by the python stuff only, for now)
+ * samba-libs.install: new private library: libsamba-net-private-samba.so.0
+ * libldb2.symbols: add new symbols & 2.10.0 version
+ (and remove 2.9.1 minor version)
+ * d/control: bump libtdb version dependency to 1.4.12
+ * d/ctdb.install: install winbind_ctdb_updatekeytab.sh file
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 02 Sep 2024 17:48:34 +0300
+
+samba (2:4.20.4+dfsg-1) unstable; urgency=medium
+
+ * new upstream (minor/bugfix) release fixing the ABI symbol generation
+ (Closes: #1078008)
+ * mention d/*.symbols change in previous changelog entry
+ * revert: d/*.symbols: add new variant of version marks (with underscore)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 06 Aug 2024 16:58:18 +0300
+
+samba (2:4.20.3+dfsg-1) unstable; urgency=medium
+
+ * update to the new upstream stable/bugfix release (4.20.3).
+ See WHATSNEW.txt for details.
+ * tilde-in-version.diff: remove, an equivalent is applied upstream
+ * d/rules: s/vendor-name/vendor-suffix/ as per new upstream option
+ * d/samba-ad-dc.lintian-overrides: add systemd-diversion override too
+ * d/*.symbols: add new variant of version marks (with underscore)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 02 Aug 2024 18:33:51 +0300
+
+samba (2:4.20.2+dfsg-11) unstable; urgency=medium
+
+ * d/control: remove Andrew Bartlett email from Uploaders per his request
+ * samba-common-bin.lintian-override: fixup python3-script-but-no-python3-dep
+ override
+ * fix name of samba-common-bin.lintian-overrides (it is plural)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 30 Jul 2024 15:54:36 +0300
+
+samba (2:4.20.2+dfsg-10) unstable; urgency=medium
+
+ * d/rules: shorten dpkg_late_eval
+ * d/rules: stop renaming heimdal dir for mitkrb5 profile
+ * d/rules: remove the only usage of ${with_mitkrb5}
+ * d/rules: rearrange CFLAGS/LDFLAGS settings to use
+ DEB_*_MAINT_APPEND due to dpkg #1077005
+ * skip -9 release because of test upload to experimental
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 25 Jul 2024 11:35:21 +0300
+
+samba (2:4.20.2+dfsg-8) unstable; urgency=medium
+
+ * d/samba-common-bin.lintian-override: fix the typo in the last fix
+ * d/samba-log-parser: python3-minimal is enough
+ * d/rules: define dpkg_late_eval macro since dpkg 1.22.8 does not define
+ it anymore (Closes: #1076920)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 24 Jul 2024 16:54:54 +0300
+
+samba (2:4.20.2+dfsg-7) unstable; urgency=medium
+
+ * d/samba-common-bin.lintian-override: update samba-log-parser override
+ * d/control: add Breaks: older samba-ad-dc by samba (Closes: #1076196)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 14 Jul 2024 19:42:39 +0300
+
+samba (2:4.20.2+dfsg-6) unstable; urgency=medium
+
+ * make-python-optional.diff: remove the forgotten unneeded patch
+ * d/samba.NEWS: re-wrap it a little bit
+ * d/samba.postinst: notify the user about probably-missing samba-ad-dc
+ package on upgrade (debconf template samba/no-samba-ad-dc)
+ * d/samba-common.postinst: remove (clean up) old debconf entries
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Jul 2024 16:40:49 +0300
+
+samba (2:4.20.2+dfsg-5) unstable; urgency=medium
+
+ * replace internal-to-samba-build python3-ldb-dev package
+ with a transitional empty package (to be removed in trixie+1)
+ * d/control: ensure python3-samba depends on exact version of python3-ldb,
+ the same way as samba-libs depends on exact version of libldb2
+ * d/rules: ensure python3-ldb does not depend on samba-libs|python3-samba
+ * d/rules: refine and explain --with-shared-modules
+ * d/control: d/control: drop old (buster and before) Breaks
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 01 Jul 2024 10:41:04 +0300
+
+samba (2:4.20.2+dfsg-4) unstable; urgency=medium
+
+ * d/control: add the forgotten epoch for Breaks/Replaces
+ of samba-vfs-ceph & samba-vfs-glusterfs (Closes: #1074299)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 26 Jun 2024 12:20:08 +0300
+
+samba (2:4.20.2+dfsg-3) unstable; urgency=medium
+
+ * split out samba-vfs-glusterfs from samba-vfs-modules
+ (pick up and rework ubuntu changes)
+ * split out samba-vfs-ceph from samba-vfs-modules
+ * merge samba-vfs-modules (remaining) into main samba package
+ * the only remaining extra vfs module, snapper, does not need extra handling
+ * d/samba-ad-dc.lintian-overrides: add conflicts-with-version override
+ for /usr-move
+ * samba-common-bin: use trivial separate shell wrapper for the python script
+ * d/rules: use before-trixie build profile to control dh_movetousr run too
+ * d/*.service: provide empty value for referenced environment vars
+ (Closes: #1073969)
+ * d/dirs: remove leftover file
+ * d/samba-common-bin.dirs: stop creating /etc/samba/tls/
+ * d/samba.dirs: stop creating bin & sbin
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Jun 2024 07:58:16 +0300
+
+samba (2:4.20.2+dfsg-2) unstable; urgency=medium
+
+ * tilde-in-version.diff - allow tilde in version string
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 20 Jun 2024 09:49:50 +0300
+
+samba (2:4.20.2+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=13019
+ Dynamic DNS updates with the internal DNS are not working
+ - https://bugzilla.samba.org/show_bug.cgi?id=13213
+ Samba build is not reproducible
+ - https://bugzilla.samba.org/show_bug.cgi?id=14981
+ netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0
+ - https://bugzilla.samba.org/show_bug.cgi?id=15412 Anonymous smb3
+ signing/encryption should be allowed (similar to Windows Server 2022)
+ - https://bugzilla.samba.org/show_bug.cgi?id=15435
+ Regression DFS not working with widelinks = true
+ - https://bugzilla.samba.org/show_bug.cgi?id=15569
+ ldb qsort might r/w out of bounds with an intransitive compare function
+ - https://bugzilla.samba.org/show_bug.cgi?id=15573
+ Panic in dreplsrv_op_pull_source_apply_changes_trigger
+ - https://bugzilla.samba.org/show_bug.cgi?id=15620
+ s4:nbt_server: does not provide unexpected handling, so winbindd
+ can't use nmb requests instead cldap
+ - https://bugzilla.samba.org/show_bug.cgi?id=15625
+ Many qsort() comparison functions are non-transitive, which can lead
+ to out-of-bounds access in some circumstances
+ - https://bugzilla.samba.org/show_bug.cgi?id=15633
+ samba-gpupdate - Invalid NtVer in netlogon_samlogon_response
+ - https://bugzilla.samba.org/show_bug.cgi?id=15638
+ Need to change gitlab-ci.yml tags in all branches to avoid CI bill
+ - https://bugzilla.samba.org/show_bug.cgi?id=15642 winbindd,
+ net ads join and other things don't work on an ipv6 only host
+ - https://bugzilla.samba.org/show_bug.cgi?id=15653 idmap_ad creates
+ an incorrect local krb5.conf in case of trusted domain lookups
+ - https://bugzilla.samba.org/show_bug.cgi?id=15654
+ new --vendor-name and --vendor-patch-revision options for ./configure
+ - https://bugzilla.samba.org/show_bug.cgi?id=15659
+ Segmentation fault when deleting files in vfs_recycle
+ Closes: #1073252
+ - https://bugzilla.samba.org/show_bug.cgi?id=15660 The images don't build
+ after the git security release and CentOS 8 Stream is EOL
+ - https://bugzilla.samba.org/show_bug.cgi?id=15662
+ vfs_widelinks with DFS shares breaks case insensitivity
+ - https://bugzilla.samba.org/show_bug.cgi?id=15664
+ Panic in vfs_offload_token_db_fetch_fsp()
+ - https://bugzilla.samba.org/show_bug.cgi?id=15665
+ CTDB RADOS mutex helper misses namespace support
+ - https://bugzilla.samba.org/show_bug.cgi?id=15666 "client use kerberos"
+ and --use-kerberos is ignored for the machine account
+ * d/libldb2.symbols,d.python3-ldb.symbols.in: add new version (2.9.1)
+ * use ./configure --vendor-name= instead of patching ./VERSION
+ * omit samba-ad-dc for i386 ubuntu
+ * samba-ad-dc: usr-move compensation maintscripts: add "set -e"
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Jun 2024 23:59:36 +0300
+
+samba (2:4.20.1+dfsg-5) unstable; urgency=medium
+
+ * Build-Depends: dpkg-dev>=trixie for Arch packages only (for t64 rename)
+ * d/samba.NEWS: reword the last entry a bit
+ * d/samba-ad-dc.init: chmod +x
+ * d/control: bump Standards-Version to 4.7.0 (no changes needed)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 10 Jun 2024 20:17:53 +0300
+
+samba (2:4.20.1+dfsg-4) unstable; urgency=medium
+
+ [ Helmut Grohne ]
+ * Mitigate ineffective replaces due to /usr-move (DEP17 P1)
+ (Closes: #1072102)
+
+ [ Michael Tokarev ]
+ * d/control: mark libkeyutils-dev as linux-only [linux-any]
+ * d/control: drop old versions of versioned dependencies
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 29 May 2024 20:31:41 +0300
+
+samba (2:4.20.1+dfsg-3) unstable; urgency=medium
+
+ * d/rules: move samba-common install to d/samba-common.install
+ * d/rules: install samba-ad-dc init files for the right package
+ * d/samba.postinst: remove nmbd_error_handler for the initscript
+ (it is not used in systemd case)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 26 May 2024 18:48:17 +0300
+
+samba (2:4.20.1+dfsg-2) unstable; urgency=medium
+
+ * move many files from samba package to samba-ad-dc package.
+ From now on, samba-ad-dc isn't just a meta-package, it is actually
+ needed for AD-DC functionality. If you run AD-DC, please ensure
+ that samba-ad-dc package is installed (it is not recommended by samba)
+ Closes: #1051770
+ * move samba-tool and samba-gpupdate from samba-common-bin and samba
+ packages to python3-samba. This is an Active Directory stuff, not
+ needed for a stand-alone server or a client, but might be useful
+ for auth-only (neither file-server nor file-client) AD installs
+ Closes: #1068360
+ * remove addshare.py, setoption.py and source_samba.py python scripts
+ These aren't used by samba packages and are hardly useful generally, esp.
+ having in mind their unusual locations. The apport hook (source_samba.py)
+ is mostly obsolete, it hasn't been updated for a very long time.
+ * add make-python-optional.diff, so python3 can be made optional
+ for samba-common-bin
+ * remove python3-samba and python from Depends of samba and samba-common-bin
+ packages, moving it to Recommends. This lets the user to install a stand-
+ alone samba file server without any Active Directory bits and even without
+ python interpreter
+ * d/samba.install: do not install samba_downgrade_db (to old pre-4.8 version)
+ * move smbcontrol binary from samba to samba-common-bin,
+ since it can also be used to control winbindd
+ * d/control: tdb-tools (tdbbackup) are run from python modules,
+ move from samba:Depends to python3-samba:Recommends
+ * d/control: samba: no need to depend on libpam-runtime or libpam-modules
+ * d/control: samba: no need to recommend samba-ad-provision
+ * debian/TODO: update a bit, remove many obsolete entries
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 26 May 2024 17:48:13 +0300
+
+samba (2:4.20.1+dfsg-1) unstable; urgency=medium
+
+ * new upstream major release
+ * d/control: bump tevent/talloc/tdb versions for Build-Depends
+ * d/libldb2.symbols, d/python3-ldb.symbols.in: add new version (2.9.0)
+ * d/patches/meaningful-error-if-no-python3-markdown.patch: fixup
+ * d/*.install: internal library names changed:
+ libfoo-samba4.so.0 => libfoo-private-samba.so.0
+ * d/samba-libs.install: update names for libdcerpc & libndr private libs
+ * d/samba-libs.install, d/samba-libs.links, d/samba-libs.symbols:
+ libndr has soversion 4 now. This breaks binaries linked with libndr!
+ * d/samba-libs.symbols: update with new ndr4 symbols
+ * d/libsmbclient.symbols: update with new symbols
+ * d/samba-dev.install: add smb3posix.h
+ * d/not-installed: add usr/bin/wspsearch experimental windows search binary
+ * d/control: libperl-json is not needed for build anymore
+ * d/control: bump minimum mit-krb5 version in Build-Depends to 1.21
+ (for pkg.samba.mitkrb5 build profile)
+ * Closes: #1070335 (wronly filed)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 08 May 2024 13:23:57 +0300
+
+samba (2:4.19.6+dfsg-3) unstable; urgency=medium
+
+ * fix brown-paper-bag bugs in previous upload
+ (in meaningful-error-if-no-python3-markdown.patch)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 02 May 2024 20:47:15 +0300
+
+samba (2:4.19.6+dfsg-2) unstable; urgency=medium
+
+ [ Michael Tokarev ]
+ * meaningful-error-if-no-python3-markdown.patch:
+ update to include 2 other places where markdown gets improted
+ * d/winbind.service:
+ - order it before nss-user-lookup.target (Closes: #1068649)
+ - fix typo
+ - nmb.service is nmbd.service in debian
+ * move include/samba/core/*.h from samba-libs to libwbclient-dev
+ (Closes: #1064544)
+
+ [ Alex Murray ]
+ * fix smbd apparmor breakage since change to local systemd services
+ (Cloes: #1069661)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 02 May 2024 14:08:31 +0300
+
+samba (2:4.19.6+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=15527 fd_handle_destructor()
+ panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close()
+ - https://bugzilla.samba.org/show_bug.cgi?id=15580
+ Packet marshalling push support missing for
+ CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED
+ - https://bugzilla.samba.org/show_bug.cgi?id=15588
+ samba-gpupdate: Correctly implement site support
+ - https://bugzilla.samba.org/show_bug.cgi?id=15599
+ libgpo: Segfault in python bindings
+ * revert d/rules: remove Debian/Ubuntu "branding"
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Apr 2024 11:18:38 +0300
+
+samba (2:4.19.5+dfsg-5) unstable; urgency=medium
+
+ * implement pkg.samba.before-trixie build profile
+ (undo t64 changhes and drop build-dep)
+ * d/rules: remove Debian/Ubuntu "branding", no need in that
+ * d/control: samba-dsdb-modules: drop hardcoded dependency on libgpgme11
+ (Closes: #1068526)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 07 Apr 2024 16:04:30 +0300
+
+samba (2:4.19.5+dfsg-4) unstable; urgency=medium
+
+ * stop shipping python3/dist-packages/samba/tests
+ (Closes: #1064512, #1063149)
+ * add Debian-Specific tag to debian-specific patches
+ * d/genshlibs: run dh_makeshlibs on libsmbclient0
+ (Closes: #1065349)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 03 Mar 2024 15:37:16 +0300
+
+samba (2:4.19.5+dfsg-3) unstable; urgency=medium
+
+ * d/control: add versioned depends on dpkg-dev to avoid accidental
+ build of time64_t packages on older systems
+ * +lower-dns-lookup-mismatch-messages.patch (reduce log noise)
+ * d/control: add libtirpc-dev and rpcsvc-proto to Build-Depends-Arch
+ (Closes: #1065188)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 01 Mar 2024 19:18:35 +0300
+
+samba (2:4.19.5+dfsg-2) unstable; urgency=medium
+
+ * rename libsmbclient => libsmbclient0 for 64-bit time_t transition
+ Closes: #1064337
+ * d/libsmbclient.lintian-overrides: remove, soname now = package name
+ * add Breaks: of sssd packages to samba-libs
+ * +passchange-error-message.patch - fix password change error message
+ * +edns0.patch: enable EDNS0 support in internal UDP-only DNS client
+ https://bugzilla.samba.org/show_bug.cgi?id=15536
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 28 Feb 2024 19:38:48 +0300
+
+samba (2:4.19.5+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release (4.19.5)
+ * reformat previous changelog entry to fit in 80cols
+ * d/winbind.postrm: stop recursively removing plain files
+ * d/winbind.postrm: winbindd_cache.tdb is in /var/lib now,
+ not in /var/cache
+ * d/control: RulesRequiresRoot:no
+ * d/*.symbols: use #PACKAGE# placeholders where appropriate
+ (or add comments where it is not)
+ * +silence-can-not-convert-group-sid.diff -
+ make another log message less annoying
+ * -python-fix-invalid-escape-sequences.patch (applied upstream)
+ * d/control: replace pkg-config=>pkgconf in Build-Depends, remove
+ pkg-config from Depends of libldb-dev and python3-ldb-dev
+ * d/samba-libs.symbols, d/control: make libsmbldapN a virtual package
+ provided by samba-libs too, like libndrN
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 19 Feb 2024 15:21:14 +0300
+
+samba (2:4.19.4+dfsg-3) unstable; urgency=medium
+
+ * samba,winbind: remove logrotate scripts
+ samba does its own log rotation (max log size (=5000 by default) and
+ renaming to .old). The two clashes with each other in an interesting way.
+ * d/samba-libs.symbols, d/control: make libndrN a virtual package
+ to ensure rdeps pick the right dependency
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 30 Jan 2024 12:12:42 +0300
+
+samba (2:4.19.4+dfsg-2) unstable; urgency=medium
+
+ * d/samba.smbd.service, d/samba.nmbd.service: expand forgotten @BINDIR@
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Jan 2024 20:44:51 +0300
+
+samba (2:4.19.4+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release. See WHATSNEW.txt for details.
+ * d/control: drop pkg.samba.nouring build profile: was needed
+ for focal which we do not support anymore
+ * remove /etc/cron.daily/samba: there's no reason to keep backing it up,
+ most stuff is in ldb/tdb files these days.
+ * d/samba.maintscript, d/winbind.maintscript:
+ remove old rm_connfiles (pre-buster versions)
+ * d/rules, d/*.service: provide .service files directly instead of renaming
+ and patching upstream templates, and use dh_installsystemd to install them
+ (partially Closes: #1059187)
+ * d/rules: run dh_movetousr for libpam-winbind & libnss-winbind, if exists.
+ This fixes remaining files in /lib (hopefully). In a search for better
+ way to detect where to put system libs (/lib vs /usr/lib) as a configure
+ option. Closes: #1059187
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Jan 2024 19:11:37 +0300
+
+samba (2:4.19.3+dfsg-2) unstable; urgency=medium
+
+ * d/rules: simplify LDFLAGS assignment
+ * d/rules: add -mlong-jump-table-offsets to CFLAGS on m68k (fix FTBFS there)
+ * d/rules: CFLAGS += -ffile-prefix-map=../../=
+ * d/control: fix versioned dependency on samba for samba-ad-dc
+ * +python-fix-invalid-escape-sequences.patch from upstream (Closes: #1057668)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 11 Dec 2023 13:19:18 +0300
+
+samba (2:4.19.3+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=13595
+ CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP
+ to normal users (Closes: #1034803). Please see WHATSNEW.txt file for
+ more information about this issue: actual fix requires extra steps to
+ be performed against samba-based AD-DC
+ - https://bugzilla.samba.org/show_bug.cgi?id=15093
+ Files without "read attributes" NFS4 ACL permission are not listed
+ in directories
+ - https://bugzilla.samba.org/show_bug.cgi?id=15487
+ smbd crashes if asked to return full information on close of
+ a stream handle with delete on close disposition set
+ - https://bugzilla.samba.org/show_bug.cgi?id=15492
+ Kerberos TGS-REQ with User2User does not work for normal accounts
+ - https://bugzilla.samba.org/show_bug.cgi?id=15499
+ Improve logging for failover scenarios
+ - https://bugzilla.samba.org/show_bug.cgi?id=15507
+ vfs_gpfs stat calls fail due to file system permissions
+ - https://bugzilla.samba.org/show_bug.cgi?id=15513
+ Samba doesn't build with Python 3.12
+ - https://bugzilla.samba.org/show_bug.cgi?id=15520
+ sid_strings test broken by unix epoch > 1700000000
+ - https://bugzilla.samba.org/show_bug.cgi?id=15521
+ smbd: fix close order of base_fsp and stream_fsp
+ in smb_fname_fsp_destructor()
+ * d/samba-common.maintscript: fix version number for dhcp hook removal
+ (Closes: #1053780)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 27 Nov 2023 22:22:54 +0300
+
+samba (2:4.19.2+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=15423
+ Use-after-free in aio_del_req_from_fsp during smbd shutdown
+ after failed IPC FSCTL_PIPE_TRANSCEIVE
+ - https://bugzilla.samba.org/show_bug.cgi?id=15426
+ clidfs.c do_connect() missing a "return" after a cli_shutdown() call
+ - https://bugzilla.samba.org/show_bug.cgi?id=15463
+ macOS mdfind returns only 50 results
+ - https://bugzilla.samba.org/show_bug.cgi?id=15481
+ GETREALFILENAME_CACHE can modify incoming new filename
+ with previous cache entry value
+ - https://bugzilla.samba.org/show_bug.cgi?id=15464
+ libnss_winbind causes memory corruption since samba-4.18,
+ impacts sendmail, zabbix, potentially more
+ - https://bugzilla.samba.org/show_bug.cgi?id=15479
+ ctdbd: setproctitle not initialized messages flooding logs
+ - https://bugzilla.samba.org/show_bug.cgi?id=15491
+ CVE-2023-5568 Heap buffer overflow with freshness tokens
+ in the Heimdal KDC in Samba 4.19
+ - https://bugzilla.samba.org/show_bug.cgi?id=15477
+ The heimdal KDC doesn't detect s4u2self correctly when fast is in use
+ * d/samba-common.maintscript: remove obsolete conffile
+ /etc/dhcp/dhclient-enter-hooks.d/samba (Closes: #1053780)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 16 Oct 2023 18:26:31 +0300
+
+samba (2:4.19.1+dfsg-4) unstable; urgency=medium
+
+ * d/samba-common.postinst: restore installing of smb.conf using ucf
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 10 Oct 2023 22:33:32 +0300
+
+samba (2:4.19.1+dfsg-3) unstable; urgency=medium
+
+ * d/ctdb.install: sync ceph arch list
+ * d/control: mention other places where ceph arch list is used
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 10 Oct 2023 20:12:20 +0300
+
+samba (2:4.19.1+dfsg-2) unstable; urgency=medium
+
+ * d/rules: sync with-ceph arch list from d/control
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 10 Oct 2023 19:03:42 +0300
+
+samba (2:4.19.1+dfsg-1) unstable; urgency=medium
+
+ * new stable security bugfix release:
+ o CVE-2023-3961: https://www.samba.org/samba/security/CVE-2023-3961.html
+ Unsanitized pipe names allow SMB clients to connect as root
+ to existing unix domain sockets on the file system.
+ o CVE-2023-4091: https://www.samba.org/samba/security/CVE-2023-4091.html
+ SMB client can truncate files to 0 bytes by opening files with OVERWRITE
+ disposition when using the acl_xattr Samba VFS module with the smb.conf
+ setting "acl_xattr:ignore system acls = yes"
+ o CVE-2023-4154: https://www.samba.org/samba/security/CVE-2023-4154.html
+ An RODC and a user with the GET_CHANGES right can view all attributes,
+ including secrets and passwords. Additionally, the access check fails
+ open on error conditions.
+ o CVE-2023-42669: https://www.samba.org/samba/security/CVE-2023-42669.html
+ Calls to the rpcecho server on the AD DC can request that the server
+ block for a user-defined amount of time, denying service.
+ o CVE-2023-42670: https://www.samba.org/samba/security/CVE-2023-42670.html
+ Samba can be made to start multiple incompatible RPC listeners,
+ disrupting service on the AD DC.
+ * remove debconf questions and wins dhcp hooks together with po files
+ (wins is not relevant today anymore)
+ * d/control: bump mit-krb5 build-dep (on mitkrb5 profile) to 1.20
+ * d/control: disable ceph (libcephfs-dev, librados-dev) on 32bit
+ architectures (Closes: #1053202)
+ * d/control: enable rados on riscv64 once it's available there
+ * d/control: samba-libs: depend on libldb of the same version since libldb
+ symbols might appear during previous stable series but they don't propagate
+ to next releases with previous minor version numbers. This is ABI breakage
+ but the symbols are mostly internal to samba itself
+ * debian/libldb2.symbols: update
+ * drop attempts to keep ldb ABI versioning
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 10 Oct 2023 18:02:05 +0300
+
+samba (2:4.19.0+dfsg-1) unstable; urgency=medium
+
+ * new upstream release. Some highlights:
+ o changed command-line interface of smbget utility
+ o improved winbindd logging
+ o AD database prepared to FL 2016 standards for new domains
+ o initial, partial implementation of AD FL 2012, 2012R2 and 2016
+ o samba-tool support for silos, claims, sites and subnets
+ o updated Heimdal import
+ o other improvements and changes, see WHATSNEW.txt file for details.
+ * d/patches: remove patches applied upstream, refresh patches
+ * d/control: update talloc/tevent/tdb build-deps
+ * d/smbclient.install: remove smbgetrc.5
+ * d/patches: add ldb 2.7.1 & 2.7.2 ABI files
+ * d/libldb2.symbols: add new symbols (ldb_val_as_*) and new version (2.8.0)
+ * d/python3-ldb.symbols: remove unused versions, add new version
+ * d/control: fix description of samba-common-bin (samba-client)
+ * d/samba-common-bin.install: install samba-log-parser (for winbindd for now)
+ * d/samba-libs.install: 2 new libs
+ * d/samba-libs.install, d/samba-testsuite.install: move libshares-samba4.so.0
+ from samba-libs to samba-testsuite
+ * d/samba-libs.install, d/samba-vfs-modules.install: move
+ libdfs-server-ad-samba4.so.0 from samba-libs to samba-vfs-modules
+ * d/samba-libs.install, d/samba-common-bin.install: move
+ libnet-keytab-samba4.so.0 from samba-libs to samba-common-bin (used by net)
+ * d/samba-libs.install, d/samba-common-bin.install: move
+ libRPC-WORKER-samba4.so.0 from samba-libs to samba-common-bin
+ (used by usr/libexec/samba/rpcd_*)
+ * samba-libs: add libndr 3.0.1 symbols
+ * d/source/lintian-overrides: remove unused source-is-missing override
+ * d/samba-vfs-modules.lintian-overrides: remove unused
+ spelling-error-in-binary override
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 04 Sep 2023 22:57:48 +0300
+
+samba (2:4.18.6+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=9959
+ Windows client join fails if a second container CN=System exists somewhere
+ - https://bugzilla.samba.org/show_bug.cgi?id=15289
+ post-exec password redaction for samba-tool is more reliable for
+ fully random passwords as it no longer uses regular expressions
+ containing the password value itself
+ - https://bugzilla.samba.org/show_bug.cgi?id=15342
+ Spotlight sometimes returns no results on latest macOS
+ - https://bugzilla.samba.org/show_bug.cgi?id=15346
+ 2-3min delays at reconnect with smb2_validate_sequence_number:
+ bad message_id 2
+ - https://bugzilla.samba.org/show_bug.cgi?id=15390
+ Python tarfile extraction needs change to avoid a warning
+ (CVE-2007-4559 mitigation)
+ - https://bugzilla.samba.org/show_bug.cgi?id=15400
+ rpcserver no longer accepts double backslash in dfs pathname
+ - https://bugzilla.samba.org/show_bug.cgi?id=15414
+ "net offlinejoin provision" does not work as non-root user
+ - https://bugzilla.samba.org/show_bug.cgi?id=15417
+ Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted
+ to remove the destination
+ - https://bugzilla.samba.org/show_bug.cgi?id=15420
+ reply_sesssetup_and_X() can dereference uninitialized tmp pointer
+ - https://bugzilla.samba.org/show_bug.cgi?id=15427
+ Spotlight results return wrong date in result list
+ - https://bugzilla.samba.org/show_bug.cgi?id=15430
+ Missing return in reply_exit_done()
+ - https://bugzilla.samba.org/show_bug.cgi?id=15433
+ cm_prepare_connection() calls close(fd) for the second time
+ - https://bugzilla.samba.org/show_bug.cgi?id=15435
+ Regression DFS not working with widelinks = true
+ - https://bugzilla.samba.org/show_bug.cgi?id=15441
+ samba-tool ntacl get segfault if aio_pthread appended
+ - https://bugzilla.samba.org/show_bug.cgi?id=15446
+ DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed
+ - https://bugzilla.samba.org/show_bug.cgi?id=15449
+ mdssvc: Do an early talloc_free() in _mdssvc_open()
+ * d/control: python3-testtools is only needed for selftest,
+ remove from Build-Depends for now
+ * d/rules: export PYTHONDONTWRITEBYTECODE=1 to stop python from generating
+ .pyc caches (Closes: #1048754)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 16 Aug 2023 20:11:26 +0300
+
+samba (2:4.18.5+dfsg-2) unstable; urgency=medium
+
+ * d/rules, d/control: only build glusterfs support on 64bits
+ (Closes: #1041996)
+ * d/rules: make ceph conditional similar to gluster
+ * d/rules: wrap _PYTHON_SYSCONFIGDATA_NAME setting to cross-compile case
+ On e.g. buster, _PYTHON_SYSCONFIGDATA_NAME is different, so this assignment
+ does not work right. In order for it to work on buster, add condition on
+ host vs build gnu type. This breaks compilation with foreign python binary.
+ * d/control: fix description of samba-common-bin (samba-client)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 04 Aug 2023 17:29:06 +0300
+
+samba (2:4.18.5+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/security release 4.18.5, including:
+ o CVE-2022-2127: When winbind is used for NTLM authentication,
+ a maliciously crafted request can trigger an out-of-bounds read
+ in winbind and possibly crash it.
+ https://www.samba.org/samba/security/CVE-2022-2127.html
+ o CVE-2023-3347: SMB2 packet signing is not enforced if an admin
+ configured "server signing = required" or for SMB2 connections to
+ Domain Controllers where SMB2 packet signing is mandatory.
+ https://www.samba.org/samba/security/CVE-2023-3347.html
+ o CVE-2023-34966: An infinite loop bug in Samba's mdssvc RPC service
+ for Spotlight can be triggered by an unauthenticated attacker by
+ issuing a malformed RPC request.
+ https://www.samba.org/samba/security/CVE-2023-34966.html
+ o CVE-2023-34967: Missing type validation in Samba's mdssvc RPC service
+ for Spotlight can be used by an unauthenticated attacker to trigger
+ a process crash in a shared RPC mdssvc worker process.
+ https://www.samba.org/samba/security/CVE-2023-34967.html
+ o CVE-2023-34968: As part of the Spotlight protocol Samba discloses
+ the server-side absolute path of shares and files and directories
+ in search results.
+ https://www.samba.org/samba/security/CVE-2023-34968.html
+ o BUG 15418: Secure channel faulty since Windows 10/11 update 07/2023.
+ https://bugzilla.samba.org/show_bug.cgi?id=15418
+ (this has been patched in the previous upload; Closes: #1041043)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Jul 2023 17:55:58 +0300
+
+samba (2:4.18.4+dfsg-2) unstable; urgency=medium
+
+ * +fix-unsupported-netr_LogonGetCapabilities-l2.patch
+ Fix windows logon/trust issues with 2023-07 windows updates:
+ https://bugzilla.samba.org/show_bug.cgi?id=15418
+ * d/copyright: also remove ctdb/doc/*.?.html pre-generated manpages
+ from the upstream tarball (forgotten previously)
+ * d/rules: add comment about -latomic gcc issue and drop --as-needed
+ there since it is already in use
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 14 Jul 2023 12:30:31 +0300
+
+samba (2:4.18.4+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release, including:
+ - https://bugzilla.samba.org/show_bug.cgi?id=2312
+ smbcacls and smbcquotas do not check // before the server
+ - https://bugzilla.samba.org/show_bug.cgi?id=14030
+ Named crashes on DLZ zone update (was in debian before)
+ - https://bugzilla.samba.org/show_bug.cgi?id=15355
+ NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry
+ and causes test timeouts
+ - https://bugzilla.samba.org/show_bug.cgi?id=15381
+ Register Samba processes with GPFS
+ - https://bugzilla.samba.org/show_bug.cgi?id=15382
+ cli_list loops 100% CPU against pre-lanman2 servers
+ - https://bugzilla.samba.org/show_bug.cgi?id=15383
+ Remove comments about deprecated 'write cache size'
+ - https://bugzilla.samba.org/show_bug.cgi?id=15384
+ net ads lookup (with unspecified realm) fails
+ - https://bugzilla.samba.org/show_bug.cgi?id=15390
+ Python tarfile extraction needs change to avoid a warning
+ (CVE-2007-4559 mitigation)
+ - https://bugzilla.samba.org/show_bug.cgi?id=15391
+ smbclient leaks fds with showacls
+ - https://bugzilla.samba.org/show_bug.cgi?id=15398
+ The winbind child segfaults when listing users with
+ `winbind scan trusted domains = yes`
+ - https://bugzilla.samba.org/show_bug.cgi?id=15402
+ smbd returns NOT_FOUND when creating files on a r/o filesystem
+ - https://bugzilla.samba.org/show_bug.cgi?id=15403
+ smbget memory leak if failed to download files recursively
+ - https://bugzilla.samba.org/show_bug.cgi?id=15404
+ Backport --pidl-developer fixes
+ * remove dnsserver-rename-dns_name_equal.patch (applied upstream)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 05 Jul 2023 18:14:20 +0300
+
+samba (2:4.18.3+dfsg-3) unstable; urgency=medium
+
+ * d/rules: query for DEB_HOST_ARCH, not DEB_HOST_ARCH_CPU,
+ for -latomic workaround
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 21 Jun 2023 23:11:59 +0300
+
+samba (2:4.18.3+dfsg-2) unstable; urgency=medium
+
+ * d/rules: include -latomic gcc issue workaround for select arches
+ apparently due to a gcc issue, some architectures (armel, mipsel, ...)
+ fail to link samba due to not finidng __atomic_load_8 etc symbols
+ after using atomic_load etc from stdatomic.h (part of gcc).
+ Add -latomic explicitly to the list of libraries we link with.
+ * d/rules: add libwbclient0 to the list of krb5-versioned packages
+ (thanks to Andrew Kornilov)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 20 Jun 2023 11:35:13 +0300
+
+samba (2:4.18.3+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=15375
+ Symlinks to files can have random DOS mode information
+ in a directory listing
+ - https://bugzilla.samba.org/show_bug.cgi?id=15378
+ vfs_fruit might cause a failing open for delete
+ - https://bugzilla.samba.org/show_bug.cgi?id=15361
+ winbind recurses into itself via rpcd_lsad
+ - https://bugzilla.samba.org/show_bug.cgi?id=15366
+ wbinfo -u fails on ad dc with >1000 users
+ - https://bugzilla.samba.org/show_bug.cgi?id=15338
+ DS ACEs might be inherited to unrelated object classes
+ - https://bugzilla.samba.org/show_bug.cgi?id=15362
+ a lot of messages: get_static_share_mode_data:
+ get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND
+ - https://bugzilla.samba.org/show_bug.cgi?id=15374
+ aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse()
+ - https://bugzilla.samba.org/show_bug.cgi?id=15360
+ Setting veto files = /.*/ break listing directories
+ - https://bugzilla.samba.org/show_bug.cgi?id=15363
+ "samba-tool domain provision" does not run interactive mode
+ if no arguments are given
+ - https://bugzilla.samba.org/show_bug.cgi?id=15325
+ dsgetdcname: assumes local system uses IPv4
+ * dnsserver-rename-dns_name_equal.patch
+ (forgotten) patch from upstream targetting next stable
+ Fixes crashes of named with samba DLZ plugin due to
+ symbol name conflict (dns_name_equal() function).
+ There's no resulting code changes, just a symbol rename.
+ https://bugzilla.samba.org/show_bug.cgi?id=14030
+ Closes: #1036587, #927747
+ * remove generated manpage files upstream ships in
+ docs/manpages/ and ctdb/doc/
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 31 May 2023 20:09:05 +0300
+
+samba (2:4.18.2+dfsg-1) experimental; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=15302
+ Log flood: smbd_calculate_access_mask_fsp: Access denied:
+ message level should be lower.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15306
+ Floating point exception (FPE) via cli_pull_send
+ at source3/libsmb/clireadwrite.c.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15328
+ test_tstream_more_tcp_user_timeout_spin fails intermittently
+ on Rackspace GitLab runners.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15329
+ Reduce flapping of ridalloc test.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15351
+ large_ldap test is unreliable.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15143
+ New filename parser doesn't check veto files smb.conf parameter.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15354
+ mdssvc may crash when initializing.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15313
+ large directory optimization broken for non-lcomp path elements.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15357
+ streams_depot fails to create streams.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15358
+ shadow_copy2 and streams_depot don't play well together.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15316
+ Flapping tests in samba_tool_drs_show_repl.py.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15317
+ winbindd idmap child contacts the domain controller without a need.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15318
+ idmap_autorid may fail to map sids of trusted domains for the first time.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15319
+ idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15323
+ net ads search -P doesn't work against servers in other domains.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15353
+ Temporary smbXsrv_tcon_global.tdb can't be parsed.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15316
+ Flapping tests in samba_tool_drs_show_repl.py.
+ - https://bugzilla.samba.org/show_bug.cgi?id=15343
+ Tests use depricated and removed methods like assertRegexpMatches.
+ * d/rules, d/libldb2.symbols; add ldb 2.6.2 version
+ * heimdal-to-support-KEYRING-ccache.patch: enable KEYRING in heimdal
+ (Closes: #1023609)
+ * d/control: build-depend on libkeyutils-dev
+ (it is pulled by some other dep, but better to be safe)
+ * -s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
+ (the change has been applied upstream)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Apr 2023 14:02:49 +0300
+
+samba (2:4.18.1+dfsg-1~exp1) experimental; urgency=high
+
+ * upstream stable/security/bugfix release, fixing the following issues:
+ o CVE-2023-0225: An incomplete access check on dnsHostName allows
+ authenticated but otherwise unprivileged users to delete this
+ attribute from any object in the directory.
+ https://www.samba.org/samba/security/CVE-2023-0225.html
+ o CVE-2023-0922: The Samba AD DC administration tool, when operating
+ against a remote LDAP server, will by default send new or reset
+ passwords over a signed-only connection.
+ https://www.samba.org/samba/security/CVE-2023-0922.html
+ o CVE-2023-0614: Fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919
+ Confidential attribute disclosure via LDAP filters was insufficient and
+ an attacker may be able to obtain confidential BitLocker recovery keys
+ from a Samba AD DC. Installations with such secrets in their Samba AD
+ should assume they have been obtained and need replacing.
+ https://www.samba.org/samba/security/CVE-2023-0614.html
+ Closes: CVE-2023-0225 CVE-2023-0922 CVE-2023-0614
+ * update libldb symbols and versions
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 29 Mar 2023 17:59:17 +0300
+
+samba (2:4.18.0+dfsg-1~exp1) experimental; urgency=medium
+
+ * new upstream release (4.18.0):
+ * SMB Server performance improvements
+ * More succinct samba-tool error messages
+ * Colour output with samba-tool --color
+ * New samba-tool dsacl subcommand for deleting ACES
+ * New wbinfo option --change-secret-at
+ * New option to change the NT ACL default location
+ * Azure Active Directory / Office365 synchronisation improvements
+ * new smb.conf parameters:
+ server addresses
+ acl_xattr:security_acl_name
+ * For more details, please refer to WHATSNEW.txt file.
+ * d/control: bump talloc/tdb/tevent build-deps
+ * patches:
+ - refresh: hurd-compat.patch
+ - refresh: spelling.patch, remove many, add 3 new changes
+ - new: heimdal-spelling.patch, spelling fixes for third_party/heimdal
+ - remove: unwrap-getresgid-typo.patch, not needed
+ * d/samba-libs.install: add new internal library libstable-sort-samba4.so.0
+ * d/libldb2.symbols, python3-ldb.symbols.in: add new versions (2.7.0, 2.7.1)
+ * d/libwbclient0.symbols: add new version and two new symbols:
+ wbcChangeTrustCredentialsAt wbcCtxChangeTrustCredentialsAt
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 09 Mar 2023 14:47:05 +0300
+
+samba (2:4.17.6+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release 4.17.6:
+ * https://bugzilla.samba.org/show_bug.cgi?id=15314
+ streams_xattr is creating unexpected locks on folders.
+ * https://bugzilla.samba.org/show_bug.cgi?id=10635
+ Use of the Azure AD Connect cloud sync tool is now supported for password
+ hash synchronisation, allowing Samba AD Domains to synchronise passwords
+ with this popular cloud environment.
+ * https://bugzilla.samba.org/show_bug.cgi?id=15299
+ Spotlight doesn't work with latest macOS Ventura.
+ * https://bugzilla.samba.org/show_bug.cgi?id=15310
+ New samba-dcerpc architecture does not scale gracefully.
+ * https://bugzilla.samba.org/show_bug.cgi?id=15307
+ vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd()
+ in close and fstat.
+ * https://bugzilla.samba.org/show_bug.cgi?id=15293
+ With clustering enabled samba-bgqd can core dump due to use after free.
+ * https://bugzilla.samba.org/show_bug.cgi?id=15311
+ fd_load() function implicitly closes the fd where it should not.
+ * debian/po/ro.po update from Remus-Gabriel Chelu
+ * s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
+ makes smbd a bit less spammy in logs
+ * d/control: clarify some package descriptions (Closes: #1031922)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 09 Mar 2023 12:52:14 +0300
+
+samba (2:4.17.5+dfsg-2) unstable; urgency=medium
+
+ * d/control: samba: depends on exact version of python3-samba
+ * d/control: fix typo
+ * more tweaks for foreign/cross build
+ * d/control: work around autodep8 #904999 again
+ * introduce upstream-like aliases for debian .service names,
+ add rationale
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 04 Feb 2023 17:15:40 +0300
+
+samba (2:4.17.5+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release. From WHATSNEW.txt:
+ * BUG 14808: smbc_getxattr() return value is incorrect.
+ * BUG 15172: Compound SMB2 FLUSH+CLOSE requests from MacOSX
+ are not handled correctly.
+ * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors.
+ * BUG 15226: samba-tool gpo listall fails IPv6 only - finddcs()
+ fails to find DC when there is only an AAAA record for the DC in DNS
+ (Closes: #1023606).
+ * BUG 15236: smbd crashes if an FSCTL request is done on a stream handle.
+ * BUG 15277: DFS links don't work anymore on Mac clients since 4.17.
+ * BUG 15283: vfs_virusfilter segfault on access,
+ directory edgecase (accessing NULL value).
+ * BUG 15240: CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
+ based SChannel on NETLOGON (additional changes).
+ * BUG 15243: %U for include directive doesn't work for share listing
+ (netshareenum) (the fix was in debian before).
+ * BUG 15266: Shares missing from netshareenum response in samba 4.17.4
+ (the fix was in debian before).
+ * BUG 15269: ctdb: use-after-free in run_proc.
+ * BUG 15280: irpc_destructor may crash during shutdown.
+ * BUG 15286: auth3_generate_session_info_pac leaks wbcAuthUserInfo.
+ * BUG 15268: smbclient segfaults with use after free on an optimized build
+ * BUG 15282: smbstatus leaking files in msg.sock and msg.lock.
+ * BUG 15164: Leak in wbcCtxPingDc2.
+ * BUG 15265: Access based share enum does not work in Samba 4.16+.
+ * BUG 15267: Crash during share enumeration.
+ * BUG 15271: rep_listxattr on FreeBSD does not properly check
+ for reads off end of returned buffer.
+ * BUG 15281: Avoid relying on C89 features in a few places.
+ * remove patches applied upstream:
+ - reload-registry-shares-after-reloading-services.patch
+ - rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
+ * d/control: Standards-Version: 4.6.2 (no changes)
+ * d/control: put all doc-generating build-deps into one line
+ * little prep for cross-compilation
+ - build-depend on python3:any and python3-dev:any
+ - build-depend on libpython3-dev for actual module building,
+ and use arch-specific python3-config from there
+ - set and export _PYTHON_SYSCONFIGDATA_NAME to get foreign-arch values
+ provided by libpython3-dev (also helps when python itself is foreign)
+ - depend on perl:any not just perl
+ - export CC/CPP/LD/PKGCONFIG for ./configure (buildtools.mk)
+ * d/gbp.conf: unignore branch
+ * d/control: samba, ctdb, winbind: do not depend on lsb-base
+ (the script is in sysvinit-utils now)
+ * d/control: drop unused build-dep on libncurses5-dev
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 27 Jan 2023 11:15:01 +0300
+
+samba (2:4.17.4+dfsg-3) unstable; urgency=medium
+
+ * +rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
+ https://bugzilla.samba.org/show_bug.cgi?id=15265
+ * +reload-registry-shares-after-reloading-services.patch
+ https://bugzilla.samba.org/show_bug.cgi?id=15266
+ * d/samba.postinst: fix /var/spool/samba => /var/tmp handling
+ (old spooldir can be referred to in other sections too)
+ * create common script "is-configured" to check if the service is configured
+ in smb.conf, and stop masking services in postinst
+ * rewrite SysV init scripts (simplify, make consistent, etc)
+ * d/winbind.postinst: create/change /var/lib/samba/winbindd_privileged
+ at install time only (it should be in /run/samba/ somewhere these days)
+ * d/control: change version of samba which samba-ad-provisioning
+ Breaks to where provisioning was split out
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 03 Jan 2023 10:45:36 +0300
+
+samba (2:4.17.4+dfsg-2) unstable; urgency=medium
+
+ * d/control: samba-dc-provision Replaces+Breaks samba (< 4.17.4+dfsg-2).
+ Closes: #1026387
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 19 Dec 2022 16:36:00 +0300
+
+samba (2:4.17.4+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/security release, with the following changes:
+ - CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege
+ Vulnerability disclosed by Microsoft on Nov 8 2022, see
+ https://www.samba.org/samba/security/CVE-2022-37966.html
+ - CVE-2022-37967: Windows Kerberos Elevation of Privilege Vulnerability
+ disclosed by Microsoft on Nov 8 2022. See
+ https://www.samba.org/samba/security/CVE-2022-37967.html
+ - CVE-2022-38023: Weak "RC4" (rc4-hmac) protection of the NetLogon Secure
+ channel uses, see https://www.samba.org/samba/security/CVE-2022-38023.html
+ There are several important behavior changes included in this release,
+ which may cause compatibility problems interacting with system still
+ expecting the former behavior. Please read the documents referenced above!
+ See also the WHATSNEW.txt document, as there are several new, changed
+ and deprecated smb.conf parameters.
+ * Other bugfixes in this release (from WHATSNEW.txt):
+ https://bugzilla.samba.org/show_bug.cgi?id=14929 CVE-2022-44640
+ Upstream Heimdal free of user-controlled pointer in FAST.
+ https://bugzilla.samba.org/show_bug.cgi?id=15219
+ Heimdal session key selection in AS-REQ examines wrong entry.
+ https://bugzilla.samba.org/show_bug.cgi?id=13135 The KDC logic around
+ msDs-supportedEncryptionTypes differs from Windows.
+ https://bugzilla.samba.org/show_bug.cgi?id=14611 CVE-2021-20251
+ Bad password count not incremented atomically.
+ https://bugzilla.samba.org/show_bug.cgi?id=15206 libnet: change_password()
+ doesn't work with dcerpc_samr_ChangePasswordUser4()
+ https://bugzilla.samba.org/show_bug.cgi?id=15230
+ Memory leak in snprintf replacement functions.
+ https://bugzilla.samba.org/show_bug.cgi?id=15253 RODC doesn't reset
+ badPwdCount reliable via an RWDC (CVE-2021-20251 regression).
+ https://bugzilla.samba.org/show_bug.cgi?id=15198
+ Prevent EBADF errors with vfs_glusterfs.
+ https://bugzilla.samba.org/show_bug.cgi?id=15243
+ %U for include directive doesn't work for share listing (netshareenum).
+ https://bugzilla.samba.org/show_bug.cgi?id=15257
+ Stack smashing in net offlinejoin requestodj.
+ * removed patches which are now included upstream:
+ - nsswitch-pam-data-time_t.patch
+ - CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 15 Dec 2022 21:54:31 +0300
+
+samba (2:4.17.3+dfsg-4) unstable; urgency=medium
+
+ * create samba-ad-provision package with contents of /usr/share/samba/setup.
+ It is recommended by samba, so can be uninstalled if not needed.
+ * create samba-ad-dc package. It is an empty metapackage for now, but with
+ dependencies needed to run an Active Directory Domain Controller (AD-DC)
+ * samba-ad-provision.lintian-overrides: license files
+ * print meaningful error message if samba-ad-provision is not installed
+ (meaningful-error-if-no-samba-ad-provision.patch)
+ * print meaningful error message if python3-markdown is not installed
+ (meaningful-error-if-no-python3-markdown.patch)
+ * ctdb: move rundir from /var/run to /run
+ * fix typo in fruit patch
+ * a few more spelling fixes
+ * add #DEBHELPER# tokens to libnss-winbind.{postinst,postrm}
+ * remove mentions of /var/spool/samba from samba.lintian-overrides
+ (moved to /var/tmp)
+ * change embedded-library heimdal lintian override in a way to be understood
+ by both old and new lintian, so the package can be uploaded
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 05 Dec 2022 14:39:43 +0300
+
+samba (2:4.17.3+dfsg-3) unstable; urgency=medium
+
+ * d/control: winbind should depend on the same binary:Version
+ of libwbclient, or else its components can't talk to the daemon.
+ Thank you Stefan Weichinger for the patience while finding this one!
+ * libnss-winbind: add postinst/postrm scripts to add/remove nsswitch.conf
+ entry for winbind (but not for wins)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 01 Dec 2022 22:38:07 +0300
+
+samba (2:4.17.3+dfsg-2) unstable; urgency=medium
+
+ * fruit-disable-useless-size_t-overflow-check.patch (Closes: #974868)
+ * CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch
+ Fix regression on 32bit systems:
+ https://bugzilla.samba.org/show_bug.cgi?id=15203
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 21 Nov 2022 20:41:46 +0300
+
+samba (2:4.17.3+dfsg-1) unstable; urgency=medium
+
+ * new upstream security release 4.17.3, fixing the following issue:
+ CVE-2022-42898: Heimdal Kerberos libraries suffers from an integer
+ multiplication overflow vulnerability which affects 32bit platforms,
+ see https://www.samba.org/samba/security/CVE-2022-42898.html
+ This changes third_party/heimdal/, it does not affect mitkrb5 builds.
+ * d/rules: stop stripping +dfsg suffix from ldb version
+ * d/control: declare dependency on password (for groupadd in postinst)
+ for winbind and samba (Closes: #1023759)
+ * implement pkg.samba.mitkrb5 build profile to build with system mit-krb5
+ (with "mitkrb5" version suffix in some packages for now)
+ * d/control: mark libufing-dev build dep with <!pkg.samba.nouring>
+ (to simplify out-of-archive builds for older systems)
+ * d/rules: parametrise list of packages to omit (eg on ubuntu-i386)
+ with ${omit-pkgs}
+ * d/rules: use variables in a more consistent way, use single ${config-args}
+ * d/control: tdb-tools and lmdb-utils packages are also needed for tests
+ (everything is commented out for now anyway)
+ * d/rules: update knownfail tests
+ * d/rules: stop exporting buildflags, export compiler options when needed
+ * d/rules: always define rados:Depends & vfsmods:Depends substvars
+ * unwrap-getresgid-typo.patch - fix crash during p11-kit execution
+ (https://bugzilla.samba.org/show_bug.cgi?id=15227) (for the testsuite only)
+ * nsswitch-pam-data-time_t.patch - fix time_t not fit in a pointer (eg x32)
+ (https://bugzilla.samba.org/show_bug.cgi?id=15224)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 15 Nov 2022 19:26:10 +0300
+
+samba (2:4.17.2+dfsg-9) unstable; urgency=medium
+
+ * hurd-compat.patch: some minor compatibility tweaks for hurd
+ * d/rules compat work:
+ - ceph is linux-only like glusterfs
+ - d/rules: add another conditional, with_snapper
+ - combine linux features into single block
+ * d/rules: support "terse" build option for non-verbose build
+ * d/rules: remove third_party/heimdal/lib/gssapi/gssapi.h before build
+ (Closes: #1013205). This fixes -I path order and <gssapi/gssapi.h>
+ include mess which caused samba to FTBFS on sparc64 for quite some time
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 06 Nov 2022 20:13:19 +0300
+
+samba (2:4.17.2+dfsg-8) unstable; urgency=medium
+
+ * d/rules: do not explicitly enable quotas on non-linux:
+ enable everything interesting on linux explicitly and let ./configure
+ to figure it out in other systems. This should fix FTBFS problem on hurd.
+ * d/rules: do not disable systemd on non-linux, let ./configure figure it out
+ * d/winbind.postinst: switch addgroup => groupadd and eliminate getent.
+ winbind package never declared dependency on adduser but always used
+ addgroup command in its postinst script. Finally this broke piuparts.
+ Switch to groupadd which is even easier to use.
+ * d/samba.postinst: switch addgroup => groupadd and eliminate getent
+ * d/smb.conf: use useradd in example create user script too
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 03 Nov 2022 15:04:46 +0300
+
+samba (2:4.17.2+dfsg-7) unstable; urgency=medium
+
+ * another way to work around #1013259: provide a compatibility symlink
+ libndr.so.2 pointing to libndr.so.3:
+ - libndr-debug-level-compat.diff, libndr-revert-so3.diff: remove
+ - d/samba-libs.symbols: adjust symbols/versions
+ - d/samba-libs.install: libndr.so.2 => libndr.so.3
+ - d/samba-libs.links: provide the compat libndr.so.2 symlink
+ * d/samba-libs.links: add comments describing libndr.so.N issue
+ * d/samba-libs.links: add libndr.so.1 compat symlink too (for bullseye sssd)
+ * d/control: unbreak bullseye/jammy sssd-ad-common, sssd-ad, sssd-ipa
+ by samba-libs once libndr.so.1 compat link is here
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 02 Nov 2022 20:43:53 +0300
+
+samba (2:4.17.2+dfsg-6) unstable; urgency=medium
+
+ * d/control: fix comment in previous upload
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 02 Nov 2022 10:45:26 +0300
+
+samba (2:4.17.2+dfsg-5) unstable; urgency=medium
+
+ * d/control: bump version of broken-by-samba-libs sssd
+ and add more affected sssd packages;
+ also reformat the comment there so dpkg-gencontrol does not complain
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 02 Nov 2022 09:34:10 +0300
+
+samba (2:4.17.2+dfsg-4) unstable; urgency=medium
+
+ * d/control: stop suggesting old/orphaned/gone-upstream smbldap-tools
+ * libndr work (Closes: #1013259):
+ - d/control: samba-libs breaks bullseye sssd-ad due to libndr.so.1=>.2 bump
+ - d/samba-libs.install: be more explicit about sonames of public libs
+ to catch soname changes
+ - libndr-debug-level-compat.diff, libndr-revert-so3.diff: revert
+ libndr.so.2->3 soname bump by providing compat wrapper for new symbol
+ - d/samba-libs.symbols: provide symbols for libndr.so.2
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 01 Nov 2022 12:53:22 +0300
+
+samba (2:4.17.2+dfsg-3) unstable; urgency=low
+
+ * rebase on top of debian 4.16.6+dfsg-6 release, include some
+ history of 4.17.* experimental releases in changelog
+ * d/samba-libs.lintian-overrides: update package-name-doesnt-match-sonames
+ to match all libs
+ * urgency is set to low to delay unstable->testing transition a bit
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 30 Oct 2022 16:23:51 +0300
+
+samba (2:4.17.2+dfsg-2) experimental; urgency=medium
+
+ * d/rules: stop dh_installpam from installing samba.pam
+ to the samba package (Closes: #1022775, #1022776)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 20:13:53 +0300
+
+samba (2:4.17.2+dfsg-1) experimental; urgency=medium
+
+ * upstream 4.17.2 security release:
+ CVE-2022-3592 A malicious client can use a symlink to escape the exported
+ directory. https://www.samba.org/samba/security/CVE-2022-3592.html
+ (Samba 4.17 only)
+ * Remove poptGetArg-misuse-fixes-1022826.diff (applied to 4.17.2)
+ * d/rules: no need to build compile_et,asn1_compile intermediate targets
+ anymore; also remove now-unused ${WAFv} macro
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 14:30:44 +0300
+
+samba (2:4.17.1+dfsg-1) experimental; urgency=medium
+
+ * new upstream bugfix release containing a security fix:
+ * CVE-2021-20251 Bad password count not incremented atomically.
+ * Merge changes from 4.16.x (debian/master) branch.
+ * use-bzero-instead-of-memset_s.diff : use explicit_bzero() instead of
+ bzero() for the substitute of memset_s(). bzero() is wrong here because
+ it, just like memset, can be optimized out by the compiler.
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Oct 2022 21:34:11 +0300
+
+samba (2:4.17.0+dfsg-2) experimental; urgency=medium
+
+ * mention closing of CVE-2022-32743 by the 4.17.0 upload
+ * mention closing of CVE-2022-1615 by the 4.17.0 upload
+ * move libpac-samba4.so.0 from samba to samba-libs (Closes: #1021450)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 08 Oct 2022 23:00:05 +0300
+
+samba (2:4.17.0+dfsg-1) experimental; urgency=medium
+
+ * new upstream release 4.17.0
+ Closes: CVE-2022-1615
+ Closes: #1021022, CVE-2022-32743
+ * removed: spelling.patch (partially applied upstream)
+ * removed: weak-crypto-allowed-clarify.diff (applied upstream)
+ * refresh: ctdb-create-piddir.patch
+ * refresh: fix-nfs-service-name-to-nfs-kernel-server.patch
+ * d/control: update minimum versions for talloc/tevent/tdb
+ * d/rules: do not install ctdb.service, it is installed by upstream now
+ * d/ctdb.install: do not install ctdb_wrapper (not used anymore)
+ * d/libldb2.symbols, d/d/python3-ldb.symbols.in: new versions: 2.6.0 2.6.1
+ per upstream, re-version symbols added in 2.5.2 as added in 2.6.1
+ (ldb users needs to be recompiled anyway after updating libldb)
+ * new: spelling.patch: a few more spelling fixes
+ * d/control: bump Standards-Version to 4.6.1 (no changes)
+ * Remove dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch
+ (included in 4.17.0 already)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 13 Sep 2022 20:47:05 +0300
+
+samba (2:4.16.6+dfsg-6) unstable; urgency=medium
+
+ * d/rules: use the right dir for dh_shlibdeps -l (long-standing issue)
+ * rewrite shlibs/symbols-generating file d/genshlibs, make whole process
+ much more clean and strighforward, and 10x times faster too
+ * debian/libnss-winbind.triggers: activate ldconfig trigger
+ * add debian/samba-libs.symbols with libsmbldap library
+ * d/samba.examples: do not install smbadduser: csh considered harmful
+ * d/rules: remove long-unused commented-out override_dh_perl-arch
+ * d/samba.lintian-overrides: *docs-outside-share-doc usr/share/samba/setup/
+ * d/genshlibs: add the forgotten mkdir for d/$pkg/DEBIAN
+ * remove static/fixed branding d/patches/VERSION.patch
+ * d/rules: implement dynamic branding of VERSION file based on dpkg-vendor
+ * d/rules: simplify package interdependency checking rules
+ * d/rules: add a lot more interpackage dependency checks
+ * d/NEWS: merge it into d/samba.NEWS (removes several lintian warnings)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 29 Oct 2022 08:28:53 +0300
+
+samba (2:4.16.6+dfsg-5) unstable; urgency=medium
+
+ * move samba:idmap_script.8.gz and samba-libs:idmap_rfc2307.8.gz manpages to
+ winbind package where they belong and where actual idmap modules lives.
+ (install all idmap_*.8 manpages to winbind package)
+ * d/rules: install pam.d/samba with mode 0644, not 0755
+ * many lintian-override updates:
+ - source: ctdb/doc/*.html actually has sources
+ - source: +very-long-line-length-in-source-file * (for generated files)
+ - source: +debian-control-has-unusual-field-spacing Breaks
+ - winbind: +spare-manual-page for module manpages
+ - *: update some overrides for new lintian
+ - libpam-winbind: +spare-manual-page pam_winbind.8
+ - libldb2: +package-contains-empty-directory .../ldb/modules/ldb/
+ - *: +hardening-no-fortify-functions for some simple shared libs
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 26 Oct 2022 22:27:00 +0300
+
+samba (2:4.16.6+dfsg-4) unstable; urgency=medium
+
+ * poptGetArg-misuse-fixes-1022826.diff: fix poptGetArg() misuse
+ for popt-1.9 (Closes: #1022826)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 26 Oct 2022 19:45:38 +0300
+
+samba (2:4.16.6+dfsg-3) unstable; urgency=medium
+
+ * d/rules: stop dh_installpam from installing samba.pam
+ to the samba package (Closes: #1022775, #1022776)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 20:13:53 +0300
+
+samba (2:4.16.6+dfsg-2) unstable; urgency=medium
+
+ * d/rules: pam.d/samba should go to /etc, not /
+ * d/README.source.md: it is README.source.md not README.source
+ * d/control: bump Standards-Version to 4.6.1 (no changes)
+ * d/rules: verify that samba-libs does not depend on samba
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 13:55:33 +0300
+
+samba (2:4.16.6+dfsg-1) unstable; urgency=medium
+
+ * new upstream security release 4.16.6, fixing:
+ CVE-2022-3437: There is a limited write heap buffer overflow in the GSSAPI
+ unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba).
+ https://www.samba.org/samba/security/CVE-2022-3437.html
+ * use explicit_bzero() instead of bzero() for the substitute of memset_s()
+ * d/rules: make it a bit more consistent with other samba packages
+ * d/rules: stop exporting ${PYTHON}
+ * a bunch of ubuntu-related changes:
+ - d/rules: omit glusterfs on ubuntu-i386
+ - apply Ubuntu changes to smb.conf at install time (d/smb.conf.ubuntu.diff)
+ - d/tests/: ensure io_uring module is built before testing it
+ - d/rules: inline parallel check from dpkg/buildopts.mk
+ (buildopts.mk does not exist on ubuntu 20.04 focal)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 12:48:20 +0300
+
+samba (2:4.16.5+dfsg-2) unstable; urgency=medium
+
+ [ Michael Tokarev ]
+ * d/tests/util: use printf for formatting password for smbpasswd,
+ not non-standard echo \n (mr !60)
+ * introduce LDB_2.4.4 version symbol (Closes: #1021371)
+ Create an empty ABI file just to make the scripts run during the build
+ stage to introduce LDB_2.4.4 version symbol into libldb.so, and remove
+ this empty file in the clean target. It is a bit hackish but works fine.
+ This is only needed to upgrade from bullseye to bookworm, from
+ 4.13.13+dfsg-1~deb11u5+ to the next release, 4.16+.
+ Remove this for bookworm+.
+ * dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch:
+ GnuTLS gnutls_rnd() can fail and give predictable random values.
+ Closes: #1021024, CVE-2022-1615
+
+ [ John Paul Adrian Glaubitz ]
+ * disable ceph support on ppc64 and x32 (Closes: #1020781, #1012165)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 08 Oct 2022 15:11:15 +0300
+
+samba (2:4.16.5+dfsg-1) unstable; urgency=medium
+
+ * new (minor) upstream release 4.16.5
+ * removed fix-samba-tool-domain-join-segfault.patch (included upstream)
+ * d/gbp.conf: no need to filter orig.tar: uscan already does that
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 08 Sep 2022 12:44:38 +0300
+
+samba (2:4.16.4+dfsg-2) unstable; urgency=medium
+
+ * d/libldb2.symbols: include newly added symbols
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 01 Aug 2022 15:43:11 +0300
+
+samba (2:4.16.4+dfsg-1) unstable; urgency=high
+
+ * new upstream security release fixing:
+ o CVE-2022-2031: Samba AD users can bypass certain restrictions associated
+ with changing passwords.
+ https://www.samba.org/samba/security/CVE-2022-2031.html
+ o CVE-2022-32742: Server memory information leak via SMB1.
+ https://www.samba.org/samba/security/CVE-2022-32742.html
+ o CVE-2022-32744: Samba AD users can forge password change requests
+ for any user.
+ https://www.samba.org/samba/security/CVE-2022-32744.html
+ o CVE-2022-32745: Samba AD users can crash the server process with an LDAP
+ add or modify request.
+ https://www.samba.org/samba/security/CVE-2022-32745.html
+ o CVE-2022-32746: Samba AD users can induce a use-after-free in the server
+ process with an LDAP add or modify request.
+ https://www.samba.org/samba/security/CVE-2022-32746.html
+ * Closes: #1016449, CVE-2022-2031 CVE-2022-32742, CVE-2022-32744,
+ CVE-2022-32745, CVE-2022-32746
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 27 Jul 2022 18:35:53 +0300
+
+samba (2:4.16.3+dfsg-1) unstable; urgency=medium
+
+ [ Michael Tokarev ]
+ * new upstream minor/bugfix releae. See WHATSNEW.txt for details.
+ * d/watch: add the forgotten repacksuffix=+dfsg
+
+ [ Andreas Hasenack ]
+ * update nfs configuration examples for ctdb
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 18 Jul 2022 17:15:07 +0300
+
+samba (2:4.16.2+dfsg-1) unstable; urgency=medium
+
+ * new upstream minor/bugfix release.
+ * removed waf-add-support-for-GNU-kFreeBSD.patch (applied upstream)
+ * new minor version of libldb
+ (no code changes, just the build system update to support python 3.11)
+ * move samba-dcerpcd from samba package to samba-common-bin due to winbind
+ New in 4.16 samba-dcerpcd binary is used by smbd and winbind, so putting
+ it to samba package makes winbind unable to run it without samba.
+ For now, in order to fix this issue, move this binary from samba to
+ samba-common-bin package. It might be worth creating its own package
+ for this binary (or maybe some more binaries), once it is clear where
+ upstream is going to. Making this binary a part of samba-common-bin
+ adds some more files to smbclient-only setup.
+ (Closes: #1012240)
+ * remove mksmbpasswd script and manpage: we have smbpasswd whcih can add
+ entries to smbpasswd file if needed, and can handle other passwod storage
+ formats too
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 13 Jun 2022 19:08:44 +0300
+
+samba (2:4.16.1+dfsg-8) unstable; urgency=medium
+
+ * fix the Breaks/Replaces versions in the previous upload for moving
+ libsamba-utils.so, and use the same Breaks/Replaces for the -dev
+ packages too
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 07 Jun 2022 14:11:09 +0300
+
+samba (2:4.16.1+dfsg-7) unstable; urgency=medium
+
+ * drop libunwind-dev build dependency again: it turned out the
+ internal stack unwind is better anyway
+ * move libsamba-utils.so and its dependencies from libwbclient0
+ into samba-libs. In the past, libwbclient were built using this
+ library, but it does not depend on libsamba-utils anymore
+ * d/control: libnss-winbind and libpam-winbind does not depend
+ on samba-common. None of the files in samba-common are used by
+ nss and pam modules; winbind does use them but not the modules.
+ * d/rules: add --with-sockets-dir=/run/samba (or else it was
+ /var/run/samba)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 07 Jun 2022 12:09:50 +0300
+
+samba (2:4.16.1+dfsg-6) unstable; urgency=medium
+
+ * d/control: specify arch list for libunwind-dev build-dep to be the same
+ as for libunwind itself (it is not built on all architectures)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 29 May 2022 12:09:22 +0300
+
+samba (2:4.16.1+dfsg-5) unstable; urgency=medium
+
+ * add-missing-libs-deps.diff: add missing dependencies for a few samba
+ libraries. Closes: #1010922
+ * point [printers] to /var/tmp/, stop shipping /var/spool/samba/.
+ For a long time, we shipped an alternative /var/tmp/ directory with mode
+ 01777 (so that anyone can use it to store files) but without the same setup
+ as for regular /var/tmp/ (in particular, without removing old files and
+ since it is not a usual place to store temp files, no one actually looked
+ at it the same way someone would take care of /var/tmp/. Change smb.conf
+ to use /var/tmp/ instead of /var/spool/samba/. In the postinst script,
+ remove /var/spool/samba/, check if it is still used in smb.conf,
+ and create a compatibility symlink pointing to tmp/, suggesting changing
+ smb.conf. And remove this compat symlink in postrm.
+ This probably can be accomplished by a debconf question, but the
+ thing is complicated by the fact that smb.conf might be upgrading
+ too at the same time.
+ * debian/patches/weak-crypto-allowed-clarify.diff: update
+ * testparm-do-not-fail-if-pid-dir-does-not-exist.patch: also cover samba-tool
+ testparm too, not only regular stand-alone testparm.
+ * fix-samba-tool-domain-join-segfault.patch: fix segfault when joining an
+ AD-DC domain using samba-tool join.
+ * d/rules: enable --with-profilig-data to build samba with profiling
+ collection (if set in smb.conf)
+ * d/control: add libunwind-dev to build-deps, to compile in stack backtrace
+ logging in case of crash
+ * d/control: stop build-conflicting with now-unused libtracker-miner-2.0-dev
+ * d/control: stop build-conflicting with libtracker-sparql-2.0-dev: there's
+ no point in explicitly disabling libtracker-sparql support (bullseye-only
+ for now anyway)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 28 May 2022 22:50:43 +0300
+
+samba (2:4.16.1+dfsg-4) unstable; urgency=medium
+
+ [ Michael Tokarev ]
+ * fix spelling in disable-setuid-confchecks.patch
+ * d/NEWS: split it into different $package.NEWS files
+ * d/upstream/metadata: add Bug-Database
+ * d/samba.postinst: create sambashare group and usershare directory
+ on new install only
+ * libldb2: provide compat symlinks for bullseye ldb modules dir
+ * d/rules: provide Build-Depends-Package: for python3-ldb
+ * samba-vfs-modules.lintian-overrides: add spare-manual-page vfs_*.8 override
+ * winbind.lintian-overrides: add spare-manual-page idmap_*.8 override
+
+ [ Arnaud Rebillout ]
+ * Fix patch testparm-do-not-fail-if-pid-dir-does-not-exist (Closes: #1010835)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 11 May 2022 09:50:03 +0300
+
+samba (2:4.16.1+dfsg-3) unstable; urgency=medium
+
+ * fix ldb package version generation in d/make_shlibs
+ which was wrong in 2 previous uploads.
+ Will I *ever* make it actually work someday?
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 02 May 2022 18:32:24 +0300
+
+samba (2:4.16.1+dfsg-2) unstable; urgency=medium
+
+ * rethink ldb version *again*, to be 2.5.0+smb4.16.1-2
+ or else 2.5.0+smb-1 from samba-4.16.1-2 sorts before
+ 2.5.0+smb-7 from samba-4.16.0-7.
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 02 May 2022 17:02:16 +0300
+
+samba (2:4.16.1+dfsg-1) unstable; urgency=medium
+
+ * new upstream minor release 4.16.1
+ * move-msg.sock-from-var-lib-samba-to-run-samba.patch:
+ move /var/lib/samba/private/msg.sock/ to /run/samba/msg.sock/.
+ This is a (private) socket directory for IPC, it should not be in /var.
+ * Remove /var/lib/samba/private/msg.sock/ in postinst
+ * testparm-do-not-fail-if-pid-dir-does-not-exist.patch:
+ testparm deliberately fails if /run/samba does not exist,
+ while testparam itself does not use it and daemons will
+ create it on demand. Just make it a warning instead of a
+ fatal error, and we'll not need to pre-create this dir
+ in a random place using hackish ways
+ * ctdb-create-piddir.patch: create /run/ctdb/ in ctdb.service
+ and ctdb.init before invoking ctdbd (as the latter does not
+ create its pid directory on demand).
+ * stop (ab)using tmpfiles.d to pre-create /run/samba/ and /run/ctdb/
+ and stop creating /run/samba/ in samba-common-bin.postinst just to
+ make testparam happy.
+ * d/rules: minor tweaks
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 02 May 2022 13:16:12 +0300
+
+samba (2:4.16.0+dfsg-7) unstable; urgency=medium
+
+ * another bunch of small tweaks to d/rules:
+ - set SHELL to /bin/sh -e
+ - rework the clean target
+ - provide fast replacement of architecture.mk
+ - better expression for DEB_REVISION
+ - rearrange configure options
+ * do not disable glusterfs on ubuntu-i386 (glusterfs is now in main)
+ * mention closing of #1001053 by the 4.16 upload
+ * change the ldb version string again, removing te "+samba*" suffix
+ to allow bin-NMUs +b1 (Closes: #1010100)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 24 Apr 2022 16:56:34 +0300
+
+samba (2:4.16.0+dfsg-6) unstable; urgency=medium
+
+ * another attempt to fix/work around #221618. Re-enable
+ libsmbclient-ensure-lfs-221618.patch and change it to just define
+ an extra type array int[sizeof(off_t)-7]. If off_t is small it will
+ become a compile error. It is an ugly way to do it, but it should
+ actually work, unlike various static_assert/_Static_assert which are
+ language (C/C++) and standard-dependent. Closes: #221618.
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 09 Apr 2022 17:27:09 +0300
+
+samba (2:4.16.0+dfsg-5) unstable; urgency=medium
+
+ * disable libsmbclient-ensure-lfs-221618.patch for now.
+ It throws errors in one or another configuration no matter what.
+ Repoens: #221618
+ * d/salsa-ci.yml: re-allow blhc salsa-ci test to fail again
+ due to different bug in blhc
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 09 Apr 2022 16:33:57 +0300
+
+samba (2:4.16.0+dfsg-4) unstable; urgency=medium
+
+ * libsmbclient-ensure-lfs-221618.patch: replace _Static_assert with
+ static_assert (and include <assert.h> to make C++ happy too
+ (Closes: #1009211)
+ * disable-setuid-confchecks.patch: when running configure tests,
+ samba tries to verify setuid/setgid etc calls are actually
+ *working*, not just exists. This is only possible when the
+ configure is running as root. But it turns out in some salsa-ci
+ configuration (namely in the reprotest), the second build is
+ actually running as root, and in that environment, actual
+ setegid call is failing somehow. Just disable the config-time
+ check for correctly working setgid and assume it "just works"
+ if present, exactly like non-root build will do.
+ * d/salsa-ci.yml: do not expect failure in blhc test (the original
+ prob has been fixed long ago), and stop requiring experimental
+ * mention closing of #999876 by 4.16
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 09 Apr 2022 00:42:38 +0300
+
+samba (2:4.16.0+dfsg-3) unstable; urgency=medium
+
+ * d/control: comment out the selftest-mode build deps for now
+ * d/control: forgotten python3-samba:Replaces against samba package too,
+ not just samba-libs, when moving dckeytab python lib (Closes: #1009175)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 08 Apr 2022 10:18:23 +0300
+
+samba (2:4.16.0+dfsg-2) unstable; urgency=medium
+
+ * use strict versioned dependency between samba-dsdb-modules and libldb2,
+ since they're tied to each other and are now built from the same source
+ * fix forgotten shlib symbols generation for python3-ldb
+ * change libldb versioning scheme
+ from ldb_2:2.5.0+samba4.16.0-1
+ to ldb_2:2.5.0-1+samba4.16.0
+ so that symbols versioning works correctly. Unfortunately the previous
+ upload to experimental used the first form which is greather than the
+ correct one, so temporarily (just for this 2.5.0 version of ldb) use
+ this: ldb_2:2.5.0+smb-1+samba4.16.0
+ (with "+smb" suffix to be removed for 2.5.1+)
+ * exclude samba-vfs-modules for i386 ubuntu build since this package
+ is useless without samba itself (which is not built on this environment)
+ * create selftest rules and add !nocheck build-dependencies
+ (but do not enable selftests for now as they're failing)
+ * split build system into -arch and -indep parts. We build only one arch-all
+ package (samba-common) which contains only static files from debian/,
+ there's no need to build whole samba to build this package.
+ Move almost all Build-Depends to Build-Depends-Arch (and reindent them).
+ * various updates to d/rules
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 07 Apr 2022 09:56:56 +0300
+
+samba (2:4.16.0+dfsg-1) experimental; urgency=medium
+
+ * New upstream major release.
+ Closes: #1004690, CVE-2021-20316: Fileserver symlink metadata share escape
+ Closes: #1004691, CVE-2021-43566: mkdir race condition allows share escape
+ Closes: #1004692, CVE-2021-44141: UNIX extensions in SMB1 disclose whether
+ the outside target of a symlink exists
+ Closes: #1005642 (windows client data corruption due to cache poisoning)
+ Closes: #1001053 (MIT-kerberos config broken after fix for CVE-2020-25717)
+ Closes: #988197 (legacy printing support, 47d79d7e7e406f7dd2)
+ Closes: #998423 (coredump connecting from macos to shares with var substs)
+ Closes: #999876 (winbind allow trusted domains = no regression)
+ * Notable changes in 4.16 series compared to 4.13:
+ - modular VFS (see The_New_VFS.txt)
+ - publishing printers in AD is more complete
+ - group policies for winbindd cilents (like linux systems)
+ - certificate auto enrollement in AD group policy
+ - large list of improvements in samba-tool
+ - SMB1 protocol has been deprecated, some subcommands has been removed
+ - more consistend options/subcommands in samba commands
+ * d/rules: export PYTHONHASHSEED=1. This makes lots of sporadic build-time
+ debian-specific failures to go away, by preserving order of waf hashes
+ * refresh patches, update build-depend versions (talloc, tdb, tevent)
+ * refresh lintian-overrides files, add many new overrides
+ * build-depend on python3-markdown
+ * build-depend on libjson-perl for new heimdal bits
+ * more consistent internal lib naming; refresh file lists everywhere
+ * samba: install new rpc_* services, install samba-dcerpc
+ * refresh symbols files
+ * build libldb from samba sources, not from separate source
+ (this moves ldb plugins from /usr/lib/$triple/ldb/plugin/ldb/ to
+ /usr/lib/$triple/samba/ldb/ - the same where dsdb modules are).
+ * optimizations for d/make_shlibs; also allow one to specify explicit
+ version for some packages
+ * as per clarifications for waf --{bundled,builtin}-libraries, remove
+ now-wrong usage there. This also fixes build failures with current
+ samba sources
+ * d/rules: various optimizations to reduce startup costs by eliminating
+ unnecessary external command calls during d/rules read by make.
+ Including caching of LDB version information in d/ldb-version.mk file.
+ This does not affect the buildd processing much (and does not affect
+ runtime at all), but helps with build procedure debugging.
+ * d/rules: numerous small fixes, cleanups and other changes, including:
+ - clean up the install target
+ - remove some now-irrelevant parts
+ - fix no-glusterfs-build on non-linux
+ * change build procedure: instead of `waf build', run `waf install'.
+ `waf build' builds samba to be run from the build dir, and `waf install'
+ rebuilds/relinks everything again for production. Build the production
+ variant only, no build-dir one.
+ * samba-common-bin.postinst: explicitly mkdir /run/samba before invoking
+ samba binaries (Closes: #953530)
+ * in the salsa git repository of samba, stop keeping debian patches in
+ applied form, keep them in d/patches/ only as most other packages do.
+ * move single python (helper) module, libsamba-policy, together with
+ 2 internal libraries used by it, from samba-libs package to python3-samba.
+ This makes samba-libs to be free from python-related files, and makes
+ python3-samba to be the only python-providing package.
+ Closes: #1006875, #878612, #862338
+ * also move dckeytab python module from samba to python3-samba
+ (actually stop moving it from python3-samba to samba to incorrectly
+ avoid a circular dependency). Also verify that python3-samba does
+ not depend on samba package.
+ * weak-crypto-allowed-clarify.diff: clarify "weak crypto is allowed"
+ testparm message (Closes: #975882)
+ * spelling.patch: fix many common spelling mistakes in the source
+ * ctdb: simplify/cleanup instllation of READMEs/examples
+ * d/control: remove breaks/replaces/depends on ancient versions of some
+ packages (ancient dpkg version in Pre-Depends, ancient samba-libs)
+ * d/rules: rework wrong shlibdeps handling
+ * move helper programs from /usr/lib/$multiarch/ to /usr/libexec/
+ where they belongs. This should not affect users.
+ * smbclient: re-do the fix for an old bug, #221618. The original "fix"
+ did not fix anything (it is too late already to #define _FILE_OFFSET_BITS
+ when all types has already been defined). From now on, raise an error
+ if off_t is less than 64bits (it should >=64 when #include'ing
+ <libsmbclient.h> with proper LFS defines). In theory this can break
+ some sources which either included libsmbclient.h without a reason or
+ which didn't use any of the functions which deals with off_t (smbc_lseek
+ etc), - which did not explicitly enable LFS on a 32bit system.
+ Please email us if you faced such situation.
+ * drop 07_private_lib patch: we do not need to force rpath for
+ private libraries into every samba binary, upstream build system
+ does a good job here.
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 05 Apr 2022 16:01:25 +0300
+
+samba (2:4.13.14+dfsg-1) unstable; urgency=high
+
+ * New upstream security release in order to address the following defects:
+ - CVE-2016-2124: don't fallback to non spnego authentication if we require
+ kerberos
+ - MS CVE-2020-17049 in Samba: 'Bronze bit' S4U2Proxy Constrained Delegation
+ bypass
+ - CVE-2020-25717: A user on the domain can become root on domain members
+ - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other
+ servers
+ + Bump build-depends ldb >= 2.2.3
+ - CVE-2020-25719: AD DC Username based races when no PAC is given
+ - CVE-2020-25721: Kerberos acceptors need easy access to stable AD
+ identifiers (eg objectSid)
+ - CVE-2020-25722: AD DC UPN vs samAccountName not checked (top-level bug
+ for AD DC validation issues)
+ - CVE-2021-3738: crash in dsdb stack
+ - CVE-2021-23192: dcerpc requests don't check all fragments against the
+ first auth_state
+ + Update d/samba-libs.install for libdcerpc-pkt-auth.so.0
+ * Add patch to fix "allow trusted domains"
+ * Bump ldb build-depends to 2.2.3
+ * Update d/samba-libs.install
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 09 Nov 2021 20:53:03 +0100
+
+samba (2:4.13.13+dfsg-1) unstable; urgency=high
+
+ [ Athos Ribeiro ]
+ * Add autopkgtest to verify tmpfiles setup (LP: #1905387)
+ - d/t/reinstall-samba-common-bin: make sure /run/samba is created
+ by the samba-common-bin installation process (postinst script)
+ - d/t/control: run new reinstall-samba-common-bin test case
+
+ [ Paride Legovini ]
+ * samba.postinst: do not populate sambashare from the Ubuntu admin group
+ (LP: #1942195)
+
+ [ Mathieu Parent ]
+ * New upstream version
+ - Remove CVE-2021-20254.patch
+ - Bump build-depends ldb >= 2.2.0
+ * libwbclient0: Add Breaks+Replaces: libsamba-util0 (<< 2:4.0.0)
+ (Closes: #988170)
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 01 Nov 2021 08:59:20 +0100
+
+samba (2:4.13.5+dfsg-2) unstable; urgency=high
+
+ * CVE-2021-20254: Negative idmap cache entries can cause incorrect group
+ entries in the Samba file server process token (Closes: #987811)
+ * Add Breaks+Replaces: samba-dev (<< 2:4.11) (Closes: #987209)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 06 May 2021 21:09:29 +0200
+
+samba (2:4.13.5+dfsg-1) unstable; urgency=medium
+
+ * New upstream version (Closes: #984863)
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 13 Mar 2021 08:31:27 +0100
+
+samba (2:4.13.4+dfsg-1) unstable; urgency=medium
+
+ * New upstream version
+ - GPG signature has changed
+ - Update samba-libs.install
+ - Update symbols
+ * Never use priority high when asking for DHCP integration (Closes: #981554)
+ * Sync CTDB patches with Ubuntu:
+ - Add "ctdb-config: enable syslog by default"
+ - Update "fix nfs related service names"
+ * d/rules: Ubuntu specifics
+ - No Ceph on i386
+ - Disable some i386 packages
+ - No GlusterFS
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 09 Feb 2021 22:26:43 +0100
+
+samba (2:4.13.3+dfsg-1) unstable; urgency=medium
+
+ [ Andreas Hasenack ]
+ * d/control: enable the liburing vfs module (Closes: #976854)
+ * Add new DEP8 tests for the uring vfs module
+ * Factor out common DEP8 test code into d/t/util and change the tests to
+ source from it
+ * Add set -x and set -e to DEP8 tests
+
+ [ Mathieu Parent ]
+ * liburing-dev is linux-any
+ * New upstream version
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 16 Dec 2020 18:23:09 +0100
+
+samba (2:4.13.2+dfsg-3) unstable; urgency=medium
+
+ * Ensure systemd-tmpfiles is called before testparm (Closes: #975422)
+ * Only check configuration on configure step
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 22 Nov 2020 10:44:51 +0100
+
+samba (2:4.13.2+dfsg-2) unstable; urgency=medium
+
+ * Upload to unstable
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 18 Nov 2020 20:34:51 +0100
+
+samba (2:4.13.2+dfsg-1) experimental; urgency=medium
+
+ * New upstream major version
+ - Update d/gbp.conf, d/watch and d/README.source for 4.13
+ - Update patches
+ - Bump build-depends ldb >= 2.2.0
+ - Install new files
+ - Update symbols
+ * Includes the following security fixes:
+ - CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify
+ (Closes: #973400)
+ - CVE-2020-14323: Unprivileged user can crash winbind (Closes: #973399)
+ - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
+ easily crafted records (Closes: #973398)
+ - CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon")
+ (Closes: #971048)
+ * Includes the following fixes:
+ - Fixes "samba_dnsupdate gives depreacation warnings" (Closes: #973957)
+ - s3: libsmbclient.h: add missing time.h include (Closes: #946840)
+ * Remove unused python3-crypto dependency (Closes: #971292)
+ * Enable Spotlight with ES backend (Closes: #956096, #956482)
+ * Standards-Version: 4.5.0
+ * Add missing Build-Depends-Package in libsmbclient.symbols and
+ libwbclient0.symbols
+ * d/copyright: Fix duplicate-globbing-patterns
+ * Remove outdated/malformed lintian overrides
+ * d/winbind.logrotate: Only reload winbindd when running (Closes: #946821)
+ * Bump to debhelper compat 13
+ * Add another library-not-linked-against-libc override
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 12 Nov 2020 11:23:01 +0100
+
+samba (2:4.12.5+dfsg-3) unstable; urgency=high
+
+ * Add Breaks: sssd-ad-common (<< 2.3.0), due to libndr so bump
+ (Closes: #963971)
+ * Add patch traffic_packets: fix SyntaxWarning: "is" with a literal
+ (Closes: #964165)
+ * Add patch Rename mdfind to mdsearch (Closes: #963985)
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 04 Jul 2020 23:57:59 +0200
+
+samba (2:4.12.5+dfsg-2) unstable; urgency=high
+
+ * Add missing symbol (path_expand_tilde)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 02 Jul 2020 15:27:25 +0200
+
+samba (2:4.12.5+dfsg-1) unstable; urgency=high
+
+ * New upstream security release:
+ - CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD
+ DC LDAP Server with ASQ, VLV and paged_results
+ - CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
+ excessive CPU
+ - CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
+ paged_results and VLV.
+ - CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.
+ - Bump build-depends ldb >= 2.1.4
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 02 Jul 2020 14:03:36 +0200
+
+samba (2:4.12.3+dfsg-2) unstable; urgency=medium
+
+ * Upload to unstable
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 28 Jun 2020 11:45:14 +0200
+
+samba (2:4.12.3+dfsg-1) experimental; urgency=medium
+
+ * New upstream major version (Closes: #963106)
+ - Update d/gbp.conf, d/watch and d/README.source for 4.12
+ - Drop merged patches
+ - Bump build-depends talloc >= 2.3.1, tdb >= 1.4.3, tevent >= 0.10.2 and
+ ldb >= 2.1.3
+ - Upstream fixes:
+ + pygpo: use correct method flags
+ (Closes: #963242, #961585, #960171, #956428)
+ + CVE-2020-10700: A use-after-free flaw was found in the way samba AD DC
+ LDAP servers, handled 'Paged Results' control is combined with the 'ASQ'
+ control. A malicious user in a samba AD could use this flaw to cause
+ denial of service (Closes: #960189)
+ + CVE-2020-10704: A flaw was found when using samba as an Active Directory
+ Domain Controller. Due to the way samba handles certain requests as an
+ Active Directory Domain Controller LDAP server, an unauthorized user can
+ cause a stack overflow leading to a denial of service. The highest
+ threat from this vulnerability is to system availability
+ (Closes: #960188)
+ - intel aes-ni no more needed as GnuTLS is used
+ - Install new files
+ - Update symbols
+ - Update samba-libs.lintian-overrides
+ * d/control: Remove unused libattr1-dev Build-Depends (Closes: #953915)
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 24 Jun 2020 23:12:11 +0200
+
+samba (2:4.11.5+dfsg-1) unstable; urgency=medium
+
+ * New upstream security release
+ - CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD
+ Directory not automatic.
+ - CVE-2019-14907: Crash after failed character conversion at log level 3 or
+ above.
+ - CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC.
+ - Bump build-depends ldb >= 2.0.8
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 28 Jan 2020 07:19:46 +0100
+
+samba (2:4.11.3+dfsg-1) unstable; urgency=high
+
+ * New upstream security release
+ - Drop merged patches for previous security fixes
+ - CVE-2019-14861: An authenticated user can crash the DCE/RPC DNS management
+ server by creating records with matching the zone name.
+ - CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction was
+ not being applied when processing protocol transition requests (S4U2Self),
+ in the AD DC KDC.
+ * d/control: drop python3-matplotlib
+ * d/control: Fix stronger-dependency-implies-weaker
+ (samba depends -> recommends python3-dnspython)
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 16 Dec 2019 09:47:45 +0100
+
+samba (2:4.11.1+dfsg-3) unstable; urgency=medium
+
+ * Add some python dependencies:
+ - python3-matplotlib : samba-tool visualize
+ - python3-markdown : samba-tool domain schemaupgrade
+ - python3-dnspython : samba-tool dns
+ * Only build with default python3 (Closes: #943635)
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 17 Nov 2019 14:48:02 +0100
+
+samba (2:4.11.1+dfsg-2) unstable; urgency=high
+
+ * New upstream security release
+ - CVE-2019-10218: Malicious servers can cause Samba client code to return
+ filenames containing path separators to calling code.
+ - CVE-2019-14833: When the password contains multi-byte (non-ASCII)
+ characters, the check password script does not receive the full password
+ string.
+
+ -- Mathieu Parent <sathieu@debian.org> Fri, 18 Oct 2019 20:26:45 +0200
+
+samba (2:4.11.1+dfsg-1) unstable; urgency=medium
+
+ * New upstream release
+
+ -- Mathieu Parent <sathieu@debian.org> Fri, 18 Oct 2019 19:00:46 +0200
+
+samba (2:4.11.0+dfsg-11) unstable; urgency=medium
+
+ * Stop building with spotlight support which pulls glib (Closes: #941654)
+ * Force quota support (Closes: #941899)
+ * Standards-Version: 4.4.1, no change
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 14 Oct 2019 12:16:04 +0200
+
+samba (2:4.11.0+dfsg-10) unstable; urgency=medium
+
+ * Add libwbclient-dev to samba-dev depends as samba-util was moved there
+ (Closes: #941750)
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 05 Oct 2019 15:57:07 +0200
+
+samba (2:4.11.0+dfsg-9) unstable; urgency=medium
+
+ * Remove versioned depends on libtdb-dev (>= 2) and add libldb-dev (>= 2:2)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 03 Oct 2019 19:08:17 +0200
+
+samba (2:4.11.0+dfsg-8) unstable; urgency=medium
+
+ * d/gbp.conf: sign-tags = True
+ * Do not check smb.conf with testparm when server role=active directory domain
+ controller (Closes: #931734)
+ * Force one job during configure step with -j 1 (Closes: #941467).
+ Not setting -j leads to default which is number of cpus
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 03 Oct 2019 07:52:39 +0200
+
+samba (2:4.11.0+dfsg-7) unstable; urgency=medium
+
+ * Always evaluate WAF_NO_PARALLEL to ensure correct value (Closes: #941467)
+ * This version is built with talloc from sid (Closes: #940963)
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 02 Oct 2019 20:45:24 +0200
+
+samba (2:4.11.0+dfsg-6) unstable; urgency=medium
+
+ * Do not run waf configure in parallel. Fix FTBFS on arm (Closes: #941467)
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 01 Oct 2019 22:35:36 +0200
+
+samba (2:4.11.0+dfsg-5) experimental; urgency=medium
+
+ * d/gitlabracadabra.yml: only_allow_merge_if_pipeline_succeeds: false
+ * Remove patches:
+ - "build: Remove tests for _readdir() and __readdir()"
+ - "build: Remove tests for rdchk()"
+ - "build: Remove tests for _pwrite() and __pwrite()"
+ * Add patches by Ralph Boehme:
+ - "wscript: remove all checks for _FUNC and __FUNC"
+ - "wscript: split function check to one per line and sort alphabetically"
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 30 Sep 2019 13:37:50 +0200
+
+samba (2:4.11.0+dfsg-4) experimental; urgency=medium
+
+ * Use the same arches for librados-dev than libcephfs-dev (Fix missing
+ build-depends on alpha and sh4)
+ * Split vfsmods:Recommends substvar into
+ {vfsceph,vfsglusterfs,vfssnapper}:Recommends to make the code more readable
+ and fix FTBFS on linux platforms without ceph (hppa and sparc64, and also
+ alpha and sh4)
+ * Add patch for "build: Remove tests for _readdir() and _readdir()", to
+ hopefully fix FTBFS on armel
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 29 Sep 2019 09:29:03 +0200
+
+samba (2:4.11.0+dfsg-3) experimental; urgency=medium
+
+ * Try to fix FTBFS on armel (armhf is fixed):
+ - Add patch for build: Remove tests for rdchk()
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 28 Sep 2019 22:17:04 +0200
+
+samba (2:4.11.0+dfsg-2) experimental; urgency=medium
+
+ * d/gitlabracadabra.yml: Add samba-team/libsmb2
+ * Try to fix FTBFS on armel and armhf:
+ - Add patch for build: Remove tests for _pwrite() and __pwrite()
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 28 Sep 2019 11:47:56 +0200
+
+samba (2:4.11.0+dfsg-1) experimental; urgency=medium
+
+ [ Mathieu Parent ]
+ * Upload to experimental
+ * New upstream major release
+ - Update d/gbp.conf, d/watch and d/README.source for 4.11
+ - Import upstream release
+ - Update fix-nfs-service-name-to-nfs-kernel-server.patch
+ - Bump build-depends talloc >= 2.2.0, tdb >= 1.4.2, tevent >= 0.10.0 and
+ ldb >= 2:2.0.7
+ - libsamba-passdb.so bumped to 0.28.0
+ - libnon-posix-acls is now a subsystem
+ - Drop libparse-pidl-perl package (Closes: #939419)
+ - Add new files to d/*.install
+ - Move libsamba-util.so.* to libwbclient0, to avoid circular dependencies
+ - Move libsamba-util deps to libwbclient0
+ * Add build-Remove-tests-for-getdents-and-getdirentries.patch, to fix FTBFS on
+ armel and armhf
+ * salsa-ci: Build on experimental
+
+ [ John Paul Adrian Glaubitz ]
+ * Disable cephfs support on architectures where it's not stable
+ (Closes: #940697)
+
+ [ Louis van Belle ]
+ * d/control, d/samba.install: added libtasn1-bin, libtasn1-6-dev to build
+ dumpmscat
+ * d/control, d/rules: Enable spotlight (TimeMachine)
+ * d/control: Bump libtdb-dev (>= 2) in samba-dev deps
+ * Update libwbclient0.symbols
+ * d/rules: adjust LDB_DEPENDS
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 26 Sep 2019 09:37:51 +0200
+
+samba (2:4.10.8+dfsg-1) unstable; urgency=medium
+
+ * Upload to unstable
+ * New upstream release:
+ - CVE-2019-10197: Combination of parameters and permissions can allow user
+ to escape from the share path definition
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 10 Sep 2019 18:46:54 +0200
+
+samba (2:4.10.7+dfsg-1) experimental; urgency=medium
+
+ [ Mathieu Parent ]
+ * New upstream release
+ - Update patches
+ - Drop nsswitch-Add-try_authtok-option-to-pam_winbind.patch, merged
+ - libsamba-passdb.so bumped to 0.27.2
+ - Update symbols
+ - Update installed files
+ * samba-libs: Fix Breaks+Replaces: libndr-standard0 (<< 2:4.0.9)
+ (Closes: #910242)
+ * Add missing Breaks+Replace found by piuparts (Closes: #929217)
+ * Enable vfs_nfs4acl_xattr (Closes: #930540)
+ * ctdb:
+ - enable ceph and etcd recovery lock
+ - Downgrade ctdb_mutex_ceph_rados_helper shlibdeps to recommends
+ * Add gitlabracadabra.yml
+ * Update salsa-ci.yml
+
+ [ Rafael David Tinoco ]
+ * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
+ (Closes: #931138)
+ * CTDB NFS fixes from Ubuntu (Closes: #929931, LP: #722201):
+ - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
+ name from nfs to nfs-kernel-server
+ - ctdb-config: depend on /etc/ctdb/nodes file
+ - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
+ allow pid file to exist
+ - added /var/lib/ctdb/* directories
+ - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
+ - Add examples of NFS HA CTDB config files + helper script
+
+ [ Mathieu Parent ]
+ * Update d/gbp.conf, d/watch and d/README.source for 4.10
+ * Drop ctdb-config-depend-on-etc-default-nodes-file.patch, merged upstream
+ * Bump build-depends talloc >= 2.1.16, tdb >= 1.3.18, tevent >= 0.9.39 and
+ ldb >= 2:1.5.5
+ * Bump libcmocka-dev builddep to 1.1.3
+ * d/rules: Remove 1.5.1+really prefix from LDB_DEPENDS
+ * d/copyright:
+ - s/GPL-3+/GPL-3.0+/ and s/LGPL-3+/LGPL-3.0+/
+ - Move License details to end of file
+ - Add waf licences
+ - Add lib/replace licences
+ - Update lib/{ldb,talloc,tdb} licences
+ * Move to Python3 (from Ubuntu)
+ * Bump debhelper from old 11 to 12.
+ * Standards-Version: 4.4.0
+ * Replace all reference of /var/run to /run (Closes: #934540)
+ * Replace python shbang by python3 in d/*.py
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 29 Aug 2019 14:32:52 +0200
+
+samba (2:4.9.5+dfsg-1) experimental; urgency=medium
+
+ * New upstream release
+ - Bump ldb Build-Depends to 2:1.5.1+really1.4.6
+ - Drop s3-auth-ignore-create_builtin_guests-failing-without.patch, merged
+ - Drop and python-gpg.patch, merged
+ * Add Recommends: samba-dsdb-modules for samba-common-bin (Closes: #862467)
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 20 Mar 2019 21:07:02 +0100
+
+samba (2:4.9.4+dfsg-4) unstable; urgency=medium
+
+ * samba-libs: Add Breaks+Replaces: libndr-standard0 (<< 4) (Closes: #910242)
+ * Improve AppArmor integration (Closes: #896080)
+ - Install update-apparmor-samba-profile 1.2 from Christian Boltz (openSUSE)
+ - Adapt update-apparmor-samba-profile: Rename apparmor profile snippet, and
+ test for it's directory
+ - smbd.init: Run update-apparmor-samba-profile before start
+ - smbd.service: Run update-apparmor-samba-profile before start
+ - Remove /etc/apparmor.d/samba/smbd-shares on purge
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 26 Feb 2019 22:18:19 +0100
+
+samba (2:4.9.4+dfsg-3) unstable; urgency=medium
+
+ [ Ivo De Decker ]
+ * Remove myself from uploaders
+
+ [ Mathieu Parent ]
+ * Update debian/gitlab-ci.yml
+ * Standards-Version: 4.3.0
+ * Add upstream patch for python-gpg support
+ * Replace Suggests: python-gpgme by Recommends: python-gpg (Closes: #876984)
+
+ -- Mathieu Parent <sathieu@debian.org> Fri, 15 Feb 2019 11:14:10 +0100
+
+samba (2:4.9.4+dfsg-2) unstable; urgency=medium
+
+ * Append +really0.02 to libparse-pidl-perl version (Closes: #918564)
+ * Add apport hook (From Ubuntu)
+ * Change build dependency to libglusterfs-dev (Closes: #919667)
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 23 Jan 2019 20:59:08 +0100
+
+samba (2:4.9.4+dfsg-1) unstable; urgency=medium
+
+ * New upstream release
+ - Remove patches for previous security fixes, merged
+ - Remove unused lintian overrides (library-not-linked-against-libc)
+ * ignore create_builtin_guests() failing without a valid idmap configuration
+ (Closes: #909465, #899269)
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 22 Dec 2018 18:32:00 +0100
+
+samba (2:4.9.2+dfsg-2) unstable; urgency=high
+
+ * New upstream security release
+ - CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD
+ Internal DNS server
+ - CVE-2018-16841 Double-free in Samba AD DC KDC with PKINIT
+ - CVE-2018-16851 NULL pointer de-reference in Samba AD DC LDAP server
+ - CVE-2018-16852 NULL pointer de-reference in Samba AD DC DNS servers
+ - because of CVE-2018-16853 (Samba AD DC S4U2Self Crash in experimental
+ MIT Kerberos configuration (unsupported)), mark the MIT Kerberos build of
+ the Samba AD DC as experimental (not used in Debian package)
+ - CVE-2018-16857 Bad password count in AD DC not always effective
+ * Prepend 1.5.1+really to ldb version
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 24 Nov 2018 23:21:27 +0100
+
+samba (2:4.9.2+dfsg-1) unstable; urgency=medium
+
+ * New upstream release
+ - Bump build-dependencies to ldb 1.4.2
+ - Update debian/samba-libs.install
+ * d/gitlab-ci.yml:
+ - Update to use include
+ - allow_failure for reprotest until #912340 is fixed
+ * d/rules: Replace override_dh_perl by override_dh_perl-arch (Closes: #913143)
+ * debian/gitlab-ci.yml:
+ - Samba sometimes needs ldb from experimental
+ - Use ldb from experimental in piuparts
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 17 Nov 2018 17:25:10 +0100
+
+samba (2:4.9.1+dfsg-2) unstable; urgency=medium
+
+ [ Mathieu Parent ]
+ * Enable --accel-aes=intelaesni on DEB_HOST_ARCH_CPU=amd64 instead of
+ DEB_HOST_ARCH=amd64. This matches samba-libs.install and adds x32
+ * Allow one to change password via passwd in default config
+ - third_party: Update pam_wrapper to version 1.0.7
+ - third_party: Add pam_set_items.so from pam_wrapper
+ - nsswitch: Add try_authtok option to pam_winbind
+ - tests: Check pam_winbind pw change with different options
+ - Patch for previous 4 commits
+ - debian/winbind.pam-config: Use the new try_authtok option allowing
+ password change while preserving current behavior with password strength
+ modules (Closes: #858923, LP: #570944)
+ * README.source: use gbp pull --track-missing
+ * Override library-not-linked-against-libc false positives (See #896012)
+ * Fix wrong-path-for-interpreter for pidl and findsmb
+ * ctdb.postrm: Fix to disable_legacy (found by piuparts) (Closes: #911530)
+
+ [ James Clarke ]
+ * Fix systemd-related build failures on non-Linux
+
+ [ Mathieu Parent ]
+ * Add Gitlab CI:
+ - Subscribe to salsa-ci-team/pipeline (See salsa-ci-team/pipeline!27 and
+ samba-team/samba!10)
+ - Copy /etc/apt/{sources.list.d,preferences.d} in the dockerbuilder
+ container (salsa-ci-team/images!9)
+ - Allow daemons to start during autopkgtest (salsa-ci-team/images!10)
+ - debian/gitlab-ci.yml: all jobs: Use ldb from experimental
+ - debian/gitlab-ci.yml: piuparts job: Add --scriptsdir, --allow-database
+ and --warn-on-leftovers-after-purge options
+ - debian/gitlab-ci.yml: piuparts job: Copy apt config to allow enabling
+ extra repositories
+ - debian/gitlab-ci.yml: piuparts job: Use image with the following changes:
+ + Add pre_install_copy_configs and post_install_remove_configs to copy,
+ resp. remove config files from /etc-target to /etc
+ + patch pre_remove_50_find_bad_permissions to workaround findutils bug
+ #912180. Also proposed another workaround in piuparts as bug #911334
+ which is merged but not yet released
+ * Upload to unstable
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 01 Nov 2018 21:13:37 +0100
+
+samba (2:4.9.1+dfsg-1) experimental; urgency=medium
+
+ * New upstream release
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 24 Sep 2018 13:33:21 +0200
+
+samba (2:4.9.0+dfsg-1) experimental; urgency=medium
+
+ * Upload to experimental
+ * New upstream release
+ - Update d/gbp.conf, d/watch and d/README.source for 4.9
+ - Remove Fix-pidl-manpage-sections.patch, Fix-spelling.patch and
+ Improve-vfs_linux_xfs_sgid-manpage.patch, merged upstream
+ - Bump build-depends talloc >= 2.1.14, tdb >= 1.3.16, tevent >= 0.9.37 and
+ ldb >= 2:1.4.2'
+ - Update paths
+ - Update libsmbclient.symbols
+ - ctdb.lintian-override: Remove script-not-executable override
+ - Add ctdb.NEWS: "Configuration has been completely overhauled"
+ - ctdb: Enable/disable legacy script in postinst/presinst
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 22 Sep 2018 23:04:11 +0200
+
+samba (2:4.8.5+dfsg-1) unstable; urgency=medium
+
+ * New upstream release
+ - Bump ldb Build-depends to 2:1.4.0+really1.3.6
+ - Fixes FTBFS on kFreeBSD (Closes: #883972)
+ - d/rules: winbind_krb5_locator is now in the correct path
+ - winbind_krb5_locator manpage has moved from section 7 to 8
+ * Standards-Version: 4.2.1
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 30 Aug 2018 19:32:24 +0200
+
+samba (2:4.8.4+dfsg-2) unstable; urgency=high
+
+ * Fix typo in previous release: s/usefull/useful/
+ * Prepend 1.4.0+really to ldb version to allow samba-dsdb-modules install
+ (Closes: #906562, #906568)
+ * Urgency still set to high
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 19 Aug 2018 10:08:22 +0200
+
+samba (2:4.8.4+dfsg-1) unstable; urgency=high
+
+ [ Andreas Hasenack ]
+ * d/samba.logrotate: only try to reload the services if they are running
+ (Closes: #902149)
+ * Remove the deprecated "syslog" and "syslog only" options (Closes: #901138)
+
+ [ Mathieu Parent ]
+ * New upstream security release
+ - CVE-2018-1139 Weak authentication protocol allowed
+ - CVE-2018-1140 Denial of Service Attack on DNS and LDAP server
+ - CVE-2018-10858 Insufficient input validation on client directory listing
+ in libsmbclient
+ - CVE-2018-10918 Denial of Service Attack on AD DC DRSUAPI server
+ - CVE-2018-10919 Confidential attribute disclosure from the AD LDAP server
+ - Urgency set to high
+ - Bump build-depends ldb >= 1.3.5 (actually 2:1.4.0+really1.3.5) for
+ CVE-2018-1140
+ * smb.conf: Remove "wins support" and "wins server" comments
+ * smb.conf: Improve "logging" comments
+ * smb.conf: Remove "dns proxy = no", only useful as a WINS server
+ * smb.conf: Propose better idmap config
+ * smb.conf: Remove "passdb backend = tdbsam" as this is the default
+ * smb.conf: Fix "usershare max shares" default (patched to 100 instead of 0)
+ * Standards-Version: 4.2.0
+ * Set Rules-Requires-Root: binary-targets as chmod is used
+ * Remove override_dh_strip target as dbgsym migration is complete
+
+ -- Mathieu Parent <sathieu@debian.org> Fri, 17 Aug 2018 16:30:18 +0200
+
+samba (2:4.8.2+dfsg-2) unstable; urgency=medium
+
+ * Update panic-action script message, samba-dbg renamed to samba-dbgsym
+ (Closes: #900242)
+ * Ensure /var/lib/samba/dhcp.conf exists (Closes: #901585)
+ * Check smb.conf with testparm, and also with samba-tool when
+ server role = active directory domain controller (Closes: #900908)
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 18 Jun 2018 23:39:41 +0200
+
+samba (2:4.8.2+dfsg-1) unstable; urgency=medium
+
+ * New upstream release
+ - Bump build-depends ldb >= 1.3.3
+ * Fix lintian warnings with patches recently merged upstream:
+ - Add Fix-pidl-manpage-sections.patch
+ - Add Fix-spelling.patch
+ - Add Improve-vfs_linux_xfs_sgid-manpage.patch
+ * Wrap very long lines in d/rules
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 17 May 2018 09:58:09 +0200
+
+samba (2:4.8.1+dfsg-2) unstable; urgency=low
+
+ * Upload to unstable
+ * Really ignore nmbd start errors when there is no non-loopback interface
+ (Closes: #893762)
+ * Ignore nmbd start errors when there is no local IPv4 non-loopback interface
+ (Closes: #859526)
+ * Fix possible-unindented-list-in-extended-description in samba-vfs-modules
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 15 May 2018 21:23:32 +0200
+
+samba (2:4.8.1+dfsg-1) experimental; urgency=medium
+
+ * New upstream release
+ * Add lintian override for "smbclient: executable-is-not-world-readable
+ usr/lib/x86_64-linux-gnu/samba/smbspool_krb5_wrapper 0700" (See #894720)
+ * Improve samba-vfs-modules description (Closes: #776505)
+ * Check smb.conf in samba-common-bin.postinst (Closes: #816301)
+ * Mark libparse-pidl-perl, samba-dev, samba-dsdb-modules and samba-vfs-modules
+ as"Multi-Arch: same"
+ * Standards-Version: 4.1.4, no change
+ * debian/smb.conf: Fix typo in comment line: sever -> server (Closes: #763648)
+ * Read smb.conf until [print$] section instead of [cdrom] to preserve
+ locally-defined shares (Closes: #776259)
+ * Fix and improve dhcp integration:
+ - dhclient3 was renamed to dhclient long time ago...
+ - Remove /etc/samba/dhcp.conf on purge (Closes: #784713)
+ - Move dhcp.conf out of /etc to allow ro root (Closes: #695362)
+ - Update template for "Move dhcp.conf out of /etc to allow ro root"
+ * Enable --accel-aes=intelaesni on DEB_HOST_GNU_CPU=x86_64 (Closes: #896196)
+ - Use dh-exec to install libaesni-intel.so.0 only on amd64
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 29 Apr 2018 12:54:06 +0200
+
+samba (2:4.8.0+dfsg-2) experimental; urgency=medium
+
+ * Remove unused and outdated debian/README.debian (debian/README.Debian is
+ used instead)
+ * Mask services as appropriate in samba and winbind postinst (Closes: #863285)
+ - mask samba-ad-dc unless server role = active directory domain controller
+ (as before)
+ - mask smbd and nmbd when server role = active directory domain controller
+ - mask nmbd when disable netbios = yes (Closes: #866125)
+ * Set smbspool_krb5_wrapper permissions to 0700 (Closes: #894720, #372270)
+ * Remove Depends: samba-libs of lib{nss,pam}-winbind
+ * Mark winbind "Multi-Arch: allowed" and make lib{pam,nss}-winbind depends on
+ winbind:any to allow co-installation (Closes: #881100)
+ * Ignore nmbd start errors when there is no non-loopback interface
+ (Closes: #893762)
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 08 Apr 2018 22:09:53 +0200
+
+samba (2:4.8.0+dfsg-1) experimental; urgency=medium
+
+ [ Mathieu Parent ]
+ * New major upstream version
+ - Update d/gbp.conf and d/watch for 4.8
+ - Update upstream source from tag 'upstream/4.8.0+dfsg'
+ - Re-apply patches
+ - Remove patches merged upstream:
+ + no_build_system.patch
+ + systemd-syslog.target-is-obsolete.patch
+ + Add-documentation-to-systemd-Unit-files.patch
+ + fix_kill_path_in_units.patch
+ + nmbd-requires-a-working-network.patch
+ + CVE-2018-1050-11343-4.7.patch
+ + CVE-2018-1057-v4-7.metze01.patches.txt
+ - Bump build-depends talloc >= 2.1.11~, tdb >= 1.3.15~, tevent >= 0.9.36~
+ and ldb >= 2:1.3.2~
+ - Drop Build-Conflicts-Arch: libaio-dev, vfs_aio_linux was dropped
+ - Update debian/*.install and use debian/not-installed
+ - Update debian/libsmbclient.symbols
+ - Upload to experimental
+ * debian/README.source
+ - Update instructions
+ - Convert to Markdown
+ - Add a symlink from README.source to README.source.md
+ * debian/rules:
+ - Use the new --systemd-install-services
+ - Use dh_missing --fail-missing
+ - Re-order debian/rules overrides in the order they are called
+ - Remove broken get-packaged-orig-source target
+ - Remove unused DEB_BUILD_OPT_FOO variables
+ - Add some comments
+ - Move all the custom installs from override_dh_install to
+ override_dh_auto_install
+ - Remove --sourcedir override to dh_install "since dh_install automatically
+ looks for files in debian/tmp in debhelper compatibility level 7 and
+ above"
+ - PIDFile= is now correctly set in *.service
+
+ [ Louis van Belle ]
+ * Update d/control, Relax Build-Depends to allow backport
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 19 Mar 2018 13:02:51 +0100
+
+samba (2:4.7.4+dfsg-2) unstable; urgency=high
+
+ [ Mathieu Parent ]
+ * This is a security release in order to address the following defects:
+ - CVE-2018-1050: Codenomicon crashes in spoolss server code
+ - CVE-2018-1057: Unprivileged user can change any user (and admin) password
+ * Fix "/etc/dhcp/dhclient-enter-hooks.d/samba returned non-zero exit status 1"
+ when samba.service is disabled
+ - Pick patch from Ubuntu for Launchpad #1579597
+ - Fix systemd check
+ * Replace override_dh_systemd_start by override_dh_installsystemd (Fixes
+ ctdb starting on install and restarting on upgrade since update to debhelper
+ compat 11)
+ * Replace --no-restart-on-upgrade by --no-stop-on-upgrade in dh_installinit
+ and dh_installsystemd
+ * Add missing dh_installsystemd calls to ensure that services are properly
+ unmasked and enabled in postinst
+
+ [ Andreas Hasenack ]
+ * Add extra DEP8 tests to samba (Closes: #890439):
+ - d/t/control, d/t/cifs-share-access: access a file in a share using cifs
+ - d/t/control, d/t/smbclient-anonymous-share-list: list available shares
+ anonymously
+ - d/t/control, d/t/smbclient-authenticated-share-list: list available
+ shares using an authenticated connection
+ - d/t/control, d/t/smbclient-share-access: create a share and download a
+ file from it
+
+ -- Mathieu Parent <sathieu@debian.org> Fri, 02 Mar 2018 20:55:06 +0100
+
+samba (2:4.7.4+dfsg-1) unstable; urgency=medium
+
+ * New upstream version
+ - Updates patches
+ - Bump ldb build-deps to 1.2.3
+ * Repository moved to salsa: Update Vcs-* fields
+ * d/README.source:
+ - ensure required branches exists
+ - sync all required branches
+ * Standards-Version: 4.1.3 (no change)
+ * Move to debhelper compat 11
+ * Move libpam-winbind: to section admin
+ * Move libnss-winbind: to section admin
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 11 Jan 2018 20:49:28 +0100
+
+samba (2:4.7.3+dfsg-1) unstable; urgency=high
+
+ * New upstream version
+ - Remove patches for CVE-2017-15275 and CVE-2017-14746, merged
+ - Bump libtevent-dev to 0.9.34, to fix upstream "BUG 13130: smbd on disk
+ file corruption bug under heavy threaded load"
+ - Set urgency to high for this fix
+ * Stop building vfs_aio_linux (Closes: #881239)
+ * Print "ignore the following error about deb-systemd-helper not finding
+ samba-ad-dc.service" on upgrade too (Closes: #882482).
+ Thanks Julian Gilbey for the patch
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 23 Nov 2017 16:39:19 +0100
+
+samba (2:4.7.1+dfsg-2) unstable; urgency=high
+
+ * This is a security release in order to address the following defects:
+ - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when
+ talloc buffer is grown.
+ - CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug.
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 12 Nov 2017 10:02:19 +0100
+
+samba (2:4.7.1+dfsg-1) unstable; urgency=medium
+
+ * New upstream version
+ * Add lintian-override about heimdal embedded-library
+ * Remove trailing spaces in debian/changelog
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 08 Nov 2017 07:48:31 +0100
+
+samba (2:4.7.0+dfsg-2) unstable; urgency=medium
+
+ * Upload to sid
+ * Bump libcmocka-dev builddep to 1.1.1 (Closes: #878357)
+ * Remove Skip-raw.write-tests.patch as we don't run tests
+ * Remove 05_share_ldb_module, not understood
+ - d/rules: /usr/lib/*/samba/share/ldb.so is not present anymore
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 26 Oct 2017 17:30:02 +0200
+
+samba (2:4.7.0+dfsg-1) experimental; urgency=medium
+
+ * New major upstream version
+ - Update d/gbp.conf and d/watch for 4.7
+ - Update patches
+ - Remove no_build_env.patch, no more needed
+ - Remove 4 patches merged upstream
+ - Bump build-depends ldb >= 2:1.2.2~, tdb >= 1.3.14~, tevent >= 0.9.33~
+ - Move replace from builtin to bundled libraries to fix FTBFS
+ - Update d/*.install
+ - Update symbols
+ * Rework all patches for dep5 and "gbp pq"
+ * Add libjansson-dev to Build-Depends to allow logging in JSON format
+ * Lintian fixes:
+ - build-depends: dh-systemd (>= 1.5) => use debhelper (>= 9.20160709)
+ - Move libsmbclient-dev from priority extra to optional
+ - Standards-Version: 4.1.1
+ - Update samba-libs.lintian-overrides (following libsmbldap bump)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 12 Oct 2017 22:09:19 +0200
+
+samba (2:4.6.7+dfsg-2) unstable; urgency=high
+
+ * This is a security release in order to address the following defects:
+ - CVE-2017-12150: Some code path don't enforce smb signing, when they should
+ - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects
+ - CVE-2017-12163: Server memory information leak over SMB1
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 19 Sep 2017 22:00:13 +0200
+
+samba (2:4.6.7+dfsg-1) unstable; urgency=medium
+
+ * New upstream version
+ - Removed CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch,
+ merged
+ - Remove s3-gse_krb5-fix-a-possible-crash-in-fill_mem_keytab.patch, merged
+ * README.source: Default merge-mode of gbp has changed to replace
+ * Fix samba.logrotate (Thanks Thomas A. Reim)
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 15 Aug 2017 23:06:36 +0200
+
+samba (2:4.6.5+dfsg-8) unstable; urgency=medium
+
+ * Remove dependency on update-inetd, not used anymore
+ * vfs_ceph and vfs_glusterfs are linux only (d/rules part)
+ * Remove build-dependency on faketime, not used anymore
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 23 Jul 2017 19:56:07 +0200
+
+samba (2:4.6.5+dfsg-7) unstable; urgency=medium
+
+ * xfslibs-dev is only available on linux
+ * Fix logrotate for /var/log/samba/log.samba to send SIGHUP to all processes
+ of the service (systemd only)
+ * Add reportbug script for samba-common, samba and winbind (Closes: #682861)
+
+ -- Mathieu Parent <sathieu@debian.org> Fri, 21 Jul 2017 06:19:57 +0200
+
+samba (2:4.6.5+dfsg-6) unstable; urgency=medium
+
+ * libcephfs-dev is only available on linux
+ * Fix libpam-winbind.prerm to be multiarch-safe (Closes: #647430)
+ * Add missing logrotate for /var/log/samba/log.samba (Closes: #803924)
+ * Use smbcontrol in logrotate when available (Closes: #804705)
+ * From upstream: Fix outdated DNS Root servers (Closes: #865406)
+ * Drop xsltproc_dont_build_smb.conf.5.patch, as #750593 is marked fixed
+ (Closes: #776223)
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 19 Jul 2017 22:53:50 +0200
+
+samba (2:4.6.5+dfsg-5) unstable; urgency=medium
+
+ * Remove bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch,
+ unused
+ * Remove samba-ad-dc.templates
+ * Remove upstart files on upgrade (Closes: #867688)
+ * glusterfs-common is only available on linux
+ * Remove the samba service
+ * Ensure /var/log/samba permissions are set (Closes: #711138)
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 18 Jul 2017 23:29:44 +0200
+
+samba (2:4.6.5+dfsg-4) unstable; urgency=high
+
+ * This is a security release in order to address the following defects:
+ - CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation
+ (Closes: #868209)
+ * Other fixes:
+ - Remove empty samba-common.maintscript (leading to empty preinst and
+ prerm)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 13 Jul 2017 14:38:32 +0200
+
+samba (2:4.6.5+dfsg-3) unstable; urgency=medium
+
+ * Remove upstart code
+ * Remove empty prerm for samba and samba-common-bin (Closes: #866258,
+ #866284)
+ * sysv: Use --pidfile in addition to --exec to avoid matching daemons in
+ containers (Closes: #810794)
+ * Standards-Version: 4.0.0
+ - Use https form of the copyright-format URL (Debian Policy 4.0.0)
+ * Remove debian/bzr-builddeb.conf
+ * Remove empty debian/diversions
+ * Remove "ugly workaround to get the manpages on every architecture to be
+ identical", xsltproc now honour SOURCE_DATE_EPOCH
+ * Remove dh-exec shbang in libnss-winbind.install
+ * Remove empty debian/libsmbclient.manpages
+ * Remove pre-jessie maintscript snipsets
+ * Move to debhelper compat 10 (Major change: dh_installinit command now
+ defaults to --restart-after-upgrade)
+ * Remove unused samba-ad-dc package metadata (Closes: #866138)
+ * Fix "Non-kerberos logins fails on winbind 4.X when krb5_auth is configured
+ in PAM" (Closes: #739768)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 29 Jun 2017 09:45:59 +0200
+
+samba (2:4.6.5+dfsg-2) unstable; urgency=medium
+
+ * Upload to unstable
+ * Move runtime dependencies of vfs_ceph and vfs_snapper to Recommends
+ * Fix typo s/DESTIDR/DESTDIR/ in d/rules
+ * Enable vfs_glusterfs (Closes: #864862)
+ * Add libdbus-1-dev as Build-Depends to allow vfs_snapper to build (Closes:
+ #804781). Patch by Willy Vanlid.
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 19 Jun 2017 23:56:56 +0200
+
+samba (2:4.6.5+dfsg-1) experimental; urgency=medium
+
+ * New upstream version (Closes: #859390)
+ - d/gbp.conf, d/watch: Change major version to 4.6
+ - Bump Build-dependencies of talloc, tdb, tevent and ldb to resp. 2.1.9,
+ 1.3.12, O.9.31 and 1.1.29
+ - Remove CVE-2017-7494.patch: applied upstream
+ - Add Build-Depends: libcmocka-dev (>= 1.0)
+ - Update d/*.install
+ - d/samba-common.docs: Roadmap removed upstream
+ * Update README.source, about importing major versions
+ * d/control cleanup:
+ - Remove Conflicts and Replaces on pre-wheezy samba4 packages
+ - Remove Conflicts, Breaks and Replaces on pre-wheezy samba packages
+ - Remove Conflicts, Breaks and Replaces on pre-jessie samba packages
+ - Remove Conflicts, Breaks and Replaces on (pre-jessie) samba4 packages
+ - Remove Conflicts on pre-jessie libldb1 package
+ - Remove Breaks on pre-jessie qtsmbstatus-server package
+ - Remove Replaces on pre-wheezy smbget package
+ - wrap-and-sort
+ * Add libcephfs-dev as b-d to build vfs_ceph (Closes: #856998). Patch from
+ Ubuntu
+ * Enable avahi support (Closes: #859875). Patch from Laurent Bigonville.
+ * Translations:
+ - Portuguese translation for debconf messages (Closes: #864172). Patch from
+ Rui Branco
+ - Hungarian translation for debconf messages (Closes: #708277)
+ * Properly quote subshell invocation in samba-common.preinst (Closes: #771689)
+ * Add Build-Depends: xfslibs-dev, for XFS quotas
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 12 Jun 2017 08:09:43 +0200
+
+samba (2:4.5.8+dfsg-2) unstable; urgency=high
+
+ * CVE-2017-7494: rpc_server3: Refuse to open pipe names with / inside
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 18 May 2017 11:53:47 +0200
+
+samba (2:4.5.8+dfsg-1) unstable; urgency=high
+
+ * New upstream version
+ - Drop CVE-2017-2619.patch: merged upstream
+ - Fix CVE-2017-2619 regression with "follow symlink = no" (Closes: #858564)
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 01 Apr 2017 20:39:17 +0200
+
+samba (2:4.5.6+dfsg-2) unstable; urgency=high
+
+ * This is a security release in order to address the following defects:
+ - CVE-2017-2619: symlink race permits opening files outside share directory
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 22 Mar 2017 08:03:34 +0100
+
+samba (2:4.5.6+dfsg-1) unstable; urgency=medium
+
+ * New upstream version
+ * Fix typo in smbd.service and winbind.service (s/nmb.service/nmbd.service)
+ (Closes: #857232)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 09 Mar 2017 15:42:37 +0100
+
+samba (2:4.5.5+dfsg-1) unstable; urgency=medium
+
+ * New upstream version
+ - Revert rewrite of the vfs_fruit module (Closes: #856561)
+ * Fix 'winbindd privileged socket directory' (Closes: #754339):
+ - Fix path from /var/run/samba/winbindd_privileged/ to
+ /var/lib/samba/winbindd_privileged/.
+ - Move mkdir+chgrp+chmod to postinst (to handle systemd also).
+ - Thanks to Jim Barber for the report.
+ * logrotate: Use delaycompress on all logs (Closes: #702201)
+ - Thanks to Matthew Gabeler-Lee for the proposed fix.
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 05 Mar 2017 23:21:09 +0100
+
+samba (2:4.5.4+dfsg-1) unstable; urgency=medium
+
+ [ Mathieu Parent ]
+ * New upstream version
+ - Drop security-2016-12-19.patch, was 4.5.3
+ * missing-build-dependency-for-dh_-command dh_python2 => dh-python
+
+ [ Vincent Blut ]
+ * d/control: Suggest chrony as an alternative to ntp (Closes: #851727)
+
+ [ Daniel A ]
+ * add gpgme support (Closes: #850908)
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 25 Jan 2017 21:25:40 +0100
+
+samba (2:4.5.2+dfsg-2) unstable; urgency=high
+
+ * This is a security release in order to address the following defects:
+ - CVE-2016-2123 (Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer
+ Overflow Remote Code Execution Vulnerability).
+ - CVE-2016-2125 (Unconditional privilege delegation to Kerberos servers in
+ trusted realms).
+ - CVE-2016-2126 (Flaws in Kerberos PAC validation can trigger privilege
+ elevation).
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 17 Dec 2016 22:54:35 +0100
+
+samba (2:4.5.2+dfsg-1) unstable; urgency=medium
+
+ * New upstream version
+ - Remove CTDB-Fix-samba-eventscript.patch: merged
+ - d/rules: /usr/share/ctdb-tests is now /usr/share/ctdb/tests
+ * Update gbp.conf with debian-branch = master
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 08 Dec 2016 20:21:52 +0100
+
+samba (2:4.5.1+dfsg-2) unstable; urgency=medium
+
+ * Upload to unstable
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 05 Dec 2016 07:01:35 +0100
+
+samba (2:4.5.1+dfsg-1) experimental; urgency=medium
+
+ * New upstream version
+ - Refresh patches
+ - Remove bug_12283_segfault_tevent_internals.patch
+ - Remove gencache-Bail-out-of-stabilize-if-we-can-not-get-the.patch
+ - Adding libdsdb-garbage-collect-tombstones.so.0 to samba-libs.install
+ * CTDB: Fix samba eventscript
+ * nmbd requires a working network (Closes: #698056, #842056, #840608,
+ LP: #1635491)
+ * Be more verbose about masking samba-ad-dc.service (Closes: #841147)
+ * Remove Fix_parallel_build.patch, not working
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 01 Nov 2016 13:54:29 +0100
+
+samba (2:4.5.0+dfsg-1) experimental; urgency=medium
+
+ * Upload to experimental
+ * New upstream version
+ + Remove patches:
+ - bug_601406_fix-perl-path-in-example.patch, similar applied
+ - waf_smbpasswd_location, applied
+ - Fix-privacy-breach-on-google.com.patch, doc moved out of source
+ - ctdb-Fix-detection-of-gnukfreebsd.patch, applied
+ - gcc_6.patch, applied
+ + Dumped dependencies
+ - libldb-dev (>= 2:1.1.27~)
+ - libtalloc-dev (>= 2.1.8~)
+ - libtdb-dev (>= 1.3.10~)
+ - libtevent-dev (>= 0.9.29~)
+ - python-talloc-dev (>= 2.1.8~)
+ + Install new files and update debian/ctdb.docs
+ + Update to libwbclient0.symbols
+ + Update samba-libs.lintian-overrides (libtevent-unix-util0 removed)
+ + /etc/default/ctdb is now /etc/ctdb/ctdbd.conf
+ * Add patch for https://bugzilla.samba.org/show_bug.cgi?id=12045
+ * ctdb/wscript: Call CHECK_XSLTPROC_MANPAGES() before checking
+ XSLTPROC_MANPAGES. This should fix parallel builds, including
+ tests.reproducible-builds.org. Thanks HW42 on IRC
+ * Depends: lsb-base (>= 3.0-6), for ctdb and winbind as they source
+ /lib/lsb/init-functions
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 23 Oct 2016 15:56:59 +0200
+
+samba (2:4.4.6+dfsg-2) unstable; urgency=high
+
+ * Remove uses of tevent internals. This fixes segfault.
+ Closes: #840382, #840298.
+
+ -- Mathieu Parent <sathieu@debian.org> Wed, 12 Oct 2016 05:53:33 +0200
+
+samba (2:4.4.6+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Use epoch in samba-vfs-modules Breaks and Replaces (Closes: #833164)
+ * Only fix PIDFile in {nmbd,samba-ad-dc,smbd,winbind}.service (i.e. not
+ ctdb.service) Closes: #838000.
+ * logrotate: Only reload smbd when needed. Thanks Roland Hieber.
+ Closes: #838796.
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 10 Oct 2016 22:23:45 +0200
+
+samba (2:4.4.5+dfsg-3) unstable; urgency=medium
+
+ [ Jelmer Vernooij ]
+ * Add strict dependencies on samba-libs, because of use of private
+ libraries without stable ABI across Samba binary packages.
+ * Add Breaks clauses for older versions of samba-libs and samba to
+ samba-vfs-modules, as some files have moved. Closes: #833164,
+ #832880
+
+ [ Mathieu Parent ]
+ * Remove /etc/systemd/system/samba-ad-dc.service (from postinst) on purge.
+ Closes: #832352
+ * Fix PIDFile in systemd service files. Closes: #830909
+ * Remove unused lintian overrides
+ * Use automatic debug packages (-dbgsym) (Closes: #819776)
+ * Remove Christian Perrier from uploaders (Closes: #836715). Thanks for all
+ you work, and thanks for bringing me in the team and as a DD.
+ * Update Turkish translation. Thanks Atila KOÇ. Closes: #791903
+ * Drop dependency on samba-libs in libwbclient0 to avoid
+ circular dependency.
+
+ -- Mathieu Parent <sathieu@debian.org> Fri, 09 Sep 2016 13:00:54 +0200
+
+samba (2:4.4.5+dfsg-2) unstable; urgency=medium
+
+ * Disable running of 'make quicktest' during build, as it takes very
+ long to run on x32 and enables building non-production NTVFS server.
+ Closes: #830571
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 09 Jul 2016 19:09:19 +0000
+
+samba (2:4.4.5+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ + Fixes CVE-2016-2119: Client side SMB2/3 required signing can be
+ downgraded. Closes: #830195
+
+ -- Jelmer Vernooij <jelmer@debian.org> Thu, 07 Jul 2016 10:51:40 +0000
+
+samba (2:4.4.4+dfsg-3) unstable; urgency=medium
+
+ * Add patch gcc_6.patch, fixing compatibility with gcc 6.
+ Closes: #812264
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 04 Jul 2016 12:20:56 +0000
+
+samba (2:4.4.4+dfsg-2) unstable; urgency=medium
+
+ * Mask samba-ad-dc.service unless needed (Closes: #828137)
+ * Fix kill path in systemd units (Closes: #828730)
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 27 Jun 2016 21:37:58 +0200
+
+samba (2:4.4.4+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ * The "Thanks lintian" release
+ * Fixes:
+ - Ensure that dpkg-buildflags are passed, and enable all hardening
+ - systemd
+ + Enable systemd (sd_notify) on Linux, and install systemd files
+ + Remove obsolete syslog.target from service files
+ + Add documentation field to unit files
+ - Drop fix-cluster-build.diff: no more needed
+ - Use secure Vcs-* URLs
+ - Fix copyright file
+ - samba.postinst: command-with-path-in-maintainer-script update-inetd
+ - samba-common-bin: package-contains-empty-directory usr/lib/samba/
+ - winbind: package-contains-empty-directory usr/lib/samba/nss_info/
+ - Add Description to init files
+ * No-op fixes:
+ - d/control: Drop XS-Testsuite field
+ - Drop redundant "Priority: optional" fields
+ - Drop redundant "Section: net" fields
+ - Describe non-standard-dir-perm var/spool/samba/
+ - Describe no_build_system.patch
+ - Remove README.build-upstream, as packaging/Debian/ is now empty
+ - Verify upstream tarball from uscan
+ - Update README.source and remove build-orig.sh
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 13 Jun 2016 21:52:52 +0200
+
+samba (2:4.4.3+dfsg-4) unstable; urgency=medium
+
+ * Fix build with DEB_BUILD_OPTIONS=nocheck
+ * Still run "make quicktest" but ignore failures
+
+ -- Mathieu Parent <sathieu@debian.org> Sat, 07 May 2016 13:18:53 +0200
+
+samba (2:4.4.3+dfsg-3) unstable; urgency=medium
+
+ * Skip raw.write tests for now as they fail on 32-bit
+
+ -- Mathieu Parent <sathieu@debian.org> Fri, 06 May 2016 15:34:07 +0200
+
+samba (2:4.4.3+dfsg-2) unstable; urgency=medium
+
+ * Run quicktest during build
+ * Reproducibility:
+ - Drop no_build_options.patch as it breaks "make test"
+ - Remove unreproducible build environment instead
+ * Mention that patch waf_smbpasswd_location was submitted
+ * usershare.patch: Fix "usershare max shares" default in XML doc and in s4
+
+ -- Mathieu Parent <sathieu@debian.org> Tue, 03 May 2016 12:30:56 +0200
+
+samba (2:4.4.3+dfsg-1) unstable; urgency=medium
+
+ * Cleanup ctdb READMEs during 'clean' step.
+ * New upstream release.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 02 May 2016 14:12:46 +0000
+
+samba (2:4.4.2+dfsg-2) unstable; urgency=medium
+
+ * Merge in 4.3 package changes.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 27 Apr 2016 01:29:47 +0000
+
+samba (2:4.4.2+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Bump standards version to 3.9.8 (no changes).
+ * Drop build dependency on perl-modules; depend on perl instead.
+ * Upload to unstable.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 26 Apr 2016 23:29:54 +0000
+
+samba (2:4.4.1+dfsg-1) experimental; urgency=medium
+
+ * New upstream release
+ + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
+ - CVE-2015-5370 (Multiple errors in DCE-RPC code)
+ - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
+ - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
+ - CVE-2016-2112 (LDAP client and server don't enforce integrity)
+ - CVE-2016-2113 (Missing TLS certificate validation)
+ - CVE-2016-2114 ("server signing = mandatory" not enforced)
+ - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
+ - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
+ * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze
+
+ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz> Mon, 11 Apr 2016 16:09:59 +1200
+
+samba (2:4.4.0+dfsg-1) experimental; urgency=medium
+ [ Andrew Bartlett ]
+ * New upstream release.
+
+ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz> Wed, 06 Apr 2016 17:08:20 +1200
+
+samba (2:4.3.8+dfsg-1) unstable; urgency=low
+
+ [ Jelmer Vernooij ]
+ * Add patch no_build_system.patch: drop host-specific define that
+ prevents reproducible builds.
+ * New upstream release.
+ + Drop patch
+ security-2016-04-12-prerequisite-v4-3-regression-fixes.metze01.txt,
+ now included upstream.
+ * Bump version in Replaces: samba-libs for samba-vfs-modules to
+ 4.3.2+dfsg-1, to fix jessie->stretch upgrades. Closes: #821070
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 16 Apr 2016 01:18:36 +0000
+
+samba (2:4.3.7+dfsg-1) unstable; urgency=high
+
+ * New upstream release.
+ + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
+ - CVE-2015-5370 (Multiple errors in DCE-RPC code)
+ - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
+ - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
+ - CVE-2016-2112 (LDAP client and server don't enforce integrity)
+ - CVE-2016-2113 (Missing TLS certificate validation)
+ - CVE-2016-2114 ("server signing = mandatory" not enforced)
+ - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
+ - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
+ * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze
+
+ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz> Wed, 13 Apr 2016 10:24:17 +1200
+
+samba (2:4.3.6+dfsg-2) unstable; urgency=low
+ [ Mathieu Parent ]
+ * Fix FTBFS when built with dpkg-buildpackage -A (Closes: #818146). Patch by
+ Santiago Vila
+ * Drop samba from winbind depends and use samba-common* instead
+ (Closes: #732604)
+ * Add an override to script-not-executable etc/ctdb/events.d/10.external
+ * Add ufw integration (from Ubuntu)
+ * Don't build ctdb twice:
+ - Shorten build time
+ - Fix ctdb log path from /var/log/log.ctdb to /var/log/ctdb/log.ctdb
+ - Remove unused /usr/lib/*/ctdb/*.so files
+
+ [ Steven Chamberlain ]
+ * ctdb: Fix detection of gnukfreebsd (Closes: #802621)
+
+ [ Jelmer Vernooij ]
+ * Add no_build_options.patch: make package more reproducible by
+ disabling build options output.
+
+ [ Andrew Bartlett ]
+ * Allow to build/run the AD DC provision/dbcheck against talloc
+ 2.1.6 (Closes: #820015)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 31 Mar 2016 22:26:11 +0200
+
+samba (2:4.3.6+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ + Fixes:
+ - CVE-2015-7560: Incorrect ACL get/set allowed on symlink path.
+ - CVE-2016-0771 (Out-of-bounds read in internal DNS server.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 27 Feb 2016 23:28:53 +0000
+
+samba (2:4.3.5+dfsg-3) unstable; urgency=medium
+
+ * Fix dhclient hook if samba is not installed. Thanks, Jan Braun.
+ Closes: #801976
+ * Rebuild against current version of ldb in the archive. Closes:
+ #817036
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 08 Mar 2016 00:24:10 +0000
+
+samba (2:4.3.5+dfsg-2) unstable; urgency=medium
+
+ * Move strict ldb dependency to samba-dsdb-modules package, which
+ actually contains the modules. Closes: #816210
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 06 Mar 2016 22:51:53 +0000
+
+samba (2:4.3.5+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Fixed usershare.patch to apply against new version.
+ * Loosen dependencies on ldb to ldb >= 1.1.21, per upstream.
+ * Drop patch sockets-with-htons.patch: applied upstream.
+ * Bump standards version to 3.9.7 (no changes).
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 05 Mar 2016 15:56:42 +0000
+
+samba (2:4.3.3+dfsg-2) unstable; urgency=medium
+
+ [ Jelmer Vernooij ]
+ * Add dependency on libtevent-dev in samba-dev.
+
+ [ Mathieu Parent ]
+ * Fix CTDB behavior since CVE-2015-8543 (Closes: #813406)
+
+ -- Mathieu Parent <sathieu@debian.org> Thu, 04 Feb 2016 13:25:01 +0100
+
+samba (2:4.3.3+dfsg-1) unstable; urgency=medium
+
+ * New upstream release. Closes: #808133.
+ + Drop subunit dependency, no longer used.
+ + Drop ntdb dependencies, no longer used.
+ + Fixes:
+ - CVE-2015-5252: Insufficient symlink verification in smbd
+ - CVE-2015-5296: Samba client requesting encryption vulnerable
+ downgrade attack
+ - CVE-2015-5299: Missing access control check in shadow copy code
+ - CVE-2015-7540: Remote DoS in Samba (AD) LDAP server
+ - CVE-2015-8467: Denial of service attack against Windows Active Directory
+ server
+ - CVE-2015-3223: Denial of service in Samba Active Directory server
+ - CVE-2015-5330: Remote memory read in Samba LDAP server
+ * Remove libpam-smbpasswd, which is broken and slated for removal
+ upstream. Closes: #799840
+ * Remove lib/zlib/contrib/dotzlib/DotZLib.chm from excluded files in
+ copyright; no longer shipped upstream.
+ * Remove wins2dns.awk example script.
+ * Remove the samba-doc package, and move examples files from it to
+ relevant other packages. Closes: #769385
+ * Move samba-dsdb-modules back from Depends to Recommends, as using
+ Samba as a standalone server doesn't require the dsdb modules.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 18 Dec 2015 01:18:42 +0000
+
+samba (2:4.3.0+dfsg-2) experimental; urgency=medium
+
+ * Re-enable cluster support.
+ + Build samba-cluster-support as built-in library, since its dependencies
+ are broken.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 28 Sep 2015 00:34:51 +0000
+
+samba (2:4.3.0+dfsg-1) experimental; urgency=medium
+
+ * Fix watch file.
+ * New upstream release.
+ * Drop no_wrapper patch: applied upstream.
+ * Drop patch ctdb_sockpath.patch: applied upstream.
+ * Drop Fix-CTDB-build-with-PMDA patch: applied upstream.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 19 Sep 2015 01:59:36 +0000
+
+samba (2:4.2.1+dfsg-1) experimental; urgency=medium
+
+ [ Jelmer Vernooij ]
+ * New upstream release.
+ + Drop patch do-not-install-smbclient4-and-nmbclient4: applied upstream.
+ + Drop patch
+ bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch:
+ present upstream.
+ + Refresh patch 26_heimdal_compat.26_heimdal_compat.
+ + Add build-dependency on libarchive-dev.
+ * Drop samba_bug_11077_torturetest.patch: applied upstream.
+ * Drop dependency on ctdb - now bundled with Samba.
+ * Use bundled Heimdal as the system Heimdal doesn't contain the
+ changes required for Samba.
+ * Add patch heimdal-rfc3454.txt: patch in truncated rfc3454.txt for
+ building bundled heimdal.
+ * Drop patches 25_heimdal_api_changes and 26_heimdal_compat.
+ * Disable cluster support; it breaks the build.
+ * Add patch no_wrapper: avoid dependencies on
+ {nss,uid,socket}_wrapper.
+ * Move some libraries around.
+ * Move ownership of var/lib/samba and var/lib/samba/private to samba-
+ common, remove obsolete samba4.dirs. Closes: #793866
+ * Remove ctdb-tests and ctdb-pcp-pmda packages as they contain problems
+ and unclear what they are useful for, now ctdb now longer provides
+ an external API.
+
+ [ Mathieu Parent ]
+ * Merge ctdb source package
+ - initial merge
+ - libctdb-dev has been dropped
+ - ctdb-dbg renamed to ctdb-tests, debug files moved to samba-dbg
+ - ctdb-tests depends on python
+ * Fix CTDB socketpath parsing
+ * Fix CTDB build with PMDA
+ * ctdb: Fix privacy breach on google.com (from documentation)
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 07 Dec 2014 15:34:36 +0000
+
+samba (2:4.1.20+dfsg-1) unstable; urgency=medium
+
+ * New upstream release (last compatible with current OpenChange).
+ * samba_bug_11077_torturetest.patch: refresh.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 20 Sep 2015 17:48:59 +0000
+
+samba (2:4.1.17+dfsg-5) unstable; urgency=medium
+
+ * Rebuild against new ldb. Closes: #799569
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 20 Sep 2015 13:20:53 +0000
+
+samba (2:4.1.17+dfsg-4) unstable; urgency=medium
+
+ * Add pidl_reproducible.patch: Make pidl output reproducible.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 28 Apr 2015 00:10:21 +0000
+
+samba (2:4.1.17+dfsg-3) unstable; urgency=medium
+
+ * Rebuild against new ldb. Closes: #783424
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 27 Apr 2015 00:09:50 +0000
+
+samba (2:4.1.17+dfsg-2) unstable; urgency=medium
+
+ [ Andreas Beckmann ]
+ * Add samba.preinst to temporarily deactivate the old qtsmbstatusd
+ initscript which has dependencies incompatible with the new samba
+ initscript. This will ensure a clean upgrade path for samba if the
+ qtsmbstatus-server package was installed previously. (Closes: #779666)
+
+ -- Ivo De Decker <ivodd@debian.org> Sat, 07 Mar 2015 13:09:23 +0100
+
+samba (2:4.1.17+dfsg-1) unstable; urgency=high
+
+ * New upstream release. Fixes:
+ - CVE-2014-8143: Elevation of privilege to Active Directory Domain
+ Controller. Closes: #776993
+ - CVE-2015-0240: Unexpected code execution in smbd. Closes: #779033
+ * Refresh patch add-so-version-to-private-libraries.
+ * Add new smbtorture test rpc.schannel_anon_setpw to detect the conditions
+ leading to CVE-2015-0240.
+ * Add breaks on qtsmbstatus-server (<< 2.2.1-3~). Closes: #775041
+ * Build-depend on reverted ldb version (with increased epoch).
+
+ -- Ivo De Decker <ivodd@debian.org> Mon, 23 Feb 2015 20:20:21 +0100
+
+samba (2:4.1.13+dfsg-4) unstable; urgency=medium
+
+ * Revert previous patch, since ldb has an active module version check.
+ Instead, just depend on ldb 1.1.18. Closes: #771991
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 10 Dec 2014 18:13:42 +0000
+
+samba (2:4.1.13+dfsg-3) unstable; urgency=medium
+
+ * Update debian/rules to allow support for multiple upstream ldb
+ versions, when verified. Closes: #771991
+
+ -- Jelmer Vernooij <jelmer@debian.org> Thu, 04 Dec 2014 21:03:54 +0100
+
+samba (2:4.1.13+dfsg-2) unstable; urgency=medium
+
+ * Mask /etc/init.d/samba init script for systemd. This should make systemd
+ ignore the samba init script. Thanks to Michael Biebl for the suggestion.
+ Closes: #740942
+ * Disable samba init script on upgrade from wheezy to jessie.
+ Thanks again to Michael Biebl for the report.
+ Closes: #766690
+
+ -- Ivo De Decker <ivodd@debian.org> Sat, 25 Oct 2014 00:49:12 +0200
+
+samba (2:4.1.13+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Bump standards version to 3.9.6 (no changes).
+
+ -- Ivo De Decker <ivodd@debian.org> Tue, 21 Oct 2014 20:22:19 +0200
+
+samba (2:4.1.11+dfsg-2) unstable; urgency=medium
+
+ * Updated Italian translation. Thanks Luca Monducci. Closes: #760743
+ * Use HTTP in watch file, as ftp.samba.org is not working reliably for
+ me.
+ * Use Excluded-Files in debian/copyright for DFSG-nonfree files.
+ * Update Dutch translation. Thanks Frans Spiesschaert. Closes: #763650
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 07 Sep 2014 20:52:27 +0200
+
+samba (2:4.1.11+dfsg-1) unstable; urgency=high
+
+ * New upstream release. Fixes:
+ + CVE-2014-3560: Remote code execution in nmbd. Closes: #756759
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 03 Aug 2014 03:47:07 +0200
+
+samba (2:4.1.9+dfsg-2) unstable; urgency=medium
+
+ [ Jelmer Vernooij ]
+ * Depend on libgnutls28-dev rather than libgnutls-dev. Closes: #753146
+ * Remove outdated-autotools-helper-file overrides for config.guess and
+ config.sub; files are no longer present upstream.
+ * Add branch to Vcs-Git header.
+ * samba.smbd.upstart: Remove leftover code for RUN_MODE=inetd, which
+ was already removed elsewhere.
+ * Move dsdb-module library from samba-dsdb-modules to samba-libs, to
+ prevent circular dependencies between samba-dsdb-modules and samba-
+ libs. This is necessary since dsdb-module is now used by the dcerpc-
+ server library.
+
+ [ Debconf translations ]
+ * New Brazilian Portugese translation from Adriano Rafael Gomes.
+ Closes: #752719
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 29 Jun 2014 19:43:52 +0200
+
+samba (2:4.1.9+dfsg-1) unstable; urgency=high
+
+ * New upstream security release. Fixes:
+ - CVE-2014-0244: nmbd denial of service
+ - CVE-2014-3493: smbd denial of service: server crash/memory corruption
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 23 Jun 2014 18:33:27 +0200
+
+samba (2:4.1.8+dfsg-1) unstable; urgency=medium
+
+ [ Jelmer Vernooij ]
+ * Remove smbd and nmbd from required-start and required-stop in
+ samba.init. Closes: #739887
+
+ [ Ivo De Decker ]
+ * Remove workaround for #745233.
+ * New upstream release. Fixes:
+ - CVE-2014-0239: dns: Don't reply to replies. Closes: #749845
+ - CVE-2014-0178: Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response.
+ * Use the upstream version of the smb.conf.5 manpage, instead of building
+ it. This is an ugly temporary workaround because xsltproc crashes on some
+ architectures when building this manpage (due to #750593).
+ This fixes the FTBFS, and should make samba installable with the new ldb
+ version. Closes: #750541, 750796
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 08 Jun 2014 23:37:53 +0200
+
+samba (2:4.1.7+dfsg-2) unstable; urgency=medium
+
+ * Build-depend on heimdal-dev instead of libkrb5-dev.
+ * Add versioned build-dep on libgmp10 for now, which should be pulled in by
+ libhogweed2, to be able to build in outdated build environments (like on
+ most buildds). This is a workaround for #745233.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 20 Apr 2014 13:44:39 +0200
+
+samba (2:4.1.7+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Remove readline63.patch, integrated upstream.
+ * Add build-dep on libkrb5-dev, no longer pulled in by libcups2-dev.
+ * Don't try to delete Parse/Yapp/Driver.pm, which is no longer installed.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 19 Apr 2014 13:39:09 +0200
+
+samba (2:4.1.6+dfsg-1) unstable; urgency=high
+
+ * New upstream security release. Fixes:
+ - CVE-2013-4496: password lockout not enforced for SAMR password changes
+ - CVE-2013-6442: smbcacls can remove a file or directory ACL by mistake
+ * Backport fix for readline 6.3 from master
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 15 Mar 2014 12:13:59 +0100
+
+samba (2:4.1.5+dfsg-1) unstable; urgency=medium
+
+ [ Jelmer Vernooij ]
+ * Fix watch file.
+
+ [ Ivo De Decker ]
+ * New upstream release.
+ * Remove the part of patch 26_heimdal_compat integrated upstream.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 22 Feb 2014 23:17:59 +0100
+
+samba (2:4.1.4+dfsg-3) unstable; urgency=medium
+
+ * Move samba.dckeytab module to samba package, as it relies on hdb.
+ Closes: #736405, #736430
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 24 Jan 2014 23:35:14 +0000
+
+samba (2:4.1.4+dfsg-2) unstable; urgency=medium
+
+ [ Jelmer Vernooij ]
+ * Depend on newer version of ctdb, as Samba won't build against older
+ versions without --enable-old-ctdb.
+ * Bump standards version to 3.9.5 (no changes).
+ * Move libpac, db_glue and hdb module from samba-libs to samba package
+ to reduce size and dependency set of libs package.
+ * Fix compatibility with newer versions of the Heimdal HDB API.
+ + Update 26_heimdal_compat: Fix initialization of HDB plugin. Thanks Jeff
+ Clark. Closes: #732342
+ + Add dependency on specific version of the Heimdal HDB API.
+ Closes: #732344
+
+ [ Steve Langasek ]
+ * dhcp3-client is superseded by dhcp-client; update the references in
+ the package. Closes: #736070.
+ * Move the dhcp client hook from /etc/dhcp3 to /etc/dhcp.
+ Closes: #649100.
+ * debian/bin/xsltproc: don't use $FAKETIME as the variable name in our
+ wrapper script, this seems to make faketime unhappy.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 18 Jan 2014 20:26:35 +0000
+
+samba (2:4.1.4+dfsg-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Update version of talloc build-deps to 2.0.8.
+ * python-samba: add depends on python-ntdb.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 18 Jan 2014 14:07:15 +0100
+
+samba (2:4.1.3+dfsg-2) unstable; urgency=medium
+
+ * Add debug symbols for all binaries to samba-dbg. Closes: #732493
+ * Add lintian overrides for empty prerm scripts.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Fri, 27 Dec 2013 12:39:54 +0100
+
+samba (2:4.1.3+dfsg-1) experimental; urgency=low
+
+ [ Jelmer Vernooij ]
+ * New upstream release.
+ + Drop 0002-lib-replace-Allow-OS-vendor-to-assert-that-getpass-i.patch:
+ upstream no longer uses getpass.
+ * Add source dependency on libntdb1, and stop passing --disable-ntdb,
+ which has been removed.
+ * Remove handling for SWAT, which is no longer shipped upstream.
+ * Split VFS modules out from samba-libs into a separate binary
+ package.
+ * Move service and process_model modules from the samba-libs to the
+ samba package. Prevents dependencies on libkdc2-heimdal and
+ libhdb9-heimdal.
+
+ [ Ivo De Decker ]
+ * Add build-dep on python-ntdb.
+ * Add build-dep on libncurses5-dev.
+ * Add depends on python-ntdb to samba.
+ * New upstream release.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 09 Dec 2013 23:24:27 +0100
+
+samba (2:4.0.13+dfsg-2) UNRELEASED; urgency=low
+
+ [ Steve Langasek ]
+ * Check for alternative's presence before calling update-alternatives
+ --remove-all, instead of silently ignoring all errors from
+ update-alternatives.
+
+ [ Debconf translations ]
+ * Spanish (Javier Fernández-Sanguino). Closes: #731800
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 09 Dec 2013 11:13:59 -0800
+
+samba (2:4.0.13+dfsg-1) unstable; urgency=high
+
+ [ Steve Langasek ]
+ * Move update-alternatives upgrade removal handling to the postinst, where
+ it belongs. Closes: #730090.
+ * Really remove all references to encrypted passwords: the
+ samba-common.config script still included references, which could cause
+ upgrade failures in some cases. Closes: #729167.
+
+ [ Ivo De Decker ]
+ * New upstream security release. Fixes:
+ - CVE-2013-4408: DCE-RPC fragment length field is incorrectly checked
+ - CVE-2012-6150: pam_winbind login without require_membership_of
+ restrictions
+ * Add empty prerm scripts for samba and samba-common-bin.prerm, to allow
+ upgrades from earlier versions with broken prerm script (bug introduced in
+ 2:4.0.10+dfsg-3)
+ * Don't fail in postinst when removing old alternatives fails.
+
+ [ Jelmer Vernooij ]
+ * Fix invocations of 'update-alternatives --remove-all'. Closes: #731192
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 09 Dec 2013 18:34:07 +0100
+
+samba (2:4.0.12+dfsg-1) unstable; urgency=low
+
+ [ Ivo De Decker ]
+ * New upstream release.
+
+ [ Debconf translations ]
+ * Thai (Theppitak Karoonboonyanan). Closes: #728525
+ * Norwegian Bokmål (Bjørn Steensrud). Closes: #729070
+ * German (Holger Wansing). Closes: #729210
+
+ [ Jelmer Vernooij ]
+ * Add 26_heimdal_compat: Fix compatibility with newer versions of
+ Heimdal.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 24 Nov 2013 07:48:20 +0100
+
+samba (2:4.0.11+dfsg-1) unstable; urgency=high
+
+ * New upstream security release. Fixes:
+ - CVE-2013-4475: ACLs are not checked on opening an alternate data stream
+ on a file or directory
+ - CVE-2013-4476: Private key in key.pem world readable
+ * Move world-readable private key file on upgrade to allow
+ auto-regeneration.
+ * Add check in samba-ad-dc init script for wrong permission on private key
+ file that would prevent samba to start.
+ * Update samba-libs.lintian-overrides for moved libtorture0.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 11 Nov 2013 15:42:40 +0100
+
+samba (2:4.0.10+dfsg-4) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Mark one debconf string as non-translatable
+
+ [ Debconf translations ]
+ * French updated (Christian Perrier).
+ * Swedish (Martin Bagge / brother). Closes: #727186
+ * Hebrew (Omer Zak).
+ * Japanese (Kenshi Muto). Closes: #727218
+ * Indonesian (Al Qalit). Closes: #727543
+ * Russian (Yuri Kozlov). Closes: #727612
+ * Esperanto (Felipe Castro). Closes: #727619
+ * Polish (Michał Kułach). Closes: #727646
+ * Danish (Joe Hansen). Closes: #727764
+ * Czech (Miroslav Kure). Closes: #728100
+ * Basque (Iñaki Larrañaga Murgoitio). Closes: #728315
+
+ [ Jelmer Vernooij ]
+ * Move libtorture0 to samba-testsuite to reduce size of samba-libs and
+ prevent dependency on libsubunit0.
+
+ [ Ivo De Decker ]
+ * Handle move of tdb files to private dir in samba-libs.preinst.
+ Closes: #726472
+ * Also do the tdb move in libpam-smbpass.preinst, to avoid breaking the pam
+ module if the upgrade fails.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 02 Nov 2013 11:27:25 +0100
+
+samba (2:4.0.10+dfsg-3) unstable; urgency=low
+
+ [ Ivo De Decker ]
+ * Remove Sesse from uploaders. Thanks for your work on samba4.
+ * Include /etc/pam.d/samba in samba-common. It got lost somewhere in the
+ samba4 merge. Closes: #726183
+ * Remove unused alternatives links on upgrade in samba-common-bin.prerm.
+ * Add support for 'status' in samba-ad-dc init script.
+ * Fix umask in make_shlibs to avoid lintian error
+ control-file-has-bad-permissions.
+ * Enable verbose build log.
+ * Run xsltproc under faketime to get the same date for manpages on different
+ architectures in Multi-Arch: same packages. Closes: #726314
+ * Restore build-dep on libcups2-dev, which got lost in the samba4 merge.
+ This should restore the cups printing functionality. Closes: #726726
+ * Add wrapper for cups-config to filter out
+ -L/usr/lib/${DEB_HOST_MULTIARCH}, to work around build-failure.
+ * Also add other build-deps which were present in samba 2:3.6.19-1.
+ * if the same tdb file is present in /var/lib/samba and
+ /var/lib/samba/private, abort the upgrade to work around #726472 for now.
+ * Document swat removal. Closes: #726751
+
+ [ Steve Langasek ]
+ * Don't fail on errors from testparm in the samba init script.
+ Closes: #726326
+ * debian/patches/bug_221618_precise-64bit-prototype.patch: adjust the LFS
+ handling to work independently of header include order. Closes: #727065.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Tue, 22 Oct 2013 08:10:31 +0200
+
+samba (2:4.0.10+dfsg-2) unstable; urgency=low
+
+ * First upload the unified samba 4.x package to unstable.
+ Thanks to everyone who worked on these packages all these years.
+ * Remove Noël from uploaders. Thanks for your work on the samba packages
+ * Add myself to uploaders.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 12 Oct 2013 11:05:55 +0200
+
+samba (2:4.0.10+dfsg-1) experimental; urgency=low
+
+ * Team upload.
+
+ [ Ivo De Decker ]
+ * Update vcs urls to point to samba instead of samba4.
+ * New upstream release.
+ * Limit build-dep on libaio-dev to linux architectures.
+ * Merge init script changes from 3.6 packages.
+
+ [ Steve Langasek ]
+ * Don't put useless symlinks to nss modules in the libnss-winbind package.
+ * Add lintian overrides for another set of wrong lintian errors for the
+ NSS modules.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Thu, 10 Oct 2013 21:56:08 +0200
+
+samba (2:4.0.9+dfsg-1) experimental; urgency=low
+
+ * Team upload.
+
+ [ Steve Langasek ]
+ * The samba-ad-dc upstart job should be installed unconditionally, not just
+ in Ubuntu.
+ * Don't exclude our private libraries from the shlibs generation.
+ * Port debian/autodeps.py to python3 and build-depend on python3 so we can
+ invoke it correctly from debian/rules.
+
+ [ Jelmer Vernooij ]
+ * Bump standards version to 3.9.4 (no changes).
+ * Suggest libwireshark-dev for libparse-pidl-perl, as it is necessary
+ to build wireshark dissectors generated by pidl.
+ * samba-ad-dc: Drop suggests for removed packages swat2 and samba-gtk.
+ * samba: Remove inetd servers from suggests; inetd support was dropped
+ in 3.6.16-1.
+ * Fix database errors during upgrade. Closes: #700768
+ * Integrate libraries in samba-libs
+
+ [ Ivo De Decker ]
+ * New upstream release.
+ * Merge contents of samba-ad-dc into samba.
+ * Remove systemd support for now, as it is broken. Closes: #719477
+ * Add lintian override for samba-libs: package-name-doesnt-match-sonames.
+ * Add missing depends for dev packages.
+ * Generate correct shlibs for both public and private libs.
+
+ [ Jeroen Dekkers ]
+ * Drop 10_messaging_subsystem patch.
+ * Add patch to not install smbclient4 and nmblookup4 and remove
+ samba4-clients binary package.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 22 Sep 2013 17:19:44 +0200
+
+samba (2:4.0.8+dfsg-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * Remove all mention of "Samba 4" and "experimental version of Samba"
+ in packages' description. Samba version 4 is now production-ready.
+
+ [ Andrew Bartlett ]
+ * Update build-dependencies on Samba libraries using autodeps.py
+ * New upstream security release. Closes: #718781
+ Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation
+
+ [ Ivo De Decker ]
+ * New upstream release
+ * refresh patches for new upstream version
+ * remove patches integrated upstream
+ * Update build-dependencies for new upstream version
+ * Add replaces for python-samba for packages that take over files from it.
+ Closes: #719212
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 11 Aug 2013 23:45:16 +0200
+
+samba (2:4.0.6+dfsg-1) experimental; urgency=low
+
+ * Team upload.
+
+ [ Andrew Bartlett ]
+ * Converted to full AD DC package on the basis of the 3.6 package
+ - Samba now can be an Active Directory Domain controller
+ - The samba4-* packages are replaced by this package.
+ - This package now uses the s3fs file server by default, not the ntvfs
+ file server used in the samba4 packages.
+ * Provides a new library based package
+ - Upstream's new build system uses libraries extensively, so new
+ packages reflect that.
+ - This provides the libraries that Openchange and other projects depend on
+ * Move binary files out of /var/lib/samba to /var/lib/samba/private,
+ where they belong according to upstream Samba:
+ - schannel_store.tdb
+ - idmap2.tdb
+ - passdb.tdb
+ - secrets.tdb
+ * Remove most of the samba4 references, except for binaries ending in 4
+ * Removed debconf support for encrypted passwords
+ * Samba 3.x users upgrading can either upgrade to an AD DC or continue
+ using Samba without major changes.
+
+ [ Christian Perrier ]
+ * Move libnss_winbind.so.2 and libnss_wins.so.2 to /lib as in 3.6.*
+ * Use the same set of configure arguments than 3.6.15 (except those
+ eventually specific to version 4 and above)
+ * Add libctdb-dev to build dependencies as we're building with cluster
+ support just like 3.6 packages
+ * Re-introduce mksmbpasswd for compatibility with 3.* packages
+
+ [ Ivo De Decker ]
+ * Specify all paths using configure options, so that we can finally get rid
+ of the fhs patch. Closes: #705449
+
+ [ Steve Langasek ]
+ * Make samba-common Conflicts: swat, which is now obsolete and no longer
+ built from samba 4.0; the old versions of swat in the archive are
+ incompatible with smb.conf from samba 4.0, so force them off the system
+ to avoid configuration corruption.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Thu, 20 Jun 2013 21:51:49 +0200
+
+samba4 (4.0.3+dfsg1-0.1) experimental; urgency=low
+
+ [ Andrew Bartlett ]
+ * Non-maintainer upload.
+ * New upstream relese: 4.0.3
+ + Fixes CVE-2013-0172 Samba 4.0.0 as an AD DC may provide authenticated users
+ with write access to LDAP directory objects
+ + Fixes many other ACL related issues in the AD DC
+ + Drop 08_waf_python_config as it is now upstream.
+ * Fix the forced use of NTVFS by setting the required options in the smb.conf
+ at configure time.
+ * Add depenencies to ensure python-samba requires exactly this binary version
+ of our core libraries. Closes: #700348
+
+ -- Andrew Bartlett <abartlet@samba.org> Sat, 16 Feb 2013 17:06:34 +0100
+
+samba4 (4.0.0+dfsg1-1) experimental; urgency=low
+
+ [ Martin Pitt ]
+ * debian/tests/control: Fix dependency: python-samba4 does not exist, it's
+ python-samba. Closes: #695854
+
+ [ Jelmer Vernooij ]
+ * New upstream release: 4.0.0!
+ + Add 08_waf_python_config to cope with python-config no longer
+ being a script.
+ * Add 25_heimdal_api_changes, to update Samba to work with the
+ current Heimdal in Sid. Patch from
+ Samuel Cabrero Alamán <scabrero@zentyal.com>. Closes: #686227
+ * Add 11_force_ntvfs: Force the use of NTVFS, until the version of smbd in
+ the archive is new enough. Closes: #694697
+ * Drop dependency on libsmbclient; instead, build private copy.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Thu, 13 Dec 2012 16:27:20 +0100
+
+samba4 (4.0.0~rc6+dfsg1-1) experimental; urgency=low
+
+ * New upstream release.
+ + Drop 08_heimdal_config_h and 11_system_heimdal, now applied upstream.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 04 Dec 2012 14:39:40 +0100
+
+samba4 (4.0.0~rc5+dfsg1-1) experimental; urgency=low
+
+ * New upstream release.
+ * Add autopkgtest header. Closes: #692671
+ * Use Multi-Arch for winbind4.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Thu, 08 Nov 2012 15:13:43 +0100
+
+samba4 (4.0.0~rc4+dfsg1-1) experimental; urgency=low
+
+ * New upstream release.
+ + Bump minimum ldb version to 1.1.13.
+ * Switch to Git as VCS.
+ * Remove DM-Upload-Allowed field.
+ * Depend on heimdal-multidev rather than heimdal-dev.
+ + Add 11_system_heimdal to support building with system heimdal.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 28 Oct 2012 16:21:43 +0100
+
+samba4 (4.0.0~rc3+dfsg1-1) experimental; urgency=low
+
+ * New upstream release.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 16 Oct 2012 14:53:19 +0200
+
+samba4 (4.0.0~rc2+dfsg1-2) experimental; urgency=low
+
+ * Depend on at least ldb 1.1.12. Closes: #689594
+ * Suggest ntp daemon for ntpsignd integration.
+ * Support specifying 'none' as server role to disable provision.
+ Closes: #690138
+ * Prompt user for administrator password. Closes: #690139
+ * Bump debconf level of server role to 'high'.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Thu, 04 Oct 2012 13:22:40 +0200
+
+samba4 (4.0.0~rc2+dfsg1-1) experimental; urgency=low
+
+ * New upstream release.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 25 Sep 2012 03:34:08 +0200
+
+samba4 (4.0.0~beta2+dfsg1-3) unstable; urgency=low
+
+ * Fix setup when no domain is set. Closes: #681048
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 05 Aug 2012 16:52:02 +0200
+
+samba4 (4.0.0~beta2+dfsg1-2) unstable; urgency=low
+
+ * Use ntvfs while debian ships an old version of Samba 3. Closes: #679678
+ * Don't attempt to add shares to the configuration if it doesn't
+ exist. Closes: #681050
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 10 Jul 2012 11:52:44 +0200
+
+samba4 (4.0.0~beta2+dfsg1-1) unstable; urgency=low
+
+ * New upstream release.
+ * Update Slovak translation. Thanks Ivan Masár. Closes: #677906
+ * Add build dependency on libacl1-dev.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 18 Jun 2012 00:49:12 +0200
+
+samba4 (4.0.0~beta1+dfsg1-3) unstable; urgency=high
+
+ * Prevent adding share with invalid name when used in domain controller mode.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 17 Jun 2012 17:00:00 +0200
+
+samba4 (4.0.0~beta1+dfsg1-2) unstable; urgency=low
+
+ * Create leading directories in addshare script. Closes: #677643
+ * Use attr/attributes.h on GNU/kFreeBSD. Fixes finding of ATTR_ROOT.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 16 Jun 2012 01:42:10 +0200
+
+samba4 (4.0.0~beta1+dfsg1-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Add 08_heimdal_config_h: Fixes compatibility with newer versions of
+ Heimdal. Closes: #674918
+ * Use standard spelling of domain controller in debconf templates.
+ Closes: #670413
+ * Switch to debhelper 9.
+ * samba4-clients: Drop conflicts with smbclient; upstream has renamed
+ the Samba4-specific smbclient and nmblookup binaries.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 30 May 2012 18:42:06 +0200
+
+samba4 (4.0.0~alpha20+dfsg1-1) unstable; urgency=medium
+
+ * New upstream release.
+ + No longer installs libkdc-policy.so. LP: #887537
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 01 May 2012 15:02:19 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-7) unstable; urgency=low
+
+ * Only update smb.conf if it exists. Closes: #670560
+ * Automatically add shares required for active directory controllers if they
+ don't exist. Closes: #670558
+
+ -- Jelmer Vernooij <jelmer@debian.org> Thu, 26 Apr 2012 19:59:26 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-6) unstable; urgency=low
+
+ * Rebuild against ldb 1.1.6.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 20 Apr 2012 12:47:15 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-5) unstable; urgency=low
+
+ * Use dbcheck when upgrading from recent versions of Samba4, as it's
+ both more reliable and quicker than upgradeprovision.
+ * Move samba-dsdb-modules from Recommends to Depends, as LDAP server
+ support has been dropped. Closes: #669331
+
+ -- Jelmer Vernooij <jelmer@debian.org> Thu, 19 Apr 2012 17:33:33 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-4) unstable; urgency=low
+
+ * Fix pattern matching line in setoption.py. Thanks Hleb Valoshka.
+ Closes: #669015
+ * setoption.py: Preserve mode on smb.conf file.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 16 Apr 2012 17:33:07 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-3) unstable; urgency=low
+
+ * Convert setoption.pl to Python to avoid dependency on perl-modules.
+ Closes: #668800
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 15 Apr 2012 15:50:57 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-2) unstable; urgency=low
+
+ * Correctly import server role and realm from existing smb.conf file.
+ LP: #936891 LP: #832465 Closes: #659775
+ * Force correct realm during upgradeprovision. LP: #728864
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 13 Apr 2012 16:47:37 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-1) unstable; urgency=low
+
+ * New upstream release.
+ + Drop patches applied upstream: 06_upgradedns, 08_smb2_deps.
+ + Cope with missing sysvol folders during provision upgrade. LP: #930370
+ + Depend on tdb 1.2.10.
+ + Depend on ldb 1.1.5.
+ + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
+ beyond of allocated array.
+ * Fix replaces: samba-common field in samba4-common-bin.
+ * Update Catalan debconf translation. Thanks, Jordi Mallach.
+ Closes: #663737
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 11 Apr 2012 16:58:39 +0200
+
+samba4 (4.0.0~alpha18.dfsg1-4) unstable; urgency=low
+
+ * Add patch 08_smb2_deps: Remove (unnecessary) dependencies on various
+ private Samba 3 libraries, for which proper package Depends: lines were
+ missing. Closes: #665295
+ * Add dependency on tdb-tools. This will be removed once upstream
+ removes the use of tdbbackup in provision. Closes: #664658
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 28 Mar 2012 16:20:21 +0200
+
+samba4 (4.0.0~alpha18.dfsg1-3) unstable; urgency=low
+
+ * Fix compatibility with newer versions of Heimdal. Fixes FTBFS.
+ Closes: #664820
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 21 Mar 2012 14:11:29 +0100
+
+samba4 (4.0.0~alpha18.dfsg1-2) unstable; urgency=low
+
+ * Add Replaces: python-samba to libsmbclient-raw0 as some
+ private libraries have moved. Thanks Axel Beckert. Closes: #663641
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 13 Mar 2012 16:39:12 +0100
+
+samba4 (4.0.0~alpha18.dfsg1-1) unstable; urgency=low
+
+ [ Jelmer Vernooij ]
+ * New upstream release.
+ + Depend on newer versions of ldb.
+ + Depend on tevent >= 0.9.15.
+ + Sanitizes NetBIOS names. LP: #938592
+ + Re-adds support for 'security = domain' parsing. LP: #916556
+ * Fix typo in recommendations of samba4: samba4-dsdb-modules ->
+ samba-dsdb-modules.
+ * Recommend attr package for Samba4.
+ * Create util.h -> samba_util.h symlink for backwards compatibility.
+ * Add dependency on libbsd-dev, used for strlcat and strlcpy.
+ * Extracts waf source code. Closes: #654500
+
+ [ Debconf translations ]
+ * Russian (Yuri Kozlov). Closes: #651583
+ * Portuguese (Miguel Figueiredo). Closes: #653557
+ * German (Holger Wansing). Closes: #653714
+ * Norwegian Bokmål (Bjørn Steensrud). Closes: #654284
+ * Spanish (Javier Fernández-Sanguino). Closes: #656403
+ * Danish (Joe Hansen). Closes: #656785
+ * Dutch (Jeroen Schot). Closes: #657469
+ * Hebrew (Omer Zak).
+ * Polish (Michał Kułach). Closes: #659570
+ * Czech (Miroslav Kure). Closes: #659573
+ * Turkish (İsmail BAYDAN). Closes: #659575
+ * Japanese (Kenshi Muto). Closes: #659978
+ * Esperanto (Felipe Castro)
+
+ [ Jelmer Vernooij ]
+ * Rename upgradedns to less generic samba_upgradedns.
+ * Bump standards version to 3.9.3 (no changes).
+ * Use DEP-5 for copyright file.
+ * Indonesian (Mahyuddin Susanto). Closes: #660031
+ * Italian (Luca Monducci). Closes: #660150
+ * Use samba-tool to retrieve configuration options from debconf.
+ LP: #936891, Closes: #659775
+ * Add really basic autopkgtest test.
+ * Fix bundled libraries for samba.samba3 python module. LP: #889869
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 12 Mar 2012 19:01:00 +0100
+
+samba4 (4.0.0~alpha17.dfsg2-1) unstable; urgency=low
+
+ * Remove more non-free IETF files. Closes: #547280
+ * Rebuild for newer version of ldb.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 03 Dec 2011 01:41:49 +0100
+
+samba4 (4.0.0~alpha17.dfsg1-3) unstable; urgency=low
+
+ * Install libmemcache.so, libutil_str.so and various other private libraries
+ required by the samba3 module in python-samba. LP: #889864, LP: #889869
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 13 Nov 2011 17:03:29 +0100
+
+samba4 (4.0.0~alpha17.dfsg1-2) unstable; urgency=low
+
+ * Include upstart file to eliminate delta with Ubuntu.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 11 Nov 2011 16:13:58 +0100
+
+samba4 (4.0.0~alpha17.dfsg1-1) unstable; urgency=low
+
+ * Strip non-free IETF RFC files. Closes: #547280
+ * Rebuild against newer ldb. Closes: #648326
+ * Updated Swedish debconf translation. Thanks Martin Bagge.
+ Closes: #644942
+ * Updated French debconf translation. Thanks Christian Perrier.
+ Closes: #644465
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 11 Nov 2011 03:16:37 +0100
+
+samba4 (4.0.0~alpha17-3) unstable; urgency=low
+
+ * Upload to unstable. Closes: #642905
+ * Use default python version rather than 2.7.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 27 Sep 2011 00:11:31 +0200
+
+samba4 (4.0.0~alpha17-2) experimental; urgency=low
+
+ * In -dev package dependencies, depend on a specific version of other
+ Samba dev packages.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 24 Sep 2011 23:10:30 +0200
+
+samba4 (4.0.0~alpha17-1) experimental; urgency=low
+
+ * New upstream release.
+ * Add libsmbclient-{raw0,dev} packages, required for winexe.
+ * Add libsamba-credentials0 and libsamba-credentials-dev packages for
+ new public library for credentials management.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 18 Sep 2011 15:14:42 +0200
+
+samba4 (4.0.0~alpha17~git20110807.dfsg1-1) experimental; urgency=low
+
+ * New upstream snapshot.
+ * Depend on newer version of ldb. Closes: #636961
+ * Update Indonesian Debconf translation. Thanks Mahyuddin Susanto.
+ Closes: #608552
+ * Preserve server role set in smb.conf. LP: #815586
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 07 Aug 2011 23:37:37 +0200
+
+samba4 (4.0.0~alpha17~git20110801.dfsg1-1) experimental; urgency=low
+
+ * Improve outdated package descriptions. Closes: #486370
+ * New upstream release.
+ * Bump standards version to 3.9.2 (no changes).
+ * Add new libsamdb-dev package, required by openchange which relies on the
+ samdb.pc file.
+ + No header files are shipped yet, but an upstream fix is pending.
+ * Recommend bind9utils in samba4 package.
+ * Remove complex dependency loop between library packages. Closes: #598842
+ + Disable currently unfinished ldb share module.
+ + Split dcerpc server libraries out into libdcerpc-server{0,-dev} to
+ cut dependency loop.
+ + New samba-dsdb-modules package with all DSDB related LDB modules.
+ * Move libwinbind-client library to libgensec0. Closes: #623327
+ * Add support for multi-arch.
+ * Switch to new style debhelper.
+ * Fix symbolic link for ldb modules. Closes: #632974
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 31 Jul 2011 20:16:03 +0200
+
+samba4 (4.0.0~alpha15.dfsg1-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 22 Apr 2011 02:57:04 +0200
+
+samba4 (4.0.0~alpha15~git20110410.dfsg1-1) experimental; urgency=low
+
+ * New upstream snapshot.
+ + Drop patch now applied upstream: 02_backupkey_private.diff
+ * Switch to dh_python2. Closes: #617059
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 05 Mar 2011 14:44:25 +0100
+
+samba4 (4.0.0~alpha15~git20110224.dfsg1-2) experimental; urgency=low
+
+ * Depend on newer version of Heimdal which exposes more hx509 symbols.
+ Fixes FTBFS.
+ * Tighten libldb1 dependency for LDB modules.
+ * Depend on newer version of pyldb. Closes: #615631
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 28 Feb 2011 03:52:35 +0100
+
+samba4 (4.0.0~alpha15~git20110224.dfsg1-1) experimental; urgency=low
+
+ * New upstream release.
+ + Avoids unnecessary setlocale call to "C". LP: #519025, #519025
+ * Fix dependency on newer version of ldb. Closes: #614466
+ * Add missing dependency on python-samba, required for testparm. LP: #641082
+ * Use libwbclient. LP: #714344, Closes: #611214
+ * Make sure /var/run/samba exists. LP: #646037
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 23 Feb 2011 00:35:59 +0100
+
+samba4 (4.0.0~alpha15~git20110124.dfsg1-2) experimental; urgency=low
+
+ * Build-depend on newer version of heimdal-multidev with fixed kdc.h.
+ * Build-depend on versioned libkdc2-heimdal which includes kdc_log. Closes: #611112
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 25 Jan 2011 09:22:16 -0800
+
+samba4 (4.0.0~alpha15~git20110124.dfsg1-1) experimental; urgency=low
+
+ * New upstream snapshot.
+ + Removes unresolved symbols from libraries.
+ Closes: #596690, #599075, #602855. LP: #658116, #592882, #646042
+ * Add dependency on comerr-dev.
+ * Update Spanish Debconf translation. Thanks Ricardo Fraile. Closes: #596075
+ * Update Danish debconf translation. Thanks Joe Dalton. Closes:
+ #598779
+ * Re-remove non-free IETF RFCs, add test to prevent future regression.
+ Closes: #547280
+ * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
+ * Upgrade provision data between releases. Closes: #600117
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 15 Oct 2010 01:32:48 +0200
+
+samba4 (4.0.0~alpha14~bzr13684.dfsg1-1) unstable; urgency=low
+
+ * New upstream snapshot.
+ + Depend on libsubunit-dev.
+ * Support talloc 2.0.1.
+ * Update dependency for ldb to be >= 0.9.14. Closes: #596745
+ * Support parallel builds.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 28 Sep 2010 09:46:54 +0200
+
+samba4 (4.0.0~alpha13+git+bzr12785.dfsg1-1) experimental; urgency=low
+
+ * Install provision scripts to /usr/share/samba/setup.
+ * Move nsstest from samba4 to winbind4.
+ * Support building against tdb 1.2.1.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Fri, 10 Sep 2010 17:45:20 +0200
+
+samba4 (4.0.0~alpha13+git+bzr12687.dfsg1-1) experimental; urgency=low
+
+ * New upstream snapshot.
+ * Mark as compatible with older versions of tdb (>= 1.2.2).
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 08 Sep 2010 03:30:03 +0200
+
+samba4 (4.0.0~alpha13+git+bzr12670.dfsg1-1) experimental; urgency=low
+
+ * Add missing dependency on pkg-config.
+ * Require subunit >= 0.0.6, older versions have a broken tap2subunit.
+ * Debconf translations:
+ - Swedish (Martin Bagge). Closes: #586819
+ * New upstream snapshot.
+ - Fixes symbols for LDB modules. Closes: #594763, #594771, #594773.
+ * Require tdb 1.2.3. Closes: #595644
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 05 Sep 2010 17:34:46 +0200
+
+samba4 (4.0.0~alpha13+git+bzr12292.dfsg1-1) experimental; urgency=low
+
+ * New upstream snapshot.
+ + Fixes provision to be able to find the data path again.
+ * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
+ * Suggest swat2.
+ * Migrate to Bazaar.
+ * Bump standards version to 3.9.1 (no changes).
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 22 Aug 2010 02:38:51 +0200
+
+samba4 (4.0.0~alpha13+git20100618.dfsg1-1) experimental; urgency=low
+
+ [ Jelmer Vernooij ]
+ * New upstream snapshot. Closes: #578009, #577880
+ + Add dependency on python-dnspython.
+ + Removes last Python string exception. Closes: #585327
+ + Installs all display specifiers. Closes: #548911
+
+ [ Christian Perrier ]
+ * Debconf translations:
+ - Swedish (Martin Bagge). Closes: #552734
+ - Russian (Yuri Kozlov). Closes: #563346
+ - Spanish (Omar Campagne). Closes: #579099
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sun, 28 Feb 2010 02:33:37 +0100
+
+samba4 (4.0.0~alpha8+git20100227.dfsg1-1) experimental; urgency=low
+
+ * Fix sections of libndr-standard0 and libndr0.
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 22 Feb 2010 11:19:07 +0100
+
+samba4 (4.0.0~alpha8+git20100222.dfsg1-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * Change "Provides:" in init script to avoid conflicting Provides
+ with samba. Closes: #547209
+ * Swedish debconf translation (Martin Bagge). Closes: #552734
+
+ [ Jelmer Vernooij ]
+ * Depend on specific version of libldb. Closes: #562389
+ * Build against system Heimdal and remove the copy of Heimdal from the
+ Samba 4 source tree, since it contains non-free IETF RFC/I-D.
+ Closes: #547280
+ * Bump standards version to 3.8.4.
+ * Switch to dpkg-source 3.0 (quilt) format
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 03 Feb 2010 15:17:20 +0100
+
+samba4 (4.0.0~alpha8+git20090912-1) unstable; urgency=low
+
+ * Upload to unstable.
+ * Fix nmblookup.1.gz filename for alternatives.
+ * New upstream snapshot.
+ + Add new binary packages libndr-standard0 and libndr-standard-dev.
+ * Bump standards version to 3.8.3.
+ * Remove unused patch system.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 12 Sep 2009 13:28:33 +0200
+
+samba4 (4.0.0~alpha8+git20090718-1) experimental; urgency=low
+
+ * New upstream snapshot.
+ * The server package now suggests a version of bind9 that supports
+ update-policy.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 18 Jul 2009 17:34:30 +0200
+
+samba4 (4.0.0~alpha8~git20090620-1) experimental; urgency=low
+
+ * Support building against Python2.6.
+ * Add missing dependency on tdb >= 1.1.3. (Closes: #517171)
+ * Add missing dependencies on tdb-dev and libtalloc-dev to
+ libldb-samba4-dev. (Closes: #525885)
+ * Use newer version of tevent. (Closes: #531480, #533457, #533455)
+ * New upstream snapshot.
+ * Bump standards version to 3.8.2.
+ * Reorganization to let Samba 3 and Samba 4 co-exist on the same system:
+ + Depend on samba-common for smb.conf, /etc/samba/gdbcommands,
+ /usr/share/samba/{panic-action,*.dat}.
+ + Rename samba4-common to samba4-common-bin.
+ * samba4-testsuite now recommends subunit, since it can output subunit
+ streams.
+ * Document license for Active Directory schemas.
+ * Fix init script to run samba rather than smbd. (Closes: #522646)
+ * Removed libldb-samba4-{dev,0}, now using libldb{-dev,0} since there
+ are no longer any differences.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Thu, 18 Jun 2009 00:19:44 +0200
+
+samba4 (4.0.0~alpha7~20090225-1) experimental; urgency=low
+
+ * Build-depend on pkg-config, as we no longer seem to pull that in
+ through any other dependencies. (Closes: #516882)
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 25 Feb 2009 04:04:36 +0100
+
+samba4 (4.0.0~alpha7~20090223-1) experimental; urgency=low
+
+ * Add build dependency on libpopt-dev, so the system libpopt is always used
+ rather than the one included by Samba.
+ * Use the alternatives system for the smbstatus, nmblookup, net and testparm
+ binaries as well as various data files.
+ * Make the samba4 and samba4-testsuite packages conflict with
+ samba-tools. (Closes: #506236)
+ * Build against external libtevent.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Sat, 21 Feb 2009 17:46:41 +0100
+
+samba4 (4.0.0~alpha6-1) experimental; urgency=low
+
+ * New upstream release.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Tue, 20 Jan 2009 02:59:15 +0100
+
+samba4 (4.0.0~alpha5+20090105-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 05 Jan 2009 21:08:53 +0100
+
+samba4 (4.0.0~alpha5+20081126-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Wed, 26 Nov 2008 03:48:41 +0100
+
+samba4 (4.0.0~alpha5+20081101-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Sat, 01 Nov 2008 14:40:09 +0100
+
+samba4 (4.0.0~alpha5+20081031-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Fri, 31 Oct 2008 00:10:41 +0100
+
+samba4 (4.0.0~alpha5+20081014-1) experimental; urgency=low
+
+ * Fix typo in description. (Closes: 500811)
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Thu, 09 Oct 2008 18:41:59 +0200
+
+samba4 (4.0.0~alpha5+20080930-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Tue, 30 Sep 2008 16:19:22 +0200
+
+samba4 (4.0.0~alpha5+20080825-1) experimental; urgency=low
+
+ * Add watch file.
+ * Use policy-compliant sysconfdir and localstatedir. (Closes: #495944)
+
+ -- Jelmer Vernooij <jelmer@samba.org> Mon, 25 Aug 2008 17:42:44 +0200
+
+samba4 (4.0.0~alpha4~20080727-1) experimental; urgency=low
+
+ [ Steve Langasek ]
+ * Add missing dependency on libparse-yapp-perl to libparse-pidl-perl.
+
+ [ Jelmer Vernooij ]
+ * Make samba4-common conflict with samba-common. (Closes: #492088)
+ * New Slovak translation. (Closes: #487889)
+ * New Thai translation from Theppitak Karoonboonyanan. (Closes: #486614)
+ * New Vietnamese translation from Clytie Siddall. (Closes: #486618)
+ * New Bulgarian translation from Damyan Ivanov. (Closes: #486626)
+ * New Japanese translation from Kenshi Muto. (Closes: #486648)
+ * New Galician translation from Jacobo Tarrio. (Closes: #486701)
+ * New Turkish translation from Mehmet TURKER. (Closes: #487244)
+ * New Czech translation from Miroslav Kure. (Closes: #487265)
+ * New Arabic translation from Ossama Khayat. (Closes: #487322)
+ * New German translation from Holger Wansing. (Closes: #487542)
+ * New Italian translation from Luca Monducci. (Closes: #487720)
+ * New Portugese translation from the Portuguese Translation Team.
+ (Closes: #487753)
+ * New Korean translation from Sunjae Park. (Closes: #487894)
+ * New Lithuanian translation from Gintautas Miliauskas. (Closes: #487895)
+ * New Romanian translation from Eddy Petrișor. (Closes: #488874)
+
+ -- Jelmer Vernooij <jelmer@samba.org> Sun, 27 Jul 2008 15:38:41 +0200
+
+samba4 (4.0.0~alpha4~20080617-1) experimental; urgency=low
+
+ * Fixed maintainer email address.
+ * New upstream snapshot.
+ * Remove dependency on unpackaged libevents in ldb pkg-config file.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Mon, 16 Jun 2008 21:29:43 +0200
+
+samba4 (4.0.0~alpha4~20080616-1) experimental; urgency=low
+
+ * Fix dependency of libsamba-hostconfig-dev on libsamba-hostconfig0.
+ * Fix dependency of libldb-samba4-dev on libldb-samba4-0.
+ * Remove tdb binaries as they're already packaged elsewhere.
+ (Closes: #485619, #486270)
+ * New upstream snapshot.
+ * New French translation from Christian Perrier. (Closes: #486072)
+
+ -- Jelmer Vernooij <jelmer@samba.org> Sat, 14 Jun 2008 20:39:13 +0200
+
+samba4 (4.0.0~alpha4~20080522-1) experimental; urgency=low
+
+ * New upstream snapshot. (Closes: #478328)
+
+ -- Jelmer Vernooij <jelmer@samba.org> Thu, 22 May 2008 02:25:05 +0200
+
+samba4 (4.0.0~alpha4~20080403-1) experimental; urgency=low
+
+ * Rename source package to samba4.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Mon, 28 Jan 2008 17:23:58 +0100
+
+samba (4.0.0~alpha3~20080120-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Sat, 19 Jan 2008 22:34:08 +0100
+
+samba (4.0.0~alpha2~svn26294-1) experimental; urgency=low
+
+ * New upstream snapshot.
+ * Set Vcs-Svn field.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Sat, 19 Jan 2008 22:32:28 +0100
+
+samba (4.0.0~~tp5-1) experimental; urgency=low
+
+ * New upstream release.
+ * Set homepage field.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Sun, 25 Nov 2007 16:28:02 +0000
+
+samba (4.0.0~~svn22819-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Wed, 09 May 2007 15:28:50 +0200
+
+samba (4.0.0~~svn19515-1) experimental; urgency=low
+
+ * New upstream versions (svn snapshots of r19515).
+
+ -- Jelmer Vernooij <jelmer@samba.org> Mon, 30 Oct 2006 16:45:36 +0100
+
+samba (3.9.1+4.0.0tp2-1) experimental; urgency=low
+
+ * New upstream version (tech preview 2).
+
+ [ Jelmer Vernooij ]
+ * Remove setntacl utility (it doesn't do anything).
+ * Include oLschema2ldif.1 in the ldb-tools package.
+ * Enable shared library building.
+ * Put ldb, tdb, gtksamba, talloc and gensec libraries into seperate binary packages.
+ * Pass fewer options for paths to configure
+ * Adapt to new paths from upstream
+
+ -- Jelmer Vernooij <jelmer@samba.org> Thu, 23 Mar 2006 01:13:32 +0100
+
+samba (3.9.1+4.0.0tp1-1) experimental; urgency=low
+
+ * New upstream version (tech preview 1).
+
+ [ Steinar H. Gunderson ]
+ * Forward-port panic-action script from the Samba 3 packaging.
+ * Patch the smb.conf provisioning template (only used by swat in the
+ Debian packaging) to use the panic-action script by default.
+ * Patch the samba-common postinst to generate smb.conf files with the
+ same setting.
+ * Include ntlm_auth.1 and smbd.8 man pages in the samba package.
+ * Make the samba dependency on samba-common versioned.
+ * Install /usr/bin/setntacl manually; the upstream install target doesn't
+ seem to do it anymore.
+ * Ask for the realm (and give it to the upgrade script) when upgrading from
+ Samba 3; it can't be easily autodetected. (Note that upgrade still seems
+ to be broken for now.)
+
+ [ Jelmer Vernooij ]
+ * Remove gwsam utility.
+ * Include gwcrontab.1 and gepdump.1 man pages in the samba-gtk-frontends
+ package.
+ * Remove ldbtest utility from ldb-tools package.
+
+ -- Steinar H. Gunderson <sesse@debian.org> Tue, 24 Jan 2006 16:01:59 +0100
+
+samba4 (3.9.0-SVN-build-6710-1) unstable; urgency=low
+
+ * Newer upstream version
+
+ -- Jelmer Vernooij <jelmer@samba.org> Thu, 12 May 2005 14:04:05 +0200
+
+samba4 (3.9.0-SVN-build-655-1) unstable; urgency=low
+
+ * Initial release.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Thu, 13 May 2004 01:38:41 +0200
+
+samba (3.9.0+SVN12946-1) experimental; urgency=low
+
+ * New upstream version.
+ * Fix upgrades from Samba 3 giving too few parameters to provision().
+ (Closes: #348079)
+ * Add sections to binary packages to match the archive:
+ * libparse-pidl-perl: perl
+ * samba-dev: devel
+ * samba-gtk-frontends: x11
+ * Adjust our export procedure we get the Subversion revision number in
+ include/version.h (and thus in the build itself), and document how in
+ README.building.
+ * Remove "reload" option from the init script, since Samba 4 doesn't
+ understand SIGHUP yet.
+
+ -- Steinar H. Gunderson <sesse@debian.org> Sun, 15 Jan 2006 13:43:43 +0100
+
+samba (3.9.0+SVN12856-1) experimental; urgency=low
+
+ * New upstream version.
+ * Move testparm from samba into samba-common.
+ * Make samba-common Architecture: any.
+ * Make samba-common replace/conflict samba (<= 3.9.0+SVN12739-1).
+ * Make samba-clients depend on samba-common.
+ * Make samba-common depend on debconf.
+ * Replace debconf dependencies with ${misc:Depends}, to automatically
+ get the debconf-2.0 alternative right.
+ * Include the newuser binary in samba-server package.
+ * Add missing Build-Depends on: libgnutls-dev, libreadline5-dev,
+ libpam0g-dev. All were causing silent build failures (ie. the package
+ was simply built without the features).
+ * Remove Build-Depends on libldap-dev.
+ * Include NEWS file.
+
+ -- Steinar H. Gunderson <sesse@debian.org> Wed, 11 Jan 2006 22:08:32 +0100
+
+samba (3.9.0+SVN12739-1) experimental; urgency=low
+
+ * Move /usr/lib/samba/setup from samba-common to samba.
+ * Make samba replace samba-common (<= 3.9.0+SVN12726-1)
+ * Add a missing db_stop in samba.postinst, probably causing problems
+ starting the daemon in some cases.
+ * Add orphan files from /usr/bin (and relevant manpages) into their
+ correct packages:
+ * ldb-tools: ldbrename, ldbtest, oLschema2ldif.
+ * samba: ntlm_auth.
+ * samba-clients: getntacl.
+ * samba-gtk-frontends: gwcrontab.
+ * winregistry-tools: winreg.
+ * samba3dump and tdbtorture remain orphans.
+ * Add new executable /usr/bin/testparm to samba package.
+ * Add /var/lib/samba directory to samba package; it's needed by
+ testparm.
+ * Rewrite configuration/bootstrapping to be able to install the client
+ only and still get a usable smb.conf. The basic idea is:
+ * samba-common looks for an smb.conf. If there is none, it asks for
+ realm and domain and generates a skeleton smb.conf.
+ * If samba notices an upgrade from Samba 3, it asks whether the user
+ wants to upgrade. If not, it leaves everything alone (and broken).
+ * Otherwise, samba asks whether the user wants to set up a PDC. If yes,
+ it adds "server role = pdc" to smb.conf and provisions the server.
+ * Removed unused file samba.conffiles.
+ * Run dh_installdebconf on architecture-independent packages as well, now
+ that samba-common has a config script.
+ * Let samba-clients conflict/replace samba-common (<< 3.9.0), as they share
+ /usr/bin/net.
+
+ -- Steinar H. Gunderson <sesse@debian.org> Fri, 6 Jan 2006 14:25:50 +0100
+
+samba (3.9.0+SVN12726-1) experimental; urgency=low
+
+ * First upload to Debian main.
+
+ * Package renaming to get more in line with Samba 3 packaging:
+ * Rename samba-server package to just samba, for consistency with the
+ Samba 3 packaging.
+ * Rename samba.samba.init to samba.init, now that the init script and the
+ server package are called the same.
+ * Rename samba-swat to swat, and add a dependency from swat to samba.
+
+ * debian/rules changes:
+ * Change SOURCEPATH to reflect that we now have the packaging in debian/,
+ not packaging/debian/. This will have to be reverted whenever upstream
+ syncs with us.
+ * Removed debmake comment, it's hardly relevant any more.
+ * Removed comment that there aren't any architecture-independent packages
+ (because there are).
+ * Remove redundant "package=samba" variable.
+ * Do "make pch ; make all" instead of "make proto ; -make pch ; make all";
+ some build system bug prevents us from just doing "make pch all", but
+ since we're more or less guaranteed a recent gcc version, the pch target
+ shouldn't fail, so we won't allow it to.
+ * Remove autogen.sh call from configure; it should be done in the
+ upstream tarball, not in maintainer scripts.
+
+ * debian/control changes:
+ * Copied Uploaders: line from Samba 3 packaging, adding myself.
+ * Rename samba-client package to samba-clients.
+ * Make samba-clients Replaces/Conflicts smbclient.
+ * Build-depend on docbook-xml, not just docbook-xsl -- the documentation
+ needs data from both to build.
+ * Move the samba binary package to the top, so it's the one receiving
+ the README.* files, among others.
+
+ * Maintainer script changes:
+ * Attempt to upgrade from Samba 3 if that's what the user tries to do.
+ * Copy upgrade script into /usr/lib/samba/setup.
+ * Check for upgrade from << 3.9.0 in config, and ask the user for upgrade
+ if relevant.
+ * Check for upgrade from << 3.9.0 in postinst, and upgrade if the user
+ wished to.
+ * Only provision in samba.postinst if we're doing a fresh install.
+ * Support purging properly in postrm, both for samba and samba-common
+ (adapted from the Samba 3 packaging).
+ * Don't ask about an administrator password -- just let the provisioning
+ scripts make up a random one.
+ * Updated README.Debian to show the user how to change the password.
+ * Make samba recommend ldb-tools.
+ * Install README.building along with all the other documentation.
+ * Don't try to ask about the "done" question, which we nuked in a previous
+ release.
+
+ * Updated debian/copyright.
+ * Added Samba copyright holders.
+ * Noted that talloc, ldb and tdb are under the LGPL.
+ * Added copyright holders and licensing for the packaging itself.
+
+ * Remove a few unused files in the packaging.
+ * Change debhelper compatibility level to 5.
+ * Update versioned depends accordingly.
+ * Don't give --pidfile to start-stop-daemon when stopping -- current
+ versions of Samba 4 won't die when the parent is killed.
+ * Updated README.debian somewhat, and renamed to use a capital D.
+ * Rewritten README.building, to reflect the magic that has to be done
+ with the package in another repository.
+ * Update po/POTFILES.in to reflect name change (from samba4-server ->
+ samba-server -> samba).
+
+ -- Steinar H. Gunderson <sesse@debian.org> Thu, 5 Jan 2006 21:27:13 +0100
+
+samba (3.9.0+SVN12395-1) unstable; urgency=low
+
+ * New snapshot, drop 4 suffix
+
+ -- Jelmer Vernooij <jelmer@samba.org> Tue, 20 Dec 2005 13:38:26 +0100
+
+samba4 (3.9.0+SVN12312-1) unstable; urgency=low
+
+ * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org> Mon, 27 Jun 2005 11:25:57 +0200
+
+samba (2:3.6.19-1) unstable; urgency=low
+
+ * Team upload.
+ * New upstream release
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Wed, 25 Sep 2013 20:01:48 +0200
+
+samba (2:3.6.18-1) unstable; urgency=low
+
+ * Team upload.
+
+ [ Steve Langasek ]
+ * Split the samba init script into nmbd and smbd init scripts, for better
+ alignment with how init systems other than sysvinit work. This also
+ drops the override of the arguments to update-rc.d in debian/rules,
+ no longer needed in the post-insserv world.
+ * Add upstart jobs from Ubuntu for smbd, nmbd, and winbind.
+
+ [ Ivo De Decker ]
+ * New upstream release
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Tue, 20 Aug 2013 22:06:45 +0200
+
+samba (2:3.6.17-1) unstable; urgency=high
+
+ * Team upload.
+ * New upstream security release. Closes: #718781
+ Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 05 Aug 2013 13:46:23 +0200
+
+samba (2:3.6.16-2) unstable; urgency=high
+
+ * Team upload.
+ * Make build-dep on libtevent-dev explicit.
+ * Fix waf-as-source.patch to make sure unpacking works in recent build
+ environment. Closes: #716932
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Tue, 16 Jul 2013 22:01:04 +0200
+
+samba (2:3.6.16-1) unstable; urgency=low
+
+ * Team upload.
+
+ [ Steve Langasek ]
+ * Drop support for running smbd from inetd; this is not well-supported
+ upstream, and can't correctly handle all of the long-running services
+ that are needed as part of modern samba. Closes: #707622.
+
+ [ Ivo De Decker ]
+ * New upstream release
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Wed, 19 Jun 2013 21:05:07 +0200
+
+samba (2:3.6.15-1) unstable; urgency=high
+
+ * Team upload.
+ * New upstream bugfix release. Closes: #707042
+ * Update VCS URL's for new git repo.
+ * The recommends for the separate libnss-winbind and libpam-winbind
+ packages needed for the upgrade of winbind from squeeze to wheezy are no
+ longer needed. Lowering them to suggests.
+ Closes: #706434, #674853
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Thu, 09 May 2013 11:55:03 +0200
+
+samba (2:3.6.14-1) unstable; urgency=low
+
+ * Team upload.
+ * New upstream release
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 04 May 2013 22:02:15 +0200
+
+samba (2:3.6.13-2) experimental; urgency=low
+
+ * Team upload.
+ * Move binary files out of /etc/samba to /var/lib/samba,
+ where they belong according to the FHS:
+ - schannel_store.tdb
+ - idmap2.tdb
+ - MACHINE.sid
+ Closes: #454770
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 21 Apr 2013 12:54:03 +0200
+
+samba (2:3.6.13-1) experimental; urgency=low
+
+ * Team upload.
+ * New upstream release
+ * samba: Suggests winbind. Closes: #689857
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 18 Mar 2013 21:29:58 +0100
+
+samba (2:3.6.12-1) experimental; urgency=low
+
+ * Team upload.
+ * Security update, fixing the following issues:
+ - CVE-2013-0213: Clickjacking issue in SWAT
+ - CVE-2013-0214: Potential XSRF in SWAT
+ * New upstream release
+ * Install pkgconfig file in libsmbclient-dev. Closes: #700643
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 17 Feb 2013 22:25:34 +0100
+
+samba (2:3.6.10-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 15 Dec 2012 08:03:03 +0100
+
+samba (2:3.6.9-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 01 Nov 2012 08:17:29 +0100
+
+samba (2:3.6.8-1) experimental; urgency=low
+
+ * New upstream release.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 18 Sep 2012 07:13:41 +0200
+
+samba (2:3.6.7-1) experimental; urgency=low
+
+ * New upstream release.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 11 Aug 2012 21:37:38 +0200
+
+samba (2:3.6.6-3) unstable; urgency=low
+
+ [ Ansgar Burchardt ]
+ * debian/rules: Use xz compression for binary packages.
+ Closes: #683899
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 05 Aug 2012 12:19:12 +0200
+
+samba (2:3.6.6-2) unstable; urgency=low
+
+ * Restore the DHCP hook.
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 27 Jun 2012 09:31:15 -0700
+
+samba (2:3.6.6-1) unstable; urgency=low
+
+ [ Ivo De Decker ]
+ * Only enable swat in inetd.conf on first install. Closes: #658245
+ * Minor lintian fixes.
+ * Remove DHCP hook. Closes: #652942, #629406, #649100
+ * Don't reload smbd when running from inetd. Closes: #678741
+ * Don't start smbd when guest account doesn't exist. Closes: #653382
+ * Only export public symbols in libsmbclient and libwbclient.
+
+ [ Christian Perrier ]
+ * New upstream version
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 27 Jun 2012 06:03:17 +0200
+
+samba (2:3.6.5-7) unstable; urgency=low
+
+ * Allow installing smbclient package together with newer versions of
+ samba4-clients, which no longer ship the smbclient and nmblookup
+ binaries.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Mon, 11 Jun 2012 13:19:24 +0200
+
+samba (2:3.6.5-6) unstable; urgency=high
+
+ [ Ivo De Decker ]
+ * Update symbols file for linux-only symbols in libsmbclient. This should
+ fix the FTBFS on kfreebsd and hurd. Closes: #676170
+ * Enable ctdb for non-linux archs.
+ * Remove old if-up script during upgrade.
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 06 Jun 2012 19:10:02 +0200
+
+samba (2:3.6.5-5) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Make libpam-winbind depend on libnss-winbind.
+
+ [ Ivo De Decker ]
+ * Update symbols file for libsmbclient and libwbclient0
+ * Add lintian overrides for examples in samba-doc
+ * libpam-winbind: change Depends on libnss-winbind to Recommends
+ * libnss-winbind: Suggests libpam-winbind
+ * Update package description for winbind, libpam-winbind and libnss-winbind
+ to better reflect their content
+ * Backport vfs_shadow_copy2 from master, to allow shadow copy to work
+ without wide links
+
+ [ Luk Claes ]
+ * Ship wbclient.pc file in multiarch safe directory (Closes: #674215).
+
+ [ Sam Morris ]
+ * Add libutil_drop_AI_ADDRCONFIG.patch that allows running nmbd when
+ no network interfaces have been assigned an address, therefore
+ removing the need for an if-up script. Closes: #640668,#640508
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 03 Jun 2012 20:00:56 +0200
+
+samba (2:3.6.5-3) unstable; urgency=low
+
+ [ Luk Claes ]
+ * Ship wbclient.pc so cifs-utils can be built again (Closes: #672733).
+ * Activate parallel building. Might need DEB_BUILD_OPTIONS as usual.
+
+ [ Christian Perrier ]
+ * Add Breaks and Replaces on libpam-winbind for newly created
+ libnss-winbind. Thanks to Colin Watson for pointing this and shame
+ on me for not properly checking the transition. Closes: #673122
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 17 May 2012 10:34:38 +0200
+
+samba (2:3.6.5-2) unstable; urgency=low
+
+ * The yearly "SambaXP bug cleaning party" release. 11 years
+ SambaXP, 20 years Samba and counting...
+ * Make samba-common "Multi-Arch: foreign"
+ * Adapt patch in upstream #7499 and stop nss_wins clobbering other
+ daemon's logfiles. Closes: #598313
+ * Add some mention about some use for the user information in Kerberos
+ environments in the smbspool manpage. Closes: #387266
+ * Drop link to no longer provided "Using Samba" documentation in
+ HTML documentation summary file. Closes: #604768
+ * Provide WHATSNEW.txt in samba-doc too as it is linked from the
+ documentation summary file. Do not compress that file.
+ * Fix link to WHATSNEW.txt in HTML documentation summary file. This
+ is the second part of the fix for #604768
+ * Use lp_state_dir() instead of get_dyn_STATEDIR() in
+ fhs-filespaths.patch as the latter does indeed hardcode the
+ location for passdb.tdb and secrets.tdb to /var/lib/samba
+ (the compile-time option for state directory and NOT the configurable
+ value). This is left to "state directory" instead of "private dir"
+ at least as of now, because if doesn't change anything to the
+ current behaviour, but allows the files' location to be configurable
+ through "state directory" (and not "private dir").
+ Closes: #249873
+ * Disable useless smbtorture4 build. Thanks to Ivo De Decker for the patch.
+ Closes: #670561
+ * Add upstream commit that adds waf source to the buildtools/
+ directory. As upstream will, one day or another, merge this, I
+ prefer this over removing the waf binary and repack upstream
+ tarball.
+ Closes: #654499
+ * Build-Conflict with python-ldb and python-ldb-dev to avoid build
+ failures when some versions of these packages are locally installed.
+ Closes: #657314
+ * Rename fix-samba.ldip-syntax.patch to fix-samba.ldif-syntax.patch
+ * Split NSS modules into a new libnss-winbind binary package.
+ Closes: #646292
+ * Add a NEWS.Debian entry about the libnss-winbind split and, while at
+ it, add an entry for libpam-winbind too (as it will affect upgrades
+ from squeeze).
+ * Drop code that was moving files around in samba.postinst and
+ winbind.postinst for pre-squeeze versions of the package.
+ * Drop code that was modifying a deprecated "passdb backend" setting
+ in smb.conf for pre-squeeze versions of the package (in
+ samba-common.config).
+ * Add Should-Start dependency to winbind init script to guarantee
+ that the samba init script is started before winbind if present.
+ Closes: #638066
+ * Provide a (basic) manpage to smbtorture(1). Closes: #528735
+ * Turkish debconf translation update (Atila KOÇ). Closes: #672447
+ * Drop the code that generates an smbpasswd file from the system's
+ user list. This adds very long delays on systems with many users,
+ including those with external user backends. It also makes much
+ less sense nowadays and the use of libpam-smbpass can easily
+ fill most of the needs. Closes: #671926
+ * Merged from Ubuntu:
+ - Set 'usershare allow guests', so that usershare admins are
+ allowed to create public shares in addition to authenticated
+ ones.
+ - add map to guest = Bad user, maps bad username to guest access.
+ This allows for anonymous user shares. Closes: #672497
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 12 May 2012 14:30:58 +0200
+
+samba (2:3.6.5-1) unstable; urgency=low
+
+ * New upstream release. Fixes CVE-2012-2111: Incorrect permission
+ checks when granting/removing privileges can compromise file
+ server security.
+ * Build-Depend on debhelper >= 9~ (which is in unstable for a few
+ months now)
+ * Use "set -e" in maintainer scripts instead of passing -e in the
+ shebang line
+ * Update Standards to 3.9.3 (checked, no change)
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 01 May 2012 08:07:39 +0200
+
+samba (2:3.6.4-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Two changes in the previous version should indeed read:
+ - samba.postinst: Avoid scary pdbedit warnings on first import.
+ - samba-common.postinst: Add more informative error message for the case
+ where smb.conf was manually deleted.
+ Closes: #664509
+
+ [ Jelmer Vernooij ]
+ * New upstream release.
+ + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
+ beyond of allocated array.
+
+ -- Jelmer Vernooij <jelmer@debian.org> Wed, 11 Apr 2012 23:25:41 +0200
+
+samba (2:3.6.3-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Fix example samba.ldif syntax. Closes: #659963
+ * Set minimal version of tdb ot 1.2.6 in Build-Depends
+ (thanks, backports!)
+ * Lower priority of debconf question to medium after some pondering.
+ After all, we have a sane default. Closes: #662801
+ * Merge some Ubuntu patches:
+ - samba.config: Avoid scary pdbedit warnings on first import.
+ - samba.postinst: Add more informative error message for the case
+ where smb.conf was manually deleted.
+
+ [ Maarten Bezemer ]
+ * Removed references to the testprns command from documentation
+ * Added notes that the smbsh command is not available in this package
+ Closes: #662243
+
+ [ Debconf translations ]
+ * Indonesian (Arief S Fitrianto). Closes: #660312
+ * Slovak (Ivan Masár). Closes: #661125
+
+ [ Steve Langasek ]
+ * Use Debian copyright-format 1.0 in debian/copyright.
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 12 Mar 2012 20:49:24 +0100
+
+samba (2:3.6.3-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+ * Fixes CVE-2012-0817:
+ The Samba File Serving daemon (smbd) in Samba versions
+ 3.6.0 to 3.6.2 is affected by a memory leak that can
+ cause a server denial of service.
+
+ [ Debconf translations ]
+ * Polish (Michał Kułach). Closes: #657770
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 31 Jan 2012 22:09:39 +0100
+
+samba (2:3.6.2-1) unstable; urgency=low
+
+ * New upstream release
+ * Drop bug_601406_fix-perl-path-in-example.patch (applied upstream)
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 27 Jan 2012 21:38:52 +0100
+
+samba (2:3.6.1-3) unstable; urgency=low
+
+ [ Sam Hartman ]
+ * Increase libkrb5-dev dependency to avoid depending on
+ krb5_locate_kdc, Closes: #650541
+
+ [ Steve Langasek ]
+ * Fix the libpam-winbind description to more accurately identify the
+ protocols being used by nss_wins. Closes: #650091.
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 01 Dec 2011 21:56:52 +0100
+
+samba (2:3.6.1-2) unstable; urgency=low
+
+ * Merge changes from 3.5.11~dfsg-4 and unreleased -5 in unstable branch
+ * debian/patches/initialize_password_db-null-deref: Avoid null
+ dereference in initialize_password_db(). Closes LP: #829221.
+ * Mark samba-common Multi-Arch: foreign.
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 27 Nov 2011 19:06:39 +0100
+
+samba (2:3.6.1-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 22 Oct 2011 10:56:17 +0200
+
+samba (2:3.6.0-1) experimental; urgency=low
+
+ * New upstream release
+ * Resync with packaging changes in 3.5 branch between 3.5.8~dfsg1
+ and 3.5.11~dfsg-1
+ * Drop wbc_async.h from libwbclient-dev as, according to upstream's
+ commit c0a7c9f99188ebb3cd27094b9364449bcc2f80d8, " its only user is
+ smbtorture3"
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 11 Aug 2011 09:14:53 +0200
+
+samba (2:3.6.0~rc3-1) experimental; urgency=low
+
+ * New upstream version
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 29 Jul 2011 23:11:10 +0200
+
+samba (2:3.6.0~rc2-1) experimental; urgency=low
+
+ * New upstream version
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 07 Jun 2011 23:09:41 +0200
+
+samba (2:3.6.0~rc1-2) experimental; urgency=low
+
+ * Use --with-nmbdsocketdir=/var/run/samba to have nmbd socket file
+ in an existing directory. Closes: #628121
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 27 May 2011 15:35:44 +0200
+
+samba (2:3.6.0~rc1-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 19 May 2011 22:26:08 +0200
+
+samba (2:3.6.0~pre3-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+ * add "#include "fcntl.h"" to idmap_tdb2.c to get it compiled
+ * samba-doc-pdf: add Samba3-HOWTO.pdf from pre1 as it
+ was forgotten upstream
+ * libwbclient0.symbols: dropped several symbols related to
+ asynchronous actions that weren't working anyway (according
+ to Kai Blin at SambaXP)
+
+ [ Mathieu Parent ]
+ * Build against libctdb-dev (>= 1.10+git20110412) to have required control:
+ CTDB_CONTROL_SCHEDULE_FOR_DELETION.
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 09 May 2011 11:29:52 +0200
+
+samba (2:3.5.11~dfsg-4) unstable; urgency=low
+
+ * Lintian override for libpam-winbind; it's not a shared library so doesn't
+ really need the pre-depends on multiarch-support.
+ * export DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow, taken from Ubuntu.
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 21 Oct 2011 16:01:29 -0700
+
+samba (2:3.5.11~dfsg-3) unstable; urgency=low
+
+ * Split winbind into separate packages, winbind and libpam-winbind,
+ with the latter marked Multi-Arch: same and the former marked
+ Multi-Arch: foreign, so that we can install multiple copies of the
+ pam module and nss modules on the same system.
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 21 Oct 2011 20:00:13 +0000
+
+samba (2:3.5.11~dfsg-2) unstable; urgency=low
+
+ * Don't export DEB_HOST_ARCH_OS in debian/rules, this is only used locally.
+ * Use dh_links instead of manually creating directories and symlinks from
+ debian/rules.
+ * Switch from dh_movefiles to dh_install and adjust for debhelper compat
+ level 7, in preparation for moving to dh(1).
+ * Where possible, use dh_installman and dh_install's support for target
+ directories instead of moving files around in debian/rules.
+ * We don't need to mess with perms on usr/include/libsmbclient.h anymore
+ in debian/rules, the upstream install target gets it right
+ * Use debian/clean instead of removing left-behind files by hand in the
+ clean target
+ * Convert debian/rules to dh(1).
+ * Don't run debconf-updatepo on clean; not worth the divergence in
+ debian/rules anymore :)
+ * Don't install debian/README.build in the package; this is really only
+ relevant in the source.
+ * Bump to debhelper compat level 9 and build libraries for multiarch.
+ * Drop Makefile.internal from libsmbclient-dev examples so that we can mark
+ libsmbclient-dev Multi-Arch: same.
+ * Bump build-depends on debhelper to 8.9.4, so we ensure we have
+ dpkg-buildflags by default and get full build hardening enabled out of
+ the box - critical for a server like samba.
+ * Use DH_ALWAYS_EXCLUDE instead of passing override options to
+ dh_installexamples.
+ * Pass --sourcedirectory=source3 to dh instead of having to pass it to each
+ dh_auto_* command.
+ * Ironically, this means that we have to manually disable dh_auto_test,
+ which now finds the makefile targets but doesn't work unless we build an
+ extra wrapper library into our binaries that we don't want.
+ * Drop a few configure options from debian/rules that shadow the built-in
+ defaults.
+ * debian/libsmbclient.lintian-overrides: yes, we know the package name
+ doesn't match the soname - and it never should until there's an ABI
+ change.
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 07 Oct 2011 21:36:43 -0700
+
+samba (2:3.5.11~dfsg-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 05 Aug 2011 20:12:01 +0200
+
+samba (2:3.5.10~dfsg-1) unstable; urgency=low
+
+ * New upstream release
+ * Security update, fixing the following issues:
+ - CVE-2011-2694: possible XSS attack in SWAT
+ - CVE-2011-2522: Cross-Site Request Forgery vulnerability in SWAT
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 28 Jul 2011 12:19:01 +0200
+
+samba (2:3.5.9~dfsg-1) unstable; urgency=low
+
+ * New upstream release
+ * Add "--quiet" to start-stop-daemon call in reload target in init
+ script. Closes: #572483
+ * Add examples/LDAP in examples for the samba package. With this,
+ samba.schema will be provided in some way in the package.
+ This very partially addresses #190162
+ * patches/bug_221618_precise-64bit-prototype.patch: precise
+ 64bits prototype in libsmbclient-dev. Closes: #221618
+ * patches/no-unnecessary-cups.patch: dropped after upstream
+ changes to printing code
+ * Update Standards to 3.9.2 (checked, no change)
+ * Add build-arch and build-indep targets in debian/rules
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 18 Jun 2011 07:08:00 +0200
+
+samba (2:3.5.8~dfsg-5) unstable; urgency=low
+
+ * Fix "tdb2.so undefined symbol: dyn_get_STATEDIR" by fixing a typo
+ in fhs-filespath.patch. Closes: #629183, LP: #789097
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 04 Jun 2011 13:48:32 +0200
+
+samba (2:3.5.8~dfsg-4) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Spanish (Omar Campagne). Closes: #627813
+ * Swedish (Martin Bagge / brother). Closes: #627849
+ * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #627866
+
+ [ Christian Perrier ]
+ * bug_601406_fix-perl-path-in-example.patch: fix path to perl
+ binary in example file. Closes: #601406
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 27 May 2011 12:23:05 +0200
+
+samba (2:3.5.8~dfsg-3) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Italian (Luca Monducci). Closes: #626674
+ * Dutch (Vincent Zweije). Closes: #627519
+ * Czech (Miroslav Kure). Closes: #627442
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 24 May 2011 22:40:04 +0200
+
+samba (2:3.5.8~dfsg-2) unstable; urgency=low
+
+ [ Jelmer Vernooij ]
+ * Add libwbclient-dev package.
+ * Build against external libtdb.
+ * Bump standards version to 3.9.1 (no changes).
+
+ [ Mathieu Parent ]
+ * Builddep on libctdb-dev or ctdb < 1.10
+
+ [ Christian Perrier ]
+ * Use db_settitle in debconf questions and make these
+ titles translatable. Closes: #560318
+ * Test the presence of testparm before trying to use it in init script
+ Closes: #606320
+ * Add cups to Should-{Start,Stop} in LSB headers of
+ samba init script to guarantee that CUPS is started
+ before samba. Closes: #619132
+ * Drop libsmbclient-dev useless dependency on samba-common
+ Closes: #597987
+
+ [ Debconf translations ]
+ * French (Christian Perrier)
+ * Japanese (Kenshi Muto). Closes: #626474
+ * Galician (Miguel Anxo Bouzada). Closes: #626477
+ * Thai (Theppitak Karoonboonyanan). Closes: #626487
+ * Russian (Yuri Kozlov). Closes: #626523
+ * Danish (Joe Hansen). Closes: #626531
+ * Esperanto (Felipe Castro). Closes: #626558
+ * Hebrew (Eran Cohen). Closes: #626638
+ * Bokmål, (Bjørn Steensrud).
+ * Italian (Luca Monducci). Closes: #626674
+ * Finnish (Tapio Lehtonen). Closes: #626890
+ * Portuguese (Miguel Figueiredo). Closes: #627224
+ * German (Holger Wansing). Closes: #627354
+ * Czech (Miroslav Kure). Closes: #627442
+
+ -- Christian Perrier <bubulle@sesostris.kheops.frmug.org> Sun, 22 May 2011 21:15:21 +0200
+
+samba (2:3.5.8~dfsg-1) unstable; urgency=low
+
+ * New upstream release. This fixes the following bugs:
+ - Winbind leaks gids with idmap ldap backend (upstrem #7777)
+ Closes: #613624
+ - printing from Windows 7 fails with 0x000003e6
+ Closes: #617429
+ * smb.conf(5) restored from samba 3.5.6 as a workaround to upstream
+ #7997
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 08 Mar 2011 22:38:32 +0100
+
+samba (2:3.5.7~dfsg-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+ * Security update, fixing the following issue:
+ - CVE-2011-0719: denial of service by memory corruption
+ * Use architecture wildcard "linux-any" in build dependencies
+ Closes: #563372
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 01 Mar 2011 20:59:34 +0100
+
+samba (2:3.5.6~dfsg-5) unstable; urgency=low
+
+ * Fix FTBFS on Hurd. Closes: #610678
+ * Only try parsing dhcpd.conf is it's not empty,
+ in dhclient-enter-hooks.d/samba. Closes: #594088.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 05 Feb 2011 13:50:22 +0100
+
+samba (2:3.5.6~dfsg-4) unstable; urgency=low
+
+ * Fix pam_winbind file descriptor leak with a patch
+ proposed in https://bugzilla.samba.org/show_bug.cgi?id=7265.
+ Upstream claim is that #7265 is fixed in 3.5.6 but our bug submitter
+ confirmed it is not while the patch applied here fixes the file
+ descriptor leak.
+ Closes: #574468
+
+ [ Debconf translations ]
+ * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #607402
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 15 Jan 2011 18:06:22 +0100
+
+samba (2:3.5.6~dfsg-3) unstable; urgency=low
+
+ [ Julien Cristau ]
+ * Bump libwbclient0 shlibs to match the newest version in the symbols file.
+ * Mark libwbclient0 as breaking other samba packages with versions older
+ than 2:3.4.1, as they were linked against libtalloc1 instead of
+ libtalloc2, and the combination causes crashes (closes: #593823).
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 06 Dec 2010 20:14:04 +0100
+
+samba (2:3.5.6~dfsg-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Fix debian/rules update-archs target to not add extra spaces on every
+ invocation...
+
+ [ Debconf translations ]
+ * Catalan (Jordi Mallach). Closes: #601101
+ * Japanese (Kenshi Muto). Closes: #601364
+ * Bulgarian (Damyan Ivanov). Closes: #601366
+ * Hebrew (Omer Zak). Closes: #601633
+ * Kurdish (Erdal Ronahî). Closes: #601719
+ * Dutch (Remco Rijnders). Closes: #602220
+ * Greek (Konstantinos Margaritis).
+
+ [ Christian Perrier ]
+ * Include upstream's patch for "gvfsd-smb (Gnome vfs) fails to copy
+ files from a SMB share using SMB signing.". Backported from
+ to be released 3.5.7 version
+ Closes: #605729
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 04 Dec 2010 07:44:22 +0100
+
+samba (2:3.5.6~dfsg-1) unstable; urgency=low
+
+ * New upstream release. Fixes the following Debian bug:
+ - rpcclient readline segfault. Closes: #597203
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 10 Oct 2010 09:59:37 +0200
+
+samba (2:3.5.5~dfsg-1) unstable; urgency=high
+
+ [ Christian Perrier ]
+ * New upstream release. Security release fixing:
+ - CVE-2019-3069: Buffer overrun vulnerability in sid_parse.
+ Closes: #596891.
+ * Fix comment in swat's postinst. It is not turned off by default
+ Closes: #596040
+ * Drop transition code from (pre-etch) 3.0.20b-3 version in swat postinst
+
+ [ Steve Langasek ]
+ * debian/control: winbind needs libpam-runtime (>= 1.0.1-6) for
+ pam-auth-update. Closes: #594325.
+
+ [ Debconf translations ]
+ * Arabic (Ossama Khayat). Closes: #596164
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 14 Sep 2010 23:03:35 +0200
+
+samba (2:3.5.4~dfsg-2) unstable; urgency=low
+
+ * Release to unstable
+
+ [ Debconf translations ]
+ * Danish (Joe Dalton). Closes: #592789.
+ * Galician (Jorge Barreiro). Closes: #592809
+
+ [ Steve Langasek ]
+ * debian/patches/fhs-filespaths.patch, debian/samba.postinst,
+ debian/winbind.postinst: move some files from /etc/samba to
+ /var/lib/samba where they belong: MACHINE.SID, schannel_store.tdb,
+ and idmap2.tdb.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 07 Sep 2010 17:47:32 +0200
+
+samba (2:3.6.0~pre1-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 04 Aug 2010 01:39:11 +0200
+
+samba (2:3.5.4~dfsg-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 29 Jun 2010 22:00:53 +0200
+
+samba (2:3.5.3~dfsg-1) experimental; urgency=low
+
+ * New upstream release. Fixes the following bugs:
+ - smbclient segfaults when used against old samba "security = share"
+ Closes: #574886
+ * Drop duplicate build dependency on ctdb
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 19 May 2010 22:07:49 +0200
+
+samba (2:3.5.2~dfsg-2) experimental; urgency=low
+
+ * Resync changes with changes in trunk between 3:3.4.4~dfsg-1 and
+ 2:3.4.7~dfsg-2
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 04 May 2010 17:13:47 +0200
+
+samba (2:3.5.2~dfsg-1) experimental; urgency=low
+
+ * New upstream release
+ * Bugs fixed upstream:
+ - Fix parsing of the gecos field
+ Closes: #460494
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 08 Apr 2010 19:48:07 +0200
+
+samba (2:3.5.1~dfsg-1) experimental; urgency=low
+
+ * New upstream release. Security fix: all smbd processes inherited
+ CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
+ allowed even when permissions should have denied access.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 09 Mar 2010 10:54:01 +0100
+
+samba (2:3.5.0dfsg-1) experimental; urgency=low
+
+ * New upstream release. Not using "3.5.0~dfsg" as version number
+ because we used a "higher" version number in previous versions.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 02 Mar 2010 22:03:15 +0100
+
+samba (2:3.5.0~rc3~dfsg-1) experimental; urgency=low
+
+ * New upstream release candidate
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 20 Feb 2010 08:36:57 +0100
+
+samba (2:3.5.0~rc2~dfsg-1) experimental; urgency=low
+
+ * New upstream pre-release
+ * Use new --with-codepagedir option. Consequently drop
+ codepages-location.patch
+ * Drop "Using Samba" from the samba-doc file list as it was
+ removed upstream.
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 31 Jan 2010 11:53:48 +0100
+
+samba (2:3.5.0~rc1~dfsg-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream pre-release
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 15 Jan 2010 23:31:01 +0100
+
+samba (2:3.4.8~dfsg-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Drop the per-release smb.conf templates, only needed for upgrade paths
+ that are no longer supported.
+ * Call /etc/init.d/samba directly from the logrotate script instead of
+ using invoke-rc.d, to address the irony that the only package I work on
+ that *has* a logrotate script is inconsistent with my position in
+ bug #445203.
+ * Fix a bashism in the samba postinst that can cause the package
+ installation to fail under dash. LP: #576307.
+ * Add symlink from /etc/dhcp/dhclient-enter-hooks.d to
+ /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new
+ isc-dhcp-client package. Closes: #585056.
+
+ [ Christian Perrier ]
+ * Don't copy system accounts from /etc/passwd to
+ /var/lib/samba/passdb.tdb. Closes: #502801
+ * Update Standards to 3.9.0 (checked, no change)
+ * Backport patch for upstream bug #7139 to fix "owner of file not
+ available with kerberos"
+ Closes: #586337
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 14 Jul 2010 11:59:28 -0700
+
+samba (2:3.4.8~dfsg-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+ * Bugs fixed upstream:
+ - Fix writing with vfs_full_audit. Closes: #574011
+ * Drop deprecated 'share modes' parameter from default smb.conf
+ Closes: #580561
+ * Enable PIE during configure. Closes: #509135
+ * Avoid winbind's logrotate script to fail when there is no
+ /var/run/samba directory. Closes: #569926
+ * Add explanations about "passdb backend" default setting change
+ Closes: #553904
+
+ [ Debconf translations ]
+ * Spanish (Omar Campagne). Closes: #579011
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 12 May 2010 05:45:52 +0200
+
+samba (2:3.4.7~dfsg-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Drop smbfs package (now provided by cifs-utils as a dummy transition
+ package)
+
+ [ Debconf translations ]
+ * Portuguese (Miguel Figueiredo). Closes: #575958
+
+ [ Steve Langasek ]
+ * winbind.prerm: don't forget to remove the PAM profile on package
+ removal :/
+ * Fix winbind.pam-config to not interfere with password changes for
+ non-winbind accounts. Closes: #573323, LP: #546874.
+ * debian/samba.if-up, debian/rules: add an if-up.d script for samba to
+ try to start nmbd, if it's not running because /etc/init.d/samba ran
+ before the network was up at boot time. Closes: #576415, LP: #462169.
+ * debian/samba.if-up: allow "NetworkManager" as a recognized address
+ family... it's obviously /not/ an address family, but it's what gets
+ sent when using NM, so we'll cope for now.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 17 Apr 2010 07:49:49 +0200
+
+samba (2:3.4.7~dfsg-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Add a PAM profile for pam_winbind. Closes: #566890, LP: #282751.
+ * Add the correct versioned build dependency on libtalloc-dev as
+ we need 2.0.1 to build samba. Closes: #572603
+ * Add avr32 to arches with a build dependency on ctdb. Closes: #572126
+
+ [ Christian Perrier ]
+ * New upstream release. Security fix: all smbd processes inherited
+ CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
+ allowed even when permissions should have denied access.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 09 Mar 2010 10:52:24 +0100
+
+samba (2:3.4.6~dfsg-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 26 Feb 2010 22:39:50 +0100
+
+samba (2:3.4.5~dfsg-2) unstable; urgency=low
+
+ [ Steve langasek ]
+ * Revert the "bashisms" fix from version 2:3.3.0~rc2-4; "local foo=bar"
+ is explicitly allowed by Policy now, and this change introduced a
+ syntax error. Closes: #566946.
+
+ [ Christian Perrier ]
+ * No longer maker (u)mount.cifs setuid root. Add a notice
+ about this in the package's NEWS.Debian file
+ Closes: #567554
+ * Use dh_lintian instead of manual install of lintian overrides
+ * Updated Standards to 3.8.4 (checked, no change)
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 13 Feb 2010 14:36:33 +0100
+
+samba (2:3.4.5~dfsg-1) unstable; urgency=low
+
+ * New upstream release. Bugs fixed by this release:
+ - Memory leak in smbd. Closes: #538819, #558453
+ * Declare a versioned dependency of winbind and samba on libwbclient0
+ Closes: #550481
+ * A few lintian fixes:
+ * Drop /var/run/samba from samba-common. The directory is created
+ by init scripts when needed.
+ * No longer prepend a path to the mksmbpasswd call in samba.postinst.
+ This prevents the local administrator to use a replacement version
+ for some local reason.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 23 Jan 2010 12:16:42 +0100
+
+samba (2:3.4.4~dfsg-1) unstable; urgency=low
+
+ * New upstream version.
+ * Drop all RFC files from upstream source, therefore using a "~dfsg"
+ suffix to upstream version number.
+ * Bugs fixed upstream:
+ - fixed list of workgroup servers in libsmbclient.
+ Closes: #555462, #561148
+ - fixed documentation of the credentials file format in
+ mount.cifs(8). Closes: #552250
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 14 Jan 2010 20:16:34 +0100
+
+samba (2:3.4.3-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Switch to source format 3.0 (quilt)
+ * Better adapt "add machine script" example to adduser
+ Thanks to Heiko Schlittermann for the suggestion
+ Closes: #555466
+
+ [ Steve Langasek ]
+ * The "I hate non-declarative alternatives" upload:
+ - debian/samba{,-common}.prerm: don't call update-alternatives --remove
+ on upgrade, /do/ call it on other invocations of the prerm script. If
+ these tools ever go away, the removal needs to be handled on upgrade by
+ the maintainer scripts of the new package version.
+ - debian/samba{,-common-bin}.postinst: call update-alternatives
+ unconditionally, don't second-guess the maintainer script arguments.
+ - debian/samba.postinst: call update-alternatives after the debconf
+ handling, not before; debconf triggers a re-exec of the script so
+ anything done before invoking debconf is wasted because it will be
+ re-done, and if there's already a debconf frontend running when this
+ is called, the not-redirected update-alternatives output will confuse
+ it. Closes: #558116.
+ - debian/samba-common.prerm: move to samba-common-bin, this is the package
+ that owns these binaries.
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 17 Dec 2009 16:53:13 +0100
+
+samba (2:3.4.3-1) unstable; urgency=low
+
+ * New upstream release. This fixes the following bugs:
+ - Do not attempt to update /etc/mtab if it is
+ a symbolic link. Closes: #408394
+ * Bump Standards-Version to 3.8.3 (checked)
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 31 Oct 2009 14:32:07 +0100
+
+samba (2:3.4.2-1) unstable; urgency=high
+
+ * New upstream release. Security update.
+ * CVE-2009-2813:
+ Connecting to the home share of a user will use the root of the
+ filesystem as the home directory if this user is misconfigured to
+ have an empty home directory in /etc/passwd.
+ * CVE-2009-2948:
+ If mount.cifs is installed as a setuid program, a user can pass it
+ a credential or password path to which he or she does not have
+ access and then use the --verbose option to view the first line of
+ that file.
+ * CVE-2009-2906:
+ Specially crafted SMB requests on authenticated SMB connections
+ can send smbd into a 100% CPU loop, causing a DoS on the Samba
+ server.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 03 Oct 2009 08:30:33 +0200
+
+samba (2:3.4.1-2) unstable; urgency=low
+
+ * ./configure --disable-avahi, to avoid accidentally picking up an avahi
+ dependency when libavahi-common-dev is installed.
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 26 Sep 2009 00:01:12 -0700
+
+samba (2:3.4.1-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release. This fixes the following bugs:
+ - smbd SIGSEGV when breaking oplocks. Thanks to Petr Vandrovec
+ for the clever analysis and collaboration with upstream.
+ Closes: #541171
+ - Fix password change propagation with ldapsam. Closes: #505215
+ - Source package contains non-free IETF RFC/I-D. Closes: #538034
+ * Turn the build dependency on libreadline5-dev to libreadline-dev
+ to make further binNMUs easier when libreadline soname changes
+ Thanks to Matthias Klose for the suggestion
+
+ [ Steve Langasek ]
+ * Don't build talloctort when using --enable-external-talloc; and don't
+ try to include talloctort in the samba-tools package, since we're
+ building with --enable-external-talloc. :) Closes: #546828.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 21 Sep 2009 22:20:22 -0700
+
+samba (2:3.4.0-5) unstable; urgency=low
+
+ * Move /etc/pam.d/samba back to samba-common, because it's shared with
+ samba4. Closes: #545764.
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 08 Sep 2009 18:43:17 -0700
+
+samba (2:3.4.0-4) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * debian/samba.pamd: include common-session-noninteractive instead of
+ common-session, to avoid pulling in modules specific to interactive
+ logins such as pam_ck_connector.
+ * debian/control: samba depends on libpam-runtime (>= 1.0.1-11) for the
+ above.
+ * rename debian/samba.pamd to debian/samba.pam and call dh_installpam
+ from debian/rules install, bringing us a smidge closer to a stock
+ debhelper build
+ * don't call pyversions from debian/rules, this throws a useless error
+ message during build.
+ * fix up the list of files that need to be removed by hand in the clean
+ target; the majority of these are now correctly handled upstream.
+ * debian/rules: fix the update-arch target for the case of unversioned
+ build-deps.
+ * Pull avr32 into the list of supported Linux archs. Closes: #543543.
+ * Fix LSB header in winbind.init; thanks to Petter Reinholdtsen for the
+ patch. Closes: #541367.
+
+ [ Christian Perrier ]
+ * Use DEP-3 for patches meta-information
+
+ [ Steve Langasek ]
+ * Change swat update-inetd call to use --remove only on purge,
+ and --disable on removal.
+ * Add missing build-dependency on pkg-config, needed to fix libtalloc
+ detection
+ * debian/patches/external-talloc-support.patch: fix the Makefile so it
+ works when using external talloc instead of giving a missing-depend
+ error.
+ * debian/patches/autoconf.patch: resurrect this patch, needed for the
+ above.
+ * debian/rules: build with --without-libtalloc
+ --enable-external-libtalloc, also needed to fix the build failure.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 07 Sep 2009 22:58:29 -0700
+
+samba (2:3.4.0-3) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * debian/control: samba-common-bin has no reason to depend on
+ libpam-modules.
+
+ [ Christian Perrier ]
+ * Fix "invalid argument" when trying to copy a file from smb share
+ Use an upstream patch that will be included in 3.4.1
+ Closes: #536757
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 21 Aug 2009 11:08:43 +0200
+
+samba (2:3.4.0-2) unstable; urgency=low
+
+ [ Debconf translations ]
+ * German. Closes: #536433
+
+ [ Steve Langasek ]
+ * Enable the ldap idmap module; thanks to Aaron J. Zirbes. Closes: #536786.
+
+ [ Jelmer Vernooij ]
+ * Properly rename smbstatus.1 for alternatives. Closes: #534772
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 02 Aug 2009 12:20:51 +0200
+
+samba (2:3.4.0-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release: first upload to unstable for 3.4
+ * Correct dependencies for samba-common-bin. Closes: #534595
+
+ [ Debconf translations ]
+ * Czech. Closes: #534793
+ * Russian. Closes: #534796
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 07 Jul 2009 20:42:19 +0200
+
+samba (2:3.4.0~rc1-1) experimental; urgency=low
+
+ * New upstream version. That fixes the following bugs:
+ - Remove pidfile on clean shutdown. Closes: #299433, #454112
+ * Drop swat-de.patch that was applied upstream
+ * Bump debhelper compatibility level to 6 and declare a versioned
+ dependency on debhelper >= 6.0.0
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 20 Jun 2009 18:43:20 +0200
+
+samba (2:3.4.0~pre2-1) experimental; urgency=low
+
+ [ Jelmer Vernooij ]
+ * Split binaries out of samba-common into samba-common-bin.
+ Closes: #524661
+
+ [ Christian Perrier ]
+ * New upstream version. That fixes the following bugs:
+ - Do not limit the number of network interfaces. Closes: #428618
+ - Fix Connect4 in samr.idl. Closes: #526229
+ * "Using samba" is back.
+ * Drop non-linux-ports.patch that was integrated upstream
+ * Drop smbpasswd-syslog.patch that was integrated upstream
+ * Drop smbclient-link.patch that was integrated upstream
+
+ [ Debconf translations ]
+ * Italian. Closes: #529350
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 06 Jun 2009 11:45:35 +0200
+
+samba (2:3.4.0~pre1-1) experimental; urgency=low
+
+ * New upstream pre-release
+ * "Using samba" is dropped from upstream source. Therefore, drop
+ debian/samba-doc.doc-base.samba-using
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 20 May 2009 18:50:35 +0200
+
+samba (2:3.3.6-1) unstable; urgency=high
+
+ * New upstream release. Security release.
+ * CVE 2009-1886: Fix Formatstring vulnerability in smbclient
+ * CVE 2009-1888: Fix uninitialized read of a data value
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 26 Jun 2009 18:21:51 +0200
+
+samba (2:3.3.5-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * debian/patches/undefined-symbols.patch: fix up patch so that it's
+ suitable for submission upstream.
+ * debian/patches/proper-static-lib-linking.patch: apply the rules to
+ vfstest, ldbrename, nss_wins, pam_winbind, pam_smbpass, and
+ rpc_open_tcp.
+
+ [ Debconf translations ]
+ * Italian. Closes: #529350
+
+ [ Christian Perrier ]
+ * New upstream version
+ * Lintian fixes:
+ - Declare versioned dependency on debhelper to fit what we have in
+ debian/compat
+ - samba.postinst: do not call mksmbpasswd with an absolute path
+ * Upgrade Standard to 3.8.2 (checked, no change)
+ * Upgrade debhelper compatibility level to 6
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 20 Jun 2009 08:01:16 +0200
+
+samba (2:3.3.4-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Do no compile with clustering support on non-Linux platforms
+ Closes: #528382
+
+ [ Debconf translations ]
+ * Basque. Closes: #528757
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 16 May 2009 17:31:09 +0200
+
+samba (2:3.3.4-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release:
+ - Fixed daily winbind crash when retrieving users from an ADS server
+ Closes: #522907.
+ * Add idmap_tdb2 module to winbind package
+ * No longer shrink "dead" code from smbd, winbindd and vfstest as it prevents
+ VFS modules to properly load. Closes: #524048.
+
+ [ Debconf translations ]
+ * Bengali added.
+
+ [ Steve Langasek ]
+ * Recommend logrotate instead of depending on it. Closes: #504219.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 02 May 2009 10:06:16 +0200
+
+samba (2:3.3.3-1) unstable; urgency=low
+
+ * New upstream release:
+ - Fix map readonly. Closes: #521225
+ - Add missing whitespace in mount.cifs error message. Closes: #517021
+ - Includes our patch to fix detection of GNU ld version. As a
+ consequence, we dropped fix_wrong_gnu_ld_version_check.patch
+ - Fix segfault in lookup_sid. Closes: #521408
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 11 Apr 2009 10:12:23 +0200
+
+samba (2:3.3.2-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * libcap2-dev is only available on Linux, so make this build-dependency
+ conditional. Closes: #519911.
+
+ [ Christian Perrier ]
+ * Switch samba-dbg to "Section: debug"
+ * Update debian/copyright for year 2009. Thanks to debian-devel
+ for the reminder.
+ * Dropping Adam Conrad from Uploaders
+ * Dropping Eloy Paris from Uploaders with special thanks for his tremendous
+ work maintaining the package between 1997 and 2004.
+
+ [ Mathieu Parent ]
+ * ensure clustering is enabled with --with-cluster-support=yes
+ * build-depends on ctdb >= 1.0.73. Closes: #520202.
+ * samba suggests ctdb
+
+ [ Debconf translations ]
+ * Esperanto updated. Closes: #519237.
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 29 Mar 2009 09:23:35 +0200
+
+samba (2:3.3.2-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release. Closes: #519626
+ - mounts with -o guest will now automatically try to connect anonymously.
+ Closes: #423971.
+ - fix for brokenness when using 'force group'. Closes: #517760.
+ - fix for saving files on Samba shares using MS Office 2007.
+ LP: #337037.
+ * Re-fix slave links for manual pages in samba-common. Closes: #517204.
+
+ [ Steve Langasek ]
+ * Add missing debhelper token to libpam-smbpass.prerm.
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 15 Mar 2009 12:16:48 +0100
+
+samba (2:3.3.1-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release. Closes: #516981
+ Upstream fixes in that release:
+ - Fixed various spelling errors/typos in manpages
+ Closes: #516047
+ - Fix renaming/deleting of files using Windows clients.
+ Closes: #516160
+ - Fix syntax error in mount.cifs(8). Closes: #454799
+ * Use a slave alternative for smbstatus.1 even though that manpage
+ is not provided by samba4
+
+ [ Jelmer Vernooij ]
+ * Fix slave links for manual pages in samba-common. Closes: #517204.
+
+ [ Steve Langasek ]
+ * Add Vcs-{Browser,Svn} fields to debian/control.
+ * When populating the sambashare group, it's not an error if the user
+ simply doesn't exist; test for this case and let the install continue
+ instead of aborting. LP: #206036.
+ * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst,
+ debian/libpam-smbpass.files, debian/rules: provide a config block
+ for the new PAM framework, allowing this PAM module to
+ auto-configure itself
+ * debian/control: make libpam-smbpass depend on
+ libpam-runtime (>= 1.0.1-2ubuntu1) for the above
+ * debian/patches/fix_wrong_gnu_ld_version_check.patch: new patch to fix
+ wrong detection of the GNU ld version, so that the symbol export scripts
+ will be properly applied when building.
+ * refresh debian/libsmbclient.symbols for 3.3.1.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 02 Mar 2009 00:30:35 -0800
+
+samba (2:3.3.0-4) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Build-Depend on libcap2-dev. Closes: #515851.
+ * debian/patches/fhs-filespaths-debatable.patch: Add a missing prototype
+ for cache_path, which causes nearly undiagnoseable crashes when building
+ with -fPIE, because of a wrong return type! LP: #330626.
+
+ [ Debconf translations ]
+ * Belarusian added. Closes: #516052.
+ * Traditional Chinese updated. Closes: #516594
+ * Swedish updated. Closes: #516681.
+
+ [ Mathieu Parent ]
+ * enable clustering by default (CTDB). Closes: #514050
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 24 Feb 2009 16:58:58 -0800
+
+samba (2:3.3.0-3) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Re-add smb.conf fixes that were dropped in the 3.3.0 merge to unstable.
+ * Make samba conflict with samba4, not with itself.
+
+ [ Debconf translations ]
+ * Vietnamese updated. Closes: #515235.
+ * Slovak updated. Closes: #515240.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 16 Feb 2009 07:15:47 -0800
+
+samba (2:3.3.0-2) unstable; urgency=low
+
+ * Upload to unstable
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 14 Feb 2009 13:38:14 +0100
+
+samba (2:3.2.5-4) unstable; urgency=low
+
+ * Fix segfault whan accessign some NAS devices running old versions of Samba
+ Closes: #500129
+ * Fix process crush when using gethostbyname_r in several threads
+ Closes: #509101, #510450
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 08 Jan 2009 05:59:17 +0100
+
+samba (2:3.2.5-3) unstable; urgency=high
+
+ * Security update
+ * Fix Potential access to "/" in setups with registry shares enabled
+ This fixes CVE-2009-0022, backported from 3.2.7
+ * Fix links in HTML documentation index file.
+ Closes: #508388
+ * Drop spurious docs-xml/smbdotconf/parameters.global.xml.new
+ file in the diff. Thanks to the release managers for spotting it
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 21 Dec 2008 08:09:31 +0100
+
+samba (2:3.2.5-2) unstable; urgency=low
+
+ * Fix typo in bug number in a comment for the default smb.conf file
+ Closes: #507620
+ * Document the need to set appropriate permissions on the printer
+ drivers directory, in the default smb.conf file. Also change
+ the example group from ntadmin to lpadmin
+ Closes: #459243
+ * Add missing rfc2307.so and sfu*.so links that prevent using the
+ 'winbind nss info' feature properly
+ Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for
+ the patch. Closes: #506109
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 13 Dec 2008 13:56:07 +0100
+
+samba (2:3.2.5-1) unstable; urgency=high
+
+ * New upstream version. Security-only release.
+ This addresses CVE-2008-4314: potentially leaking
+ arbitrary memory contents to malicious clients.
+ * Better document cases where using a "master" file for smb.conf
+ is a bad idea. Closes: #483187
+ * Insert example "add machine script" and "add group script" scripts
+ in the default smb.conf. Closes: #349049
+ * Move homepage URL to Homepage filed in debian/control
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 27 Nov 2008 11:36:35 +0100
+
+samba (2:3.3.0-1) experimental; urgency=low
+
+ * New upstream release. Fixes the following bugs:
+ - smb file deletion gvfs. Closes: #510564
+ - smbclient du command does not recuse properly. Closes: #509258
+ - mention possible workgroup field in credential files in mount.cifs(8)
+ Closes: #400734
+ - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init
+ Closes: #489656
+ - describe '-g' option in smbclient man page. Closes: #510812
+ - fix swat status table layout. Closes: #511275
+
+ [ Jelmer Vernooij ]
+ * Use alternatives for the smbstatus, nmblookup, net and
+ testparm binaries and various data files in samba-common
+ to allow installation of Samba 3 together with Samba 4.
+ * Add myself to uploaders.
+
+ [ Christian Perrier ]
+ * Add mbc_getOptionCaseSensitive@Base, smbc_setOptionCaseSensitive@Base,
+ smbc_set_credentials@Base, smbc_urldecode@Base and smbc_urlencode@Base to
+ libsmbclient's symbols file with 3.3.0 as version number
+ * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as
+ version number
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 30 Jan 2009 21:41:49 +0100
+
+samba (2:3.3.0~rc2-4) experimental; urgency=low
+
+ [ Steve Langasek ]
+ * Revert one of the template depersonalization changes from the -2 upload,
+ because it loses important context
+
+ [ Christian Perrier ]
+ * Use double quotation marks in debconf templates
+ * Add 'status" option to init scripts. Thansk to Dustin Kirkland for
+ providing the patch. Closes: #488275
+ * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997
+ * [Lintian] Add ${misc:Depends} to dependencies of binary packages
+ that didn't have it already as we're using debhelper in the source
+ package
+ * [Lintian] Don't ignore errors in swat.postrm
+ * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config
+ and samba-common.config
+ * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5)
+ Closes: #512843
+
+ [ Debconf translations ]
+ * Asturian added. Closes: #511730
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 24 Jan 2009 16:04:57 +0100
+
+samba (2:3.3.0~rc2-3) experimental; urgency=low
+
+ * Fix around the libsmbclient/libsmbclient-dev descriptions, which got
+ swapped in the last upload.
+ * Drop a boilerplate sentence from the samba-common, smbclient, swat,
+ samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions
+ that's not relevant for these packages.
+ * Hyphenate "command-line" in the smbclient short description.
+ * Fix up the smbclient description, which got crossed with the smbfs one.
+ * Fix the smbfs description, which was not actually fixed in the previous
+ upload. Really closes: #496206.
+ * Further minor adjustments to the description of the swat package.
+ * Fix various inaccuracies in the winbind package description.
+ * Clarify in the description that samba-tools are extra, only useful for
+ testing.
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 30 Dec 2008 18:42:05 -0800
+
+samba (2:3.3.0~rc2-2) experimental; urgency=low
+
+ [ Steve Langasek ]
+ * Handle clearing out netbios settings whenever the DHCP server has gone
+ away. Closes: #299618.
+
+ [ Christian Perrier ]
+ * Point the correct document about password encryption in debconf templates
+ Corrected in translations as well. Closes: #502838
+ * Reword debconf templates to avoid mentioning the local host as a "server".
+ Closes: #171177
+ * Use this opportunity for other minor rewording:
+ - replace "SMB" by "SMB/CIFS"
+ - more strongly discouraging the use of plain text passwords
+ - unpersonnalization
+ * Reword the libpam-smbpass package description
+ Thanks to Justin B. Rye for the very useful suggestions
+ Closes: #496196
+ * Improve the package descriptions by rewording the description overhaul
+ Also improve the specific information for samba and samba-dbg
+ Thanks again to Justin B. Rye for the invaluable help
+ Closes: #496200
+ * Improve libsmbclient package description. Closes: #496197
+ * Improve libwbclient0 package description. Closes: #496199
+ * Improve samba-doc package description. Closes: #496202
+ * Improve samba-tools package description. Closes: #496203
+ * Improve samba-common package description. Closes: #496204
+ * Improve smbclient package description. Closes: #496205
+ * Improve smbfs package description. Closes: #496206
+ * Improve swat package description. Closes: #496207
+ * Improve winbind package description. Closes: #496208
+ * Improve samba-doc-pdf package description. Closes: #496211
+ * Update French debconf translation
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 29 Dec 2008 11:50:04 +0100
+
+samba (2:3.3.0~rc2-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 17 Dec 2008 08:22:18 +0100
+
+samba (2:3.3.0~rc1-2) experimental; urgency=low
+
+ * Provide idmap_adex and idmap_hash in winbind.
+ Thanks to Jelmer Jaarsma for reporting and providing a patch
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 04 Dec 2008 19:59:23 +0100
+
+samba (2:3.3.0~rc1-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 28 Nov 2008 10:51:32 +0100
+
+samba (2:3.3.0~pre2-1) experimental; urgency=low
+
+ * New upstream release.
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 07 Nov 2008 20:52:36 +0100
+
+samba (2:3.2.4-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * New upstream release.
+ - debian/rules: we don't need to move cifs.upcall around, it's now
+ installed to the right place upstream.
+ - Fixed in this release:
+ - typo in cifs.upcall.8. Closes: #501499
+
+ [ Christian Perrier ]
+ * Create /var/lib/samba in samba-common. Thanks to Thierry Carrez for
+ the patch. Closes: #499359
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 18 Oct 2008 08:20:31 +0200
+
+samba (2:3.2.3-3) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Add missing manpage for cifs.upcall; thanks to Per Olofsson for pointing
+ this out. Closes: #497857.
+ * Georgian debconf translation added. Closes: #498426
+ * Polish debconf translation added. Thanks to Łukasz Paździora.
+
+ [ Jelmer Vernooij ]
+ * Add ldb-tools to Suggests: of samba. Closes: #488384
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 03 Oct 2008 20:37:19 +0200
+
+samba (2:3.2.3-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Fix FTBFS on GNU/kFreeBSD. Closes: #496880
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 30 Aug 2008 00:46:07 -0700
+
+samba (2:3.2.3-1) unstable; urgency=high
+
+ * High-urgency upload for security fix
+ * New upstream release
+ - Fix "/usr/lib/cups/backend/smb does not try port 139 anymore by default"
+ Closes: #491881
+ - Fix the default permissions on ldb databases. Addresses
+ CVE-2008-3789; closes: #496073.
+ - debian/rules, debian/smbfs.files: build with cifs.upcall,
+ newly introduced to replace cifs.spnego
+ - debian/rules: no more need to rename libsmbclient.so to
+ libsmbclient.so.0, or libwbclient.so to libwbclient.so.0
+
+ [ Noèl Köthe ]
+ * fixing lintian warning "build-depends-on-1-revision"
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 27 Aug 2008 10:19:59 -0700
+
+samba (2:3.2.1-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Build-depend on keyutils only on the linux archs. Closes: #493401.
+ * New patch debian/patches/shrink-dead-code.patch: throw all .o files into
+ a .a archive as a first pass before linking the final executables, so
+ that the executables don't end up with quite so much unused code bloating
+ the system. Not applied to net or ntlm_auth, which have particularly
+ hairy linking needs. Partially addresses: bug #474543; no code was
+ harmed in the making of this patch.
+ * Build-depend on libcups2-dev | libcupsys2-dev, to facilitate backports.
+
+ [ Christian Perrier ]
+ * New upstream release
+ - Fix trusted domain handling in Winbindd. Closes: #493752
+ - Fix for print jobs that continued to show as active after printing
+ had completed. Closes: #494899.
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 14 Aug 2008 16:13:24 -0700
+
+samba (2:3.2.0-4) unstable; urgency=low
+
+ * Brown paper bag bug: add a change to debian/patches/fhs-filespaths.patch
+ that went missing somehow, causing samba to look for secrets.tdb in
+ /etc/samba instead of /var/lib/samba where it's been for years. No
+ migration handling added, because this was only present in unstable for
+ about a day. Thanks to Rick Nelson for pointing this out.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 21 Jul 2008 17:39:48 -0700
+
+samba (2:3.2.0-3) unstable; urgency=low
+
+ * Upload to unstable.
+ * debian/patches/proper-static-lib-linking.patch: fix SMB_LIBRARY macro
+ and Makefile.in to properly avoid linking .a libraries into other .a
+ libraries, since this bloats the libraries without providing any useful
+ functionality.
+ * Version the build-dependency on libtalloc-dev, to ensure we're building
+ against a package with the right symbols.
+ * Add debian/libsmbclient.symbols and debian/libwbclient0.symbols, to get
+ more fine-grained versioned library dependencies
+ * Bump the shlibs version for libsmbclient to 2:3.2.0, as new symbols
+ have been added.
+ * Re-add docs/registry to samba-doc, restored upstream
+ * Move schannel_store.tdb out of /etc/samba to /var/lib/samba, where it
+ belongs according to the FHS. Closes: #454770.
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 20 Jul 2008 15:38:10 -0700
+
+samba (2:3.2.0-2) experimental; urgency=low
+
+ * Fix up the copyright file to correctly document that we're now under
+ GPLv3, not GPLv2.
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 08 Jul 2008 12:21:47 -0700
+
+samba (2:3.2.0-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * New samba-tools package to provide all "torture" tools:
+ smbtorture msgtest masktest locktest locktest2 nsstest vfstest
+ pdbtest talloctort replacetort tdbtorture smbconftort
+ * Upgrade Standard to 3.8.0 (checked)
+ * Merged from unstable:
+ * Drop "invalid users = root" from the default smb.conf file
+ as it differs from upstream's behaviour and upstream is fairly
+ noisy about this choice of ours. Closes: #462046
+ * Drop commented "guest account = nobody". This is already upstream's
+ default
+ * Remove versioned Build-Depends when satisfied in etch (actually all
+ versioning in Build-Depends)
+ * Remove Conflicts with non-existing packages
+ * Drop dpkg-dev and binutils from Build-Depends, since the versioned
+ build-dep is no longer needed and these are both Build-Essential
+ * Mini-policy for settings in smb.conf:
+ - don't explicitly set settings to their default value
+ - commented settings with the default value are commented with "#"
+ - commented settings with a non-default value are commented with ";"
+ * Apply this policy to "socket options". Closes: #476104
+ * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
+ libsmbclient.so.0 as upstream doesn't assign versions
+ * Add idmap_*(8) man pages (idea taken from SerNet packages)
+ * Create the entire set of directories needed by clients for
+ Point-and-Click printing (including old clients!) in
+ /var/lib/samba/printers (idea taken from SerNet packages)
+ * Update copyright and README.debian information for current and past
+ maintainers. Remove redundant mention of Tridge (the copyright is enough)
+ * Add doc-base files for samba-doc-pdf. Closes: #451685
+ * add a soft dependency on slapd in init script to allow
+ proper operation when dependency-based boot sequence is enabled.
+ Thanks to Petter Reinholdtsen for reporting and providing a patch
+ Closes: #478800
+ * Rename libcupsys2-dev to libcups2-dev in build dependencies
+ * Localize SWAT in German. Closes: #487681
+
+ [ Debconf translations ]
+ * Merged from unstable:
+ * Kurdish. Closes: #480151
+ * Romanian updated. Closes: #488709.
+
+ [ Steve Langasek ]
+ * New upstream release
+ * Merged from unstable:
+ * debian/patches/no-unnecessary-cups.patch: don't try to connect to a
+ cups server when we know that no printers are configured.
+ Closes: #479512.
+
+ [ Jelmer Vernooij ]
+ * Merged from unstable:
+ * Fix bashism in smbtar. (Closes: #486056)
+
+ [ Peter Eisentraut ]
+ * Merged from unstable:
+ * Removed myself from Uploaders
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 06 Jul 2008 09:59:07 +0200
+
+samba (2:3.2.0~rc2-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+
+ [ Steve Langasek ]
+ * Enable building of cifs.spnego for the smbfs package, adding a
+ build-dependency on keyutils-dev, to allow kerberos-based authentication
+ of cifs mounts. Closes: #480663, LP: #236830.
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 12 Jun 2008 17:17:38 +0200
+
+samba (2:3.2.0~rc1-2) experimental; urgency=low
+
+ * Reupload to experimental. Sigh.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 31 May 2008 11:08:14 +0200
+
+samba (1:3.2.0~rc1-1) unstable; urgency=low
+
+ * New upstream version
+ * debian/samba-doc.doc-base.samba-using: index file is no named toc.html
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 30 May 2008 20:22:57 +0200
+
+samba (1:3.2.0~pre3-1) experimental; urgency=low
+
+ * New upstream version
+ * debian/patches/fix-manpage-htmlchars.patch: dropped as fixed upstream
+ * docs/registry removed from samba-doc as missing from upstream tarball
+ (upstream bug #5421)
+ * debian/samba-doc.doc-base.samba-using: The index (and only) file
+ is now book.html
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 26 Apr 2008 08:20:21 +0200
+
+samba (1:3.2.0~pre2-2) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * Upload to experimental with an epoch as the earlier version
+ accidentally went to unstable.
+
+ [ Peter Eisentraut ]
+ * Removed myself from Uploaders
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 06 Apr 2008 20:38:35 +0200
+
+samba (3.2.0~pre2-1) unstable; urgency=low
+
+ * New upstream (pre-)release. It closes the following bugs:
+ - typos in net.8. Closes: #460487, #460491
+ - mention insmb.conf(5) that logging still occurs when
+ "syslog only" is enabled and "syslog=0". Closes: #311300
+ - bad link in HTML docs. Closes: #358479
+ - enhance a useless and confusing debug message in pdb_ldap
+ Closes: #448546
+ - mention the correct default debug level in smbclient(1)
+ Closes: #292371
+ - no longer mention that "ip" parameter can use the host name
+ in mount.cifs(8). Closes: #296057
+ - wrong spelling of "its own" in source comments fixed
+ Closes: #448686
+ - fix "ldapsam_getgroup: Did not find group" debug message
+ Closes: #448546
+ - fix smbclient(1): useless use of cat. Closes: #429349
+
+ [ Steve Langasek ]
+ * debian/patches/fix-manpage-htmlchars.patch: patch all the manpages from
+ 3.2.0pre2, which ended up with html entity encodings embedded in them
+ by mistake. This patch is expected to go away again for 3.2.0pre3.
+ * fix up the FHS patches for the new upstream release:
+ - debian/patches/fhs-newpaths.patch has been merged upstream, drop it.
+ - debian/patches/fhs-filespaths.patch has been mostly applied; only one
+ path usage remains inconsistent, and a new .tdb has been added with
+ the wrong path so fix this up here too.
+ - debian/patches/fhs-filespaths-debatable.patch: updated for some new
+ uses of lock_path() which we map to cache_path().
+ - debian/patches/fhs-assignpaths.patch: patch source/m4/check_path.m4
+ instead of source/configure.in.
+ * debian/patches/smbstatus-locking.patch: merged upstream
+ * debian/patches/smbpasswd-syslog.patch: updated to account for new
+ calls to logging functions
+ * Handle the new libraries available in samba 3.2: ship libwbclient as a
+ shared library, link against the system libtalloc (adding a
+ build-dependency on libtalloc-dev - which is actually sort of kludgy
+ because this only works as long as the system libtalloc has the same
+ soname as the one within the samba tree, this should be fixed to
+ properly build against the system libtalloc), and suppress generation
+ of the tdb and netapi libraries which aren't useful to us right now.
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 05 Mar 2008 22:45:28 +0100
+
+samba (2:3.0.31-1) unstable; urgency=medium
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 12 Jul 2008 16:57:09 +0200
+
+samba (2:3.0.30-4) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Rename libcupsys2-dev to libcups2-dev in build dependencies
+ * Localize SWAT in German. Closes: #487681
+
+ [ Jelmer Vernooij ]
+ * Fix bashism in smbtar. (Closes: #486056)
+
+ [ Jamie Strandboge ]
+ * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly
+ calculate buffer sizes. This bug was introduced in the fix for
+ CVE-2008-1105. Closes: #488688
+
+ [ Debconf translations ]
+ * Romanian updated. Closes: #488709.
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 06 Jul 2008 11:43:53 +0200
+
+samba (2:3.0.30-3) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * add a soft dependency on slapd in init script to allow
+ proper operation when dependency-based boot sequence is enabled.
+ Thanks to Petter Reinholdtsen for reporting and providing a patch
+ Closes: #478800
+
+ [ Steve Langasek ]
+ * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups
+ server when we know that no printers are configured. Closes: #479512.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 10 Jun 2008 21:03:51 +0200
+
+samba (2:3.0.30-2) unstable; urgency=high
+
+ * Brown paper bag releae with epoch increased after yet another
+ accidental upload of 3.2.0 to unstable. Sigh and apologies to
+ autobuilders.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 31 May 2008 12:08:50 +0200
+
+samba (1:3.0.30-1) unstable; urgency=high
+
+ * New upstream release: fix a heap overflow when parsing SMB responses in
+ client code. (CVE-2008-1105). Closes: #483410
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 28 May 2008 22:38:44 +0200
+
+samba (1:3.0.29-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 22 May 2008 07:31:55 +0200
+
+samba (1:3.0.28a-3) unstable; urgency=low
+
+ * The "bug hunting at SambaXP" release
+ * Drop "invalid users = root" from the default smb.conf file
+ as it differs from upstream's behaviour and upstream is fairly
+ noisy about this choice of ours. Closes: #462046
+ * Drop commented "guest account = nobody". This is already upstream's
+ default
+ * Remove versioned Build-Depends when satisfied in etch (actually all
+ versioning in Build-Depends)
+ * Remove Conflicts with non-existing packages
+ * Drop dpkg-dev and binutils from Build-Depends, since the versioned
+ build-dep is no longer needed and these are both Build-Essential
+ * Mini-policy for settings in smb.conf:
+ - don't explicitly set settings to their default value
+ - commented settings with the default value are commented with "#"
+ - commented settings with a non-default value are commented with ";"
+ * Apply this policy to "socket options". Closes: #476104
+ * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
+ libsmbclient.so.0 as upstream doesn't assign versions
+ * Add idmap_*(8) man pages (idea taken from SerNet packages)
+ * Create the entire set of directories needed by clients for
+ Point-and-Click printing (including old clients!) in
+ /var/lib/samba/printers (idea taken from SerNet packages)
+ * Update copyright and README.debian information for current and past
+ maintainers. Remove redundant mention of Tridge (the copyright is enough)
+ * Add doc-base files for samba-doc-pdf. Closes: #451685
+ * Kurdish debconf translation. Closes: #480151
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 16 Apr 2008 23:14:46 +0200
+
+samba (1:3.0.28a-2) unstable; urgency=low
+
+ [ Peter Eisentraut ]
+ * Removed myself from Uploaders
+
+ [ Steve Langasek ]
+ * debian/patches/manpage-encoding.patch: fix up the manpage synopses to
+ not use embedded iso8859-1 non-break spaces, there is a roff escape
+ sequence that we should use instead. Closes: #470844.
+
+ [ Christian Perrier ]
+ * Reupload with an epoch to supersede an accidental upload of 3.2.0
+ in unstable
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 05 Apr 2008 11:59:23 +0200
+
+samba (3.0.28a-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release. This fixes the following Debian bugs:
+ - Prevent nmbd from shutting down when no network
+ interfaces can be located. Closes: #433449
+ * Debian patches dropped as applied upstream:
+ - make-distclean.patch
+ - linux-cifs-user-perms.patch
+ - cifs-umount-same-user.patch
+ - get_global_sam_sid-non-root.patch
+ - chgpasswd.patch
+ - cups.patch
+ * Fix doc-base section from Apps/Net to Network
+ * Fix copyright in debian/copyright
+ * Updated Standards-Version to 3.7.3 (no changes needed)
+ * [Lintian] No longer use -1 revision for the libacl-dev build
+ dependency
+
+ [ Steve Langasek ]
+ * Merge smb.conf changes from Ubuntu:
+ - correct an inconsistency inthe winbind enum comment
+ - correct default and example settings to use the canonical names for all
+ options, rather than historical synonyms
+ - clarify the comment for 'max log size'.
+ Thanks to Chuck Short and Richard Laager.
+ * Add an additional sed command to samba-common.postinst to cleverly
+ pick up any shares that have been appended to the default smb.conf
+ and exclude them from the ucf diff.
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 14 Mar 2008 21:28:16 +0100
+
+samba (3.0.28-4) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Brown paper bag: fix samba-common.files to list all of the smb.conf
+ templates, not just the current one. Closes: #470138.
+ * Drop debian/patches/gcc42-arm-workaround.patch, which should have been
+ dropped in the previous upload
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 09 Mar 2008 04:09:26 -0700
+
+samba (3.0.28-3) unstable; urgency=low
+
+ * Drop the arm optimization workaround, as the compiler is now reported
+ to be fixed.
+ * Add missing eventlogadm(8) manpage.
+ * Refresh the list of Linux architectures from type-handling, to pick up
+ libacl-dev on armel. Closes: #465121.
+ * Convert handling of smb.conf to use ucf, so that we can sanely manage
+ syntax changes going forward.
+ * In the process, fix the dhcp handling to allow proper reconfiguration
+ via debconf.
+
+ [ Debconf translations ]
+ * Indonesian added. Closes: #469976
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 08 Mar 2008 17:11:16 -0800
+
+samba (3.0.28-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Drop some further code in samba-common.postinst that's specific to
+ pre-3.0 upgrades.
+ * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script,
+ so we can use bash array variables and cope with arguments containing
+ embedded spaces (such as share names). Thanks to Julian Gilbey
+ <jdg@debian.org> for the patch. Closes: #457105.
+ * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler
+ problem by building rpc_parse/parse_prs.o with -O0 on this architecture.
+ Thanks to Martin Michlmayr for helping to pin down the problem file.
+ Closes: #445566.
+ * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is
+ a closer approximation of the semantics with cifs.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 05 Jan 2008 09:46:06 +0100
+
+samba (3.0.28-1) unstable; urgency=high
+
+ * New upstream release. Security fix
+ * Fix a remote code execution vulnerability when running as a domain
+ logon server (PDC or BDC). (CVE-2007-6015)
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 11 Dec 2007 00:12:11 +0530
+
+samba (3.0.27a-2) unstable; urgency=low
+
+ * debian/patches/disable-weak-auth.patch: disable plaintext authentication
+ on the client, and lanman authentication on both client and server, by
+ default since these are only needed for Win9x or Samba with encrypted
+ passwords disabled and are potential password attack vectors. This
+ change is backported from Samba 3.2. LP: #163194.
+ * Don't build the userspace tools for the deprecated smbfs kernel driver
+ anymore; instead, use a shell wrapper around mount.cifs that translates
+ option names between the smbfs and cifs drivers.
+ Closes: #169624, #256637, #265468, #289179, #305210, #410075;
+ LP: #29413
+ * debian/panic-action: detect when we're on an Ubuntu system and direct bug
+ reporters to Launchpad instead of to the Debian BTS. Closes: #452940.
+ * debian/samba.init: call log_progress_msg separately for each daemon on
+ stop rather than passing a second arg to log_daemon_msg, for greater
+ compatibility with both Debian and Ubuntu LSB initscript implementations.
+ Closes: #453350.
+ * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of
+ recommends/suggests which is now implemented correctly in apt.
+ Closes: #453144.
+ * Get rid of the build-dependency on type-handling:
+ - add a new target, "update-archs", to be invoked by hand to refresh
+ the list of known Linux architectures for the libacl1-dev
+ build-dep; this avoids the clean target making changes to
+ debian/control
+ - rework the sed line so that it works in-place on debian/control,
+ so we can get rid of debian/control.in as well and just update
+ debian/control directly
+ Closes: #340570.
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 04 Dec 2007 18:35:29 -0800
+
+samba (3.0.27a-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * New upstream release
+ - fix regression with smbfs clients, introduced by the security fix in
+ 3.0.27. Closes: #451839.
+ - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream.
+ * Drop the deprecated "printer admin" example from the default smb.conf.
+ Closes: #451273.
+ * Add a *new* debian/patches/cups.patch to *enable* cups as the default
+ printing system, because since the original introduction of this patch
+ in Debian there was a regression upstream that caused cups to never be
+ selected as the default print system.
+ * Set the default value for the workgroup question to "WORKGROUP" in
+ samba-common.templates, not just in the template smb.conf, so that the
+ debconf question comes out right every time; and always treat this
+ as a high-priority debconf question instead of selecting the
+ priority based on whether there's an existing value, since there's
+ now *always* an existing value but the value doesn't tell us
+ anything meaningful about the user's preference. Closes: #451271.
+ * Drop some code from samba.postinst that only applies to upgrades from
+ pre-3.0 (i.e., pre-sarge) packages
+
+ [ Christian Perrier ]
+ * Update the "built by" part of README.debian
+ * Remove the very outdated parts of README.debian
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 23 Nov 2007 13:04:52 -0800
+
+samba (3.0.27-1) unstable; urgency=low
+
+ * New upstream version
+ - fixes a remote code execution vulnerability when running nmbd as a
+ WINS server. (CVE-2007-5398; closes: #451385)
+ - fixes a buffer overflow in nmbd when running as a domain controller
+ during processing of GETDC logon server requests. (CVE-2007-4572)
+
+ [ Steve Langasek ]
+ * fhs.patch: net usershares should also be stored under /var/lib, not under
+ /var/run. No transition handling in maintainer scripts, since this
+ feature is not activated by default.
+ * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid()
+ from smbpasswd -L or pam_smbpass when running as non-root, to avoid a
+ foreseeable panic. Closes: #346547, #450738.
+ * usershare.patch: enable "user shares" by default in the server with a
+ default limit of 100, to support user shares on both upgrades and new
+ installs with no need to munge config files. Thanks to Mathias Gug
+ <mathiaz@ubuntu.com> for the patch. Closes: #443230.
+ * On Ubuntu, support autopopulating the sambashare group using the existing
+ members of the admin group; no equivalent handling is done on Debian,
+ because there doesn't seem to be an appropriate template group we can use
+ that wouldn't be considered a privilege escalation for those users.
+ * Update Samba to explicitly use the C locale when doing password changes,
+ to account for Linux-PAM's recently adopted i18n support.
+ Closes: #451272.
+ * Enforce creation of the pid directory (/var/run/samba) in the samba
+ init script, for compatibility with systems that use a tmpfs for
+ /var/run. Closes: #451270.
+ * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd
+ as the default printing system, as CUPS is now the dominant/default
+ printing system for Linux.
+
+ [ Debconf translations ]
+ * Hebrew added. Closes: #444054
+
+ [ Christian Perrier ]
+ * Split fhs.patch into 3 separate patches to make upstream integration
+ easier:
+ - fhs-newpaths.patch: introduce new paths
+ - fhs-filespaths.patch: assign files to new paths
+ - fhs-assignpaths.patch: assign paths to FHS-compatible locations
+ * Compile with DNS update support. Thanks to Matthias Gug for
+ reporting and contributions from Launchpad's #156686
+ Closes: #449422
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 15 Nov 2007 11:46:17 -0800
+
+samba (3.2.0~pre1-1) experimental; urgency=low
+
+ * New upstream (pre-)release
+
+ [ Steve Langasek ]
+ * fhs.patch: net usershares should also be stored under /var/lib, not under
+ /var/run. No transition handling in maintainer scripts, since this
+ feature is not activated by default.
+ * Update smbstatus-locking.patch to use db_open() instead of
+ tdb_open(), per upstream recommendation.
+ * Use talloc_strdup() and talloc_asprintf() instead of static strings in
+ data_path(), state_path(), and cache_path(), as suggested by Volker
+ Lendecke.
+
+ [ Debconf translations ]
+ * Hebrew added. Closes: #444054
+
+ [ Christian Perrier ]
+ * Split fhs.patch into 4 separate patches to make upstream integration
+ easier:
+ - fhs-newpaths.patch: introduce new paths
+ - fhs-filespaths.patch: assign files to new paths
+ - fhs-filespaths-debatable.patch: assign files to new paths (part that
+ seems more difficult to be integrated upstream)
+ - fhs-assignpaths.patch: assign paths to FHS-compatible locations
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 21 Oct 2007 09:14:42 +0200
+
+samba (3.0.26a-1) unstable; urgency=low
+
+ * New upstream release.
+ * Remove the samba-common/unsupported-passdb debconf template and
+ the associated code in samba-common.postinst, that deals with pre-etch
+ versions transition
+ * Remove the samba/tdbsam template and the remaining line referencing
+ it (for no need) in samba.postinst. That code was removed in 3.0.23c-2
+ and was dealing with pre-3.0 transitions.
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 16 Sep 2007 10:16:29 +0200
+
+samba (3.0.26-1) unstable; urgency=high
+
+ * New upstream release: security update for CVE-2007-4138:
+ incorrect primary group assignment for domain users using the rfc2307 or
+ sfu winbind nss info plugin.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 11 Sep 2007 19:16:32 +0200
+
+samba (3.0.25c-1) unstable; urgency=low
+
+ [ Noèl Köthe ]
+ * new upstream released from 2007-08-20
+ - added smbfs deprecation information to help and manpage
+ Closes: #360384
+ - fixed winbind leaking file descriptors
+ Closes: #410663
+ - fixed smbpasswd fails with errorcode SUCCESS as normal user
+ Closes: #155345
+
+ [ Christian Perrier ]
+ * Drop the (upstream unmaintained) python bindings (python-samba package)
+ * swat: turn the dependency on samba-doc to a Recommends:
+ Thanks to Peter Eisentraut for dealing with that issue and bringing it
+ back. Closes: #391742
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 26 Aug 2007 14:57:16 +0200
+
+samba (3.0.25b-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Don't start nmbd if 'disable netbios' is set in the config.
+ Closes: #429429.
+ * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid,
+ set to those of the invoking user, when called as non-root.
+ Closes: #431661.
+ * Fix up fhs.patch for some new FHS regressions:
+ - make sure all references to winbindd_idmap.tdb look in /var/lib/samba
+ - make sure all references to winbindd_cache.tdb look in /var/cache/samba
+ - share_info.tdb belongs in /var/lib/samba; this is a regression
+ introduced in 3.0.23-1, so fix up this path on samba upgrade
+ - move the ADS "gpo" cache directory to /var/cache/samba
+ - move idmap_cache.tdb to /var/cache/samba, and fix up the path on
+ winbind upgrade
+ * linux-cifs-user-perms.patch: also support setting a default uid and gid
+ value when mount.cifs is called as non-root
+ * cifs-umount-trailing-slashes.patch: canonicalize mount point names when
+ umount.cifs is called, to avoid unnecessarily leaving entries behind in
+ /etc/mtab if invoked with a trailing slash in the mount point name
+ * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check
+ in umount.cifs assumed that errors would return a value > 0, when in fact
+ the return value on failure is -1. Correct this assumption, which was
+ allowing any user to unmount shares mounted by other users.
+ * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog()
+ and closelog(), since this will interfere with syslogging behavior
+ of the calling application. Closes: #434372.
+ * swat should depend only on inet-superserver, not update-inetd, per
+ Marco d'Itri.
+
+ [ Christian Perrier ]
+ * debian/panic-action: bail out if there's no "mail" command
+ Patch from the Ubuntu samba packagers.
+ * debian/smb.conf: use the comment from Ubuntu package for the "valid users"
+ setting of [homes] as a basis for ours. Ubuntu's wording is better.
+
+ [ Peter Eisentraut ]
+ * Don't ignore errors from make distclean, as per lintian check
+
+ [ Debconf translations ]
+ * Gujarati updated. Closes: #436215
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 17 Aug 2007 18:38:58 -0700
+
+samba (3.0.25b-1) unstable; urgency=low
+
+ * New upstream version
+ * Bugs fixed upstream:
+ - correct default mentioned for "store dos attribute" in smb.conf(5)
+ Closes: #367379
+ - fix typo in pdbedit.c. Closes: #421758
+ - fixed crashes in idmap_rid. Closes: #428411
+ - misleading documentation in smb.conf(5). Closes: #218477
+ - don't crash when no eventlog names are defined in smb.conf
+ Closes: #424683
+ - typography errors in manpages. Closes: #427865, #418811
+ - fix compilation and linking of pam_smbpass.so. Closes: #430755
+ * Drop patches that have been applied upstream:
+ - nmbd-signalling.patch
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 27 Jun 2007 15:12:13 +0200
+
+samba (3.0.25a-2) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Danish updated. Closes: #426773
+
+ [ Christian Perrier ]
+ * Clean out some remaining cruft that is not deleted
+ by "make clean". Taken from Ubuntu patches.
+ * Add missing userspace patches to properly pass uid and gid with 2.6
+ kernels. See #408033 and upstream's #999 for rationale
+ * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue
+ is fixed in 2.4 and 2.6 kernels (2.6 kernels need
+ missing_userspace_bugzilla999.patch, though)
+ Closes: #408033
+ * Add the samba-common and winbind packages to samba-dbg to get
+ debugging symbols for winbindd, net, etc.
+ * Replace all occurrences of ${Source:Version} by ${$binary:Version} in
+ dependencies. All these were Arch:any depending on Arch:any (the only
+ Arch:any depending on Arch:all already used ${source:Version}
+
+ [ Steve Langasek ]
+ * Update samba.config to not override user preference on passdb.tdb
+ creation after initial configuration. Closes: #350926.
+ * Drop the last vestiges of the unified samba.patch; this reverts the
+ change for bug #112195 which it's been determined has no actual security
+ benefits, and drops the fix for bug #106976 which is superseded
+ upstream.
+
+ [ Debconf translations ]
+ * Vietnamese updated. Closes: #426979.
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 13 Jun 2007 15:47:06 +0200
+
+samba (3.0.25a-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream version
+ * Bugs fixed upstream:
+ - password expiration loog on samba domain controllers. Closes: #425083
+ - no more login on samba servers that are members of samba domains
+ Closes: #425680, #426002
+ - users no longer have access according to their secondary groups
+ on shares with "force group". Closes: #424629
+ * Debian packaging fixes:
+ - Enforce building with "--with-ads" and therefore fail
+ when the build can't be done with kerberos support.
+ Closes: #424637
+ - debian/control: wrap long lines in packages' descriptions
+ - uncomment out use of type-handling in the clean target, because
+ type-handling has been fixed to support the new /usr/share/dpkg/ostable
+ - avoid installing extra COPYING files in /usr/share/doc/* (one was
+ installed along with the pcap2nbench example)
+ * Merge Ubuntu changes:
+ - use of PIDDIR instead of hardcoding it in samba.init and winbind.init
+ * Patches to upstream source:
+ - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory
+ instead of the lock directory. Thanks to C. K. Jester-Young for the
+ patch. Closes: #425640
+
+ [ Steve Langasek ]
+ * swat and samba depend on update-inetd instead of on netbase; swat also
+ depends on "openbsd-inetd | inet-superserver", for samba this is only a
+ Suggests.
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 27 May 2007 09:30:02 +0200
+
+samba (3.0.25-1) unstable; urgency=high
+
+ * New upstream version including security fixes
+ * Bugs fixed upstream:
+ - nmbd no longer segfaults on bad interface line
+ Closes: #265577, #386922, #359155, #366800
+ - documentation issues about displaycharset. Closes: #350790
+ - documentation makes it clear that case options such as
+ "default case" can only be set on a per-share basis.
+ Closes: #231229
+ - all occurrences of "encypt" fixed in smb.conf(5)
+ Closes: #408507
+ - two typos on "account" fixed in source/passdb/pdb_ldap.c and
+ source/utils/pdbedit.c. Closes: #402392
+ - no longer panic when using the (deprecated) "only user" option
+ in user level security. Closes: #388282
+ - CVE-2007-2444 (User privilege elevation because of a local SID/Name
+ translation bug)
+ - CVE-2007-2446 (Multiple heap overflows allow remote code execution)
+ - CVE-2007-2447 (Unescaped user input parameters are passed as
+ arguments to /bin/sh allowing for remote command
+ execution)
+
+ [ Debconf translations ]
+ * Marathi added. Closes: #416802
+ * Esperanto added. Closes: #417795.
+ * Basque updated. Closes: #418196.
+ * Wolof updated. Closes: #421636
+
+ [ Christian Perrier ]
+ * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba
+ before running invoke-rc.d. Closes: #414841
+
+ [ Steve Langasek ]
+ * Comment out use of type-handling in the clean target, because
+ type-handling is currently broken in unstable and clean shouldn't be
+ editing debian/control anyway.
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 14 May 2007 10:30:15 +0200
+
+samba (3.0.24-6) unstable; urgency=high
+
+ * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug
+ is still present :/ Fix a missing ] in the regexp for passdb backend
+ checking, really-closes: #415725.
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 24 Mar 2007 03:32:46 -0700
+
+samba (3.0.24-5) unstable; urgency=high
+
+ * The "see what you get for trusting the quality of my packages,
+ release team? Release team, please unblock this package" release.
+ * High-urgency brown-paper-upload for etch-targetted fix for
+ regression introduced in the last version
+
+ [ Steve Langasek ]
+ * Fixed the regexp used for matching broken passdb backend settings,
+ since we were getting false positives on *all* values. :/ The
+ correct match should be: one or more non-space, non-comma
+ characters, followed by a space or a comma, followed by zero or more
+ spaces, followed by one or more non-space characters. Closes: #415725.
+
+ [ Debconf translations ]
+ * Nepali
+ * Korean; closes: #414883.
+ * Russian
+ * Arabic
+ * Portuguese
+ * Greek. Closes: #415122
+ * Norwegian Nynorsk added.
+ * Marathi added. Closes: #416802
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 21 Mar 2007 13:49:46 -0700
+
+samba (3.0.24-4) unstable; urgency=medium
+
+ [ Steve Langasek ]
+ * Documentation fix for a problem affecting upgrades from sarge: if
+ passdb backend is still a comma- or space-separated list after any
+ attempts at automatic fix-ups, throw a debconf error notifying the
+ user that they'll need to fix this manually. Closes: #408981.
+
+ [ Debconf translations ]
+ * French
+ * Spanish
+ * Galician; closes: #414605.
+ * Swedish; closes: #414610.
+ * Brazilian Portuguese; closes: #414603.
+ * German; closes: #414630.
+ * Norwegian Bokmål; closes: #414619.
+ * Bulgarian; closes: #414624.
+ * Romanian; closes: #414629.
+ * Tagalog; closes: #414637.
+ * Khmer; closes: #381833.
+ * Thai; closes: #414664.
+ * Slovak; closes: #414665.
+ * Slovenian
+ * Simplified Chinese; closes: #414671.
+ * Japanese; closes: #414673.
+ * Hungarian; closes: #414677.
+ * Dzongkha; closes: #414680.
+ * Estonian; closes: #414679.
+ * Catalan
+ * Malayalam; closes: #414728
+ * Traditional Chinese; closes: #414730
+ * Turkish
+ * Italian; closes: #414708
+ * Finnish; closes: #414736
+ * Dutch; closes: #414741
+ * Albanian; closes: #414778.
+ * Czech; closes: #414793.
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 13 Mar 2007 16:29:21 -0700
+
+samba (3.0.24-3) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Merge some Ubuntu changes:
+ - do not expose the Samba version anymore
+ - default workgroup set to WORKGROUP (default workgroup of
+ Windows workstations)
+ * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch
+ Closes: #394830
+ * Add commented "winbind enum*" settings in smb.conf
+ This will point users to these important settings which changed
+ their default behaviour between sarge and etch. Closes: #368251
+
+ [ Steve Langasek ]
+ * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first
+ time the script is called if the dhcp client was already running at
+ the time of install, and manually reload samba to get the updated
+ config files read. Thanks to Bas Zoetekouw for the patch.
+ Closes: #407408.
+ * While we're at it, use atomic replace for /etc/samba/dhcp.conf just
+ in case someone else reloads samba while the script is running. Low
+ impact, low-risk change.
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 11 Mar 2007 23:34:10 -0700
+
+samba (3.0.24-2) unstable; urgency=low
+
+ * Re-upload with a proper .orig.tar.gz.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 5 Feb 2007 19:55:34 -0800
+
+samba (3.0.24-1) unstable; urgency=high
+
+ * New upstream release, security update
+ * Fixes for the following security advisories:
+ - Directly affecting Debian:
+ - CVE-2007-0452 (Potential Denial of Service bug in smbd)
+ - Not affecting Debian:
+ - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind
+ NSS library on Solaris)
+ - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin)
+ * Correct paths for the documentation pointers in the default smb.conf
+ file. Thanks to Ted Percival for his care reporting this. Closes: #408898
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 5 Feb 2007 05:27:07 +0100
+
+samba (3.0.23d-4) unstable; urgency=low
+
+ * Debconf translation updates:
+ - Slovenian added.
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 3 Jan 2007 08:43:50 +0100
+
+samba (3.0.23d-3) unstable; urgency=low
+
+ * Debconf translation updates:
+ - Malayalam added. Closes: #403107
+ - Tamil added. Closes: #403353
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 1 Jan 2007 10:17:18 +0100
+
+samba (3.0.23d-2) unstable; urgency=low
+
+ * Build-Conflicts: libfam-dev to avoid problems accessing shares
+ when using GAMIN. Closes: #400617
+ * Lintian fixes:
+ - Run debconf-updatepo in the clean target to ensure up-to-date PO
+ and POT files
+ - debian/patches/no_unbreakable_spaces_in_man.patch:
+ Replace all non-breakable spaces by regular spaces in man pages.
+ They are encoded in ISO-8859-1 which is not recommended in man pages.
+ This should be submitted upstream.
+ - reformat too long lines in package description
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 3 Dec 2006 09:39:29 +0100
+
+samba (3.0.23d-1) unstable; urgency=low
+
+ * new upstream release (2006-11-15)
+
+ [ Noèl Köthe ]
+ * updated documentation.patch for 3.0.23d
+ * updated non-linux-ports.patch for 3.0.23d
+ * updated adapt_machine_creation_script.patch for 3.0.23d
+ * updated autoconf.patch for 3.0.23d
+
+ [ Debconf translations ]
+ * Added Bosnian. Closes: #396634
+ * Added Bulgarian. Closes: #397773
+
+ -- Noèl Köthe <noel@debian.org> Thu, 16 Nov 2006 13:55:26 +0100
+
+samba (3.0.23c-4) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Added Greek.
+ * Added Gujarati. Closes: #394430
+ * Added Korean. Closes: #394509
+ * Added Nepali.
+ * Updated Czech (typo fixed).
+ * Added Wolof. Closes: #396079
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 5 Nov 2006 09:42:40 +0100
+
+samba (3.0.23c-3) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Updated Catalan; thanks to Guillem Jover for his help
+ * Updated Russian.
+ * Updated Spanish. Add a missing word and correct the copyright header
+ * Updated Vietnamese. Closes: #394164
+ * Added Albanian. Closes: #393777
+ * Added Chinese (Traditional).
+ * Added Thai.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 21 Oct 2006 10:44:11 +0200
+
+samba (3.0.23c-2) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Updated Swedish. Closes: #386510.
+ * Updated Japanese. Closes: #386534.
+ * Updated Italian. Closes: #386691.
+ * Updated Romanian. Closes: #388254.
+ * Updated German. Closes: #389072.
+ * Updated Brazilian Portuguese. Closes: #389097.
+ * Updated Basque. Closes: #389722.
+ * Updated Turkish. Closes: #390887
+ * Updated Danish. Closes: #390878
+ * Updated German. Closes: #390813
+ * Updated Simplified Chinese. Closes: #390959
+ * Updated Arabic.
+ * Updated Spanish. Closes: #391735
+ * Updated Dutch. Closes: #392082
+ * Added Slovak. Closes: #386847.
+ * Added Finnish. Closes: #390150.
+ * Added Estonian. Closes: #391102.
+ * Added Norwegian Bokmål. Closes: #391692
+ * Added Hungarian. Closes: #391746
+
+ [ Steve Langasek ]
+ * Change the Maintainer field at last to the mailing list... gives
+ our spam rules some testing, in response to popular demand :)
+ * Check for update-inetd on purge before trying to invoke it;
+ closes: #388606.
+
+ [ Peter Eisentraut ]
+ * Make swat binNMU-safe by using ${source:Version} for dependency on
+ samba-doc
+ * Make samba-common owner of /var/{cache,log,run}/samba, let samba and
+ winbind only delete files they know they're exclusive owners of.
+ Closes: #370718.
+ * Use python-central to manage installation of python-samba.
+ Closes: #386499. (patch by Patrick Winnertz)
+ * Use upstream makefile to install Python module.
+ * Build-Depend on python-dev instead of python-all-dev.
+ * Removed old upgrade support.
+ * Remove possibly leftover comma from "passdb backend" setting in
+ smb.conf on upgrade. Closes: ##383307.
+ * Added libpam-smbpass logcheck file by martin f krafft.
+ Closes: #391487, #391916.
+
+ [ Christian Perrier ]
+ * Add LSB info to the init script
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 12 Oct 2006 18:31:46 +0200
+
+samba (3.0.23c-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream version
+ * Split out samba/run_mode with "__Choices".
+
+ [ Noèl Köthe ]
+ * corrected samba override disparity:
+ samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra.
+
+ [ Debconf translations ]
+ * Updated Galician. Closes: #383001.
+ * Updated Danish. Closes: #383025.
+ * Added Tagalog. Closes: #383039, #383252.
+ * Updated Khmer.
+ * Updated Arabic.
+ * Updated Dzongkha. Closes: #383125.
+ * Updated Vietnamese. Closes: #383126.
+ * Updated Czech. Closes: #384760.
+
+ [ Peter Eisentraut ]
+ * Preseed configure result for method to detect interfaces in
+ debian/config.cache; the test might otherwise fail if there are no
+ interfaces configured at build time. Closes: #382429.
+ * Refined panic-action script text. Closes: #382500.
+
+ -- Noèl Köthe <noel@debian.org> Mon, 04 Sep 2006 12:10:28 +0200
+
+samba (3.0.23b-2) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Updated Romanian. Closes: #382358
+ * Updated Dzongkha. Closes: #382448, #382948
+ * Updated Basque. Closes: #382456
+ * Added Simplified Chinese. Closes: #382489
+
+ [ Peter Eisentraut ]
+ * Remove no longer functioning "guest" value from "passdb backend"
+ setting in smb.conf on upgrade. Closes: #382296
+
+ [ Steve Langasek ]
+ * Drop code and debconf questions specific to upgrades from samba <= 2.2.
+ * Reword some debconf translations as discussed on the list.
+ * Rerun debconf-updatepo.
+ * Switch debian/ca.po to UTF-8.
+ * Restore some reverted strings for Galician, Czech, Brazilian Portuguese,
+ Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese.
+ * Update translations for Brazilian Portuguese, Spanish, French, Italian,
+ Catalan, and Portuguese.
+
+ -- Peter Eisentraut <petere@debian.org> Mon, 14 Aug 2006 19:04:31 +0200
+
+samba (3.0.23b-1) unstable; urgency=low
+
+ * New upstream release
+
+ [ Debconf translations ]
+ * Updated Galician. Closes: #381988
+
+ -- Noèl Köthe <noel@debian.org> Tue, 08 Aug 2006 22:28:00 +0200
+
+samba (3.0.23a-1) unstable; urgency=medium
+
+ * New upstream release
+
+ * Fixes the following Debian bugs:
+ - winbind: panic()s when started outside of a domain context.
+ Closes: #337070
+ - Make smbclient -L use RPC to list shares, fall back to RAP.
+ Closes: #168732
+ - Potential hang in nmbd. Upstream bug #3779. Closes: #367472
+ - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780).
+ Closes: #367507
+ - Erroneous permissions checks after 3.0.10 -> 3.0.14a
+ (upstream #2591). Closes: #307626
+ - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070
+ - ImportError exception raised when trying to import samba.smb
+ (upstream #3567). Closes: #350050
+ - Changed references from pam_pwdb to pam_unix (upstream #3225).
+ Closes: #206672
+ - SWAT segfault (upstream #3702). Closes: #363523
+
+ [ Adam Conrad ]
+ * Fix typo in smb.conf that causes all samba apps to whine.
+ Closes: #369782
+ * Add myself to Uploaders, on the off chance that I might upload.
+
+ [ Debconf translations ]
+ * Add Galician translation of debconf templates. Closes: #361204, #369403
+ * Add Basque translation of debconf templates. Closes: #375104
+ * Add Romanian translation of debconf templates. Closes: #379246
+ * Add Khmer translation of debconf templates. Closes: #381833
+ * Add Dzongkha translation of debconf templates.
+ * Updated Russian. Closes: #369375
+ * Updated Czech. Closes: #369408
+ * Updated Japanese. Closes: #369457
+ * Updated Italian. Closes: #369587
+ * Updated Swedish. Closes: #369730
+ * Updated Dutch. Closes: #376515
+ * Updated Vietnamese. Closes: #381557
+ * Updated French.
+ * Updated Brazilian.
+ * Updated Portuguese. Closes: #372632
+ * Updated Arabic.
+
+ [ Christian Perrier ]
+ * Add dependency on procps for samba, as ps is used in init scripts.
+ Thanks to Bastian Blank for reporting. Closes: #365618
+ * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's
+ Reference
+ * Add support for /etc/default/winbind. Closes: #262313, #374411
+ Thanks to Guido Guenther for the old patch and to Jérôme Warnier
+ for reminding us about it.
+ * Compile with --with-cifsmount which is now needed to properly compile
+ mount.cifs and umount.cifs. See samba bug #3799
+
+ [ Peter Eisentraut ]
+ * Use debian/compat instead of DH_COMPAT
+ * Updated Standards-Version to 3.7.2 (no changes needed)
+ * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the
+ required ldconfig calls appear in the maintainer scripts
+ * Adjusted debian/rules to get 3.0.23rc1 to build
+ * Updated to debhelper level 5
+ * Rearranged dh_strip calls so that build succeeds with
+ DEB_BUILD_OPTIONS=nostrip. Closes: #288995
+ * Create /var/spool/samba and use it as default printer spool.
+ Closes: #275241
+ * Made winbind init script more careful about returning proper exit code
+ * Added winbindd_priv group as owner of winbindd_privileged directory.
+ Closes: #307257
+ * Python transition preparations: renamed package to python-samba,
+ removed hardcoded references to Python version 2.3. Closes: #380939
+ * Removed unwanted swat debconf warning
+ * Put localized swat messages into /usr/share/samba, where swat looks for
+ them. Closes: #376991
+
+ -- Peter Eisentraut <petere@debian.org> Mon, 7 Aug 2006 23:00:49 +0200
+
+samba (3.0.22-1) unstable; urgency=medium
+
+ [ Steve Langasek ]
+ * New upstream release
+ - CAN-2006-1059: fixes an information leak in logfiles of systems using
+ winbind with log level >= 5.
+ * Fix a typo in the default smb.conf (closes: #354495).
+
+ [ Noèl Köthe ]
+ * replacing SMB with SMB/CIFS in the descriptions like
+ named on the samba.org webpage. Closes: #356335
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 12 Mar 2006 22:40:28 +0100
+
+samba (3.0.21c-1) unstable; urgency=low
+
+ * New upstream release
+ * add a few logon-related parameters as good and safe
+ examples for *DC-type settings. Closes: #349051
+ * add an example "add user script". Closes: #349050
+ * drop outdated information from the smbfs package description
+ Closes: #352828
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 25 Feb 2006 11:58:45 +0100
+
+samba (3.0.21b-1) unstable; urgency=low
+
+ * The "Tridge" release: celebrates the 2005 Free Software Award winner
+
+ * New upstream release
+
+ * Upstream bugs fixed by the new upstream release:
+ - Support changing expired passwords in
+ pam_winbindd. Closes: #258302
+ - vfs_full_audit fixes for multiple connections. Closes: #348419
+ - crashes of smbd in security=server mode
+ Closes: #346045, #346069, #350598, #351448
+
+ [ Peter Eisentraut ]
+ * Put correct paths for Debian installations into the man pages, and
+ remove outdated swat setup instructions therein. Closes: #321005
+ * Fix lintian overrides and install them into the right packages.
+ * Remove swat inetd registration in remove, not purge. Closes: #313214
+ * Add findsmb script. Closes: #231806
+ * Fix sonames of libnss_win{bind,s}.so. Closes: #333290
+ * Remove autoconf build dependency.
+ * Remove remnants of old patch system.
+ * Install smbumount setgid root. Closes: #253437
+ * Add watch file.
+ * Activate kernel oplocks. Closes: #218511
+ * Disable PIE compilation. Closes: #346416
+
+ [ Christian Perrier ]
+ * activate building of idmap_rid. Closes: #284681.
+ Thanks to Ubuntu patches
+ * activate building of idmap_ad. Closes: #341814
+ * modify the long description of the libsmbclient-dev package to
+ avoid repeating the long description. Thanks, linda.
+
+ [ Steve Langasek ]
+ * Also enable setresuid()/setresgid() on alpha and sparc now that support
+ for Linux 2.2 is dropped.
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 6 Feb 2006 07:02:20 +0100
+
+samba (3.0.21a-4) unstable; urgency=low
+
+ [ Peter Eisentraut ]
+ * Add umount.cifs. Closes: #340967
+ * Really make mount.cifs and umount.cifs suid root. Closes: #340966
+
+ [ Christian Perrier ]
+ * Add "bind interfaces only" and "interfaces" options (commented)
+ to the default smb.conf file. Closes: #349043
+
+ [ Steve Langasek ]
+ * Add missing changes to source/include/config.h.in into the
+ autoconf.patch, so that samba looks for files in /var/lib/samba like it's
+ supposed to instead of in /var/run/samba! Closes: #349372, #349464.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 23 Jan 2006 00:59:20 -0800
+
+samba (3.0.21a-3) unstable; urgency=low
+
+ * Add Build-Depends on quilt (>= 0.40 as we use quilt.make)
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 21 Jan 2006 23:02:32 +0100
+
+samba (3.0.21a-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Switch to quilt for patches management. Refresh all patches so
+ that they apply cleanly. Closes: #345557
+ * debian/patches/adapt_machine_creation_script.patch:
+ - adapt example machine creation script to Debian. Closes: #346234
+ * winbind.dirs:
+ - added /var/run/samba. Closes: #347585
+
+ [ Peter Eisentraut ]
+ * swat.links:
+ - file added. Closes: #346001
+
+ [ Noèl Köthe ]
+ * fixed typo in panic-script. Closes: #348410
+
+ [ Steve Langasek ]
+ * debian/patches/autoconf.patch:
+ - move changes to autogenerated files into their own patch now that we've
+ lost the script that was calling autogen.sh for us; this also helps
+ make debian/rules clean just a little bit cleaner.
+ * debian/patches/fhs.patch:
+ - fix new references to registry.tdb (closes: #348874).
+ - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba
+ where they belong
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 20 Jan 2006 14:20:35 +0100
+
+samba (3.0.21a-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * *Really* make samba-doc suggest samba-doc-pdf. This change finally
+ did not make it in the previous release.
+
+ [ Noèl Köthe ]
+ * new upstream release 3.0.21a
+ - removed smbsh.1 from debian/rules
+ - added new smbclient programm smbget (with conflict/replace
+ to existing Debian smbget package)
+ - added libsmbclient.7 to libsmbclient package
+ - added umount.cifs.8 to smbfs package
+ - added pam_winbind.7 to winbind package
+ - added new /usr/bin/eventlogadm to samba package which is
+ documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt
+ - fixed "cd command fails in smbclient". Closes: #307535
+ - fixed "file descriptor leak". Closes: #339564
+ - fixed "smbclient(1) doesn't list same options as
+ smbclient usage statement". Closes: #154184
+ - fixed "typo in smbmount.8". Closes: #260673
+ - fixed "smbmount manual page doesn't have a link to
+ smbumount". Closes: #297535
+ - fixed "smb.conf man page references non-existent
+ BROWSING.txt file". Closes: #316458
+ - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480
+ - fixed "fails to manage groups containing spaces". Closes: #299592
+ - corrected nonpic-libsmbclient.patch to apply
+ - corrected fhs.patch to apply
+ * added myself to Uploaders
+ * Rewording of the panic action script. Closes: #335051
+ * added missing swat translation to swat package
+
+ -- Noèl Köthe <noel@debian.org> Sun, 01 Jan 2006 12:45:33 +0100
+
+samba (3.0.20b-4) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Remove the smbldap-tools-* directory from the examples of samba-doc
+ as these tools exist as an independent package. Closes: #341934
+ * Swedish debconf translation update. Closes: #342022
+ * Preserve the local admin settings for run_mode in /etc/default/samba
+ when upgrading. Closes: #234038, #267988, #269735
+ * Winbind also must depend on lsb-base. Closes: #343379
+ * Enable swat in inetd when installing it and remove it when
+ uninstalling. Closes: #87905, #230936, #268429
+
+ [ Peter Eisentraut ]
+ * Added separate samba-doc-pdf package, suggested by samba-doc.
+ Closes: #281971
+ * Removed duplicate documentation in swat package, symlinked to
+ samba-doc; swat now depends on samba-doc. Closes: #233447
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 20 Dec 2005 17:08:20 +0100
+
+samba (3.0.20b-3) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Drop the FHS transition code from the samba postinst, since it's
+ not needed for upgrades from sarge (and most of it not for upgrades
+ from woody).
+
+ [ Noèl Köthe ]
+ * libpam-smbpass dependency on samba-common
+ Closes: #297923
+ * Updated swedish debconf translation. Closes: #335784
+ * Added Recommends: smbldap-tools. Closes: #227675
+
+ [ Peter Eisentraut ]
+ * Added doc-base support. Closes: #55580
+ * Fixed dh_installexamples call so the debian/*.examples files are
+ actually used.
+ * Patched libpam-smbpass README to refer to examples directory.
+ Closes: #215771
+
+ [ Christian Perrier ]
+ * Add a working passwd chat line to the default smb.conf file
+ Closes: #269746
+ * Add the profiles binary and man page to the shipped files. Closes: #225494
+ * Add a dependency on samba-common for winbind and force versions to match
+ Closes: #273007, #264855
+ * Add /var/log/samba to winbind directories. Closes: #340833
+ * Lintian cleaning:
+ - Add a few lintian overrides to avoid lintian complaining
+ for things done on purpose or just because it makes wrong assumptions
+ - Corrected FSF address in debian/copyright
+ - Make swat depend on netbase as it uses update-inetd in its postinst
+ script
+ - Correct shebang lines in config scripts
+ - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc
+ - Minor correction in libsmbclient-dev description to avoid strictly
+ repeating the short description in the long description
+ - Call confmodule in swat.postinst as this is the only way to guarantee
+ that the config script is run in all cases
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 3 Dec 2005 07:30:40 +0100
+
+samba (3.0.20b-2) unstable; urgency=low
+
+ * Don't build with -gstabs any more; -g no longer gives a problematic
+ size hit, and -gstabs is no longer supported on ia64.
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 19 Oct 2005 19:02:44 -0700
+
+samba (3.0.20b-1) unstable; urgency=low
+
+ * Christian Perrier:
+ - Debconf translations:
+ - Added Vietnamese. Closes: #317876
+ - Updated German. Closes: #322907
+ * Steve Langasek:
+ - Use ${misc:Depends} in debian/control instead of depending on
+ debconf directly, allowing use of cdebconf as an alternative.
+ Closes: #332088.
+ * Noèl Köthe
+ - corrected libsmbclient priority to optional. Closes: #310045
+ - corrected the path of ServerType.html in smb.conf. Closes: #296500
+ - updated Standards-Version to 3.6.2 (no changes needed)
+ - added homepage to description
+ - switched init scripts (samba and winbind) to lsb-functions
+ (took patches from ubuntu)
+ - added Swedish. Closes: #331437
+ - removed outdated "guest" value in "passdb backend" in default smb.conf
+ Closes: #289519
+ - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8)
+ is; Replaces: all previous versions of samba. Closes: #253603
+ - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515
+ - support for Windows Vista. Closes: #323489
+ - Mac OS Tiger Problem fixed. Closes: #309836
+ - BUG 2688: re-implement support for the -P (--port) option.
+ Closes: #307746
+ - "man smb.conf" warnings fixed. Closes: #266320
+ - testprns removed by upstream so removed in samba.files
+ - corrected docs/*.pdf names (samba-doc.docs)
+ - corrected diagnosis.html path (samba.docs)
+ - removing patches which are included upstream:
+ dos7-xcopy-always-copies-files.patch
+ (* BUG 2622: Remove DPTR_MASK as it makes no sense.)
+ hide-special-file-fix.patch
+ (* Hide dot files and directory logic fixes.)
+ rap-printing-bigendian.patch
+ (* BUG 1998: Correct byte ordering bug when storing
+ 16-bit RAP print job ids.)
+ smbclient-vfat-loop.patch
+ smbclient-vfat-loop2.patch
+ (* BUG 2698: Fix infinite listing loop in smbclient
+ caused by an invalid character set conversion.)
+ - fixed the following patches which didn't applied cleanly
+ fhs.patch
+ non-linux-ports.patch
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 18 Oct 2005 19:02:21 -0700
+
+samba (3.0.14a-6) unstable; urgency=low
+
+ * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect
+ Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9;
+ add a versioned build-depend accordingly. Closes: #315955
+ * Switch to libreadline5.
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 1 Jul 2005 00:13:12 -0700
+
+samba (3.0.14a-5) unstable; urgency=low
+
+ * Fix libsmbclient.a to be built as non-PIC instead of PIC.
+ Closes: #279243.
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 8 Jun 2005 05:46:52 -0700
+
+samba (3.0.14a-4) unstable; urgency=high
+
+ * Last-minute upload for sarge, because I don't listen to anything
+ that RM guy says
+ * Patch smbmount to strip CAP_UNIX out of the capabilities passed to
+ the kernel when uid, gid, dmask, or fmask options have been
+ specified; this keeps the mount permissions from changing out from
+ under the user when upgrading to a server (or to a kernel) that
+ supports unix extensions. Closes: #310982.
+ * Second patch to smbclient search continuation logic, from upstream:
+ preserve the original UCS2 filename to guard against lossy
+ conversions, and break out if we find ourselves looping.
+ Closes: #311157.
+ * Upstream fix to make print job cancellations work on big-endian
+ systems when talking to RAP-style clients (i.e., smbclient).
+ Closes: #311213.
+ * Add build-dependency on libpopt-dev, so that we consistently use the
+ system popt lib instead of the bundled one.
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 2 Jun 2005 07:02:46 -0700
+
+samba (3.0.14a-3) unstable; urgency=high
+
+ * Urgency set to high for a bug that makes smbclient/libsmbclient
+ /almost/ mostly unusable
+ * Fix smbclient's search continuation logic so that it works correctly
+ against 2K servers offering VFAT-hosted shares; many thanks to
+ Jeremy Allison for the timely upstream fix. Closes: #309798.
+ * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
+ <andrelop@debian.org>. (closes: #308510)
+ * Add Russian debconf translation, thanks to Yuriy Talakan
+ <yt@amur.elektra.ru>. (closes: #310063)
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 26 May 2005 23:37:57 -0700
+
+samba (3.0.14a-2) unstable; urgency=low
+
+ * Point the sense of the file_is_special() check right way around;
+ thanks to Matthijs Mohlmann for catching this. Closes: #305747.
+ * debian/patches/dos7-xcopy-always-copies-files.patch:
+ Fix the MS-DOS 7 XCOPY copying files over and over bug
+ Closes: #309003
+ * Steve Langasek <vorlon@debian.org>:
+ - Add Christian Perrier to Uploaders:. Thanks, Christian :)
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 8 May 2005 04:43:21 -0700
+
+samba (3.0.14a-1) unstable; urgency=low
+
+ * New upstream version
+ - A more complete upstream fix for missing files in file listings,
+ should really give us working (closes: #302771); drop
+ xp-missing-files.patch, which has been superseded.
+ * Use the right path when removing mount.cifs binary in the clean
+ target. Closes: #303318.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 18 Apr 2005 03:22:29 -0700
+
+samba (3.0.11-1) unstable; urgency=high
+
+ * New upstream version
+ - Fixes duplicated entry in swat(8) manpage (closes: #292957).
+ - Fix queue handling so that processes serving print clients don't
+ spin off into infinity and clobber the system (closes: #274969).
+ - Make sure we use C-locale toupper/tolower functions for case
+ conversion, since Turkish pairing rules are incompatible
+ (closes: #286174).
+ * Fix logrotate script to exit true instead of false when nmbd.pid is
+ missing (closes: #287263).
+ * Added Portuguese debconf translation. Thanks to Miguel Figueiredo
+ <elmig@debianpt.org>. (closes: #286375)
+ * Added Italian debconf translation. Thanks to Luca Monducci
+ <luca.mo@tiscali.it>. (closes: #284125)
+ * Add support for building on the Debian BSD and Hurd ports; thanks to
+ Robert Millan for the patch. (closes: #266693)
+ * debian/patches/xp-missing-files.patch: import patch from upstream to
+ fix missing entries in directory listings when talking to WinXP
+ servers (closes: #297771).
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 23 Mar 2005 00:13:16 -0800
+
+samba (3.0.10-1) unstable; urgency=high
+
+ * New upstream release.
+ - CAN-2004-1154: integer overflow can lead to remote code execution
+ by authenticated users; closes: #286023.
+ * High-urgency upload for sarge-targetted RC bugfix.
+ * Sync the fhs.patch to samba 3.0.10.
+ * Install mount.cifs suid root, to make user mounts possible
+ (closes: #283819).
+ * debian/patches/cups.patch: Change the default printing system, so we
+ can compile in CUPS support without making it the default -- CUPS is
+ not a reasonable default on Debian, at least for sarge.
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 17 Dec 2004 11:56:01 -0800
+
+samba (3.0.9-1) unstable; urgency=low
+
+ * New upstream release
+ - Fixes Win9x printing; closes: #283530, #282571, #283818.
+ - Fixes a problem with setting dosmodes on filesystems without ACL
+ support; closes: #283661.
+ - Drop ldapsam_compat.patch, redundant now that a fix is integrated
+ upstream
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 2 Dec 2004 01:11:39 -0800
+
+samba (3.0.8-2) unstable; urgency=low
+
+ * Fix the module paths for python2.3-samba so that "import foo from samba"
+ works, and include the __init__.py glue; closes: #222867).
+ * Enable quota support; closes: #246839.
+ * Fix missing symbols in libsmbclient (and libnss_wins), and add
+ -Wl,-z,defs to the libsmbclient link options to prevent future
+ instances of undefined symbols (closes: #281181).
+ * Fix for the legacy ldapsam_compat backend; thanks to Fabien
+ Chevalier for the patch (closes: #274155).
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 15 Nov 2004 06:54:13 -0800
+
+samba (3.0.8-1) unstable; urgency=high
+
+ * New upstream package. Urgency set to "high" because of a potential
+ Denial of Service vulnerability in previous 3.0.x releases
+ (CAN-2004-0930). (Eloy)
+ * Introduce new -dbg package, so we can make better sense out of the
+ cleverly-supplied backtrace emails. (Vorlon)
+ * Applied patch from Luke Mewburn <luke@mewburn.net> to fix missing
+ lock_path() to state_path() change in the FHS patches. (Eloy)
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 8 Nov 2004 13:39:34 -0500
+
+samba (3.0.7-2) unstable; urgency=high
+
+ * High-urgency upload for sarge-targetted RC fixes.
+ * Use autogen.sh in unpatch-source as well as in patch-source, to get
+ rid of the autom4te.cache cruft.
+ * debian/patches/make-distclean.patch: add some missing files to the
+ distclean target in source/Makefile.in (mostly-fixes: #276203).
+ * Change compile-time default of 'use sendfile' to 'no', since the
+ current Samba implementation is broken (closes: #261917, #275741,
+ #270175).
+ * Add mount.cifs into the smbfs package; thanks to Igor Belyi for
+ showing us just how simple this patch should be. ;) Since cifs is
+ the preferred kernel driver in 2.6, bugs related to smbfs and 2.6
+ are considered closed unless someone can show that they exist with
+ the cifs driver as well (closes: #249890, #269443, #227791, #236869,
+ #260707, #261808, #270175).
+ * Fix FHS migration code so that it only affects upgrades from old
+ package versions, and doesn't cause us to mess with non-standard
+ directories that may have been re-added by the admin
+ (closes: #251858).
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 26 Oct 2004 01:35:23 -0700
+
+samba (3.0.7-1) unstable; urgency=high
+
+ * New upstream release. This release fixes two possible denial of
+ service conditions; one in nmbd and one in smbd. The CVE numbers
+ for these vulnerabilities are:
+
+ CAN-2004-0807 for the smbd DoS
+ CAN-2004-0808 for the nmbd DoS
+
+ Urgency is set to "high" because of these vulnerabilities; so this
+ new release propagates to testing ASAP.
+
+ Thanks to the Samba Team and the Debian Security Team for the
+ heads up.
+ * Remove post-3.0.6 patches that are now in 3.0.7.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 13 Sep 2004 00:53:38 -0400
+
+samba (3.0.6-4) unstable; urgency=low
+
+ * Update LDAP schema (closes: #269797).
+ * Applied a couple of upstream fixes that will be present in Samba 3.0.7.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 7 Sep 2004 15:28:42 -0400
+
+samba (3.0.6-3) unstable; urgency=low
+
+ * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704)
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 25 Aug 2004 01:58:37 -0400
+
+samba (3.0.6-2) unstable; urgency=low
+
+ * Added Danish debconf translation. Thanks to Claus Hindsgaul
+ <claus_h@image.dk>. (closes: #232884)
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Aug 2004 17:24:19 -0400
+
+samba (3.0.6-1) unstable; urgency=low
+
+ * New upstream version.
+ * Incorporate Turkish debconf translation; thanks to Recai Oktas
+ <roktas@omu.edu.tr>. (closes: #252031)
+ * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
+ <andrelop@debian.org>. (closes: #208113)
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Aug 2004 12:34:44 -0400
+
+samba (3.0.5-2) unstable; urgency=high
+
+ * Patches from Fabien Chevalier <fabien.chevalier@supelec.fr>
+ to fix:
+ + libnss_wins crashes other programs (closes: #252591)
+ + Can't list share files/dirs, but can acces deeper files/dirs
+ (closes: #264572)
+ + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871)
+ * Urgency "high" to make it into testing as soon as possible since
+ at least #265871 is pretty bad now that WinXP SP2 has been released.
+ Thanks for the help Fabien! Both Vorlon and I have been very busy
+ lately.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 18 Aug 2004 13:25:41 -0400
+
+samba (3.0.5-1) unstable; urgency=high
+
+ * New upstream version. Urgency "high" because of potential buffer
+ overflows. The security fixes are the only difference between
+ 3.0.4 and 3.0.5.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 22 Jul 2004 08:07:36 -0400
+
+samba (3.0.4-5) unstable; urgency=low
+
+ * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4),
+ not an unversioned libcupsys2-dev. (closes: #250523)
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 25 May 2004 07:43:54 -0400
+
+samba (3.0.4-4) unstable; urgency=low
+
+ * Rebuilt with libcupsys2-gnutls10 for unstable.
+ Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736
+ Closes: #250742, #250733
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 24 May 2004 22:32:52 -0400
+
+samba (3.0.4-3) unstable; urgency=low
+
+ * Color me stupid; I uploaded an experimental version to unstable.
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 22 May 2004 00:40:58 -0400
+
+samba (3.0.4-1) unstable; urgency=low
+
+ Eloy:
+
+ * New upstream version.
+ Closes: #247640 (New upstream version available)
+ Closes: #238905 (Printing crash fix)
+ Closes: #247090 (panic in viewing printerqueue)
+
+ Vorlon:
+
+ * Incorporate Catalan debconf translations; thanks to
+ Aleix Badia i Bosch <abadia@ica.es> and the Debian L10n Catalan Team.
+ (closes: #236640)
+ * Incorporate Czech debconf translations; thanks to
+ Miroslav Kure <kurem@upcase.inf.upol.cz> (closes: #236274).
+ * Update libsmbclient shlibs, due to an incompatibility with older
+ versions that prevents gnome-vfs from working correctly
+ (closes: #245869).
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 21 May 2004 11:42:19 -0400
+
+samba (3.0.2a-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 24 Feb 2004 10:30:47 -0500
+
+samba (3.0.2-2) unstable; urgency=high
+
+ * Apply patch from Urban Widmark <urban@teststation.com> to prevent
+ users from mounting remote filesystems containing suid files
+ (closes: 232327). This represents an exploitable security hole on
+ systems running Linux 2.6 kernels.
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 12 Feb 2004 21:38:40 -0600
+
+samba (3.0.2-1) unstable; urgency=high
+
+ * New upstream release.
+ - LaMont Jones: correct false failure LFS test that resulted
+ in _GNU_SOURCE not being defined (thus resulting in strndup()
+ not being defined) (closes: #226694)
+ - Segfault fixes. (closes: #230012) (maybe more, but we need bug
+ reporters to confirm.)
+
+ Urgency "high" due to a password initialization bug that could grant
+ an attacker unauthorized access to a user account created by the
+ mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and
+ workarounds for those not wishing to upgrade (which is a bad idea
+ anyway since this new release fixes lots of other bugs.)
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 8 Feb 2004 10:06:29 -0500
+
+samba (3.0.1-2) unstable; urgency=low
+
+ * Include ntlm_auth's man page.
+ * Don't create directories outside of the source directory during
+ package build time. (closes: #227221, #227238, #225862)
+ * Don't include the "Using Samba" book in the swat package, just a
+ symlink that points to the book included in the samba-doc package.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 13 Jan 2004 13:48:13 -0500
+
+samba (3.0.1-1) unstable; urgency=low
+
+ * New upstream version (closes: #225565)
+ * Add support in the dhcp hook for netbios scope, and handle better
+ the case of multiple DHCP-using interfaces (closes: #224109).
+ * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant
+ tail works. Thanks to Paul Eggert <eggert@twinsun.com>.
+ * Include /usr/bin/ntlm_auth in the winbind package.
+ * Run configure with "--with-piddir=/var/run/samba" since the
+ default got changed to /var/run in this new upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 30 Dec 2003 16:21:31 -0500
+
+samba (3.0.0final-1) unstable; urgency=low
+
+ * It's here, it's here, it's here, Samba 3.0.0 is here!
+ * Incorporate Japanese debconf translations; thanks to Kenshi Muto
+ <kmuto@debian.org>. (closes: #209291)
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 25 Sep 2003 13:39:28 -0400
+
+samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 13 Sep 2003 08:47:56 -0400
+
+samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low
+
+ * New upstream release. Last Release Candidate according to the
+ Samba Team. Samba 3.0.0 is around the corner, in a week or so.
+ - Fixes use of non-PIC code in nss shared libraries (closes: #208773)
+ - 'unix password sync' option now runs the unix password program as
+ root again (closes: #209739).
+ * One-line patch to make packages buildable with distcc (closes: #210227)
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 9 Sep 2003 07:57:16 -0400
+
+samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low
+
+ * New upstream release.
+ * Link against libgnutls7 instead of libgnutls5. (closes: #208151)
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 2 Sep 2003 21:37:13 -0400
+
+samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low
+
+ * New upstream version (skipped samba 3.0.0beta3 due to time
+ constraints.) This ugly version number will go away when the final
+ Samba 3.0.0 is released.
+ * Drag new unpackaged tools into the packages: smbcquotas (smbclient),
+ vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8)
+ manpage (samba). (closes: #151158)
+ * Switch to DH_COMPAT level 4:
+ - no explicit conffile listings needed
+ - the postinst for libsmbclient is now completely autogenerated
+ - use the default init script handling (with support for
+ invoke-rc.d) in debhelper, instead of the currently buggy upgrade
+ path (closes: #185439)
+ - add support for ${misc:Depends} in control for those packages with
+ init scripts
+ * Add versioned dependency on libpam-runtime and change
+ /etc/pam.d/samba to use the new common PAM config blocks.
+ * New python2.3-samba package (old python2.2-samba is no more.)
+ (closes: #206171)
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 25 Aug 2003 17:05:14 -0400
+
+samba (3.0.0beta2-1) unstable; urgency=low
+
+ * New upstream release
+ - The smb.conf(5) manpage documents config options again
+ (closes: #197963).
+ - Handling of winbind/idmap has been restructured; domain members
+ should be able to map domain accounts to local accounts again
+ (closes: #196815).
+ - Use the locale charset for 'display charset' by default
+ (closes: #194406).
+ - Fix for segfault in smbclient when using the -b option
+ (closes: #196833).
+ - Handle an empty 'passdb backend' list gracefully (closes: #193946).
+ * Don't set 'display charset' anymore on upgrade, since this is now
+ grabbed from the locale by default -- a much better option.
+ * Removed time.c.patch which is now in the upstream sources.
+ * Update FHS patch for two new tdb files (netsamlogon_cache.tdb,
+ privilege.tdb).
+ * Remove python-linker.patch, since the Kerberos package has been
+ fixed to no longer use rpath
+ * Remove configure.patch: the hppa glibc bug this was added for is
+ long since fixed, and upstream isn't interested in supporting this
+ kludge.
+ * Update references to missing documentation in sample smb.conf file
+ (closes: #187632).
+ * Fix handling of krb5 link line, building on a patch from Stefan
+ Metzmacher <metze@metzemix.de>.
+ * Add patch so smbclient's tar support works with popt
+ (closes: #194921).
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 2 Jul 2003 20:59:09 -0500
+
+samba (3.0.0beta1-2) unstable; urgency=low
+
+ * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1)
+ to make sure we get the right shlib dependencies (closes: #193149).
+ * Update the dhcp config hooks so they're suitable for sourcing (i.e.,
+ don't call "exit") (closes: #196477).
+ * Bring package into line with current policy by adding support for
+ the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs)
+ by default
+ * Make sure libpam-smbpass is a self-contained DSO.
+ * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite
+ the server list.
+ * Fix python install script to ignore -Wl linker flags, as seen in the
+ output from the latest krb5-config.
+ * Add LDAP and Unicode information about upgrading from 2.2 to
+ README.debian.
+ * Remove dangerous and confusing browse options from the default
+ smb.conf (closes: #198804).
+ * Reorder smb.conf options for clearer grouping, and clarify the
+ comments.
+ * Add a default [print$] share to the sample smb.conf, and create the
+ necessary tree under /var/lib/samba/printers. (closes: #168173)
+ * s/winbind/idmap/ in smb.conf, since the option names have changed.
+ * Fix the patch for postexec handling, so that we chdir("/") at the
+ right time.
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 12 Jun 2003 15:02:00 -0500
+
+samba (3.0.0beta1-1) unstable; urgency=low
+
+ * New upstream version.
+ - fix for empty browselist bug (closes: #194553)
+ - fix for tab completion segfault in smbclient (closes: #194776)
+ - Samba now works as a domain member again without segfaulting
+ (closes: #194134, #194394, #194775)
+ - WinXP machines can join a Samba-controlled domain again
+ (closes: #195362)
+ * Build-depend on python-dev >= 2.2 instead of on just python-dev
+ (without version).
+ * Added Vorlon'n patch to source/lib/time.c to fix #194075.
+ (closes: #194075)
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 8 Jun 2003 22:26:43 -0400
+
+samba (2.999+3.0.alpha24-3) unstable; urgency=low
+
+ * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324)
+ * Rebuild against pristine Kerberos libs, to squelch warnings about
+ versioned symbols. (closes: #194431, #194396)
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 22 May 2003 15:32:00 -0500
+
+samba (2.999+3.0.alpha24-2) unstable; urgency=low
+
+ * Fixed description of the smbfs package. (closes: #194183)
+ * Negate the sense of the unixsam check when upgrading. (closes: #194234)
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 21 May 2003 12:21:53 -0400
+
+samba (2.999+3.0.alpha24-1) unstable; urgency=low
+
+ * New upstream version. (closes: #189354)
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 20 May 2003 13:55:57 -0400
+
+samba (2.999+3.0.alpha23-5) unstable; urgency=low
+
+ * Move the python package from section "net" to section "python".
+ * Make sure we use PIC code for python on all platforms.
+ * French translation of an additional debconf template, courtesy of
+ Christian Perrier <bubulle@debian.org>. (closes: #188832)
+ * Updated Brazilian Portuguese translation from André Luís Lopes
+ <andrelop@ig.com.br>.
+ * s/unixsam/guest/ everywhere, since the unixsam backend is now
+ deprecated. (closes: #190095)
+ * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not
+ only does using /tmp violate SELinux policies, it introduces the
+ possibility of data loss during the final copy if /tmp is a separate
+ filesystem. (closes: #189823)
+ * Pull in fix for SWAT, so that logins work again
+ (closes: #188255, #192077).
+ * Move passdb.tdb into /var/lib/samba, since it's not user-editable.
+ * Make sure with don't ship any .cvsignore files.
+ * Don't ship examples for python2.2-samba and samba-doc in an
+ "examples" directory inside another "examples" directory.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 6 May 2003 12:05:46 -0400
+
+samba (2.999+3.0.alpha23-4) unstable; urgency=low
+
+ * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all
+ non-RPC printing clients are working again.
+ * Change shlibs to 0 instead of 0.1. The library already in the
+ archive is using this soname, and there are no packages depending
+ on libsmbclient, so skip changing the package name for now.
+ (closes: #188661)
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 11 Apr 2003 14:42:00 -0500
+
+samba (2.999+3.0.alpha23-3) unstable; urgency=low
+
+ * Put the Samba Python modules in /usr/lib/python2.2/site-packages/,
+ not in /usr/lib/python2.2/lib-dynload/.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 9 Apr 2003 19:49:25 -0400
+
+samba (2.999+3.0.alpha23-2) unstable; urgency=low
+
+ * New package python2.2-samba that includes the Python modules
+ included in the Samba sources. Feedback on these modules and the new
+ package is welcome, as we (Debian Samba maintainers) don't use them.
+ (closes: #170731, #173322)
+ * Move libsmbclient-dev from section "devel" to "libdevel".
+ * Fix panic action script to give a sensible error message instead of
+ an empty backtrace when we don't have permission to attach to the
+ process. (closes: #188164)
+ * Fix libpam-smbpass so that it really does something. (closes: #178245)
+ * Apply patch to fix printing-related segfaults. (closes: #188076)
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 6 Apr 2003 21:40:33 -0400
+
+samba (2.999+3.0.alpha23-1) unstable; urgency=high
+
+ * new upstream release, includes security fix for DSA-262
+ * tweak the debconf templates to avoid references to specific
+ front-ends (closes: #183718)
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 9 Mar 2003 14:58:00 -0600
+
+samba (2.999+3.0.alpha21-5) unstable; urgency=low
+
+ * touch up the package descriptions a little bit (caps, punctuation)
+ * remove addtosmbpass, which snuck back in when we weren't looking
+ * reverse the position of the wins server tag, after looking more
+ closely at the code (closes: #183061)
+ * fix a glitch in the Spanish .po that rendered it invalid, plus a typo
+ * updated Brazilian Portuguese templates (closes: #183295)
+ * fix a typo in upstream manpage (s/shave/share/) (closes: #180546)
+ * run sed before we run sed, to deal with crazybad special chars
+ in the workgroup name (!) (closes: #176717)
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 1 Mar 2003 15:14:00 -0600
+
+samba (2.999+3.0.alpha21-4) unstable; urgency=low
+
+ * add scripts to samba-common to grab the netbios-name-servers options
+ if we're running a DHCP client (closes: #38413)
+ * major rearrangement of build scripts: install target now operates on
+ debian/tmp, not debian/samba, so we can see when new files are
+ added and decide where to put them; several files that should have
+ been in samba-common but were in samba (for the above reason) --
+ smbcacls, -- have been moved, with a replaces: added.
+ * Fix rc script so that whitespace is consistent between inetd and
+ daemon modes (closes: #174677).
+ * smbclient -M must always connect to port 139, because port 445
+ doesn't support messaging and we can't do the port 135 stuff yet
+ (closes: #175292, #167859).
+ * Import the diff from upstream CVS, which has fixed a few bugs
+ (closes: #178219, #177583, #181467, #181487, #181603, #175864).
+ Remove a few patches of ours which are now superseded.
+ * Add po-debconf support to the tree, for better i18n.
+ * Install the libsmbclient.so symlink in the libsmbclient-dev package,
+ per policy (closes: #181466).
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 27 Dec 2002 00:37:00 -0600
+
+samba (2.999+3.0.alpha21-3) unstable; urgency=low
+
+ * Drop --with-ldapsam from the configure options, since this no longer
+ means what we thought it did. Revert patch for changing the 'passdb
+ backend' defaults.
+ * Add patch from CVS HEAD to fix pdbedit segfault; postinst script
+ should work better now. (Closes: #173936)
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 22 Dec 2002 13:29:00 -0600
+
+samba (2.999+3.0.alpha21-2) unstable; urgency=low
+
+ * add CONFIGDIR to the set of directories exported in the install
+ target, so we don't try to write to /etc/ on the autobuilders.
+ * Reset the default 'passdb backend' value to something sensible, so
+ that we don't unnecessarily break upgrading systems (closes: #173731).
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 20 Dec 2002 09:13:00 -0600
+
+samba (2.999+3.0.alpha21-1) unstable; urgency=low
+
+ * new upstream release, many patches now incorporated upstream
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 16 Dec 2002 23:39:00 -0600
+
+samba (2.999+3.0.alpha20-4) unstable; urgency=low
+
+ * Remove obsolete comments about non-existant LDAP support in the
+ Debian Samba packages. (Closes: #165035)
+ * Apply patch for segfault in pam_smbpass when using the unixsam
+ backend.
+ * Drop support for nmbd in inetd, since it's not supported by
+ upstream and is reported to cause problems (closes: #23243, #137726,
+ 165037).
+ * Clarify example printing configs in smb.conf (closes: #168174).
+ * Make sure nmbd still responds to SIGTERM if it has no interfaces to
+ listen on (closes: #168079).
+ * Fix to get samba working again on 64-bit archs, after a
+ pointer<->int size mismatch bug. Already fixed in upstream CVS.
+ * Merge fix from CVS for broken libsmbclient.h references to internal
+ structures (closes: #162956).
+ * Add a default 'panic action' for Samba that will give us genuinely
+ useful debugging information after a crash.
+ * Fixed correct patch to example configurations in the libpam-smbpass
+ packages (closes: #169350).
+ * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead
+ (closes: #169682).
+ * Only ask the user for permission to edit if there's a chance of us
+ damaging something.
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 18 Nov 2002 19:53:00 -0500
+
+samba (2.999+3.0.alpha20-3) unstable; urgency=low
+
+ * Make sure smbstatus behavior is sane when Samba *has* been started,
+ as well as when it has not (closes: #164179). Thank to Robbert Kouprie
+ <robbert@radium.jvb.tudelft.nl> for this patch.
+ * Not using 'killall' in any of the maintainer scripts (the last one
+ remaining was winbind.logrotate.) We now just use 'kill' to send
+ a SIGHUP to a specific PID (which is stored in a file in
+ /var/run/samba.)
+ * Do not depend on procps because we're not using killall anymore.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 15 Oct 2002 22:15:57 -0400
+
+samba (2.999+3.0.alpha20-2) unstable; urgency=low
+
+ * fix an off-by-one error in smbd/lanman.c, which should shut off the
+ flood of log messages (closes: #157432)
+ * add a --config-cache option to the configure invocation, since
+ autoconf 2.5 doesn't load config.cache by default (closes: #163504)
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 5 Oct 2002 01:40:00 -0500
+
+samba (2.999+3.0.alpha20-1) unstable; urgency=low
+
+ * new upstream release
+ - non-primary groups appear to work again (closes: #161271)
+ * the official beginning of the upstream 3.0 branch
+ * exit without error from smbstatus when no connections have
+ been seen yet (closes: #161489)
+
+ -- Steve Langasek <vorlon@debian.org> Wed, 2 Oct 2002 19:02:00 -0500
+
+samba (2.999+3.0cvs20020906-1) unstable; urgency=low
+
+ * CVS update
+ - domain authentication works again (closes: #158698)
+ * Factor out common code in samba-common.config
+ * Handle character set settings in smb.conf on upgrade
+ (closes: #153913, #158770)
+ * Don't use killall in logrotate script; there are better ways
+ (closes: #160076)
+ * Ignore value of 'hostname lookups' for hosts allow/hosts deny
+ (closes: #154376)
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 7 Sep 2002 11:46:00 -0500
+
+samba (2.999+3.0cvs20020829-1) unstable; urgency=low
+
+ * CVS update.
+ * Move the smb.conf manpage to the samba-common package (closes: #159572)
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 29 Aug 2002 17:53:25 -0500
+
+samba (2.999+3.0cvs20020827-1) unstable; urgency=low
+
+ * CVS update. (Closes: #158508)
+ * Part 1 of 3 of the library separation patch that Vorlon wrote has
+ gone upstream - removed the patch from our patches/ directory.
+ * Debconf note to warn users that their smb.conf will be re-written
+ and changed if they use Swat to maintain it. (Closes: #158479)
+ * Fixed typo in samba.prerm.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 27 Aug 2002 15:23:23 -0400
+
+samba (2.999+3.0cvs20020825-2) unstable; urgency=low
+
+ * scale back the tdbsam migration support, because of undesirable
+ side-effects; now always defaults to 'no'.
+ * strip out hyperactive library dependencies that are only needed by
+ smbd (closes: #155156).
+ * nuke any broken registry.tdb files left by previous CVS snapshots.
+ * support rolling back the smbpasswd->tdbsam conversion on downgrade,
+ since many people are likely to need to downgrade for a while.
+ * remove postrm handling of legacy directories, and add handling of
+ current ones.
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 28 Jul 2002 09:44:24 -0500
+
+samba (2.999+3.0cvs20020825-1) unstable; urgency=low
+
+ * CVS update. These packages are based on Samba 3.0alpha19 + any
+ code commited after 3.0alpha19 was released.
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 25 Aug 2002 14:56:46 -0400
+
+samba (2.999+3.0cvs20020723-1) unstable; urgency=medium
+
+ * remove spurious line from samba.config
+ * migrate from smbpasswd to tdbsam
+ * re-add the pdbedit util and manpage
+ * compile in ldapsam support (closes: #146935)
+ * add PRIVATEDIR to the list of vars we override for the install
+ target, so Samba doesn't try to create /etc/samba (closes: #153746).
+ * fix makefile handling of LOGBASEDIR, so that logs always end up in
+ the right place (closes: 153727).
+ * Fixed bug in the FHS migration path that causes nmbd to read its
+ state from one location, but write it out to another. (closes: #154210)
+ * Make sure nmbd is always looking for wins.tdb in the same place.
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 19 Jul 2002 21:38:54 -0500
+
+samba (2.99.cvs.20020713-1) unstable; urgency=low
+
+ * first attempt for 3.0pre.
+ * only post a debconf note about moving logfiles if we're upgrading
+ from a version that had the logfiles in the old location
+ (closes: #152924).
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 13 Jul 2002 12:54:25 -0500
+
+samba (2.2.5-2) unstable; urgency=low
+
+ * No longer ship make_printerdef, which is deprecated. (closes: #63059)
+ * Clean up some empty directories from the samba package.
+ * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860).
+ * Clean up per-package documentation lists, to reduce clutter
+ (closes: #147638).
+ * Make sure we don't ship pdbedit's man page since we are still using
+ smbpasswd passwords. (closes: #152208)
+ * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find
+ it (closes: #148586).
+ * reorder postinst, so that installing samba-common from scratch loads
+ the debconf answers properly (closes: #151985).
+ * add lintian overrides for winbind, to eliminate some noise.
+ * rename pam_smbpass changelog to comply with policy.
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 23 Jun 2002 22:45:04 -0500
+
+samba (2.2.5-1) unstable; urgency=low
+
+ * New upstream release.
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 9 Jun 2002 15:49:21 -0400
+
+samba (2.2.4+2.2.5pre1-1) experimental; urgency=low
+
+ * Getting ready for Samba 2.2.5.
+ * Remove patches/parse_spoolss.patch, now included upstream.
+ * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in
+ 2.2.4-1. We don't use POSIX ACL support ourselves, so we'd
+ appreciate reports from those using this feature so we can
+ be sure this works.
+ * Fix the filename-matching algorithm used for smbtar's 'exclude'
+ functionality. (closes: #131571)
+ * Look for secrets.tdb in /var/lib/samba, and handle in the postinst.
+ This is not really a config file, because users don't edit it.
+ (closes: #147429)
+ * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen
+ <Tommi.Komulainen@iki.fi> for the patch. (closes: #144847)
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 28 May 2002 11:33:51 -0400
+
+samba (2.2.4-1) unstable; urgency=low
+
+ * New upstream release (closes: #144713)
+ * Building with POSIX ACL support (closes: #137819)
+ * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055)
+ * Compile with --with-automount, for NIS homedir support (closes: #123396)
+ * Add a proper 'flags' field to the mount entry we write to /etc/mtab;
+ fixes a display bug with mount (closes: #140397)
+ * Added logic to /etc/init.d/samba so a help message is printed out
+ when Samba is running from inetd _and_ we are not booting, i.e. the
+ user called the init script manually. Thanks to Francesco
+ Potorti <pot@gnu.org> for the suggestion on how to implement this.
+ (Closes: #139807, #140204)
+ * samba.postinst: added logic so we don't call /etc/init.d/samba if
+ we are running from inetd (this prevents the stupid help message
+ to be printed during package upgrades if we are running from inetd.)
+ * samba.prerm: idem.
+ * /etc/init.d/samba: delete stale PID files after nmbd and smbd are
+ stopped. This prevents start-stop-daemon from printing an ugly
+ error message when called from '/etc/init.d/samba stop'. I prefer
+ this than running start-stop-daemon with --oknodo because
+ start-stop-daemon might print other important error messages that with
+ --oknodo it would otherwise not print. (Closes: #102187, #109301)
+ * Patch from jerry@samba.org to fix parsing of spoolss structures.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 23 May 2002 23:16:52 -0400
+
+samba (2.2.3a-7) unstable; urgency=medium
+
+ * More README.debian updates.
+ * Neutralize the smb.conf 'lock dir' directive, which doesn't mean
+ what the FHS says it should, and causes us no end of grief.
+ (Closes: #122299)
+ * LPRng-handling patch so that jobs printed to recent versions of
+ LPRng show up properly as 'done' instead of 'paused' in the Windows
+ print queue. Thanks to Jaroslav Serdula <serdula_jaroslav@vse.sk>
+ for this patch. (Closes: #139458)
+ * Applied patch from Urban Widmark <urban@teststation.com>
+ (smbfs upstream maintainer) to add a '-n' option to smbmount
+ that does the same as mount's '-n'. (Closes: #139590)
+ * Minor tweak to unpatch-source so we unpatch sources in the
+ reverse order we patched them.
+ * Don't depend on grep in samba.prerm to determine if Samba was
+ running before the upgrade starts.
+ * Tweak the wording of debconf templates.
+ * Incorporate debconf translations for French, Spanish and Portuguese;
+ thanks to Carlos Valdivia Yagüe <valyag@hotpop.com> (es),
+ Andre Luis Lopes <andrelop@ig.com.br> (pt_BR), and Philippe
+ Batailler and Denis Barbier <barbier@debian.org> (fr).
+ (closes: #142657, #142659, #141551, #141699, #141682)
+ * Fixed symlinks in the swat package so the point to /usr/share/doc/
+ instead of /usr/doc/. Added note to the description of the
+ swat packages that says that samba-doc must be installed for
+ the on-line documentation to work. Thanks to Torne Wuff
+ <torne@wolfpuppy.org.uk>. (Closes: #95437)
+ * 'dh_installinit -n' gives us no initscript handling -- we need to
+ handle all starting and stopping of daemons ourselves, which wasn't
+ happening in the {pre,post}rm scripts.
+ * Vary the priority of the debconf question "Do you want to generate
+ /etc/samba/smbpassd?" depending on whether the file already exists.
+ File exists -> priority 'medium', file does not exist -> priority
+ 'low'. Changed priorities of all other questions from 'high' to 'medium'.
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 20 Apr 2002 17:48:27 -0400
+
+samba (2.2.3a-6) unstable; urgency=low
+
+ * Call db_stop as soon as we're done with debconf in the postinst, to
+ avoid hanging bugs (closes: #137813)
+ * Ony call 'update-inetd --add' on first installation, just as we only
+ call 'update-inetd --remove' on package purge.
+ * Bring our shipped smb.conf closer in line with the upstream
+ defaults: don't twiddle the send/recv buffer sizes, since the Linux
+ kernel already provides a much better default setting
+ (closes: #80966, #80934, #137415, #133477)
+ * Added libnss_wins.so to the winbind package (closes: #137201)
+ * Updates to README.debian.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 12 Mar 2002 10:57:40 -0500
+
+samba (2.2.3a-5) unstable; urgency=low
+
+ * Having multiple workgroup lines in your smb.conf, though wacky, is
+ perfectly valid. Account for this in samba-common.config.
+ (closes: #137157)
+
+ -- Steve Langasek <vorlon@debian.org> Sun, 10 Mar 2002 21:52:51 -0600
+
+samba (2.2.3a-4) unstable; urgency=low
+
+ * Fixed typo in samba.postinst. Cosmetic fixes there as well.
+ * Fix to improper usage of /usr/bin/tr in samba-common config script
+ (closes: #137744)
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 9 Mar 2002 14:14:02 -0500
+
+samba (2.2.3a-3) unstable; urgency=medium
+
+ * Make sure /etc/init.d/samba is executable before calling it
+ in the postinst. Quickly checked all other maintainer scripts
+ to make sure we are not calling an init script if it is not
+ executable. (closes: #137321)
+ * Fix up maintainer scripts to detect if samba was not running before
+ an upgrade. (closes: #33520, #130534)
+ * Make sure /etc/samba/ is included in the samba-common package.
+ Closes: #137157
+
+ -- Steve Langasek <vorlon@debian.org> Fri, 8 Mar 2002 11:13:21 -0500
+
+samba (2.2.3a-2) unstable; urgency=low
+
+ * merge in debconf support:
+ - Moved all smb.conf-related questions to samba-common (smb.conf
+ is part of the samba-common package, not the samba package.)
+ - smb.conf is not a samba-common conffile anymore since it is
+ being managed by debconf. It is ABSOLUTELY necessary to make
+ sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes
+ made via debconf. In other words, any changes made by the user
+ should be honored by the debconf interface.
+ - samba.postinst now moves old log files from /var/log/ to
+ /var/log/samba/. There's a Debconf note that informs the user
+ the log files are stored now in a new location.
+ - debian/control:
+ + Make samba depend on debconf.
+ - New file debian/samba.templates.
+ - New file debian/samba.config.
+ - Re-worked debian/samba.postinst.
+ + Got rid of all /etc/samba/debian_config sillyness.
+ - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces
+ it.
+ - Removed debian/samba.prerm.
+ - Cleaned up /etc/init.d/samba.
+ + Added infrastructure for debconf.
+ + Got rid of all /etc/samba/debian_config sillyness.
+ + Got rid of /etc/samba/smbpasswd conversion stuff for
+ compatibility with versions of Samba < 2.0.0final-2.
+ (closes: #127959, #34408, #113594)
+ * make samba.postinst ignore the absence of /var/log/{s,n}mb*;
+ makes for a clean upgrade path.
+ * Building with MSDFS support (closes: #116793)
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 5 Mar 2002 14:14:33 -0600
+
+samba (2.2.3a-1) unstable; urgency=low
+
+ * New upstream version (closes: #135001)
+ * Potato builds were failing because debian/rules was not creating
+ debian/winbind/etc/logrotate.d/. A user having problems creating
+ Potato packages brought this to my attention. dh_installlogrotate
+ takes care of creating the directory for us, that's why we didn't
+ notice.
+ * Removed code that converts /etc/samba/smbpasswd from an ancient
+ format to the new format of Samba 2.0.0 and later.
+ Closes: #134375 - samba: postinst failed due to missing
+ /usr/bin/convert_smbpasswd.
+ * Re-organized FHS migration code in samba.postinst. Make sure we
+ don't fail when we move files that don't exist.
+ Closes: #133813 - samba: Install failed.
+ * Adding docs. to the libpam-smbpass package.
+ * Remove man pages for findsmb because we are not providing this
+ script.
+ Closes: #134181 - findsmb referenced, but not included.
+ * Removed replace.patch because it is now present upstream.
+ * Added patch from Jerry Carter to fix a problem when saving
+ document preferences for printing from NT clients.
+ * The real winbindd daemon is a forked process so we can't use
+ --make-pidfile when calling start-stop-daemon. Fixed
+ /etc/init.d/winbind to work around the issue. Thanks to
+ Lin Li <linl@xandros.com> for the patience and for reporting
+ the problems. Hopefully I got it right this time.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 20 Feb 2002 18:39:03 -0500
+
+samba (2.2.3-6) unstable; urgency=low
+
+ * Make sure there are actual files in /var/state/samba before trying
+ to move them (Closes: #133534, #133510).
+ * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly
+ again.
+
+ -- Steve Langasek <vorlon@debian.org> Tue, 12 Feb 2002 09:19:29 -0600
+
+samba (2.2.3-5) unstable; urgency=low
+
+ * Whoops, missed a spot on the samba.postinst -- will fail badly if
+ /var/state/samba/ no longer exists. Better get this fix into the
+ next upload. ;) (Closes: #133088)
+ * Regenerate configure only if it is older than configure.in.
+ * Fix smbd handling of network neighborhood lists, which was missed
+ in the FHS conversion (Closes: #133091)
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 9 Feb 2002 16:37:57 -0500
+
+samba (2.2.3-4) unstable; urgency=low
+
+ * FHS cleanup; files in /var are now properly sorted according to
+ their nature. (Closes: #102101)
+ * Remove patches to source/configure, since we now call autoconf to
+ regenerate this file cleanly.
+ * lintian fixes:
+ - Create winbind.conffiles and add /etc/logrotate.d/winbind and
+ /etc/init.d/winbind to it.
+ - Use a relative symlink for /usr/lib/cups/backend/smb.
+ - Removal of a .cvsignore file in the samba-doc package.
+ * winbind.init fixes:
+ - Corrected name of the pid file (Steve)
+ - Make start-stop-daemon create a pid file for winbindd since it
+ does not create one on his own.
+ * #DEBHELPER# is not needed in samba.postinst because we are adding
+ manually everything that debhelper adds automatically. In fact,
+ since we are calling update-rc.d without standard paramaters I
+ think we can't use #DEBHELPER#.
+ * Fix fatal syntax error in samba.prerm.
+
+ -- Steve Langasek <vorlon@debian.org> Thu, 7 Feb 2002 13:12:08 -0500
+
+samba (2.2.3-3) unstable; urgency=low
+
+ * work on lintian-cleanness in the package (wrong permissions,
+ maintainer scripts in need of debhelpering)
+ * /lib/security/pam_smbpass.so is now being included in the
+ libpam-smbpass package only, and not in both the libpam-smbpass and
+ samba packages (which was the case prior to 2.2.3-3.)
+ * Instead of making our patch scripts executable in the rules file
+ we run them through /bin/sh.
+ * New 'winbind' package that has all the winbind stuff that was in the
+ samba package in 2.2.3-2 and before.
+ * Added replace.patch: patch from Jeremy Allison to fix problems when
+ replacing or overwriting files in a Samba share. Patch was sent to
+ the samba mailing list.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 5 Feb 2002 21:12:48 -0500
+
+samba (2.2.3-2) unstable; urgency=low
+
+ * add support to debian/scripts/{patch-source,unpatch-source} for
+ automatic updating and cleaning of <version.h>. This was a request
+ from the Samba Team: they wanted us to clearly mark our packages
+ so it is always known a user is running Samba with (possibly)
+ Debian-specific patches.
+ * Change init.d killscript link to K19samba, so we stop before autofs
+ (closes: 117327)
+ * Make our patch scripts executable in the rules file -- dpkg won't do
+ this for us (closes: #132415).
+
+ -- Steve Langasek <vorlon@debian.org> Mon, 4 Feb 2002 09:51:00 -0600
+
+samba (2.2.3-1) unstable; urgency=low
+
+ * New upstream release (closes: #131228).
+ * Restructured build system that provides DBS-like separation of
+ patches
+ * Fix typo in smbfs description (closes: #116209).
+ * Use killall -q in logrotate.d script, to avoid spurious cron
+ emails (closes: #130100).
+
+ -- Steve Langasek <vorlon@debian.org> Sat, 2 Feb 2002 19:56:18 -0500
+
+samba (2.2.2-12) unstable; urgency=high
+
+ * (Steve) Patch for source/client/client.c.
+ Closes: #86438 smbclient: Transfering several GB causes the average
+ speed to be messed up.
+ * Uploading with urgency=high to expedite the move from unstable
+ to testing because of the security problem fixed in -11.
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 25 Jan 2002 22:31:12 -0500
+
+samba (2.2.2-11) unstable; urgency=low
+
+ * Building with --with-libsmbclient. We have created two new
+ packages: libsmbclient and libsmbclient-dev. Hopefully this
+ will help some people that want to add the capability of
+ speaking SMB to their applications.
+ Closes: #117132 - libsmbclient support library?
+ * (Steve) Make swat do the right thing when reading (parsing)
+ the saved preferences in smb.conf.
+ Closes: #55617 swat mutilates the linpopup message command.
+ * Updated README.Debian. Updated descriptions in debian/control.
+ * Remembered to bump up version number in source/include/version.h
+ (need to automate this or else I'll keep forgetting.)
+ * (Steve) one liner for source/web/diagnose.c.
+ Closes: #106976 - smbd/nmbd not running message with swat/linuxconf.
+ * Added '|| true' to the post-rotate script so logrotate doesn't
+ fail if either nmbd or smbd is not running.
+ Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process.
+ * Fixed incorrect file locations in swat's man page and added a
+ Debian-specific note to /usr/share/doc/swat/README.
+ Closes: #71586 swat: needs documentation fixes for debian.
+ * smbmount in the smbfs package does not have the setuid bit set.
+ Apparently, smbmount uses libsmb without checking the environment.
+ Thanks to Christian Jaeger <christian.jaeger@sl.ethz.ch> for
+ finding the local root exploit.
+ * Applied old patch from Jerry) Carter" <jerry@samba.org> to correct
+ the following two problems in Samba 2.2.2:
+ - %U and %G could not be used in services names
+ in smb.conf.
+ - %G would fail to be expanded in an "include = ..."
+ line.
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 19 Jan 2002 21:35:26 -0500
+
+samba (2.2.2-10) unstable; urgency=low
+
+ * (Steve) Add missing manual pages.
+ Closes: Bug#128928: missing manpages in smbfs.
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 13 Jan 2002 14:39:55 -0500
+
+samba (2.2.2-9) unstable; urgency=low
+
+ * (Steve) Fix broken URL's in HTML docs.
+ Closes: Bug#17741: bad links in html docs (at last!!!)
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 11 Jan 2002 13:37:07 -0500
+
+samba (2.2.2-8) unstable; urgency=low
+
+ * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in
+ debian/control so rpcclient.1, which was in samba-2.2.2-5, does not
+ cause problems now that it is part of smbclient (>= 2.2.2-6). Closes:
+ Closes: Bug#128684: error upgrading smbclient in sid.
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 11 Jan 2002 11:42:40 -0500
+
+samba (2.2.2-7) unstable; urgency=low
+
+ * (Steve) Patch to make behavior honor what the docs. say about "hosts allow"
+ taking precedence over "hosts deny".
+ Closes: Bug#49249: swat: error with host deny ?!
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 10 Jan 2002 12:36:58 -0500
+
+samba (2.2.2-6) unstable; urgency=low
+
+ * (Steve) Adds manpage for rpcclient to the proper file,
+ removes smbtorture from the distro because this tool isn't intended for
+ widespread consumption.
+ Closes: #63057 - no manual page for smbtorture.
+ * (Steve) Removed -gnu from the configure arguments (--build, --host) in
+ debian/rules so config.sub is able to properly create the host and target
+ tuples.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 9 Jan 2002 14:39:51 -0500
+
+samba (2.2.2-5) unstable; urgency=low
+
+ * Fixes from vorlon:
+ * Use /usr/bin/pager instead of more.
+ Closes: #125603: smbclient violates pager policy.
+ * Make /etc/logrotate.d/samba a conffile, send smbd and nmbd
+ a SIGHUP to have the log files reopened, fixes to
+ /etc/logrotate.d/samba.
+ Closes: #127897: log file rotation.
+ Closes: #118277: /etc/logrotate.d/samba not listed in conffiles.
+ * s/covert/convert/.
+ Closes: #121653 probable typo in install message.
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 6 Jan 2002 03:14:58 -0500
+
+samba (2.2.2-4) unstable; urgency=low
+
+ * Applied patch from Steve to work around problem in glibc that affects the
+ HPPA architecure. The patch detects the error condition at configure time
+ and compiles without LFS support if necessary.
+ Closes: Bug#126763: samba completely broken on hppa.
+ * Including unicode_map.1251.
+ Closes: Bug#126719: samba-common: unicode_map.1251 missing.
+ * Updated smbd daemon version to match Debian package version.
+ Closes: Bug#127199: Package version and smbd daemon version don't match.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 31 Dec 2001 14:32:47 -0500
+
+samba (2.2.2-3) unstable; urgency=low
+
+ * Added some spaces in package description in debian/control.
+ Closes: #120730 - missing spaces in package description for nice
+ alignment.
+ * Spelling fixes.
+ Closes: #125328, #125329, #125330, #125367, #125365, #125403.
+ * Steve Langasek <vorlon@debian.org> is the co-maintainer of the Debian
+ Samba packages!!! Added him to the uploaders field in debian/control.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 18 Dec 2001 00:54:25 -0500
+
+samba (2.2.2-2) unstable; urgency=low
+
+ * Backed out changes to source/filename.c per Andrew Tridgell's request.
+ This changes were introduced in 2.2.1a-7 as an attempt to fix #47493.
+ Tridge found out that they break smbd.
+ * Changed version number in source/includes/version.h so it is clear that
+ this is a version of Samba packaged for Debian. This is another request from
+ Tridge and will help the Samba Team to get bogus bug reports.
+ * Added Samba-HOWTO-Collection.pdf and other README files to the
+ /usr/share/doc/<package>/ directories.
+ * Installing libnss_winbind.so and pam_winbind.so.
+ Closes: #116790: nss and pam modules for winbind missing.
+ * Removed user-emacs-settings from changelog.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 29 Oct 2001 19:16:26 -0500
+
+samba (2.2.2-1) unstable; urgency=low
+
+ * New upstream version.
+ * Temporary fix for #113763 (Steve Langasek)
+ * Quick hack to avoid smbmount reveal password length. Please note
+ that even with this hack there is a small window when password is
+ completely visible with 'ps aux'. There are other methods that should
+ be used to automate mounting of SMB shares.
+ Closes: #112195: smbmount-2.2.x reveals password length.
+ * Applied patch from Steve Langasek <vorlon@debian.org> to prevent
+ forcing use of setresuid() in Sparc.
+ Closes: #112779: samba build forces use of setresuid, which causes
+ smbd to fail on Sparc.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 15 Oct 2001 10:26:10 -0400
+
+samba (2.2.1a-9) unstable; urgency=low
+
+ * Replaced $(LD) with $(CC) all the way through source/Makefile.
+ Closes: #111036: ld shouldn't be used to link shlibs.
+ * s/\/bin\/mail/\/usr\/bin\/mail/ in smb.conf's man page (HTML and
+ sgml as well.)
+ Closes: #110963: smb.conf: mail should be /usr/bin/mail.
+ * Documented better smbclient's -W behavior. Patch from Steve
+ Langasek.
+ Closes: #53672: smbclient: -W flag is interpreted as domain, not
+ workgroup.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 4 Sep 2001 23:10:41 -0400
+
+samba (2.2.1a-8) unstable; urgency=low
+
+ * Set some reasonable default perms for the samba logdir (again,
+ thanks to vorlon :-)
+ Closes: #72529: insecure permissions on log files.
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 26 Aug 2001 15:40:47 -0400
+
+samba (2.2.1a-7) unstable; urgency=low
+
+ * Another attempt at fixing #47493. Patch from Steve Langasek
+ <vorlon@netexpress.net>. Let's keep our fingers crossed Steve!
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 26 Aug 2001 13:37:06 -0400
+
+samba (2.2.1a-6) unstable; urgency=low
+
+ * Backed out fix to #47493 introduced in 2.2.1a-4 as it is causing
+ smbd to die with signal 11 under some unidentified situations.
+ Closes: #109774: Latest debian version breaks printer driver download.
+ Closes: #109946: not all files appear in samba-exported directories.
+ * Another patch from Steve Langasek. This one adds quotes around
+ printer names for print systems it's reasonable for Debian to
+ support. Together with the patch in #29957 (see changelog for
+ 2.2.1a-4), this should take care of the problems with multi-word
+ printer names in Samba.
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 24 Aug 2001 21:12:27 -0400
+
+samba (2.2.1a-5) unstable; urgency=low
+
+ * Important changes that affect how Samba is built on Debian
+ machines are implemented in this release. All of this changes
+ were suggested by the energetic Steve Langasek <vorlon@debian.org>,
+ and his arguments were so sound and reasonable that I decided
+ to implement them. Here's Steve's original changelog:
+
+ * Fix up the build system to avoid needing to run configure
+ as root to answer questions we already know the answers to.
+ * In the process, make surprising progress towards being able to
+ cross-compile the samba packages.
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 24 Aug 2001 01:08:06 -0400
+
+samba (2.2.1a-4) unstable; urgency=low
+
+ * Fixed typo in smbmount's mount page.
+ Closes: #109317: smbfs: mistype in smbmount manpage.
+ * Included symlink to smbspool to better support CUPS printing.
+ Closes: #109509: include symlink for cups samba support.
+ * Applied patch from Steve Langasek <vorlon@netexpress.net> to
+ fix bug #29957.
+ Closes: #29957: samba strips trailing " from strings in smb.conf.
+ * First attempt at fixing #47493. Another patch from Steve "I want
+ a bug-free Samba" Langasek.
+ Closes: #47493: Samba doesn't handle ':' in dir names right.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 21 Aug 2001 23:26:38 -0400
+
+samba (2.2.1a-3) unstable; urgency=low
+
+ * Steve Langasek <vorlon@netexpress.net> has been hard at work in
+ the last few days looking at the long list of open bugs filed
+ against the Samba packages. I don't know how to thank him. It's been
+ a pleasure working with Steve, and all the fixes, patches, etc. in
+ this release come from him. The bug list is greatly reduced thanks
+ to Steve's efforts.
+ * Steve's additions/modifications/patches/etc. are:
+ - New package that (libpam-smbpass) provides pam_smbpass. Before, this
+ was provided in another package but now the sources are part of
+ the Samba sources so we can start providing it from here.
+ Closes: #107043 - pam_smbpass now present in Samba source,
+ should be built from there
+ - Patch to source/smbd/service.c that allows admins to call
+ /bin/umount from the root postexec of a Samba share.
+ Closes: #40561 - samba pre/postexec commands do not work.
+ - Clear TMPDIR before starting smbd in /etc/init.d/samba.
+ Closes: #51295 - Problems with Samba and TMPDIR.
+ - Correction to documentation of "guest only".
+ Closes #38282 - "guest only" share still requires a password.
+ * Applied patch from Santiago Vila <sanvila@unex.es> to convert
+ /usr/sbin/mksmbpasswd from a shell script into a real awk script.
+ Sorry it took so long, Santiago; I hadn't realized you even
+ provided a patch :-)
+ Closes: #77891 - mksmbpasswd could be a real awk script.
+ * Updated description of the smbfs and smbclient packages. Also have
+ each package recommend the other.
+ Closes: #108650: Should suggest or recommend smbfs.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 13 Aug 2001 22:21:55 -0400
+
+samba (2.2.1a-2) unstable; urgency=low
+
+ * Build-depends: depend on debhelper (>=2.0.103).
+ Closes: #105795: Build-Depends are wrong.
+ * Run samba's preinst and postinst scripts without -e so failed commands
+ do not abort installation.
+ Closes: #106384: postinstall crashes abnormally. (And really closes
+ #104471.)
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 26 Jul 2001 00:30:37 -0400
+
+samba (2.2.1a-1) unstable; urgency=low
+
+ * New upstream version.
+ * Make sure samba's postinst script exits with a zero status.
+ Closes: #104471: Samba postinst problem.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 12 Jul 2001 21:55:21 -0400
+
+samba (2.2.1-1) unstable; urgency=low
+
+ * New upstream version.
+ Closes: #103339: config.guess and config.sub update required.
+ Closes: #98518: Samba 2.2 can't act as PDC for NT4/W2K due to
+ incompatibility with PAM.
+ Closes: #97447: nmbd crashes due to bugs in DAVE 2.5.2.
+ Closes: #95777: Samba 2.2 is unable to join or authenticate against
+ Samba 2.2 PDC domain.
+ Closes: #68842: samba should use PAM for password changing (I
+ haven't personally tried this one, but it's been
+ advertised this works.)
+ Closes: #102506: PAM account checking fails.
+ Closes: #102518: Complains about unknown paramter "obey pam
+ restrictions"
+ Closes: #94774: Build failure on PARISC machines.
+ * Moved away from /etc/cron.weekly/samba for log file rotation.
+ Now using logrotate.
+ Closes: #95548: typo in /etc/cron.weekly/samba.
+ Closes: #74951: nmbd does not rename its log file.
+ * Removed Debian-specific addtosmbpass.8 man page since this script
+ is not longer provided upstream. Users should use the smbpasswd
+ program instead.
+ * Updated sample /etc/samba/smb.conf to reflect the recent changes
+ affecting handling of PAM authentication. Also updated
+ /etc/pam.d/samba.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 11 Jul 2001 00:44:14 -0400
+
+samba (2.2.0.final.a-1) unstable; urgency=high
+
+ * New upstream version (contains security fix from DSA-065-1.)
+ Closes: #97241: samba 2.2.0 fails to process hostnames in
+ "hosts allow" config line.
+ * Removed Debian-specific addtosmbpass.8 man page since this script
+ is not longer provided upstream. Users should use the smbpasswd
+ program instead.
+ Closes: #98365: addtosmbpass is missing from 2.2.0.final-2.
+ * Updated sample /etc/samba/smb.conf to reflect the recent changes
+ affecting handling of PAM authentication. Also updated
+ /etc/pam.d/samba.
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 24 Jun 2001 11:11:59 -0400
+
+samba (2.2.0.final-2) unstable; urgency=low
+
+ * Added libcupsys2-dev to Build-Depends.
+ * Samba depends now (again) on netbase so update-inetd is always
+ available for the Samba maintainer scripts.
+ Closes: #86063: Fails to uninstall if inetd is not installed.
+ * Updated source/config.{sub,guess} so ARM built doesn't fail.
+ Closes: #94480: config.sub out of date; can't build on arm.
+ Closes: #85801: config.sub/guess out of date.
+ * Not using brace expansion, i.e. {foo,bar} in any of the maintainers
+ scripts nor in debian/rules.
+ Closes: #88007: samba postrm has is not POSIX sh compliant.
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 21 Apr 2001 17:27:18 -0400
+
+samba (2.2.0.final-1) unstable; urgency=low
+
+ * New upstream release. Lots of new things. See WHATSNEW.txt.
+ * Goofy version number because of my stupidity when assigning version
+ numbers to the CVS packages I have been uploading to experimental.
+ Will be fixed when 2.2.1 is released. I've no doubts a 2.2.1 release
+ will follow soon.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 17 Apr 2001 22:58:14 -0400
+
+samba (2.2.0.cvs20010416-1) experimental; urgency=low
+
+ * CVS update.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 16 Apr 2001 21:25:15 -0400
+
+samba (2.2.0.cvs20010410-1) experimental; urgency=low
+
+ * CVS update.
+ * Added libreadline4-dev to Build-Depends.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 10 Apr 2001 16:53:45 -0400
+
+samba (2.2.0.cvs20010407-1) experimental; urgency=low
+
+ * CVS update. Includes what is in 2.2.0alpha3.
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 7 Apr 2001 16:00:33 -0400
+
+samba (2.2.0.cvs20010316-1) experimental; urgency=low
+
+ * Started working on Samba 2.2.0. Using the SAMBA_2_2_0 branch
+ from Samba CVS.
+ * Not compiling rpctorture as it has compile errors. Change in
+ debian/rules.
+ * Removed Linux kernel 2.0.x and smbfs compatibility baggage. Now
+ the smbfs does not support 2.0.x kernels; a kernel > 2.2.x is
+ needed to use smbfs. Updated debian/control, debian/rules and
+ README.Debian to reflect this change.
+ * Added to swat a versioned dependency on samba (so a user is forced to
+ install a new version of swat each time a new version of samba is
+ installed.)
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 18 Mar 2001 14:21:14 -0500
+
+samba (2.0.7-5) unstable; urgency=medium
+
+ * Transition from suidmanager to dpkg-statoverride.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 18 Jan 2001 23:51:56 -0500
+
+samba (2.0.7-4) unstable; urgency=medium
+
+ * Applied Urban Widmark <urban@teststation.com> fixes to smbmount. Urban
+ is the maintainer of the smbfs in the kernel and of the userland
+ utilities.
+ * Links to HTML documents are correct now.
+ Closes: #69439: swat: Broken help file symlinks
+ Closes: #72615: samba-doc directory changed: removed htmldocs from path
+ Closes: #75847: swat: Wrong symlink
+ Closes: #66857: Wrong links to html documents.
+ Closes: #77912: misplaced documentation symlinks for swat
+ * Building Samba with CUPS support. For this I reverted the change to
+ source/configure.in that I did in 2.0.7-3 and re-ran autoconf.
+ Closes: #59038: samba: not compiled with cups support.
+ * Fix against previous known/unknown user time difference patch to swat
+ (make username / password lookups take the same time.) Remove CGI
+ logging code in Swat.
+ Closes: #76341 - Security holes in swat
+ * Updated Build-depends.
+ * Updated debian/copyright to refer to the correct location of the GPL.
+ * debian/rules: changed DESTDIR to `pwd`/debian/samba (was
+ `pwd`/debian/tmp.)
+ * debian/rules: added '--sourcedir=debian/samba' to dh_movefiles (for some
+ strange reason dh_installdirs is not creating debian/tmp/ so I needed
+ to tweak everything to install stuff in debian/samba rather than in
+ debian/tmp.)
+ * debian/control: changed section of samba-docs to 'doc' (was 'docs')
+ * Using relative symlinks in /usr/share/samba/swat/ (changed debian/rules
+ and source/scripts/installswat.sh.)
+ * Fixed (by tweaking debian/rules)
+ /usr/bin/{smbmnt,smbumount-2.*,smbmount-2.*} to be suid.
+ * Added "Provides: samba-client" to smbclient's section in control.
+ Closes: #71143: smbclient: Smbclient should provide samba-client.
+ * Fix for desired_access being zero in map_share_mode() (patch to
+ source/smbd/nttrans.c.) Thanks to Gary Wilson
+ <wilsong@sergievsky.cpmc.columbia.edu> for bringing this patch to my
+ attention.
+ * Hacked source/lib/util_sec.c so smbd works fine in both 2.0.x and
+ 2.2.x kernels even when the build is done in a system running
+ a 2.2.x kernel.
+ Closes: #78858: samba-common: samba2.0.7 needs kernel 2.2.x but
+ doesnt depend on it.
+ Closes: #72758: README.Debian should comment on 2.0.x kernels.
+ Closes: #56935: Samba 2.0.6 and Kernel 2.0.x.
+ Closes: #58126: Samba 2.0.6 and Kernel 2.0.x -- more info.
+ Closes: #60580: samba: failed to set gid.
+ Closes: #64280: Samba panics, can't set gid.
+ Closes: #66816: Must deal with brokenness under 2.0.x.
+ Closes: #67682: potatoe samba 2.0.7-3 out of order, 2.0.5a-1 OK.
+ Closes: #69735: PANIC: failed to set gid
+ Closes: #66122: "smbclient -L localhost -U%" returns with "tree
+ connect failed: code 0".
+ Closes: #57637: Samba says tree connect error.
+ Closes: #58015: potato samba wins support is broken.
+ * Fixed comments in sample smb.conf to point to the correct location.
+ Closes: #69578: comments in smb.conf points to wrong path.
+ * Move codepages from /etc/samba/codepages/ to
+ /usr/share/samba/codepages/.
+ Closes: #63813: samba; codepages should go in /usr/lib.
+ * Moved /var/samba/ to /var/state/samba/.
+ Closes: #49011: samba package not FHS compliant.
+ * Hacked source/configure.in (and re-ran autoconf) so yp_get_default_domain()
+ is found.
+ Closes: #44558: netgroup support missing in samba 2.0.5a-1.
+ * /etc/init.d/samba was calling start-stop-daemon with both --pidfile and
+ --exec. Got rid of --exec so --pidfile works.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 11 Jan 2001 00:15:57 -0500
+
+samba (2.0.7-3) frozen unstable; urgency=high
+
+ * Release manager: this closes a RC bug.
+ * Commented out the section in source/configure.in that auto-detects
+ CUPS support and then ran autoconf to generate a new configure
+ script. This was done to prevent machines that have libcupsys-dev
+ installed from detecting CUPS support and adding an unwanted
+ dependency on libcupsys. This way the whole printing system
+ won't break on upgrades. CUPS support should be added after
+ Potato is released.
+ Closes: #65185: samba-common: Upgrading removes printing system.
+ Closes: #64496: smbfs: smbfs on powerpc has a dependency on cupsys.
+ * Updated README.debian.
+ Closes: #64594: Old README.Debian in /usr/share/doc/samba.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 20 Jun 2000 19:16:04 -0400
+
+samba (2.0.7-2) frozen unstable; urgency=high
+
+ * Release manager: this closes RC bug #63839 that prevents Samba
+ to be built from source.
+ * Fixed a stupid typo in debian/rules that was preventing Samba
+ to be built from source.
+ Closes: #63839: samba_2.0.7-1(frozen): build error (SAMBABOOK dir)
+ * I forgot to mention that O'Reilly's book "Using Samba" was donated
+ to the Open Source community. The book was included in Samba 2.0.7
+ in HTML format and is part of the Debian Samba package since
+ Samba 2.0.7-1.
+ * In Samba 2.0.7-1, the "Using Samba" book and a number of HTML help
+ files were supposed to be provided in both the swat and the samba-doc
+ packages. This duplication was a waste of space. Starting with
+ Samba 2.0.7-2, swat recommends samba-doc and the book and the HTML
+ files are included only in samba-doc, and are accessed via symlinks
+ from within swat.
+ Closes: #58810: superfluous files in swat?
+ * Added a 'echo "."' to /etc/init.d/samba in the reload) section.
+ Closes: #63394: "echo ." missing in reload section of init.d script
+ * Fixed typo in docs/htmldocs/using_samba/ch06_05.html.
+ Closes: #64344: typo "encrypted passwords"
+ * Cleaned up samba's postrm script so important common files aren't
+ deleted when samba is purged. Created a samba-common.postrm script.
+ Closes: #62675: purging samba removes /etc/samba/smb.conf.
+ Closes: #63386: samba --purge removes /etc/samba dir even though
+ smbclient/smbfs/samba-common packages are still installed
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 3 May 2000 02:42:07 -0400
+
+samba (2.0.7-1) frozen unstable; urgency=low
+
+ * New upstream version. Dear Release Manager: please allow this
+ package to go to frozen as it contains fixes to a _lot_ of problems.
+ You can take a look at all the problems fixed by this release in
+ the official upstream announcement at
+ http://us1.samba.org/samba/whatsnew/samba-2.0.7.html.
+ * Added --with-utmp to add utmp support to smbd (this is new in Samba
+ 2.0.7)
+ * Closes: #62148 - samba not rotating filled logs.
+ * Closes: #56711: Samba doesn't manage well long share name (please note
+ that it's possible to connect to shares with names longer than
+ 14 characters but the share will be listed with a name truncated to
+ 13 characters.)
+ * Closes: #51752 - NT DOMAIN - NET USE * /HOME not mapping (error 67).
+ Closes: #50907 - logon path not working.
+ This is not a bug, it's just Samba doing the same thing an NT server
+ does. See WHATSNEW.txt and smb.conf's man page for details.
+ * Closes: #48497 - error executing smbsh in debian-potato. (smbwrapper
+ is not supported anymore.)
+ * Closes: #58994 swat: typo in swat description.
+ * Closes: #45931 - Samba dies with SIGILL on startup. (Hardware
+ problems, person that reported the bug never came back.)
+ Closes: #54398 - smbadduser fails, looks for ypcat.
+ * Fixed swat's man page to include Debian specific installation
+ instructions. There's not necessary to edit /etc/services or
+ /etc/inetd.conf.
+ (Closes: #58616 - incomplete install config && incorrect installation
+ instructions.)
+ * s/SBINDIR/\"/usr/sbin\"/g in source/web/startstop.c to prevent swat
+ to look for smbd and nmbd in the wrong place when requested to start or
+ stop smbd or nmbd.
+ (Closes: #55028 - swat can't start samba servers.)
+ * Closes: #37274: smbclient does not honour pot. (Tested and seems to be
+ working now.)
+ * Not confirmed, but should fix #56699, #62185, #56247, #52218, #43492,
+ #50479, #39818, #54383, #59411.
+ (please re-open any of this if the problem still exists - I was unable
+ to confirm any of this because I could never reproduce them.)
+ Closes: #56699 - Samba's nmbd causes random kernel oops several
+ times in a row.
+ Closes: #62185 - nmbd's forking until no more file descriptors are
+ available.
+ Closes: #56247 - session setup failed: ERRSRV - ERRbadpw.
+ Closes: #52218 - Either wins proxy does not work, or I don't understand
+ it.
+ Closes: #43492 - intermittent problem changing password.
+ Closes: #50479 - Can't access windows 2000 shares with samba.
+ Closes: #39818 - samba-common: Upgrading Samba from the Slink version.
+ Closes: #54383 - samba-common: Missing /etc/smb.conf.
+ Closes: #59411 - smbclient: cannot browse Win2k shares.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 27 Apr 2000 16:07:45 -0400
+
+samba (2.0.6-5) frozen unstable; urgency=low
+
+ * Oppsss! samba-common doesn't depend on libcupsys1 so the binaries
+ in this package are broken unless libcupsys1 is installed.
+ samba-common has a "grave" bug because of this. Instead of adding
+ libcupsys1 to the Depends: list of each package in debian/control
+ I investigated why dh_shlibs was not picking the dependency
+ automatically. It turns out that it's probably a bug in libcupsys1
+ because the format of its shlibs file is not correct. I fixed that
+ file (/var/lib/dpkg/info/libcupsys1.shlibs) and now dependencies are
+ picked correctly. I'll talk to the libcupsys1 maintainer.
+
+ I think the addition of CUPS support to Samba is a big change that
+ should not go into Frozen. So, I decided to back up the addition
+ of CUPS support I did in 2.0.6-4 to minimize problems. I'll add
+ CUPS support again when I start working on Samba for Woody.
+ (Closes: #59337 - samba-common has a missing dependency)
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 1 Mar 2000 08:40:02 -0500
+
+samba (2.0.6-4) frozen unstable; urgency=low
+
+ * It seems that sometimes nmbd or smbd are not killed when upgrading.
+ I think it is because in samba's prerm script I was calling
+ start-stop-daemon with the --pidfile switch and in old versions of
+ Samba the nmbd and smbd daemons did not store their PIDs in a file in
+ /var/samba/. I changed debian/samba.prerm so the existence of the
+ PID files is checked before calling "start-stop-daemon --pidfile ..."
+ If the PID files do not exist then start-stop-daemon is called
+ without the --pidfile parameter.
+ (Closes: #58058 - upgrade from slink went badly)
+ * Fixed typo in description of swat package in debian/control.
+ * Installed libcupsys1-dev so the configure script picks up CUPS
+ and Samba is compiled with CUPS support. Also added libcupsys1 to
+ the Depends: list of package samba in debian/control.
+ (Closes: #59038 - samba not compiled with cups support)
+ * Added a small paragraph to debian/README.debian warning about possible
+ problems with the WINS code in Samba 2.0.6.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 28 Feb 2000 14:00:42 -0500
+
+samba (2.0.6-3) frozen unstable; urgency=low
+
+ * Applied patch posted by Jeremy Allison to the samba mailing list
+ that should take care of the internal errors reported in bug #52698
+ (release-critical). Wichert: please test as I never could reproduce
+ it here.
+ (Closes: #52698 - samba gets interbal errors)
+ * Moved samba-docs to the 'docs' section.
+ (Closes: #51077 - samba-doc: wrong section)
+ * Added reload capability to /etc/init.d/samba (only for smbd because
+ nmbd does not support reloading after receiving a signal).
+ (Closes: #50954 - patch to add reload support to /etc/init.d/samba)
+ * Corrected "passwd chat" parameter in sample /etc/samba/smb.conf so
+ Unix password syncronization works with the passwd program currently
+ in Potato. Thanks to Augustin Luton <aluton@hybrigenics.fr> for
+ the correct chat script.
+ * Stole source/lib/util_sec.c from the CVS tree of what will become
+ Samba 2.0.7 or whatever so we can use the same binaries under
+ both 2.0.x and 2.2.x kernels.
+ (Closes: #51331 - PANIC: failed to set gid)
+ * smbadduser is now provided as an example and it's customized for Debian.
+ I am not providing this script in /usr/sbin/ because then I would need
+ a dependency on csh, something that I don't want to do.
+ (Closes: #51697, #54052)
+ * Fixed the short description of the smbfs package in debian/control.
+ (Closes: 53534 - one-line description out of date).
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 23 Nov 1999 16:32:12 -0500
+
+samba (2.0.6-2) unstable; urgency=low
+
+ * samba-common now depends on libpam-modules (not on libpam-pwdb, which
+ I have been told is obsolete). I modified /etc/pam.d/samba accordingly
+ to reflect the change.
+ (Closes: Bug#50722: pam pwdb dependence?).
+ * The old /etc/pam.d/samba file which had references to pam_pwdb caused
+ smbd to die with a signal 11. The new /etc/pam.d/samba file fixes
+ this problem.
+ (Closes: #50876, #50838, #50698)
+ * Compiled with syslog support (use at your own risk: syslog support
+ is still experimental in Samba). I added the parameters "syslog = 0"
+ and "syslog only = no" to the sample smb.conf to avoid pestering
+ users that do not want Samba to log through syslog.
+ (Closes: Bug#50703 - syslog only option doesn't work)
+ * Removed the stupid code in the smbmount wrapper script that tries
+ to load the smbfs module if smbfs is not listed in /proc/filesystems.
+ (Closes: Bug#50759 - Non-root can't run smbmount if SMBFS is compiled
+ as a module in the kernel)
+ * Added /bin/mount.smb as a symlink pointing to /usr/bin/smbmount so
+ 'mount -t smb ...' works just as 'mount -t smbfs ...'.
+ (Closes: Bug#50763 - 'mount -t smb' doesn't work)
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 20 Nov 1999 18:53:35 -0500
+
+samba (2.0.6-1) unstable; urgency=low
+
+ * Samba 2.0.6 has been released. This is the first try of the Debian
+ Samba packages. I know for sure that smbd won't work properly on
+ 2.0.x kernels because the patch that Wichert sent me does not apply
+ to the new source/lib/util_sec.c in Samba 2.0.6. That file was
+ completely re-written by Tridge.
+ * Updated README.Debian.
+ * A new client utility called smbspool appeared in Samba 2.0.6. I added
+ this utility to the smbclient package, although I haven't tried it yet.
+ * Added the symlink /sbin/mount.smbfs that points to /usr/bin/smbmount.
+ This is to be able to type "mouont -t smbfs ...". This symlink goes
+ in the smbfs package, of course.
+ * This new release should close the following bugs (some of these
+ are fixed for sure in this new upstream release, some others I could
+ not reproduce but I believe they are fixed if they were real bugs.
+ As always, please feel free to re-open the bugs if the problem is not
+ solved).
+ Closes: Bug#33240: icmp mask needs a bug workaround.
+ Closes: Bug#37692: samba: Has problems detecting interfaces.
+ Closes: Bug#38988: samba: Truly bizzare behavour from nmbd.
+ Closes: Bug#46432: samba-2.0.5a-2: nmbd does not appear to broadcast
+ properly.
+ Closes: Bug#44131: smbfs: no longer possible to set file and
+ directory-modes.
+ Closes: Bug#46992: smbmount-2.2.x manpage wrong.
+ Closes: Bug#42335: smbfs: missing options from the new 2.2.x commandline.
+ Closes: Bug#46605: smbmnt segfaults.
+ Closes: Bug#48186: smbmount.
+ Closes: Bug#38040: smbfs: Please add /sbin/mount.smb [included].
+ Closes: Bug#47332: smbmount: could -f and -P be added back?
+ * Samba has been compiled with PAM support (closes: Bug#39512 - samba PAM
+ module). To succesfully add PAM support, I created /etc/pam.d/samba and
+ added this file as a conffile for the samba-common package. I also made
+ samba-common depend on libpam-pwdb.
+ * Added simple man pages for the wrapper scripts smbmount and smbmount.
+ (Closes: Bug#44705 - Missing smbmount man page)
+ * Installed libreadlineg2-dev in my system so smbclient now has a
+ "history" command and libreadline support :-)
+ * This time I did add a check to the smbmount wrapper script to see if
+ the kernel has support for smbfs, as suggested by Jeroen Schaap
+ <J.Schaap@physiology.medfac.leidenuniv.nl>. I mentioned in the changelog
+ for samba-2.0.5a-3 that I did this but I forgot at the end.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 11 Nov 1999 12:08:15 -0500
+
+samba (2.0.5a-5) unstable; urgency=low
+
+ * I am sorry to report that the smbwrapper package is gone for the
+ moment. The reason for this is twofold: first of all, smbwrapper
+ is completely broken in Samba-2.0.5a (it compiles but it doesn't
+ run) and in the upcoming Samba-2.0.6 it doesn't even compile. Second,
+ when I asked Andrew Tridgell (father of Samba) about the state of
+ smbwrapper he told me that Ulrich Drepper (head of the glibc project)
+ broke on purpose the glibc stuff in which smbwrapper is based.
+ Consequently, Tridge recommended me to compile Samba without
+ support for smbwrapper. When, I have no idea. Sorry folks. Here is
+ the original message I received from Andrew:
+
+ > 1) 2.0.5a's smbwrapper doesn't work under glibc2.1, and pre-2.0.6's
+ > smbwrapper doesn't even compile under glibc2.1.
+
+ yep, Ulrich deliberately broke it. It won't get fixed till glibc
+ allows the sorts of games it plays to work again. I suggest you turn
+ it off in your build scripts until that gets sorted out.
+
+ * Swat's file are now in /usr/share/samba/ instead of
+ /usr/lib/samba/ (bug #49011).
+ * Man pages now in /usr/share/man/ instead of /usr/man/ (bug #49011).
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 2 Nov 1999 12:59:13 -0500
+
+samba (2.0.5a-4) unstable; urgency=low
+
+ * Applied patch from our fearless leader (Wichert) to fix the darn bug
+ that prevents Samba to work on 2.0.x kernels if it was compiled
+ in a system running a 2.2.x kernel. This closes #40645 (build uses
+ setresuid which doesn't work under 2.0.34 (does apparently under
+ 2.2.x) ).
+ * Fixed the entry that swat's postinst script adds to /etc/inetd.conf
+ so it is '#<off># swat\t\tstream\ttcp\tnowait.400 ...' instead of
+ '#<off>#swat\t\tstream\ttcp\tnowait.400 ...'. The old way caused
+ 'update-inetd --enable swat' to leave the entry for swat disabled.
+ Thanks to Dave Burchell <burchell@inetnebr.com> for finding out
+ this problem. This closes #48762 (swat uses non-standard syntax to
+ comment out inetd.conf entry).
+ * /usr/sbin/swat does not think anymore that the smbd daemon lives
+ in /usr/local/samba/bin/. To fix this I am running now source/configure
+ with "--prefix=/usr --exec-prefix=/usr". This closes #47716 (samba
+ 'swat' fails: incorrect hardwired path in the binary).
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 31 Oct 1999 03:42:38 -0500
+
+samba (2.0.5a-3) unstable; urgency=low
+
+ * I am pretty darn busy with my MBA, I apologize for the long time it's
+ taking to squash bugs in the Samba packages.
+ * Built with debhelper v2 for FHS compliancy. Changed a couple of
+ things in debian/rules to accomodate for the new place for the docs.
+ I also had to change debian/{samba.postinst,samba.prerm,swat.postinst}
+ to make sure that the symlink from /usr/doc/xxx exists and points to
+ /usr/share/doc/xxx (the reason for this is that I am not letting
+ debhelper to create these scripts for me automatically).
+ * Built with latest libc6.
+ * smbfs: finally, the nasty bug that causes smbmount to die after
+ a while is gone thanks to Ben Tilly <Ben_Tilly@trepp.com>.
+ The problem was just a typo in source/client/smbmount.c.
+ This closes grave bug #42764 (smbmount dies) and #43341
+ (smbfs-2.2.x won't function after a while).
+ * Fixed the smbmount wrapper script to eliminate a bashism (closes
+ #45202 - "wrapper scripts use $* instead of "$@") and to recognize
+ 2.3.x and 2.4.x kernels (closes #47688 - "smbfs: does not recognize
+ kernel 2.3.x").
+ * Added a check to the smbmount wrapper script to see if the
+ kernel has support for smbfs, as suggested by Jeroen Schaap
+ <J.Schaap@physiology.medfac.leidenuniv.nl>.
+ * swat's man page is now part of the swat package, not of the samba
+ package. This closes #44808 (Samba has a man page for swat, but
+ the binary is not included).
+ * The interface program smbrun is not longer needed by smbd because
+ of the availability of execl() under Linux. Because of this, the
+ smbrun is not even being compiled. Since there is no need for smbrun
+ now, the smbrun man page was taken out of the samba package. This
+ closes #45266 (/usr/bin/smbrun missing).
+ * smbpasswd is now part of the samba-common package, and not part of
+ the samba package. This is to let administrators that do not want
+ to install a full Samba server administer passwords in remote
+ machines. This closes bug #42624 (smbpasswd should be included in
+ smbclient). This bug report also suggests that swat becomes part of
+ the samba package, that smbfs becomes part of the smbclient package,
+ and that the binary smbpasswd becomes part of the smbclient package.
+ I moved smbpasswd to the samba-common package but I am reluctant to
+ do the other things the bug report suggests.
+ * In order to keep dpkg happy when moving smbpasswd from the samba
+ package to samba-common, I had to add a "Replaces: samba (<= 2.0.5a-2)"
+ in the control section of the samba-common package and a
+ "Replaces: samba-common (<= 2.0.5a-2)" in the control section of the
+ samba package (in debian.control).
+ * Samba is now being compiled with the "--with-netatalk" option. This
+ closes #47480 (Could samba be compiled with the --with-netatalk option).
+ * All packages that depend on samba-common have a versioned dependency
+ now. This was accomplished by adding "(= ${Source-Version})" to the
+ relevant sections of debian/control. Thanks t Antti-Juhani Kaijanaho
+ <gaia@iki.fi> for the hint. This closes #42985 (samba should probably
+ have a versioned depends on samba-common).
+ * Made sure the file docs/textdocs/DIAGNOSIS.txt gets installed in all
+ the Samba packages. This closes bug #42049 (no DIAGNOSTICS.txt file).
+ * Added the smbadduser helper script to the samba package. This closes
+ #44480 (Samba doesn't come with the smbadduser program).
+ * Applied patch from szasz@triton.sch.bme.hu that prevents smbmount
+ to leave an entry in /etc/mtab for a share that could not be mounted
+ because of invalid user of password. The patch also allows smbumount
+ to unmount the share in the event that something goes wrong with the
+ smbmount process. This closes bug #48613 (Mount/umount problems +
+ patch) as well as #44130 (failed mount is still mounted).
+ * smbmount-2.2.x is now setuid root. This is needed for the patch
+ applied above to be effective. If smbmount-2.2.x is not setuid root
+ then an entry will be left in /etc/mtab even when the mount
+ fails. I had to add "usr/bin/smbmount-2.2.x" to debian/smbfs.suid
+ for this to work.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 27 Oct 1999 10:36:13 -0400
+
+samba (2.0.5a-2) unstable; urgency=low
+
+ * This version is basically the same as 2.0.5a-1 but it was compiled
+ on a Potato system with glibc2.1. See below the change log for 2.0.5a-1
+ for more information.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 27 Jul 1999 02:25:29 -0400
+
+samba (2.0.5a-1) stable; urgency=high
+
+ * I'm back from the Honey Moon. We are pretty busy because we are moving
+ to Pittsburgh (from Caracas, Venezuela) in aprox. 24 hours and we still
+ have plenty of things to pack and to do. Samba 2.0.5 was released
+ while I was in the Honey Moon and it is just now (almost 3 AM) when
+ I have time to package it.
+ * Because of the security problems fixed in 2.0.5, this upload goes
+ to both stable and unstable (the Security Team asked for this).
+ * This release (2.0.5a-1) was compiled on a Slink system. 2.0.5a-2 will
+ be compiled on a Potato system.
+ * Added a "Replaces: samba (<= 1.9.18p10-7)" to the samba-common
+ section in debian/control (as suggested by Steve Haslam
+ <araqnid@debian.org>) to fix the problems that appear when upgrading
+ from the Samba package in Slink. Please test this as I am completely
+ unable to do so. This should fix bug #39818 (Upgrading Samba from the
+ Slink version).
+ * Removed the hacks to the autoconf stuff that I added to 2.0.4b-2 in
+ order to have defined several socket options when compiling with
+ Linux 2.2.x kernel headers - the fix is now upstream.
+ * Finally!!! smbmount was re-written (thanks Tridge :-) to use a command
+ line syntax similar to the one used by the old smbmount (for 2.0.x
+ kernels). This means that the wrapper script is no longer necessary
+ so I removed it. In its place there is a simple wrapper script that
+ calls smbmount-2.0.x or smbmount-2.2.x depending on the kernel that is
+ running.
+ * Because of the wedding, the Honey Moon, and our move to Pittsburgh,
+ I can't work on fixing other bugs in this release.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 27 Jul 1999 02:18:51 -0400
+
+samba (2.0.4b-3) unstable; urgency=low
+
+ * Stupid mistake: I forgot to add /usr/bin/smbumount to debian/smbfs.files
+ and because of this /usr/bin/smbumount was part of the samba package
+ instead of part of the smbfs package.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 1 Jul 1999 01:51:24 -0400
+
+samba (2.0.4b-2) unstable; urgency=low
+
+ * Dark (and archive maintainers): please remove from Potato the smbfsx
+ binary package and also the old source package for smbfs. smbfs and
+ smbfsx have been merged starting with this version.
+ * Merged the old smbfs package with Samba. Now there is only one package
+ for the smbfs utilities and is called "smbfs". The package smbfsx
+ does not exist any more and this new smbfs package must be used
+ for both 2.0.x and > 2.1.x kernels.
+ * A wrapper script was added to handle the syntax change in smbmount
+ in the new smbfs utilities (required for kernels > 2.1.70). The
+ home page for this script is http://www.wittsend.com/mhw/smbmount.html.
+ Please _note_ that this will change (for good) in Samba 2.0.5 :-)
+ * Added debian/smbumount.sh. It's another wrapper that calls smbumount-2.2.x
+ or smbumount-2.0.x depending on the kernel currently running.
+ * Not using -t for savelog in cron.weekly script.
+ * Recompiled without libreadlineg-dev (Samba does not seem to be using
+ it so unnecessary dependencies are produced).
+ * glibc2.1 build.
+ * Removed smbpasswd.8 man page from the debian/ directory because it is
+ now being provided upstream.
+ * Got rid of the ugly hack I put in source/lib/util_sock.c to have
+ IPTOS_LOWDELAY and IPTOS_THROUGHPUT defined. Now I patched the
+ autoconf stuff to #include <netinet/ip.h>. I've sent the patch to
+ Jeremy Allison so we have this upstream.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 28 Jun 1999 17:47:19 -0400
+
+samba (2.0.4b-1) unstable; urgency=low
+
+ * New upstream release. This release fixes the following Debian bugs:
+ #33838 (Amanda/ Samba 2.0.2 and backing up large filesystems) and
+ #33867 (Amanda 2.4.1 and Samba 2.0.2 and large filesystems). Jeremy
+ Allison released Samba 2.0.4 and found out that there were a couple
+ of minor bugs so he released 2.0.4a. Then he found out about more
+ serious bugs and released 2.0.4b. I have built this package several
+ times between yesterday and today because of this. Now I am releasing
+ the Debian packages for Samba with what I believe will be the latest
+ release the Samba Team will make at least in the next 4 days (Jeremy
+ is taking a short vacation).
+ * Still compiling against glibc2.0 (sorry about that :-)
+ * Hacked source/smbwrapper/smbsh.c to fix the problem
+ of smbsh not finding the shared library smbwrapper.so. It looks
+ now in /usr/lib/samba/ for this file. This fixes #32971, #32989,
+ #33278, #34911 and #36317.
+ * Made smbfsx depend on samba-common because smbfsx uses /etc/samba/smb.conf
+ and /etc/samba/codepages/. This fixes #33128 (smbmount complains about
+ missing /etc/smb.conf).
+ * Package swat does not depend on httpd anymore (there's no need to).
+ This fixes #35795 (swat requires httpd).
+ * Renamed smbmount-2.1.x and smbumount-2.1.x to smbmount-2.2.x and
+ smbumount-2.2.x. Same applies to the man pages.
+ * Changed minor type in smbmount's man page (changed "\"" by "\'"). This
+ fixes #34070 (wrong quotes in manpage).
+ * Used Fabrizio Polacco's <fpolacco@icenet.fi> procedure to create the
+ Debian package for Samba. This closes #35781 (samba has no pristine
+ source).
+ * Changes to /etc/cron.weely/samba: rotate /var/log/{nmb,smb}.old only
+ if the size of either is different than 0. Also, added comments at the
+ beginning of this script to explain how rotation of log files works in
+ Samba. Thanks to ujr@physik.phy.tu-dresden.de (Ulf Jaenicke-Roessler)
+ for the suggestions. This closes #37490 (cron.weekly script rotates not
+ used [sn]mb.old files). As I side effect, this should also close
+ #31462 (still trouble with /etc/cron.weekly/samba).
+ * Check for old /etc/pam.d/samba file which is not provided by this version
+ of the Debian Samba package but was provided in older versions. If this
+ file exists we delete it. We check for this in the postinst. This closes
+ #37356 (samba put stuff in pam.d that pam complains about) and #34312
+ (libpam0g: questions during upgrade).
+ * Make sure the mode of /etc/samba/smbpasswd is set to 600. This is done
+ in the postinst script. This closes #35730 (Security problem with
+ /etc/samba/smbpasswd when upgrading from samba 1.9.18p8-2 to 2.0.3-1).
+ * I have just checked and it looks like #28748 (smbfsx doesn't "return ")
+ has been fixed. This might have been fixed since a long time ago.
+ * Long long standing bug #18488 (smbclient: internal tar is broken) is
+ closed in this release of Samba. The bug might have been closed for a
+ long long time, but I did not check for this before.
+ * Temporary fix to the annoying "Unknown socket option IPTOS_LOWDELAY"
+ message. This fixes #33698 (socket option IPTOS_LOWDELAY no longer works),
+ #34148 (warnings from smbd) and #35333 (samba warnings).
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 20 May 1999 00:35:57 -0400
+
+samba (2.0.3-1) unstable; urgency=low
+
+ * New upstream version.
+ * Removed the convert_smbpasswd.pl program I created and put in
+ /usr/doc/samba/ because there's a convert_smbpasswd script in the
+ upstream sources that does the same thing. I modified the postinst
+ script to use this script instead of the one I created.
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 28 Feb 1999 01:35:37 -0400
+
+samba (2.0.2-2) unstable; urgency=low
+
+ * Updated the README.Debian file.
+ * Updated the description of the samba package in the control file.
+ * The binaries smbmnt and smbumount-2.1.x in the smbfsx package are now
+ installed setuid root as they should be. This was done by doing a
+ a "chmod u+s" for each binary in debian/rules and by creating the
+ file debian/smbfsx.suid.
+ * Minor patch to source/client/smbumount.c to allow normal users
+ to umount what they have mounted (problem was a kernel vs. libc6
+ size mismatch). I sent the patch upstream.
+ * Created debian/smbwrapper.dirs so the directory /usr/lib/samba/ is
+ created.
+ * Modified debian/rules to move smbwrapper.so from debian/tmp/usr/bin/ to
+ debian/smbwrapper/usr/lib/samba/.
+ * Hacked source/smbwrapper/smbsh.c to fix the problem
+ of smbsh not finding the shared library smbwrapper.so.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 11 Feb 1999 18:11:34 -0400
+
+samba (2.0.2-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 11 Feb 1999 01:35:51 -0400
+
+samba (2.0.1-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 6 Feb 1999 06:51:18 -0400
+
+samba (2.0.0final-4) unstable; urgency=low
+
+ * The samba postinst made an unwarranted assumption that the file
+ /etc/samba/smbpasswd exists. If the file did not exist (which is
+ perfectly valid) the postinst will fail. This fixes #32953.
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 5 Feb 1999 23:32:46 -0400
+
+samba (2.0.0final-3) unstable; urgency=low
+
+ * Added to debian/control a "Depends: ${shlibs:Depends}" line for the
+ samba-common package so dependencies for this package are set
+ correctly (thanks to Dark for pointing this out).
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 4 Feb 1999 09:45:21 -0400
+
+samba (2.0.0final-2) unstable; urgency=low
+
+ * Finally!!! The first upload to unstable. Sorry for the delay folks
+ but I have been quite busy lately :-) Another reason for the delay
+ is that I wanted to ease the migration from Samba 1.9.18p10 and
+ before to Samba 2.0.0. I changed the location of the config. files
+ from /etc/ to /etc/samba/ and this made things a little bit harder.
+ * This package needs 2.2 kernel headers to compile (well, this is
+ true for the smbfsx package, all others compile fine with 2.0 kernel
+ headers).
+ * Created a preinst script for the samba package to take care of the
+ location migration of smb.conf (from /etc/ to /etc/samba/). The
+ preinst script also takes care of moving /etc/smbpasswd to its new
+ location (/etc/samba/).
+ * Created postinst and postrm scripts to add/remove an entry for swat
+ in /etc/inetd.conf.
+ * I had forgotten to install the sambaconfig script so I changed
+ debian/rules to install this script.
+ * Added a postrm script for the samba package (I had forgotten to add
+ this script to the new Samba packages after the migration from 1.9.18
+ to 2.0.0).
+ * Created a small Perl script that is called from the samba postinst
+ to convert the smbpasswd from the old format used in version prior
+ to 2.0.0 to the new one used in 2.0.0 and beyond.
+ * The upgrade process should be automatically now. Please let me know
+ of any problems you encounter.
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 23 Jan 1999 09:34:10 -0400
+
+samba (2.0.0final-1) experimental; urgency=low
+
+ * Finally!!! Samba 2.0.0 is here! I am not uploading to unstable
+ because I still have to work out the migration from the old
+ samba packages to the new ones. I also need to work more on the
+ new swat package.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 14 Jan 1999 22:40:02 -0400
+
+samba (2.0.0beta5-1) experimental; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 5 Jan 1999 00:37:57 -0400
+
+samba (2.0.0beta4-1) experimental; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 23 Dec 1998 18:37:45 -0400
+
+samba (2.0.0beta3-1) experimental; urgency=low
+
+ * New upstream version.
+ * I have just realized that the documentation patches (for man pages)
+ that I used for the 1.9.18 release are not longer necessary because
+ there was a major re-write of all the Samba documentation that added
+ the missing bits of information. So, I have just removed these minor
+ patches.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 8 Dec 1998 12:00:30 -0400
+
+samba (2.0.0beta2-1) experimental; urgency=low
+
+ * New upstream version.
+ * This new version fixes the potential security problem that
+ was posted to debian-private (using the "message command" parameter
+ to execute arbitrary commands from messages sent from LinPopUp).
+ * Changed /etc/init.d/samba to use one of the variables stored in
+ /etc/samba/debian_config to know how Samba is being run (from inetd or
+ as daemons) instead of grepping /etc/inetd.conf which may not exist
+ if the user is running xinetd (this fixes bug #29687 - assumes using
+ vanilla inetd)
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Nov 1998 23:32:03 -0400
+
+samba (2.0.0beta1-1) experimental; urgency=low
+
+ * First beta release of the samba-2.0.0 code. Before the beta I was
+ working with sources downloaded directly from the CVS server. This
+ package goes into experimental and I plan to release the new
+ samba to unstable as soon as it gets out of beta.
+ * Created several packages out of the Samba sources. They are:
+ samba (nmbd and smbd daemons + related programs), smbclient (FTP
+ like command line utility to retrieve files from SMB servers),
+ swat (Samba Web Administration Tool), samba-common (common files
+ used by samba, smbclient and swat), smbfsx (smbfs utilities for
+ kernels >= 2.1.70), smbwrapper and samba-doc (Samba documentation).
+ * Refreshed debian/samba-doc.docs so recently added docs. are
+ installed in the samba-doc package. New additions include man
+ pages in the /usr/doc/samba-doc/htmldocs/ directory.
+ * Deleted Debian specific nmblookup(1) man page as it is now upstream.
+ * Added smbtorture to smbclient package.
+ * Moved rpcclient from the samba package to the smbclient package.
+ * The Samba daemons (nmbd and smbd) now create a PID file so I changed
+ all calls to start-stop-daemon to use the PID file.
+ * Fixed debian/rules to install mksmbpasswd (fixes #27655).
+ * Modified /etc/init.d/samba so nmbd is started without the -a (append
+ to the log file instead of overwrite) switch. The new behavior of
+ nmbd is to NOT overwrite log files, so the -a switch can be deleted
+ safely.
+ * Moved from debstd to debhelper.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 1 Oct 1998 08:37:41 -0400
+
+samba (1.9.18p10-5) frozen unstable; urgency=high
+
+ * Oppsss!!! While fixing bug #26884 I introduced a bug even worse than
+ the one I was trying to fix: in /etc/init.d/samba I got rid of the test
+ that tells us whether the Samba daemons are running from inetd or as
+ standalone daemons. I corrected the problem by editing again
+ /etc/init.d/samba to uncomment the test.
+ * Wishlist bug #28298 (typos in samba) was fixed.
+ * Wishlist bug #28309 (typos in smb.conf) was fixed.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 28 Oct 1998 09:11:47 -0400
+
+samba (1.9.18p10-4) unstable; urgency=low
+
+ * Minor patch to debian/rules to delete *substvars instead of only
+ substvars when doing a "debian/rules clean" (thanks to Daniel Jacobowitz
+ <dmj@andrew.cmu.edu> for this).
+ * Small patch to source/shmem_sysv.c that eases compilation under
+ glibc-2.1 (thanks to Daniel <dmj@andrew.cmu.edu> for this).
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 17 Sep 1998 15:33:49 -0400
+
+samba (1.9.18p10-3) unstable; urgency=low
+
+ * Patched smbclient again to fix minor formatting problem introduced
+ by Magosanyi Arpad's smbclient patch.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 3 Sep 1998 11:03:23 -0400
+
+samba (1.9.18p10-2) unstable; urgency=low
+
+ * Sync'ed include files for the smbfs utilities with the ones in
+ kernel 2.1.119.
+ * Added to the /usr/doc/samba/examples/ directory a new script called
+ wins2dns (courtesy of Jason Gunthorpe <jgg@deltatee.com>) that
+ generates BIND sonze files for hosts in the WINS database.
+ * Patched smbclient to include enhancements by Magosanyi Arpad
+ <mag@bunuel.tii.matav.hu> that make scripting easier.
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 28 Aug 1998 13:34:54 -0400
+
+samba (1.9.18p10-1) stable unstable; urgency=low
+
+ * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
+ description of what has changed). I built a 1.9.18p9-1 but I
+ never released it because an obscure bug was found just a couple
+ of days before the official release, so the Samba Team stopped
+ the rollover of 1.9.18p9.
+ * Updated documentation (new files were added to the docs/ directory
+ that were not installed in /usr/doc/samba/).
+ * Fixed long standing bug #7695 (smb.conf's man page doesn't document
+ 'printing=lprng') - I made a couple of changes to the man page to
+ include references to lprng.
+ * Fixes bug #24930 (samba needs to suggest psmisc?). I don't think it
+ is necessary to make samba suggest psmisc just because the postinst
+ script mentions to call killall. So, I removed all references to
+ "killall" in the scripts.
+ * Fixes bug #25999 (Samba does not by default work with unix password
+ sync): I added the "passwd program" and "passwd chat" parameters to
+ the sample smb.conf to reflect the Debian environment.
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 21 Aug 1998 08:59:18 -0400
+
+samba (1.9.18p9-1) unstable; urgency=low
+
+ * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
+ description of what has changed).
+ * Removed Jeremy Allison's patch applied to 1.9.18p8-2 because it is
+ now part of the new upstream version.
+ * Corrected small typo in addtosmbpass' man page (fixes #25629).
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 11 Aug 1998 08:53:08 -0400
+
+samba (1.9.18p8-2) frozen unstable; urgency=medium
+
+ * Applied patch received from Jeremy Allison (Samba Team) that fixes
+ "grave" bug #23903 (samba maps username before authenicating with
+ NT password server).
+ * Added a "sleep 2" between "start-stop-daemon --stop" and
+ "start-stop-daemon --start" in /etc/init.d/samba so when this script
+ is called with the "restart" parameter the Samba daemons are restarted
+ properly. This fixes bug #24211 (init.d script doesn't restart).
+ * Sent start-stop-daemon output in /etc/init.d/samba to /dev/null to
+ avoid annoying warning messages.
+ * Added perfomance tune parameters to sample /etc/smb.conf (SO_SNDBUF=4096
+ and SO_RCVBUF=4096 to "socket options" in /etc/smb.conf). I can't
+ find who sent this suggestion to me. If you are listening, drop me a
+ note and I'll put your name here :-)
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 29 Jun 1998 08:45:01 -0400
+
+samba (1.9.18p8-1) frozen unstable; urgency=low
+
+ * New upstream release that fixes _lots_ of "ugly" bugs. The list of
+ fixed bugs is too long to include here (see /usr/doc/samba/WHATSNEW.txt).
+ * Fixed postinst to quote arguments to if [ arg .. ] constructs
+ (fixes #22881).
+ * Applied Jeremy Allison's patch (posted to the samba-ntdom mailing
+ list) that solves a problem with username maps (the Samba Team did
+ not catch this problem before final 1.9.18p8).
+ * Made /etc/init.d/samba to print out a warning when Samba is running
+ from inetd and the user runs /etc/init.d/samba to start|stop|restart
+ Samba (there's no point on doing this because inetd will start the
+ daemons again when there is traffic on UDP port 137-139).
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 13 Jun 1998 00:18:25 -0400
+
+samba (1.9.18p7-4) frozen unstable; urgency=medium
+
+ * Fixes the serious problem of having the WINS name server
+ database getting deleted at boot time. That happened because the
+ WINS database was being stored under /var/lock/samba/ and all files
+ under /var/lock/ are deleted at boot time. The place where the WINS
+ database is stored was moved to /var/samba/.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 18 May 1998 20:24:29 -0400
+
+samba (1.9.18p7-3) stable; urgency=high
+
+ * Libc5 version for Bo (stable) that fixes the recently reported
+ security hole.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 18 May 1998 20:19:33 -0400
+
+samba (1.9.18p7-2) frozen unstable; urgency=low
+
+ * Added patches from the non-mantainer upload that make us able
+ to compile Samba on Alpha systems. This fixes bug #22379.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 13 May 1998 20:38:51 -0400
+
+samba (1.9.18p7-1) frozen unstable; urgency=low
+
+ * New upstream release (just bug fixes, no new functionality).
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 13 May 1998 11:47:32 -0400
+
+samba (1.9.18p6-2) frozen unstable; urgency=low
+
+ * Uploaded to frozen (I forgot to upload last version to frozen
+ so it got installed only in unstable).
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 12 May 1998 18:10:17 -0400
+
+samba (1.9.18p6-1.1) unstable; urgency=low
+
+ * non-maintainer upload for Alpha
+ * patch needed for source/quota.c (_syscall4() confusion)
+
+ -- Paul Slootman <paul@debian.org> Tue, 12 May 1998 20:39:13 +0200
+
+samba (1.9.18p6-1) unstable; urgency=low
+
+ * New upstream release that fixes a possible buffer overflow.
+ This security hole was reported on BugTraq by Drago. The
+ previous Debian version (1.9.18p5-1) was not released because
+ 1.9.18p5 and 1.9.18p6 were released very closely.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 11 May 1998 20:28:33 -0400
+
+samba (1.9.18p5-1) unstable; urgency=low
+
+ * New upstream release (no new funcionality, just bug fixes - see
+ /usr/doc/samba/WHATSNEW.txt.gz).
+ * Backed off Debian patches that were added upstream.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 11 May 1998 08:43:53 -0400
+
+samba (1.9.18p4-2) frozen unstable; urgency=low
+
+ * Patched smbclient(1) man page to not reference the unsopported
+ -A parameter (fixes #6863).
+ * Changes to start nmbd with the -a option (in /etc/init.d/samba
+ and in the entry added to /etc/inetd.conf).
+ * Fixed typo in sample smb.conf (fixes #21484).
+ * Fixed yet another typo in sample smb.conf (fixes #21447).
+
+ -- Eloy A. Paris <peloy@debian.org> Fri, 17 Apr 1998 22:19:23 -0400
+
+samba (1.9.18p4-1) frozen unstable; urgency=low
+
+ * New upstream version that fixes several bugs.
+ * New scheme for keeping track of Debian specific configuration.
+ This new scheme fixes bug #18624 (Samba always asks the user about
+ configuration options). New scheme stores Debian specific
+ configuration information in /etc/samba/debian_config.
+ * Changes to /usr/sbin/sambaconfig, prerm and postinst to support the
+ new configuration scheme.
+ * Moved required kernel 2.1.x include files inside the source tree
+ so I don't have to do very nasty things like creating crazy
+ symlinks in /usr/include to make this package compile. This
+ allows non-root users to build the package and fixes bug
+ #20104.
+ * Fixed address of the FSF in /usr/doc/samba/copyright (problem
+ reported by lintian).
+ * The /etc/init.d/samba script now supports the force-reload
+ argument, as required by the policy (problem reported by lintian).
+ * Added a "rm /etc/cron.weekly/samba" at the end of the postinst.
+ * Now the samba package can be installed even if no nmbd or smbd processes
+ are running. This fixes the following bugs: #8917, #9334, #10268,
+ #10411, #11146 and #13387.
+ * Provides the original README in /usr/doc/samba. This fixes bug #9693.
+ * Added a --no-reload option to sambaconfig to not reload Samba
+ after configuration.
+ * Created man pages for sambaconfig(8), addtosmbpass(8),
+ mksmbpasswd(8) and nmblookup(1).
+ * Corrected small typo in sample /etc/smb.conf.
+ * Added two new parameters to /etc/smb.conf: "preserver case" and
+ "short preserve case".
+ * "rm -Rf /var/lock/samba" in postrm when package is being purged.
+ * Patched upstream source (nmbd.c) to not overwrite log files when
+ nmbd is called with the -a parameter (fixes #17704: nmbd ignores
+ -a option).
+ * /etc/init.d/samba now starts the nmbd daemon with the -a parameter
+ to not overwrite log files.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Mar 1998 21:22:03 -0400
+
+samba (1.9.18p3-1) unstable; urgency=low
+
+ * New upstream version.
+ * Oppsss!!! I really screwed it up (actually, debstd did).
+ 1.9.18p2-2 still contained man pages (smbmount and smbumount) part
+ of other packages. This version does have this corrected. If not,
+ I no longer deserve to be a Debian developer! So, this version
+ fixes bug #18438 and some of the bugs I claimed to fix in
+ 1.9.18p2-2. Oh, by the way, I fixed the problem by running debstd
+ with -m in debian/rules (man pages are installed by "make install"
+ so it's a bad idea to re-install man pages with debstd).
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Feb 1998 17:32:42 -0400
+
+samba (1.9.18p2-2) unstable; urgency=low
+
+ * Fixes bugs #18017, #17999, #17961, #17932: old 1.9.18p2-1 provided
+ a man page for smbmount, which conflicts with package smbfs. This
+ was solved by creating a multi-binary package that produces
+ package samba and new package smbfsx.
+ * Fixes bug #18000 (typo in postinst).
+ * Fixes bug #17958 (postinst asks obsolete question). Actually,
+ the question is still asked, but only if Samba is run as daemons.
+ * Created a multi-binary package from the Samba sources: package
+ samba and new package smbfsx which provides SMB mount utilities
+ for kernels > 2.1.70.
+
+ -- Eloy A. Paris <peloy@debian.org> Mon, 9 Feb 1998 19:47:05 -0400
+
+samba (1.9.18p2-1) unstable; urgency=low
+
+ * New upstream version.
+ * Removed /etc/cron.weekly/samba because Samba does not handle well
+ rotation of log files (if the log file is rotated Samba will
+ continue to log to the rotated file, instead of the just created
+ one). In any case, Samba will rotate log files after an specific
+ file size.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 27 Jan 1998 22:34:27 -0400
+
+samba (1.9.18p1-2) unstable; urgency=low
+
+ * Created a multi-binary package out of the Samba sources to provide
+ packages samba and smbfsx (userland utilities to work with
+ smbfs with kernels > 2.1.x.
+
+ -- Eloy A. Paris <peloy@debian.org> Sat, 17 Jan 1998 09:23:48 -0400
+
+samba (1.9.18p1-1) unstable; urgency=low
+
+ * New upstream version.
+ * Created /etc/cron.daily/samba to save a copy of /etc/smbpasswd in
+ /var/backups/smbpasswd.bak.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 14 Jan 1998 13:40:56 -0400
+
+samba (1.9.18alpha14-1) unstable; urgency=low
+
+ * New upstream version.
+ * Added a note to the postinst script telling the user that he/she
+ needs to run smbpasswd manually after creating a new /etc/smbpasswd
+ from /etc/passwd.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 23 Dec 1997 23:44:37 -0400
+
+samba (1.9.18alpha13-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 16 Dec 1997 13:02:32 -0400
+
+samba (1.9.18alpha12-1) unstable; urgency=low
+
+ * New upstream version.
+ * Conflicts with the sambades package because the new Samba 1.9.18
+ series do not depend on the DES libraries to support encrypted
+ passwords.
+ * Added parameter "encrypt passwords = yes" to /etc/smb.conf.
+ * Compiled with support for quotas in disk_free().
+ * Home directories are now exported read only by default.
+ * Re-worked debian/rules.
+ * Re-worked sample smb.conf.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 4 Dec 1997 22:50:34 -0400
+
+samba (1.9.17p4-1) unstable; urgency=low
+
+ * New upstream version.
+ * Made /etc/smb.conf readable by everybody because some Samba utilities
+ will fail otherwise when run by non-root users.
+ * Dropped PAM support while the PAM libraries are ported to libc6.
+
+ -- Eloy A. Paris <peloy@debian.org> Tue, 21 Oct 1997 18:08:49 -0400
+
+samba (1.9.17p3-1) unstable; urgency=low
+
+ * New upstream version.
+ * Made /etc/smb.conf readable only by root as suggested by smbd's man page.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 15 Oct 1997 09:21:25 -0400
+
+samba (1.9.17p2-2) unstable; urgency=low
+
+ * Running Samba as daemons instead of from inetd.
+ * Removing netbios entries in /etc/inetd.conf.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 9 Oct 1997 23:37:25 -0400
+
+samba (1.9.17p2-1) unstable; urgency=low
+
+ * New upstream version that fixes a serious security hole.
+ * Removed Debian patches added in 1.9.17-1 and 1.9.17p1-1 because
+ these patches are now part of the upstream release.
+
+ -- Eloy A. Paris <peloy@debian.org> Sun, 28 Sep 1997 22:54:33 -0400
+
+samba (1.9.17p1-1) unstable; urgency=low
+
+ * New upstream version.
+ * Defined symbol _LINUX_C_LIB_VERSION_MAJOR as 6 in includes.h to shut up
+ compiler warnings.
+ * Included rpcsvc/ypclnt.h in includes.h to shut up compiler warnings.
+ * Included crypt.h to have function prototype for crypt().
+ * Included netinet/tcp.h to have some socket options included.
+ * Included netinet/ip.h to have some socket options included.
+ * Linking with libcrypt (LIBM='... -lcrypt'). Without including this
+ library smbd generates a seg. fault when authenticating users (?).
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 10 Sep 1997 22:09:18 -0400
+
+samba (1.9.17-1) unstable; urgency=low
+
+ * New upstream version (called the "Browse Fix Release")
+ * Added the option --oknodo to the start-stop-daemon invocation in prerm
+ script. This was because the prerm was failing because start-stop-daemon
+ was returning an error code if no nmbd or smbd daemons were found
+ to kill.
+ * The function yp_get_default_domain(), referenced in three source
+ files was part of libc5 but with libc6 (glibc2) it has been moved
+ to libnss_nis. Since the linker was unable to find the function
+ I had to add LIBSM='-lnss_nis' to debian/rules.
+ * Added -DNO_ASMSIGNALH and -DGLIBC2 to FLAGSM in debian/rules
+ because compiling was failing because of conflicts with glibc2.
+ * Patched source/includes.h to include termios.h if GLIBC2 is defined.
+
+ -- Eloy A. Paris <peloy@debian.org> Wed, 27 Aug 1997 08:39:32 -0400
+
+samba (1.9.17alpha5-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org> Thu, 14 Aug 1997 18:05:02 -0400
+
+samba (1.9.16p11-3) unstable; urgency=low
+
+ * Fixed accidental omission of /etc/pam.d/samba.
+
+ -- Klee Dienes <klee@debian.org> Sat, 15 Mar 1997 22:31:26 -0500
+
+samba (1.9.16p11-2) unstable; urgency=low
+
+ * Recompiled against newer PAM libraries.
+ * Added /etc/pam.d/samba.
+
+ -- Klee Dienes <klee@debian.org> Sat, 8 Mar 1997 01:16:28 -0500
+
+samba (1.9.16p11-1) unstable; urgency=low
+
+ * New upstream release.
+ * Added PAM support.
+
+ -- Klee Dienes <klee@debian.org> Tue, 25 Feb 1997 18:00:12 -0500
+
+samba (1.9.16p9-2) unstable; urgency=low
+
+ * minor packaging changes
+
+ -- Klee Dienes <klee@sauron.sedona.com> Sun, 3 Nov 1996 11:45:37 -0700
+
+samba (1.9.16p9-1) unstable; urgency=low
+
+ * upgraded to new upstream version
+
+ -- Klee Dienes <klee@sauron.sedona.com> Sat, 26 Oct 1996 21:38:20 -0700
+
+1.9.16alpha10-1:
+ 960714
+ * Removed Package_Revision from control file.
+ * Removed -m486 compiler option.
+ * Added Architecture, Section and Priority fields to control file.
+ * Upgraded to latest upstream version.
+ * Uses update-inetd now.
+ * Added shadow passwords support.
+ * Fixed Bug#1946: nmbd won't browse
+
+1.9.15p4-1:
+ 951128
+ * Upgraded to latest upstream version.
+ * Fixed many bugs.
+ * Adds Master Browsing support.
+ * Converted to ELF.
+ * Fixed bug #1825 - nmbd is now killed when removing samba.
+
+1.9.14-1:
+ 950926 Andrew Howell <andrew@it.com.au>
+ * Upgraded to latest version.
+ * Fixed Bug #1139 - samba won't print
+
+1.9.14alpha5-1:
+ * Fixes killing of inetd problem in debian.postint and debian.postrm
+
+1.9.14alpha5-0:
+ 950704 Andrew Howell <andrew@it.com.au>
+ * Taken over samba package from Bruce Perens.
+ * Upgraded to newest version of samba.
+
+1.9.02-1:
+ 9-January-1994 Bruce Perens <Bruce@Pixar.com>
+ * Added Debian GNU/Linux package maintenance system files, and
+ configured for Debian systems.
projects / samba.git / commitdiff