Commit Graph

70 Commits

Author SHA1 Message Date
Michal Hrusecky 3a3a0c2162
samba4: Update to version 4.18.8
Mainly security release, fixing CVE-2023-3961, CVE-2023-4091,
CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670. For more details see:
https://www.samba.org/samba/history/samba-4.18.8.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit c9c5f62e30)
2023-10-16 09:39:31 +02:00
Michal Hrusecky 0f8c275005 samba4: update to 4.18.6
Update to the version of samba4 from 23.05 as version 4.14 is no longer
supported by upstream since 2022-09-13:

https://wiki.samba.org/index.php/Samba_Release_Planning#General_information

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-09-23 19:15:21 -07:00
Andrew Sim 724600576b samba4: update to 4.14.14
* update to 4.14.14
* fixes: CVE-2022-2031, CVE-2022-32744, CVE-2022-32745, CVE-2022-32746, CVE-2022-32742

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
(cherry picked from commit 5cf95dbf05)
2023-09-20 02:21:36 +02:00
Andy Walsh 944a3cf18f samba4: drop maintainership
drop maintainership:
* samba4
* ksmbd-tools
* perl-parse-yapp
* libtirpc
* softethervpn5
* wsdd2
* rpcsvc-proto

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit cd49a8fb27)
2023-09-20 02:21:29 +02:00
Sergey V. Lobanov 368188b05f samba4: fix build on macos
This commit fixes two issues on macos:
1. Added a patch to fix 'echo -n' issue with MacOS shell
(backported from upstream)
2. Redefined sys.platform='linux' for target build if build host is
MacOS (otherwise, build script tries to use MacOS logic for
OpenWrt(Linux) target build)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 510d44d988)
2023-09-20 02:21:19 +02:00
Liangbin Lian 452681ea7f
samba4: support both user map and valid users on same time
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit e04e523a01)
2022-12-02 17:50:54 +08:00
Rosen Penev ece80b55eb samba: add ppc64 support
Needed for QoriQ target

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-28 05:33:05 -08:00
Andy Walsh 1fa70d6a3c samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-02-01 07:20:56 -05:00
Andy Walsh 7730a65d30 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-01-28 12:09:09 -08:00
Andy Walsh f75bb89c7e samba: update to 4.14.7
* update to 4.14.7

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-09-08 07:28:54 -07:00
Fritz D. Ansel 2992e3bb7d samba4: allow disabling wsdd2 in menuconfig
but keep it selected by default as before
so it could be selected if nmbd and/or wssd2
should be used

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:55:31 +03:00
Fritz D. Ansel 6bac8c6275 samba4: use hostname only as name
even if a fqdn (with domain) is set by user

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:44:18 +03:00
Fritz D. Ansel 059f622ac9 samba4: set stoplevel
to allow graceful stop of the daemon

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:44:09 +03:00
Andy Walsh 7f3f6d162a samba4: update to 4.14.5
* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-06-27 15:32:34 +02:00
Andy Walsh 2057fc9ee4 samba4: update to 4.13.9
* update to 4.13.9

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-06-17 18:28:08 +02:00
Andy Walsh 93b34d4dda samba4: update to 4.13.8
* update to 4.13.8
* remove faulty io_uring kernel detection
* fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254
* resolves #15512

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-05-06 14:31:29 -07:00
Ilya Lipnitskiy 5d8d4fbbcb
treewide: Run refresh on all packages
The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-20 16:02:15 -08:00
Andy Walsh 35b3a4444e samba4: update to 4.13.4
* update to 4.13.4

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-26 12:15:24 +01:00
Andy Walsh c8f3cca283 samba4: add proper io_uring kernel detection
* add proper io_uring kernel detection

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-11 23:02:26 +02:00
Andy Walsh 97e55a28b3 samba4: update to 4.13.3, enbale io_uring
* update to 4.13.3
* enable vfs io_uring module by default, if kernel supports it
* fix for possible exploit openwrt/packages#13758
* sanetize all external template/config inputs
* fix some shellcheck warnings
* remove old aio modules/deps

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-08 17:28:36 +01:00
Andy Walsh 2789b91e94 samba4: update to 4.13.2
* update to 4.13.2
* remove outdated option "write cache size"

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-12-08 19:48:00 +01:00
Jan Pavlinec 6647b3278b
samba4: update to version 4.12.7
Note:
Fixes CVE-2020-1472 in case smb.conf
contains 'server schannel = no' or 'server schannel = auto'

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-24 12:29:16 +02:00
Andy Walsh 896ebed773 samba4: update to 4.12.6
* update to 4.12.6
* fix optional modules not included on module build (vfs_btrfs, vfs_linux_xfs_sgid)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-09-13 17:50:37 +02:00
Andy Walsh 4da8b01f67 samba4: update to 4.12.5
* update to 4.12.5
* fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303
* add fix-musl_missing__nss_buflen_passwd.patch
* remove fixed tirpc include
* add extra CONFIGURE_VARS (XSLTPROC=false, WAF_NO_PREFORK=1)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-07-03 01:38:48 +02:00
Andy Walsh 68af8dcde3 samba4: add new UCI option "enable_extra_tuning"
* add new UCI option "enable_extra_tuning"
* update template
* add config examples for options
* fix some access warnings on samba /var dirs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-27 22:47:30 +02:00
Andy Walsh d1e7a77e61 samba4: fix python3 host paths
* fix python3 host paths, ensure we use build hostpkg tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-19 13:22:52 +02:00
Andy Walsh c5b1b6f86e samba4: update waf-cross-answers
* update waf-cross-answers for 4.12.x

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-16 21:46:04 +02:00
Andy Walsh 2698c06d5b samba4: unbundle libunwind, icu
* add unbundle libunwind, icu patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-14 17:51:21 +02:00
Andy Walsh f29cf74c28 samba4: update to 4.12.3
* update to 4.12.3
* update/remove patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 02:01:25 +02:00
Jeffery To 1bc2f4f3c6 treewide: Remove Python variants for non-Python packages
This removes Python-related build variants, and adds
PYTHON3_PKG_BUILD:=0 and minor build adjustments (where appropriate),
for non-Python packages. There should be no changes to build output.

This also updates some include paths for python3-package.mk and/or
python3-host.mk to be relative to the package Makefile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-19 01:56:23 +08:00
Daniel Bermond b1aed107b6
samba4: bring back the fix to build with parallel jobs
Fixes #11417

The fix was implemented in commit 710700c and was later removed in
commit c50c583.

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
2020-02-23 19:07:52 +00:00
Andy Walsh 8a13ba8de1 samba4: update to 4.11.6, add new UCI option
* update to 4.11.6
* add new UCI option "allow_legacy_protocols" to section [samba]

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-09 23:21:35 +01:00
Andy Walsh 6d4cf0f2d7 samba4: fix libpam deps
* use old workaround for broken unbundle pam patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-20 00:20:23 +01:00
Andy Walsh c50c5836ea samba4: update to 4.11.4
* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-17 11:54:50 +01:00
Andy Walsh 1298a4ceda samba4: make host-buildtools private/add suffix
* fix openwrt/packages#10700
* add suffix to asn1_compile, compile_et to avoid krb5 conflicts
* bundle samba's com_err

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-03 16:06:07 +01:00
Andy Walsh 226e0c6497 samba4: update to 4.9.16, remove AD-DC/Winbind options
* update to 4.9.16
* cherry-pick some musl alpine/openembedded patches
* cleanup/remove AD-DC/Winbind options and related code
* build the compile_et via samba4/host

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-28 17:11:55 +01:00
Andy Walsh ec3225b495 samba4: add UCI option 'disable_async_io'
* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 13:54:24 +01:00
Andy Walsh d08b1279eb samba4: update to 4.9.15
* update to 4.9.15
* fixes CVE-2019-10218, CVE-2019-14833, CVE-2019-14847
* update smb.conf.template (aio, sendfile)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-08 13:21:45 +01:00
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Jan Pavlinec ad16f2a851
samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-04 13:29:35 +02:00
Oever González c45974d0a3
samba4: remove double quotes for renice
The double quote thells the shell that the list returned from `pidof` is a
single argument, therefore, `renice` will cry about a malformed input.
With this commit, `renice` will be applied correctly to all the returned PIDs
from `pidof`.

The output of `renice` for the quoted list is as follows:
`renice: invalid number '6592 6587 6586 6574'`
`renice` does not show and does apply the nice value if the list is unquoted.

Signed-off-by: Oever González <notengobattery@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-04 13:29:33 +02:00
Andy Walsh c02ef3ae7f samba4: add python2 host dependency
* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-30 11:09:17 +02:00
Rosen Penev d03b88b5b0
samba4: Run init script through shellcheck
Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-07-28 17:51:00 -07:00
Andy Walsh 2f2a4bccd9 samba4: revert to 4.9.11
* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-21 16:01:20 +02:00
Andy Walsh c37eda5f28 samba4: add libreadline dep, cleanup old patches
* add missing libreadline dep
* remove old patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-14 14:57:44 +02:00
Andy Walsh 0ddd8f1484 samba4: update to 4.10.6
* update to 4.10.6
* use python3
* disable SERVER_AD_DC option (bugged atm)
* fix init script symlink smb.conf detection
* add new deps (libtasn1, libopenssl)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-13 14:22:04 +02:00
Andy Walsh fd74d9f4ea samba4: update to 4.9.8
* fixes CVE-2018-16860

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-05-16 10:26:15 +02:00
Andy Walsh 9c8d7444cc samba4: update to 4.9.7
* update to 4.9.7
* add write_list, read_list UCI support

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-05-10 11:12:21 +02:00
Andy Walsh 710700c7b4 samba4: fix build with parallel jobs
* fixes openwrt/packages#8721

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-24 12:21:18 +02:00
Daniel Engberg 1f812c4518 Samba4: Rework URLs
Avoid Hetzner hosted servers due to availability (.ru users)
and try to keep availability as good as possible without
sacrificing performance for the majority of users.
Update upstream project download URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2019-04-17 20:26:31 +00:00