summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>1998-06-13 00:27:53 +0000
committerJeremy Allison <jra@samba.org>1998-06-13 00:27:53 +0000
commit72a6252ef76d0ad7ad4d8a55da9f74dcd0e1c602 (patch)
tree623bd5a8c3910fdf508a53a852f194559538cd23
parent67c4e8170b92d7d1038ac00c7e019b0f4a89a85c (diff)
downloadsamba-72a6252ef76d0ad7ad4d8a55da9f74dcd0e1c602.tar.gz
Updated WHATSNEW.txt for 1.9.18p8.
Jeremy.
-rw-r--r--WHATSNEW.txt80
1 files changed, 59 insertions, 21 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index abc08eb3afc..600db281076 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,25 +1,52 @@
- WHATS NEW IN 1.9.18p7 - May 12th 1998.
+ WHATS NEW IN 1.9.18p8 - June 12th 1998.
======================================
This is the latest stable release of Samba. This is the
version that all production Samba servers should be running
for all current bug-fixes.
-This release is a security hole patch fix for a security hole reported
-on BugTraq by Drago. The security hole may have allowed authenticated
-users to subvert security on the server by overflowing a buffer in a
-filename rename operation. It is as yet undetermined whether the
-security hole is actually exploitable because of existing buffer
-overflow checks in Samba and the limitations on available characters
-in filenames but the Samba Team considered the threat of a possible
-security hole enough to warrant an immediate patch release.
+Note that most Samba Team effort is now going into working on the
+next major release which should contain some Windows NT Domain
+features. It is intended that any future work on the 1.9.18 series
+be maintenance only fixes.
-It is highly recommended that all sites assume that the security hole
-is exploitable and upgrade to version 1.9.18p7 of Samba.
+An announcement will be made when the first alpha release of the next
+Samba series is available.
-The previous release 1.9.18p6, which was intended to fix the
-security hole, has compile problems on several platforms, and
-should not be used.
+Bugfixes added since 1.9.18p7
+-----------------------------
+
+1). Fixed bug so Samba returns ERROR_MORE_DATA for long share
+ lists that won't fit in the data buffer given by the client.
+2). Made mapping of Windows to UNIX usernames only occur once per
+ name.
+3). Cause changing of SMB password to fail if UNIX pasword change
+ fails and unix password sync is set.
+4). Ensure the Samba names are added to the remote broadcast subnet
+ to allow NT workstations to do a directed broadcast node status
+ query (they seem to want to do this for some reason).
+5). Fixed HPUX10 Trusted systems bigcrypt password authentication call.
+6). Ensure smbd doesn't crash if 'account disabled' set in smbpasswd
+ file.
+7). Ensured 'revalidate' parameter is only checked if we're in share
+ level security.
+8). Ensure that password lengths are sanity checked even if in server
+ level security.
+9). Fix bug with multi-user NT systems where a file currently open by
+ one user could always be opened by another.
+10). Ensure we save the current user info and restore it correctly
+ whilst in the oplock break state.
+11). Added some simple sanity checks to testparam.
+12). Added timezone sanity checks.
+13). Re-wrote wildcard handling for trans2 calls. Wildcard matching
+ now seems to be *identical* to NT (as far as I can tell).
+14). Added facility for user list code to be explicit about checking
+ UNIX group database or NIS netgroup list. Updated smb.conf
+ detailing this.
+15). Fixed bug in multibyte character handling when parsing a pathname.
+16). Fixed file descriptor leak in client code.
+17). Fixed QSORT_CAST compile bugs on many systems.
+18). Added codepages 737 (Greek) and 861 (Icelandic).
If you have problems, or think you have found a bug please email
a report to :
@@ -33,16 +60,27 @@ Regards,
The Samba Team.
-Previous release notes for 1.9.18p5 follow.
+Previous release notes for 1.9.18p7 follow.
=========================================================================
-Note that most Samba Team effort is now going into working on the
-next major release which should contain some Windows NT Domain
-features. It is intended that any future work on the 1.9.18 series
-be maintenance only fixes.
+This release is a security hole patch fix for a security hole reported
+on BugTraq by Drago. The security hole may have allowed authenticated
+users to subvert security on the server by overflowing a buffer in a
+filename rename operation. It is as yet undetermined whether the
+security hole is actually exploitable because of existing buffer
+overflow checks in Samba and the limitations on available characters
+in filenames but the Samba Team considered the threat of a possible
+security hole enough to warrant an immediate patch release.
-An announcement will be made when the first alpha release of the next
-Samba series is available.
+It is highly recommended that all sites assume that the security hole
+is exploitable and upgrade to version 1.9.18p7 of Samba.
+
+The previous release 1.9.18p6, which was intended to fix the
+security hole, has compile problems on several platforms, and
+should not be used.
+
+Previous release notes for 1.9.18p5 follow.
+=========================================================================
Added features in 1.9.18p5
--------------------------