[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Announce] Samba 4.6.1, 4.5.7 and 4.4.12 Security Releases Available for Download



On Fri, Mar 24, 2017 at 03:16:28PM +0100, Mathieu Parent wrote:
> Please wait a bit before uploading.
> 
> There is a regression in jessie when "follow symlinks = no" #858564,
> and a segfault with vfs_shadow2 (#858590).
> 

Hi Mathieu,

I was able to backport the fix for #858564 from the Bugzilla patch and
then I was able to verify against what the Ubuntu maintainers had
backported.

When I looked at the change you made for #858590 I found that it does
not apply at all.  Specifically, the function being patched to resolve
the segfault, shadow_copy2_connectpath, does not exist in the Wheezy
version of Samba.  It appears that in May 2012 the shadow_copy2 from
master was backported (the change is in shadow_copy2_backport.patch in
the Wheezy package).  That change replaced shadow_copy2_connectpath with
shadow_copy2_realpath.  The two functions are substantially different
and it does not appear to me that the problem is even present in Wheezy.

That said, I intend to leave the patch from #858590 out of the Wheezy
LTS update that I am preparing.

I wanted to mention it to you directly and via the mailing list to give
you and others the opportunity to speak up in case there was something I
overlooked.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature


Reply to: