mirror of
https://github.com/samba-team/samba.git
synced 2024-12-22 13:34:15 +03:00
b896da351c
This is the version we test with in CI after the image update in the next commit. This addresses the issues that were fixed in CVE-2022-37967 (KrbtgtFullPacSignature) and ensures that Samba builds against the MIT version that allows us to avoid that attack. The hooks to allow these expectations to be disabled in the tests are kept for now, to allow this to be reverted or to test older servers. With MIT 1.21 as the new test standard for the MIT KDC build we update the knownfail_mit_kdc - this was required regadless after the CI image update. Any update to the CI image, even an unrelated one, brings in a new MIT Krb5, version 1.21-3 in this case. This has new behaviour that needs to be noted in the knownfail files or else the tests, which haven't changed, will fail and pipelines won't pass. (The image generated by the earlier bootstrap commit brought in krb5-1.21-2 which was buggy with CVE-2023-39975) Further tweaks to tests or the server should reduce the number of knownfail entries, but this keeps the pipelines passing for now. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15231 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
79 lines
2.5 KiB
Plaintext
79 lines
2.5 KiB
Plaintext
Release Announcements
|
|
=====================
|
|
|
|
This is the first pre release of Samba 4.20. This is *not*
|
|
intended for production environments and is designed for testing
|
|
purposes only. Please report any defects via the Samba bug reporting
|
|
system at https://bugzilla.samba.org/.
|
|
|
|
Samba 4.20 will be the next version of the Samba suite.
|
|
|
|
|
|
UPGRADING
|
|
=========
|
|
|
|
|
|
NEW FEATURES/CHANGES
|
|
====================
|
|
|
|
New Minimum MIT Krb5 version for Samba AD Domain Controller
|
|
-----------------------------------------------------------
|
|
|
|
Samba now requires MIT 1.21 when built against a system MIT Krb5 and
|
|
acting as an Active Directory DC. This addresses the issues that were
|
|
fixed in CVE-2022-37967 (KrbtgtFullPacSignature) and ensures that
|
|
Samba builds against the MIT version that allows us to avoid that
|
|
attack.
|
|
|
|
Removed dependency on Perl JSON module
|
|
--------------------------------------
|
|
|
|
Distributions are advised that the Perl JSON package is no longer
|
|
required by Samba builds that use the imported Heimdal. The build
|
|
instead uses Perl's JSON::PP built into recent perl5 versions.
|
|
|
|
Current lists of packages required by Samba for major distributions
|
|
are found in the bootstrap/generated-dists/ directory of a Samba
|
|
source tree. While there will be some differences - due to features
|
|
chosen by packagers - comparing these lists with the build dependencies
|
|
in a package may locate other dependencies we no longer require.
|
|
|
|
|
|
REMOVED FEATURES
|
|
================
|
|
|
|
|
|
smb.conf changes
|
|
================
|
|
|
|
Parameter Name Description Default
|
|
-------------- ----------- -------
|
|
|
|
|
|
KNOWN ISSUES
|
|
============
|
|
|
|
https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.20#Release_blocking_bugs
|
|
|
|
|
|
#######################################
|
|
Reporting bugs & Development Discussion
|
|
#######################################
|
|
|
|
Please discuss this release on the samba-technical mailing list or by
|
|
joining the #samba-technical:matrix.org matrix room, or
|
|
#samba-technical IRC channel on irc.libera.chat
|
|
|
|
If you do report problems then please try to send high quality
|
|
feedback. If you don't provide vital information to help us track down
|
|
the problem then you will probably be ignored. All bug reports should
|
|
be filed under the Samba 4.1 and newer product in the project's Bugzilla
|
|
database (https://bugzilla.samba.org/).
|
|
|
|
|
|
======================================================================
|
|
== Our Code, Our Bugs, Our Responsibility.
|
|
== The Samba Team
|
|
======================================================================
|
|
|