Upgrade from 4.10.x to 4.14.x to fix CVEs.

The samba 4.10.x is EOL so it can not get the latest CVEs fixes. Previously, we 
backport patches from upstream to fix the CVEs.
Unfortunately, for some recent CVEs, it is difficult to backport because there 
are more than one hundred patches:
https://git.samba.org/?p=samba.git&a=search&h=refs%2Fheads%2Fv4-14-stable&st=commit&s=CVE

Upgrading to 4.14.x seems to be a better way.


Khem Raj (2):
  libldb: Inherit pkgconfig
  samba: Inherit pkgconfig

Persian Prince (1):
  samba: Don't guess dirs for perllocal.pod removing

Yi Zhao (14):
  libldb: upgrade 1.5.8 -> 2.3.0
  libparse-yapp-perl: add recipe
  samba: upgrade 4.10.18 -> 4.14.4
  samba: update smb.conf
  samba: disable check fcntl RW_HINTS when configure
  samba: upgrade 4.14.4 -> 4.14.5
  samba: fix shebang for pidl
  samba: add missing runtime dependency for pidl
  samba: upgrade 4.14.5 -> 4.14.7
  samba: upgrade 4.14.7 -> 4.14.8
  libldb: upgrade 2.3.0 -> 2.3.2
  samba: upgrade 4.14.8 -> 4.14.10
  samba: add pyldb to rdepends for samba-python3
  samba: update cross-answers files

wangmy (1):
  samba: Solve the dependency problem when installing Samba

zhengruoqin (1):
  samba: upgrade 4.14.10 -> 4.14.11

 .../cross-answers-aarch64.txt                 |   5 +
 .../cross-answers-aarch64_be.txt              |   5 +
 .../waf-cross-answers/cross-answers-arm.txt   |   5 +
 .../waf-cross-answers/cross-answers-armeb.txt |   5 +
 .../waf-cross-answers/cross-answers-i586.txt  |   5 +
 .../waf-cross-answers/cross-answers-i686.txt  |   5 +
 .../waf-cross-answers/cross-answers-mips.txt  |   5 +
 .../cross-answers-mips64.txt                  |   5 +
 .../cross-answers-mips64el.txt                |   5 +
 .../cross-answers-mipsel.txt                  |   5 +
 .../cross-answers-powerpc.txt                 |   5 +
 .../cross-answers-powerpc64.txt               |   5 +
 .../cross-answers-powerpc64le.txt             |   5 +
 .../cross-answers-riscv32.txt                 |   5 +
 .../cross-answers-riscv64.txt                 |   5 +
 .../cross-answers-x86_64.txt                  |   5 +
 ... 0001-Don-t-check-xsltproc-manpages.patch} |  24 +--
 ...ipt-Avoid-generating-nested-main-fun.patch |  30 ----
 ....c-Avoid-nss-function-conflicts-with.patch |  96 ------------
 ...001-waf-add-support-of-cross_compile.patch |  62 --------
 ...t-target-module-while-cross-compile.patch} |   8 +-
 ...ve-__thread-variable-to-global-scope.patch |  58 -------
 ...-Add-config-option-without-valgrind.patch} |  12 +-
 ...ions-to-configure-the-use-of-libbsd.patch} |  45 +++---
 ...5-samba-build-dnsserver_common-code.patch} |  13 +-
 .../samba/samba/CVE-2020-14318.patch          | 142 ------------------
 .../samba/samba/CVE-2020-14383.patch          | 112 --------------
 .../samba/samba/glibc_only.patch              |  28 ----
 .../samba/samba/iconv-4.7.0.patch             |  25 ---
 ... samba-fix-musl-lib-without-innetgr.patch} |   0
 .../recipes-connectivity/samba/samba/smb.conf |  40 ++---
 .../samba/samba/smb_conf-4.7.0.patch          |  28 ----
 .../{samba_4.10.18.bb => samba_4.14.11.bb}    |  89 ++++++-----
 ...t-target-module-while-cross-compile.patch} |  12 +-
 ...001-waf-add-support-of-cross_compile.patch |  62 --------
 ...-Add-configure-options-for-packages.patch} |  38 ++---
 ...> 0003-avoid-openldap-unless-wanted.patch} |  13 +-
 ...bldb-fix-musl-libc-unkown-type-error.patch |  31 ----
 .../{libldb_1.5.8.bb => libldb_2.3.2.bb}      |  14 +-
 .../perl/libparse-yapp-perl_1.21.bb           |  21 +++
 40 files changed, 254 insertions(+), 829 deletions(-)
 rename 
meta-networking/recipes-connectivity/samba/samba/{16-do-not-check-xsltproc-manpages.patch
 => 0001-Don-t-check-xsltproc-manpages.patch} (77%)
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/0001-lib-replace-wscript-Avoid-generating-nested-main-fun.patch
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/0001-nsswitch-nsstest.c-Avoid-nss-function-conflicts-with.patch
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/0001-waf-add-support-of-cross_compile.patch
 rename 
meta-networking/{recipes-support/libldb/libldb/do-not-import-target-module-while-cross-compile.patch
 => 
recipes-connectivity/samba/samba/0002-do-not-import-target-module-while-cross-compile.patch}
 (94%)
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/0002-util_sec.c-Move-__thread-variable-to-global-scope.patch
 rename 
meta-networking/recipes-connectivity/samba/samba/{21-add-config-option-without-valgrind.patch
 => 0003-Add-config-option-without-valgrind.patch} (88%)
 rename 
meta-networking/recipes-connectivity/samba/samba/{0001-Add-options-to-configure-the-use-of-libbsd.patch
 => 0004-Add-options-to-configure-the-use-of-libbsd.patch} (76%)
 rename meta-networking/recipes-connectivity/samba/samba/{dnsserver-4.7.0.patch 
=> 0005-samba-build-dnsserver_common-code.patch} (55%)
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/CVE-2020-14318.patch
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/CVE-2020-14383.patch
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/glibc_only.patch
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/iconv-4.7.0.patch
 rename 
meta-networking/recipes-connectivity/samba/samba/{0001-samba-fix-musl-lib-without-innetgr.patch
 => samba-fix-musl-lib-without-innetgr.patch} (100%)
 delete mode 100644 
meta-networking/recipes-connectivity/samba/samba/smb_conf-4.7.0.patch
 rename meta-networking/recipes-connectivity/samba/{samba_4.10.18.bb => 
samba_4.14.11.bb} (83%)
 rename 
meta-networking/{recipes-connectivity/samba/samba/20-do-not-import-target-module-while-cross-compile.patch
 => 
recipes-support/libldb/libldb/0001-do-not-import-target-module-while-cross-compile.patch}
 (90%)
 delete mode 100644 
meta-networking/recipes-support/libldb/libldb/0001-waf-add-support-of-cross_compile.patch
 rename meta-networking/recipes-support/libldb/libldb/{options-1.5.4.patch => 
0002-ldb-Add-configure-options-for-packages.patch} (90%)
 rename 
meta-networking/recipes-support/libldb/libldb/{avoid-openldap-unless-wanted.patch
 => 0003-avoid-openldap-unless-wanted.patch} (68%)
 delete mode 100644 
meta-networking/recipes-support/libldb/libldb/libldb-fix-musl-libc-unkown-type-error.patch
 rename meta-networking/recipes-support/libldb/{libldb_1.5.8.bb => 
libldb_2.3.2.bb} (84%)
 create mode 100644 meta-oe/recipes-devtools/perl/libparse-yapp-perl_1.21.bb

-- 
2.25.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#94527): 
https://lists.openembedded.org/g/openembedded-devel/message/94527
Mute This Topic: https://lists.openembedded.org/mt/87992355/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to