packages/net/samba4/patches, branch master

samba4: bump to 4.24.5

2026-08-10T17:07:20Z

https://www.samba.org/samba/history/samba-4.24.5.html Patch removed due to fixed in Makefile: 012-fix-gnutls-version-check.patch Patch removed because of no longer needed: 005-musl_uintptr.patch Makefile: Fixed gnutls sed related things. Fixed compile_et & asn1_compile linkage at build time to fixes build error Dropped NONE from bundled-libraries as to fix compilation errors, NONE now seems meaning not to bundle any libraries. Added RSTRIP from gcc Makefile to reduce compiled samba4 binaries and libraries filesize by around 15%, tested, --private-libraries rpath seems intact or identical with not-stripped binaries and libraries one. samba's cross_answer() returns on the *first* message matching a check in cross-answers.txt, and Build/Configure copies the per-arch answers file before appending its own answers. Up to samba 4.16 the check message itself carried a "setting/geting hints" typo, which the generated answers files inherited; samba fixed its spelling later, so the file entries stopped matching and configure started aborting with Cross answers file ... is incomplete The 'Checking whether fcntl supports setting/getting hints: OK' line appended by Build/Configure was added to paper over that, not because the targets answer OK. Now that the spelling in the answers files is fixed, the generated (-11, "") entry matches first and the appended OK is dead code. Keep the generated answer -- samba's test uses F_SET_FILE_RW_HINT/F_GET_FILE_RW_HINT, which the kernel no longer implements, so the check legitimately fails on every target -- and drop the unreachable echo so each check has exactly one answer. smb.conf.template: Added SMB2 as default minimum protocol for client, also enabled server & client encryption by default. Use smbpasswd -a username to add a username & password for samba. To connect into samba from Windows 10 and above, it need to be done by this guide : https://www.asus.com/support/faq/1054736/ . Build system: x86/64 Build-tested: x86/64-glibc Build-tested: x86/64-musl Run-tested: x86/64-glibc Signed-off-by: Aditya Nugraha

samba4: bump to 4.22.2

2025-06-18T14:51:32Z

https://www.samba.org/samba/history/samba-4.22.2.html Removed upstreamed: 101-do-not-check-xsltproc-manpages.patch 105-perl-json-pp.patch Removed due to build failure: 104-samba-4.12-unbundle-icu.patch Added: 104-fix-build-on-aarch64-and-risc.patch[1] Makefile: Removed section on --accel-aes due to upstream dropping support Added line to correct fcntl check in cross-answers.txt 1. For aarch64 and risc64, the discard_const macro is used to remove const qualifiers from string literals, but casting a string literal’s address to uintptr_t and then to void * is not a constant expression in some compilers or environments e.g. the musl libc and aarch64/risc64 combination seems to enforce stricter rules for constant initializers or pointer/integer size handling compared to glibc-based systems. Build system: x86/64 Build-tested: x86/64 Run-tested: x86/64 Signed-off-by: John Audia

samba4: update to 4.18.0

2023-03-26T19:35:59Z

Samba release history: https://www.samba.org/samba/history/samba-4.18.0.html Signed-off-by: Andrew Sim

samba4: update to 4.17.5

2023-03-09T01:19:08Z

* update to 4.17.5 * changelog: https://www.samba.org/samba/history/samba-4.17.5 * refresh patch * CVE-2022-42898: Samba's Kerberos libraries and AD DC failed to guard against integer overflows when parsing a PAC on a 32-bit system, which allowed an attacker with a forged PAC to corrupt the heap. https://www.samba.org/samba/security/CVE-2022-42898.html * CVE-2022-37966: This is the Samba CVE for the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022. A Samba Active Directory DC will issue weak rc4-hmac session keys for use between modern clients and servers despite all modern Kerberos implementations supporting the aes256-cts-hmac-sha1-96 cipher. On Samba Active Directory DCs and members 'kerberos encryption types = legacy' would force rc4-hmac as a client even if the server supports aes128-cts-hmac-sha1-96 and/or aes256-cts-hmac-sha1-96. https://www.samba.org/samba/security/CVE-2022-37966.html * CVE-2022-37967: This is the Samba CVE for the Windows Kerberos Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022. A service account with the special constrained delegation permission could forge a more powerful ticket than the one it was presented with. https://www.samba.org/samba/security/CVE-2022-37967.html * CVE-2022-38023: The "RC4" protection of the NetLogon Secure channel uses the same algorithms as rc4-hmac cryptography in Kerberos, and so must also be assumed to be weak. https://www.samba.org/samba/security/CVE-2022-38023.html * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors. This resolves errors logged during macOS TimeMachine backups. https://bugzilla.samba.org/show_bug.cgi?id=15210 Signed-off-by: Michael Peleshenko

samba4: update to 4.17.1

2022-10-23T20:53:12Z

* update to 4.17.1 * changelog: https://www.samba.org/samba/history/samba-4.17.1 * refresh patch Signed-off-by: Andrew Sim

samba4: remove duplicate entry from libldb-fix-musl-libc-unkown-type-error.patch

2022-10-07T08:53:26Z

Signed-off-by: Andrew Sim

samba4: update to 4.17.0

2022-10-07T08:53:26Z

Signed-off-by: Andrew Sim

samba4: fix build on macos

2022-05-22T20:40:48Z

This commit fixes two issues on macos: 1. Added a patch to fix 'echo -n' issue with MacOS shell (backported from upstream) 2. Redefined sys.platform='linux' for target build if build host is MacOS (otherwise, build script tries to use MacOS logic for OpenWrt(Linux) target build) Signed-off-by: Sergey V. Lobanov

samba4: update to 4.14.11; fix AD_DC build

2022-01-28T20:09:09Z

* update to 4.14.11 * fix AD_DC build * add vfs_widelinks to defaults * refresh patches * fixes: #16697, #17692 * fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192 Signed-off-by: Andy Walsh

samba: update to 4.14.7

2021-09-08T14:28:54Z

* update to 4.14.7 Signed-off-by: Andy Walsh