s3-rpcclient: Fix bug #7880: cmd_spoolss_deletedriver() returned without checking...

[samba.git] / WHATSNEW.txt

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 0e6a324e365b7a2d83a8567bf83261a28d268597..74838c3ceab372def3a84ea996cf1fbc0b242608 100644 (file)
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,3 +1,136 @@
+                   ==============================
+                   Release Notes for Samba 3.4.10
+                         January 22, 2011
+                   ==============================
+
+
+This is the latest stable release of Samba 3.4.
+
+Major enhancements in Samba 3.4.10 include:
+
+
+
+Changes since 3.4.9
+-------------------
+
+
+o   Jeremy Allison <jra@samba.org>
+    * BUG 7577: Fix SPNEGO auth when contacting Win7 system using Microsoft Live
+      Sign-in Assistant.
+    * BUG 7590: Fix offline login in Winbind.
+    * BUG 7617: Fix smbd coredump.
+    * BUG 7636: Fix Winbind internal error.
+    * BUG 7892: Fix stale lock in open_file_fchmod().
+
+
+o   Björn Baumbach <bb@sernet.de>
+    * BUG 7875: Fix 'nmbd --port'.
+
+
+o   Günther Deschner <gd@samba.org>
+    * BUG 7568: Make sure cm_connect_lsa_tcp does not reset the secure channel.
+
+
+o   Björn Jacke <bj@sernet.de>
+    * BUG 7821: Set Tru64 cc's PIC switch right.
+
+
+o   Volker Lendecke <vl@samba.org>
+    * BUG 7715: Stop using the write cache after an oplock break: Stop using the
+      write cache after an oplock break.
+    * BUG 7066: Fix "Your Password expires today" message for users from trusted
+      domains.
+    * BUG 7800: Make winbind recover from a signing error.
+    * BUG 7881: Fix flaky Winbind against w2k8.
+
+
+o   Jim McDonough <jmcd@samba.org>
+    * BUG 7280: Fix loading of auto printers with registry config.
+
+
+o   Stefan Metzmacher <metze@samba.org>
+    * BUG 7607: Fix buffer over-read in pidl generated client code.
+    * BUG 7896: Fix 'net rpc user rename'.
+
+
+######################################################################
+Reporting bugs & Development Discussion
+#######################################
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored.  All bug reports should
+be filed under the Samba 3.4 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+======================================================================
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+======================================================================
+
+
+Release notes for older versions follow:
+----------------------------------------
+
+                   =============================
+                   Release Notes for Samba 3.4.9
+                        September 14, 2010
+                   =============================
+
+
+This is a security release in order to address CVE-2010-3069.
+
+
+o  CVE-2010-3069:
+   All current released versions of Samba are vulnerable to
+   a buffer overrun vulnerability. The sid_parse() function
+   (and related dom_sid_parse() function in the source4 code)
+   do not correctly check their input lengths when reading a
+   binary representation of a Windows SID (Security ID). This
+   allows a malicious client to send a sid that can overflow
+   the stack variable that is being used to store the SID in the
+   Samba smbd server.
+
+
+Changes since 3.4.8
+-------------------
+
+
+o   Jeremy Allison <jra@samba.org>
+    * BUG 7669: Fix for CVE-2010-3069.
+
+
+o   Andrew Bartlett <abartlet@samba.org>
+    * BUG 7669: Fix for CVE-2010-3069.
+
+
+######################################################################
+Reporting bugs & Development Discussion
+#######################################
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored.  All bug reports should
+be filed under the Samba 3.4 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+======================================================================
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+======================================================================
+
+
+----------------------------------------------------------------------
+
+
                    =============================
                    Release Notes for Samba 3.4.8
                           May 11, 2010
@@ -116,8 +249,8 @@ database (https://bugzilla.samba.org/).
 ======================================================================
 
 
-Release notes for older versions follow:
-----------------------------------------
+----------------------------------------------------------------------
+
 
                    =============================
                    Release Notes for Samba 3.4.7