* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.14.7

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

but keep it selected by default as before
so it could be selected if nmbd and/or wssd2
should be used

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>

* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.13.9

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.13.8
* remove faulty io_uring kernel detection
* fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254
* resolves #15512

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.13.4

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add proper io_uring kernel detection

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.13.3
* enable vfs io_uring module by default, if kernel supports it
* fix for possible exploit openwrt/packages#13758
* sanetize all external template/config inputs
* fix some shellcheck warnings
* remove old aio modules/deps

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.13.2
* remove outdated option "write cache size"

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Note:
Fixes CVE-2020-1472 in case smb.conf
contains 'server schannel = no' or 'server schannel = auto'

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* update to 4.12.6
* fix optional modules not included on module build (vfs_btrfs, vfs_linux_xfs_sgid)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.12.5
* fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303
* add fix-musl_missing__nss_buflen_passwd.patch
* remove fixed tirpc include
* add extra CONFIGURE_VARS (XSLTPROC=false, WAF_NO_PREFORK=1)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add new UCI option "enable_extra_tuning"
* update template
* add config examples for options
* fix some access warnings on samba /var dirs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fix python3 host paths, ensure we use build hostpkg tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update waf-cross-answers for 4.12.x

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add unbundle libunwind, icu patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.12.3
* update/remove patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

This removes Python-related build variants, and adds
PYTHON3_PKG_BUILD:=0 and minor build adjustments (where appropriate),
for non-Python packages. There should be no changes to build output.

This also updates some include paths for python3-package.mk and/or
python3-host.mk to be relative to the package Makefile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Fixes #11417

The fix was implemented in commit 710700c and was later removed in
commit c50c583.

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>

* update to 4.11.6
* add new UCI option "allow_legacy_protocols" to section [samba]

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* use old workaround for broken unbundle pam patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fix openwrt/packages#10700
* add suffix to asn1_compile, compile_et to avoid krb5 conflicts
* bundle samba's com_err

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.16
* cherry-pick some musl alpine/openembedded patches
* cleanup/remove AD-DC/Winbind options and related code
* build the compile_et via samba4/host

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.15
* fixes CVE-2019-10218, CVE-2019-14833, CVE-2019-14847
* update smb.conf.template (aio, sendfile)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add missing libreadline dep
* remove old patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.10.6
* use python3
* disable SERVER_AD_DC option (bugged atm)
* fix init script symlink smb.conf detection
* add new deps (libtasn1, libopenssl)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fixes CVE-2018-16860

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.7
* add write_list, read_list UCI support

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fixes openwrt/packages#8721

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Avoid Hetzner hosted servers due to availability (.ru users)
and try to keep availability as good as possible without
sacrificing performance for the majority of users.
Update upstream project download URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

* fix CVE-2019-3870, CVE-2019-3880
* switch to fossies.org as main download (faster)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.5
* use embedded heimdal build
* remove mitkrb5 deps
* add AD-DC tools (samba4kinit samba4kgetcred samba4kpasswd samba4ktutil)
* add eventlogadm to ADMIN tools
* build VFS modules shared
* preserve custom smb.conf after reboots
* add missing lib/samba/? private dirs, even if empty
* handle python-crypto via EXTRA_DEPENDS
* fix CONFIGURE_CMD argument order
* move python install to libs
* remove redundant Config.in selects

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add patch for tmsize overflow (https://bugzilla.samba.org/show_bug.cgi?id=13622)
* re-enable netbios by default
(Some users still need netbios and its just a minor size increase 50kb)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Since 4.9.3, Samba AD-DC with MIT Kerberos will refuse to build unless
--with-experimental-mit-ad-dc is provided to the configure command.

The mandatory requirement was introduced in response to a report that
a user in a Samba AD domain can crash the KDC when Samba is built in
the non-default MIT Kerberos configuration:
https://www.samba.org/samba/security/CVE-2018-16853.html

This requirement was introduced in Samba commit
c5370a4349.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>

Fixes following CVEs (4.9.3 and 4.9.4):
CVE-2018-16853, CVE-2018-14629, CVE-2018-16853
CVE-2018-14629, CVE-2018-16841, CVE-2018-16851
CVE-2018-16852, CVE-2018-16853, CVE-2018-16857

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>

Update Samba to 4.9.2
Refresh patches

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

* use kernel fs to get the hostname, drop domainname

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* busybox does not have 'hostname' by default so replaced it with uci calls

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fixes: error 0x80070035
* add triggers to catch hostname changes

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

fixes: nmbd: Stop nmbd network announce storm (bug #13620).

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fix a typo in vfs_extd_audit

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>