This bug fix release also addresses two minor security issues
without being a dedicated security release:
o CVE-2014-0239: dns: Don't reply to replies (bug #10609).
o CVE-2014-0178: Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response
(bug #10549).
Still not connected to bulk builds.
- tweak and install default configuration file (from Ian McWilliam, thanks!);
- zap KRB5_LIBS leftover that shouldn't be committed in the first place;
- restrict access to Samba directories; what about adding Samba user(-s)?..
Most of work by yours truly, with help from kirby@, ian@ and others.
Notable change: libtalloc became a part of -util subpackage. Stuff
in this package has circular dependencies (at least, it was so
during beta times), so it's not possible to have libtalloc as
a separate package.
Now that Heimdal leaved base system, we could get rid of dirty, nasty
pool of hacks that renamed almost every symbol of bundled Heimdal.
okay ajacoutot@, also support from ian@ and sthen@ at least.