Accepting request 1118340 from home:scabrero:branches:network:samba:STABLE

- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).

- packaging: Remove /etc/slp.reg.d from samba spec file;
  (bsc#1216160)

- use systemd-logind rather than utmp for y2038 safety;
  (bsc#1216159).

OBS-URL: https://build.opensuse.org/request/show/1118340
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=686
This commit is contained in:
David Mulder 2023-10-18 15:15:15 +00:00 committed by Git OBS Bridge
parent 3eb5634326
commit 1c40fe22ec
4 changed files with 36 additions and 7 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a77c5f683e347b3ac2f656c1504dac32e0dccb901ee6d79c045f6c6917a16bf9
size 44233972

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:083cdcf02e8e3c10015b0f8aab9ac811d91035215ee7c1d4699c450f8f00b118
size 44285138

View File

@ -1,3 +1,35 @@
-------------------------------------------------------------------
Mon Oct 16 16:04:22 UTC 2023 - Noel Power <nopower@suse.com>
- Update to 4.19.2
* Use-after-free in aio_del_req_from_fsp during smbd shutdown
after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
* clidfs.c do_connect() missing a "return" after a
cli_shutdown() call; (bso#15426).
* macOS mdfind returns only 50 results; (bso#15463).
* GETREALFILENAME_CACHE can modify incoming new filename with
previous cache entry value; (bso#15481).
* libnss_winbind causes memory corruption since samba-4.18,
impacts sendmail, zabbix, potentially more; (bso#15464).
* ctdbd: setproctitle not initialized messages flooding logs;
(bso#15479).
* CVE-2023-5568 Heap buffer overflow with freshness tokens in
the Heimdal KDC in Samba 4.19; (bso#15491).
* The heimdal KDC doesn't detect s4u2self correctly when fast
is in use; (bso#15477).
-------------------------------------------------------------------
Thu Oct 12 11:33:44 UTC 2023 - Noel Power <nopower@suse.com>
- packaging: Remove /etc/slp.reg.d from samba spec file;
(bsc#1216160)
-------------------------------------------------------------------
Thu Oct 12 11:04:26 UTC 2023 - Noel Power <nopower@suse.com>
- use systemd-logind rather than utmp for y2038 safety;
(bsc#1216159).
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Oct 10 15:12:38 UTC 2023 - Noel Power <nopower@suse.com> Tue Oct 10 15:12:38 UTC 2023 - Noel Power <nopower@suse.com>

View File

@ -158,7 +158,7 @@ BuildRequires: liburing-devel
%endif %endif
BuildRequires: sysuser-tools BuildRequires: sysuser-tools
Version: 4.19.1+git.312.c912b3d2ef6 Version: 4.19.2+git.322.7e9201cef5
Release: 0 Release: 0
URL: https://www.samba.org/ URL: https://www.samba.org/
Obsoletes: samba-32bit < %{version} Obsoletes: samba-32bit < %{version}
@ -721,7 +721,6 @@ install -d -m 0755 -p \
%{buildroot}/%{_sysconfdir}/{xinetd.d,logrotate.d} \ %{buildroot}/%{_sysconfdir}/{xinetd.d,logrotate.d} \
%{buildroot}/%{_sysconfdir}/openldap/schema \ %{buildroot}/%{_sysconfdir}/openldap/schema \
%{buildroot}/%{_sysconfdir}/security \ %{buildroot}/%{_sysconfdir}/security \
%{buildroot}/%{_sysconfdir}/slp.reg.d \
%{buildroot}/%{CONFIGDIR} \ %{buildroot}/%{CONFIGDIR} \
%{buildroot}/%{_unitdir} \ %{buildroot}/%{_unitdir} \
%{buildroot}/%{_lib}/security \ %{buildroot}/%{_lib}/security \
@ -828,7 +827,6 @@ install -m 0755 tools/update-apparmor-samba-profile \
%{buildroot}/%{_datadir}/samba/ %{buildroot}/%{_datadir}/samba/
# PDF generator # PDF generator
install -p -m 0755 tools/smbprngenpdf %{buildroot}/%{_bindir}/smbprngenpdf install -p -m 0755 tools/smbprngenpdf %{buildroot}/%{_bindir}/smbprngenpdf
install -m 0644 config/samba.reg %{buildroot}/%{_sysconfdir}/slp.reg.d/samba.reg
install -m 0644 config/samba.pamd-common %{buildroot}/%samba_pamdir/samba install -m 0644 config/samba.pamd-common %{buildroot}/%samba_pamdir/samba
install -m 0644 config/dhcp.conf %{buildroot}/%{_fillupdir}/samba-client-dhcp.conf install -m 0644 config/dhcp.conf %{buildroot}/%{_fillupdir}/samba-client-dhcp.conf
install -m 0644 config/sysconfig.dhcp-samba-client %{buildroot}/%{_fillupdir}/sysconfig.dhcp-samba-client install -m 0644 config/sysconfig.dhcp-samba-client %{buildroot}/%{_fillupdir}/sysconfig.dhcp-samba-client
@ -1126,7 +1124,6 @@ exit 0
%else %else
%config %samba_pamdir/samba %config %samba_pamdir/samba
%endif %endif
%{_sysconfdir}/slp.reg.d
%dir %{_libdir}/samba %dir %{_libdir}/samba
%dir %{_libdir}/samba/vfs %dir %{_libdir}/samba/vfs
%dir %{_libdir}/samba/ldb %dir %{_libdir}/samba/ldb