Accepting request 835851 from home:scabrero:branches:network:samba:STABLE

- Update to samba 4.12.7
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.12.6
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server;
    (bso#14403).
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256"
    to work on RHEL7; (bso#14424).
  + dbcheck: Allow a dangling forward link outside our known NCs;
    (bso#14450).
  + lib/debug: Set the correct default backend loglevel to
    MAX_DEBUG_LEVEL; (bso#14426).
  + PANIC: Assert failed in get_lease_type(); (bso#14428).
  + util: Fix build on AIX by fixing the order of replace.h include;
    (bso#14422).
  + srvsvc_NetFileEnum asserts with open files; (bso#14355).
  + KDC breaks with DES keys still in the database and
    msDS-SupportedEncryptionTypes 31 indicating support for it;
    (bso#14354).
  + s3:smbd: Make sure vfs_ChDir() always sets
    conn->cwd_fsp->fh->fd = AT_FDCWD; (bso#14427).

OBS-URL: https://build.opensuse.org/request/show/835851
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=635

samba-4.12.5+git.168.88cc07e6cbf.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0fe88be82ef3a77979929f334be2a1315375b26f4ed107497f5262cfb16806a7
-size 24787220

samba-4.12.7+git.173.1aef95ad7db.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:37f639193b447519e117ee911ea071583d239fe77a045602d488511a079bc3af
+size 24789600

samba.changes

@@ -1,3 +1,45 @@
+-------------------------------------------------------------------
+Fri Sep 18 13:24:12 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
+
+- Update to samba 4.12.7
+  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
+    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
+    (bso#14497);
+  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
+    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
+    (bsc#1176579); (bso#14497);
+  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
+    challenge; (bsc#1176579); (bso#14497);
+  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
+    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
+    (bsc#1176579); (bso#14497);
+
+- Update to samba 4.12.6
+  + s3: libsmb: Fix SMB2 client rename bug to a Windows server;
+    (bso#14403).
+  + dsdb: Allow "password hash userPassword schemes = CryptSHA256"
+    to work on RHEL7; (bso#14424).
+  + dbcheck: Allow a dangling forward link outside our known NCs;
+    (bso#14450).
+  + lib/debug: Set the correct default backend loglevel to
+    MAX_DEBUG_LEVEL; (bso#14426).
+  + PANIC: Assert failed in get_lease_type(); (bso#14428).
+  + util: Fix build on AIX by fixing the order of replace.h include;
+    (bso#14422).
+  + srvsvc_NetFileEnum asserts with open files; (bso#14355).
+  + KDC breaks with DES keys still in the database and
+    msDS-SupportedEncryptionTypes 31 indicating support for it;
+    (bso#14354).
+  + s3:smbd: Make sure vfs_ChDir() always sets
+    conn->cwd_fsp->fh->fd = AT_FDCWD; (bso#14427).
+  + PANIC: Assert failed in get_lease_type(); (bso#14428).
+  + docs: Fix documentation for require_membership_of of
+    pam_winbind.conf; (bso#14358).
+  + ctdb-scripts: Use nfsconf utility for variable values in CTDB
+    NFS scripts; (bso#14444).
+  + s3:winbind:idmap_ad: Make failure to get attrnames for schema
+    mode fatal; (bso#14425).
+
 -------------------------------------------------------------------
 Tue Jul 28 13:25:09 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
 

samba.spec

@@ -164,7 +164,7 @@ BuildRequires:  libtasn1-devel >= 3.8
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-Version:        4.12.5+git.168.88cc07e6cbf
+Version:        4.12.7+git.173.1aef95ad7db
 Release:        0
 Url:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}