Accepting request 447039 from home:jmcdough:next

Update to 4.5.3 for CVE-2016-2123 (bsc#1014437) CVE-2016-2125 (bsc#1014441) CVE-2016-2126 (bsc#1014442)

OBS-URL: https://build.opensuse.org/request/show/447039
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=549

patches.tar.bz2

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:e3ddab53613da0d8e042bd61d1cd2f0631646827ec10264e5aaa90857aa39af0
-size 43478
+oid sha256:d447505bc6ee1293bae1558f4eaeabdc9d74de34b413148f349ed2813da5a666
+size 41597

samba-4.5.0.tar.asc

@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iD8DBQBX0CsibzORW2Vot+oRAuywAJwI2T4CkeTGUL/2ZBmqIYwJeTGlfQCeO1CQ
-imC1dU+VLVvoMv9CtqY8d1Y=
-=k4tw
------END PGP SIGNATURE-----

samba-4.5.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d3a9a439b746ddd2c5f119f60c72ef8a026bcee1efb1199bf19e44f114f6b586
-size 20937551

samba-4.5.3.tar.asc

@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iD8DBQBYSnw4bzORW2Vot+oRAjqGAJ9ieJ+wGww+Iw6aUYBFeF5a0gg4LQCfci+h
+ymnYzuj4guVsiSxLpOiJ9go=
+=3z3A
+-----END PGP SIGNATURE-----

samba-4.5.3.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f06dc454a1bb72b21a329e1ad75a14795886401671ec7439d69a6b824c492eca
+size 20946015

samba.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Mon Dec 19 19:11:20 UTC 2016 - jmcdonough@suse.com
+
+- Update to 4.5.3
+  + Heap-based Buffer Overflow Remote Code Execution Vulnerability;
+    CVE-2016-2123; (bso#12409); (bsc#1014437).
+  + Don't send delegated credentials to all servers; CVE-2016-2125;
+  (bso#12445); (bsc#1014441).
+  + denial of service due to a client triggered crash in the winbindd
+    parent process; CVE-2016-2126; (bso#12446); (bsc#1014442).
+- 4.5.1 and 4.5.2 updates
+  + various streams vfs fixes
+  + various printing fixes
+  + ntlm_auth: do not map explicitly empty domain
+  + various stability fixes in smbd
+  + match file compression ReFS behavior
+
 -------------------------------------------------------------------
 Mon Sep 26 17:55:13 UTC 2016 - nopower@suse.com
 

samba.spec

@@ -128,7 +128,7 @@ BuildRequires:  libpcp-devel
 %if 0%{?build_vfs_ceph}
 BuildRequires:  libcephfs-devel
 %endif
-%define	samba_ver 4.5.0
+%define	samba_ver 4.5.3
 %define	samba_ver_suffix %nil
 %if "%{samba_ver_suffix}" == ""
 %define samba_source_location https://ftp.samba.org/pub/samba/stable/samba-%{version}.tar.gz
@@ -150,11 +150,11 @@ BuildRequires:  libcephfs-devel
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-%define SOURCE_TIMESTAMP 3712
+%define SOURCE_TIMESTAMP 0
 %define BRANCH %{version}
 %global with_mitkrb5 1
 %global with_dc 0
-Version:        4.5.0
+Version:        4.5.3
 Release:        0
 Url:            https://www.samba.org/
 Obsoletes:      samba-gplv3 < %{version}
@@ -1699,6 +1699,7 @@ fi
 %endif
 %dir %{_libdir}/samba
 %dir %{_libdir}/samba/vfs
+%dir %{_libdir}/samba/ldb
 %{_libdir}/samba/auth
 %{_libdir}/samba/config
 %{_libdir}/samba/rpc
@@ -1923,6 +1924,7 @@ fi
 %{_libdir}/samba/libdcerpc-samba-samba4.so
 %{_libdir}/samba/libdcerpc-samba4.so
 %{_libdir}/samba/libdsdb-module-samba4.so
+%{_libdir}/samba/libdsdb-garbage-collect-tombstones-samba4.so
 %{_libdir}/samba/libevents-samba4.so
 %{_libdir}/samba/libflag-mapping-samba4.so
 %{_libdir}/samba/libgenrand-samba4.so
@@ -2193,6 +2195,7 @@ fi
 
 %files -n ctdb-tests
 %defattr(-,root,root)
+%dir %{_libdir}/ctdb
 %dir %{_libdir}/ctdb/tests
 %{_libdir}/ctdb/tests/comm_client_test
 %{_libdir}/ctdb/tests/comm_server_test
@@ -2220,25 +2223,27 @@ fi
 %{_libdir}/ctdb/tests/transaction_loop
 %{_libdir}/ctdb/tests/update_record
 %{_libdir}/ctdb/tests/update_record_persistent
-%dir %{_datadir}/ctdb-tests
-%dir %{_datadir}/ctdb-tests/eventscripts
-%dir %{_datadir}/ctdb-tests/eventscripts/etc-ctdb
-%{_datadir}/ctdb-tests/eventscripts/etc-ctdb/events.d
-%{_datadir}/ctdb-tests/eventscripts/etc-ctdb/functions
-%{_datadir}/ctdb-tests/eventscripts/etc-ctdb/nfs-checks.d
-%{_datadir}/ctdb-tests/eventscripts/etc-ctdb/nfs-linux-kernel-callout
-%{_datadir}/ctdb-tests/eventscripts/etc-ctdb/statd-callout
-%dir %{_datadir}/ctdb-tests/onnode
-%{_datadir}/ctdb-tests/onnode/functions
-%dir %{_datadir}/ctdb-tests/scripts
-%{_datadir}/ctdb-tests/scripts/common.sh
-%{_datadir}/ctdb-tests/scripts/integration.bash
-%{_datadir}/ctdb-tests/scripts/test_wrap
-%{_datadir}/ctdb-tests/scripts/unit.sh
-%{_datadir}/ctdb-tests/scripts/script_install_paths.sh
-%dir %{_datadir}/ctdb-tests/simple
-%{_datadir}/ctdb-tests/simple/functions
-%{_datadir}/ctdb-tests/simple/nodes
+%{_libdir}/ctdb/tests/pidfile_test
+%dir %{_datadir}/ctdb
+%dir %{_datadir}/ctdb/tests
+%dir %{_datadir}/ctdb/tests/eventscripts
+%dir %{_datadir}/ctdb/tests/eventscripts/etc-ctdb
+%{_datadir}/ctdb/tests/eventscripts/etc-ctdb/events.d
+%{_datadir}/ctdb/tests/eventscripts/etc-ctdb/functions
+%{_datadir}/ctdb/tests/eventscripts/etc-ctdb/nfs-checks.d
+%{_datadir}/ctdb/tests/eventscripts/etc-ctdb/nfs-linux-kernel-callout
+%{_datadir}/ctdb/tests/eventscripts/etc-ctdb/statd-callout
+%dir %{_datadir}/ctdb/tests/onnode
+%{_datadir}/ctdb/tests/onnode/functions
+%dir %{_datadir}/ctdb/tests/scripts
+%{_datadir}/ctdb/tests/scripts/common.sh
+%{_datadir}/ctdb/tests/scripts/integration.bash
+%{_datadir}/ctdb/tests/scripts/test_wrap
+%{_datadir}/ctdb/tests/scripts/unit.sh
+%{_datadir}/ctdb/tests/scripts/script_install_paths.sh
+%dir %{_datadir}/ctdb/tests/simple
+%{_datadir}/ctdb/tests/simple/functions
+%{_datadir}/ctdb/tests/simple/nodes
 
 %files -n libdcerpc-binding0
 %defattr(-,root,root)

vendor-files.tar.bz2

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:52b7e876143a50cbb75dc0b69447da1f40ba3730d1481cd2543154b75c70d279
-size 55809
+oid sha256:ece382d18dd053a26a529fe0974faf63d75cef546e58e67162c651a576521b15
+size 55746