Accepting request 664132 from home:npower:update_samba

- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498). - Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd. OBS-URL: https://build.opensuse.org/request/show/664132 OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=612
2019-01-11 12:33:52 +00:00 · 2019-01-11 12:33:52 +00:00 · f4a14d4c40
commit f4a14d4c40
parent 9842f795c9
3 changed files with 47 additions and 22 deletions
--- a/samba-4.9.4+git.126.aa8e79e6e87.tar.bz2
+++ b/samba-4.9.4+git.126.aa8e79e6e87.tar.bz2
@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c610be00eeda74bff92fedb9a0066ca146af3f09516dc34112942f16f3195cb6
+size 24654857
--- a/samba.changes
+++ b/samba.changes
@ -1,3 +1,35 @@
+-------------------------------------------------------------------
+Tue Jan  8 11:38:40 UTC 2019 - nopower@suse.com
+
+- Update to samba-4.9.4
+  + libcli/smb: Don't overwrite status code; (bso#9175).
+  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
+  + Session setup reauth fails to sign response; (bso#13661).
+  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
+  + vfs_shadow_copy2: Nicely deal with attempts to open previous
+    version for writing; (bso#13688).
+  + Restoring previous version of stream with vfs_shadow_copy2 fails
+    with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455).
+  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
+  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
+  + PEP8: fix E231: missing whitespace after ','.
+  + winbindd: Fix crash when taking profiles;(bso#13629)
+  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
+    regression; (bso#13600)
+  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
+  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
+  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
+  + ctdb-daemon: Exit with error if a database directory does not
+    exist; (bso#13696).
+  + s3:libads: Add net ads leave keep-account option; (bso#13498).
+
+-------------------------------------------------------------------
+Thu Dec  6 20:55:23 UTC 2018 - Jan Engelhardt <jengelh@inai.de>
+
+- Drop more %if..%endif guards which are idempotent.
+- Drop requires on ldconfig which are already auto-discovered.
+- Do not ignore errors from useradd/groupadd.
+
 -------------------------------------------------------------------
 Thu Nov 29 15:54:27 UTC 2018 - David Mulder <dmulder@suse.com>

--- a/samba.spec
+++ b/samba.spec
@ -168,7 +168,7 @@ BuildRequires:  krb5-devel
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-Version:        4.9.3+git.121.c328d5e9101
+Version:        4.9.4+git.126.aa8e79e6e87
 Release:        0
 Url:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}
@ -181,8 +181,8 @@ Group:          Productivity/Networking/Samba
 Source:         samba-%{version}.tar.bz2
 Source4:        baselibs.conf
 Source100:      samba-client-rpmlintrc
-Requires:       /usr/bin/getent
-Requires:       /usr/sbin/groupadd
+Requires(pre):  /usr/bin/getent
+Requires(pre):  /usr/sbin/groupadd
 Requires:       coreutils
 Requires:       grep
 %if 0%{?suse_version} > 1220
@ -260,7 +260,8 @@ Obsoletes:      samba-gplv3-client < %{version}
 Requires:       %{?insserv_prereq}
 Requires:       /sbin/chkconfig
 %endif
-Requires:       /sbin/ldconfig
+Requires(post): /sbin/ldconfig
+Requires(postun): /sbin/ldconfig
 Requires:       coreutils
 %{?systemd_requires}
 Requires:       cifs-utils
@ -313,7 +314,6 @@ the man pages.
 Summary:        Samba libraries
 License:        GPL-3.0-or-later
 Group:          Development/Libraries/C and C++
-Requires:       /sbin/ldconfig
 Requires:       krb5
 %if 0%{?suse_version} > 1210 && 0%{?suse_version} < 1315
 Requires:       libfam0-gamin
@ -391,7 +391,6 @@ that use SMB, RPC and other Samba provided protocols in Python3 programs.
 Summary:        Testing tools for Samba servers and clients
 License:        GPL-3.0-or-later
 Group:          Applications/System
-Requires:       /sbin/ldconfig
 Requires:       samba = %{version}
 Requires:       samba-winbind = %{version}

@ -414,11 +413,12 @@ Recommends:     /usr/sbin/nscd
 %if 0%{?suse_version} < 1221
 Requires:       %{?insserv_prereq}
 %endif
-Requires:       /sbin/ldconfig
-Requires:       /usr/sbin/groupadd
+Requires(pre):  /usr/sbin/groupadd
 Requires:       coreutils
 Requires:       samba-client >= %{version}
 Requires:       libtevent-util0 >= %{version}
+Requires(post): /sbin/ldconfig
+Requires(postun): /sbin/ldconfig

 %description winbind
 This is the winbind-daemon and the wbinfo-tool.
@ -898,7 +898,6 @@ Obsoletes:      libsmbclient < %{version}
 Summary:        Samba Client Library
 License:        GPL-3.0-or-later
 Group:          System/Libraries
-Requires:       /sbin/ldconfig

 %description -n %{libsmbclient_name}
 This package includes the libsmbclient library.
@ -925,7 +924,6 @@ develop programs which make use of the smbclient programming interface.
 Summary:        Samba netapi Library
 License:        GPL-3.0-or-later
 Group:          System/Libraries
-Requires:       /sbin/ldconfig

 %description -n %{libnetapi_name}
 This package includes the netapi library.
@ -949,7 +947,6 @@ develop programs which make use of the netapi programming interface.
 Summary:        Samba libwbclient Library
 License:        LGPL-3.0-or-later
 Group:          System/Libraries
-Requires:       /sbin/ldconfig

 %description -n %{libwbclient_name}
 This package includes the wbclient library.
@ -999,6 +996,8 @@ Summary:        Samba LDB modules
 License:        GPL-3.0-or-later
 Group:          Productivity/Networking/Samba
 Requires:       libldb1 >= %{ldb_version}
+Requires(post): /sbin/ldconfig
+Requires(postun): /sbin/ldconfig

 %description dsdb-modules
 This package contains plugins which add Active Directory features to the
@ -1405,7 +1404,7 @@ popd
 %endif

 %pre
-getent group ntadmin >/dev/null || groupadd -g 71 -o -r ntadmin || :
+getent group ntadmin >/dev/null || groupadd -g 71 -o -r ntadmin
 %if 0%{?suse_version} > 1220
 %if %{with_dc}
 %service_add_pre nmb.service smb.service samba-ad-dc.service
@ -1557,14 +1556,10 @@ fi
 %postun -n libsamba-hostconfig0 -p /sbin/ldconfig
 %post   -n libsamba-passdb0 -p /sbin/ldconfig
 %postun -n libsamba-passdb0 -p /sbin/ldconfig
-%if %{with_python3}
 %post   -n libsamba-policy0-python3 -p /sbin/ldconfig
 %postun -n libsamba-policy0-python3 -p /sbin/ldconfig
-%endif
-%if %{with_python}
 %post   -n libsamba-policy0 -p /sbin/ldconfig
 %postun -n libsamba-policy0 -p /sbin/ldconfig
-%endif
 %post   -n libsamba-util0 -p /sbin/ldconfig
 %postun -n libsamba-util0 -p /sbin/ldconfig
 %post   -n libsamdb0 -p /sbin/ldconfig
@ -1579,14 +1574,10 @@ fi
 %postun -n %{libwbclient_name} -p /sbin/ldconfig
 %post libs -p /sbin/ldconfig
 %postun libs -p /sbin/ldconfig
-%if %{with_pidl}
 %post pidl -p /sbin/ldconfig
 %postun pidl -p /sbin/ldconfig
-%endif
 %post test -p /sbin/ldconfig
 %postun test -p /sbin/ldconfig
-
-%if %{with_dc}
 %post ad-dc -p /sbin/ldconfig
 %postun ad-dc -p /sbin/ldconfig

@ -1595,12 +1586,11 @@ ln -sf %{_libdir}/samba/ldb %{_libdir}/ldb/samba
 /sbin/ldconfig

 %postun dsdb-modules -p /sbin/ldconfig
-%endif

 %pre winbind
 # we need this group for squid (ntlmauth)
 # read access to /var/lib/samba/winbindd_privileged
-getent group winbind >/dev/null || groupadd -r winbind || :
+getent group winbind >/dev/null || groupadd -r winbind
 %if 0%{?suse_version} > 1220
 %service_add_pre winbind.service
 %endif