From 1c40fe22ec20a1c9e934966e425f322b37ce4271255e70c47f94865561f575ec Mon Sep 17 00:00:00 2001 From: David Mulder Date: Wed, 18 Oct 2023 15:15:15 +0000 Subject: [PATCH] Accepting request 1118340 from home:scabrero:branches:network:samba:STABLE - Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477). - packaging: Remove /etc/slp.reg.d from samba spec file; (bsc#1216160) - use systemd-logind rather than utmp for y2038 safety; (bsc#1216159). OBS-URL: https://build.opensuse.org/request/show/1118340 OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=686 --- samba-4.19.1+git.312.c912b3d2ef6.tar.bz2 | 3 --- samba-4.19.2+git.322.7e9201cef5.tar.bz2 | 3 +++ samba.changes | 32 ++++++++++++++++++++++++ samba.spec | 5 +--- 4 files changed, 36 insertions(+), 7 deletions(-) delete mode 100644 samba-4.19.1+git.312.c912b3d2ef6.tar.bz2 create mode 100644 samba-4.19.2+git.322.7e9201cef5.tar.bz2 diff --git a/samba-4.19.1+git.312.c912b3d2ef6.tar.bz2 b/samba-4.19.1+git.312.c912b3d2ef6.tar.bz2 deleted file mode 100644 index 953e273..0000000 --- a/samba-4.19.1+git.312.c912b3d2ef6.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a77c5f683e347b3ac2f656c1504dac32e0dccb901ee6d79c045f6c6917a16bf9 -size 44233972 diff --git a/samba-4.19.2+git.322.7e9201cef5.tar.bz2 b/samba-4.19.2+git.322.7e9201cef5.tar.bz2 new file mode 100644 index 0000000..f745dcd --- /dev/null +++ b/samba-4.19.2+git.322.7e9201cef5.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:083cdcf02e8e3c10015b0f8aab9ac811d91035215ee7c1d4699c450f8f00b118 +size 44285138 diff --git a/samba.changes b/samba.changes index f1f94d4..1c6e69c 100644 --- a/samba.changes +++ b/samba.changes @@ -1,3 +1,35 @@ +------------------------------------------------------------------- +Mon Oct 16 16:04:22 UTC 2023 - Noel Power + +- Update to 4.19.2 + * Use-after-free in aio_del_req_from_fsp during smbd shutdown + after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). + * clidfs.c do_connect() missing a "return" after a + cli_shutdown() call; (bso#15426). + * macOS mdfind returns only 50 results; (bso#15463). + * GETREALFILENAME_CACHE can modify incoming new filename with + previous cache entry value; (bso#15481). + * libnss_winbind causes memory corruption since samba-4.18, + impacts sendmail, zabbix, potentially more; (bso#15464). + * ctdbd: setproctitle not initialized messages flooding logs; + (bso#15479). + * CVE-2023-5568 Heap buffer overflow with freshness tokens in + the Heimdal KDC in Samba 4.19; (bso#15491). + * The heimdal KDC doesn't detect s4u2self correctly when fast + is in use; (bso#15477). + +------------------------------------------------------------------- +Thu Oct 12 11:33:44 UTC 2023 - Noel Power + +- packaging: Remove /etc/slp.reg.d from samba spec file; + (bsc#1216160) + +------------------------------------------------------------------- +Thu Oct 12 11:04:26 UTC 2023 - Noel Power + +- use systemd-logind rather than utmp for y2038 safety; + (bsc#1216159). + ------------------------------------------------------------------- Tue Oct 10 15:12:38 UTC 2023 - Noel Power diff --git a/samba.spec b/samba.spec index 402773b..0ea3fb3 100644 --- a/samba.spec +++ b/samba.spec @@ -158,7 +158,7 @@ BuildRequires: liburing-devel %endif BuildRequires: sysuser-tools -Version: 4.19.1+git.312.c912b3d2ef6 +Version: 4.19.2+git.322.7e9201cef5 Release: 0 URL: https://www.samba.org/ Obsoletes: samba-32bit < %{version} @@ -721,7 +721,6 @@ install -d -m 0755 -p \ %{buildroot}/%{_sysconfdir}/{xinetd.d,logrotate.d} \ %{buildroot}/%{_sysconfdir}/openldap/schema \ %{buildroot}/%{_sysconfdir}/security \ - %{buildroot}/%{_sysconfdir}/slp.reg.d \ %{buildroot}/%{CONFIGDIR} \ %{buildroot}/%{_unitdir} \ %{buildroot}/%{_lib}/security \ @@ -828,7 +827,6 @@ install -m 0755 tools/update-apparmor-samba-profile \ %{buildroot}/%{_datadir}/samba/ # PDF generator install -p -m 0755 tools/smbprngenpdf %{buildroot}/%{_bindir}/smbprngenpdf -install -m 0644 config/samba.reg %{buildroot}/%{_sysconfdir}/slp.reg.d/samba.reg install -m 0644 config/samba.pamd-common %{buildroot}/%samba_pamdir/samba install -m 0644 config/dhcp.conf %{buildroot}/%{_fillupdir}/samba-client-dhcp.conf install -m 0644 config/sysconfig.dhcp-samba-client %{buildroot}/%{_fillupdir}/sysconfig.dhcp-samba-client @@ -1126,7 +1124,6 @@ exit 0 %else %config %samba_pamdir/samba %endif -%{_sysconfdir}/slp.reg.d %dir %{_libdir}/samba %dir %{_libdir}/samba/vfs %dir %{_libdir}/samba/ldb