From 7da53eecb749ff1804e7498775d8de19bb3cf07a58c05d21351ca254fc414f67 Mon Sep 17 00:00:00 2001 From: David Mulder Date: Wed, 23 Sep 2020 12:49:18 +0000 Subject: [PATCH] Accepting request 836313 from home:dmdiss:samba-4.13.0 rework changelogs to carry 4.12.6 and 4.12.7 entries. SLE15-SP3 changelog is provided as a separate file. OBS-URL: https://build.opensuse.org/request/show/836313 OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=637 --- samba-4.13.0+git.134.9eb7248ecfb.tar.bz2 | 3 -- samba-4.13.0+git.138.ff2d5480c67.tar.bz2 | 3 ++ samba.changes | 45 ++++++++++++++++++++---- samba.spec | 2 +- 4 files changed, 42 insertions(+), 11 deletions(-) delete mode 100644 samba-4.13.0+git.134.9eb7248ecfb.tar.bz2 create mode 100644 samba-4.13.0+git.138.ff2d5480c67.tar.bz2 diff --git a/samba-4.13.0+git.134.9eb7248ecfb.tar.bz2 b/samba-4.13.0+git.134.9eb7248ecfb.tar.bz2 deleted file mode 100644 index e2560fa..0000000 --- a/samba-4.13.0+git.134.9eb7248ecfb.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:44efb048125aff11829415ef82e64b95c417fd4fe8eec25be69e4736643a1e25 -size 24923499 diff --git a/samba-4.13.0+git.138.ff2d5480c67.tar.bz2 b/samba-4.13.0+git.138.ff2d5480c67.tar.bz2 new file mode 100644 index 0000000..5eedae5 --- /dev/null +++ b/samba-4.13.0+git.138.ff2d5480c67.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8e986cec5d225408e306f91071f6dc67cf3fba8ac9c80235f1ec2057980136ee +size 24911523 diff --git a/samba.changes b/samba.changes index 4a2d480..48367aa 100644 --- a/samba.changes +++ b/samba.changes @@ -12,6 +12,18 @@ Tue Sep 22 16:20:33 UTC 2020 - David Disseldorp + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + + Fix %U substitutions if it contains a domain name; (bso#14467) + + Fix krb5.conf creation for 'net ads join'; (bso#14479) + + Fix build problem if libbsd-dev is not installed; (bso#14482) + + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + + Fix idmap_ad RFC4511 response handling; (bso#14465) + + Fix panic in get_lease_type(); (bso#14428) + +------------------------------------------------------------------- +Fri Sep 18 13:24:12 UTC 2020 - Samuel Cabrero + +- Update to samba 4.12.7 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); @@ -23,13 +35,32 @@ Tue Sep 22 16:20:33 UTC 2020 - David Disseldorp + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) - + Fix %U substitutions if it contains a domain name; (bso#14467) - + Fix krb5.conf creation for 'net ads join'; (bso#14479) - + Fix build problem if libbsd-dev is not installed; (bso#14482) - + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) - + Fix idmap_ad RFC4511 response handling; (bso#14465) - + Fix panic in get_lease_type(); (bso#14428) + +- Update to samba 4.12.6 + + s3: libsmb: Fix SMB2 client rename bug to a Windows server; + (bso#14403). + + dsdb: Allow "password hash userPassword schemes = CryptSHA256" + to work on RHEL7; (bso#14424). + + dbcheck: Allow a dangling forward link outside our known NCs; + (bso#14450). + + lib/debug: Set the correct default backend loglevel to + MAX_DEBUG_LEVEL; (bso#14426). + + PANIC: Assert failed in get_lease_type(); (bso#14428). + + util: Fix build on AIX by fixing the order of replace.h include; + (bso#14422). + + srvsvc_NetFileEnum asserts with open files; (bso#14355). + + KDC breaks with DES keys still in the database and + msDS-SupportedEncryptionTypes 31 indicating support for it; + (bso#14354). + + s3:smbd: Make sure vfs_ChDir() always sets + conn->cwd_fsp->fh->fd = AT_FDCWD; (bso#14427). + + PANIC: Assert failed in get_lease_type(); (bso#14428). + + docs: Fix documentation for require_membership_of of + pam_winbind.conf; (bso#14358). + + ctdb-scripts: Use nfsconf utility for variable values in CTDB + NFS scripts; (bso#14444). + + s3:winbind:idmap_ad: Make failure to get attrnames for schema + mode fatal; (bso#14425). ------------------------------------------------------------------- Tue Jul 28 13:25:09 UTC 2020 - Thorsten Kukuk diff --git a/samba.spec b/samba.spec index 935b9bd..dadaa4f 100644 --- a/samba.spec +++ b/samba.spec @@ -164,7 +164,7 @@ BuildRequires: libtasn1-devel >= 3.8 %else %define build_make_smp_mflags %{?jobs:-j%jobs} %endif -Version: 4.13.0+git.134.9eb7248ecfb +Version: 4.13.0+git.138.ff2d5480c67 Release: 0 Url: https://www.samba.org/ Obsoletes: samba-32bit < %{version}