diff --git a/samba-4.13.0+git.138.ff2d5480c67.tar.bz2 b/samba-4.13.0+git.138.ff2d5480c67.tar.bz2 deleted file mode 100644 index 5eedae5..0000000 --- a/samba-4.13.0+git.138.ff2d5480c67.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8e986cec5d225408e306f91071f6dc67cf3fba8ac9c80235f1ec2057980136ee -size 24911523 diff --git a/samba-4.13.2+git.176.0a5e55b510c.tar.bz2 b/samba-4.13.2+git.176.0a5e55b510c.tar.bz2 new file mode 100644 index 0000000..7511d73 --- /dev/null +++ b/samba-4.13.2+git.176.0a5e55b510c.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:4c3feff36b738d9b5d5398f0410dd3df54ee89bdd51a6646523507034c383d9b +size 24908272 diff --git a/samba.changes b/samba.changes index 48367aa..dbdd3c2 100644 --- a/samba.changes +++ b/samba.changes @@ -1,3 +1,67 @@ +------------------------------------------------------------------- +Mon Nov 16 09:30:52 UTC 2020 - Samuel Cabrero + +- Update to 4.13.2 + + s3: modules: vfs_glusterfs: Fix leak of char **lines onto + mem_ctx on return; (bso#14486); + + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; + (bso#14471); + + smb.conf.5: Add clarification how configuration changes reflected + by Samba; (bso#14538); + + daemons: Report status to systemd even when running in foreground; + (bso#14552); + + DNS Resolver: Support both dnspython before and after 2.0.0; + (bso#14553); + + s3-vfs_glusterfs: Refuse connection when write-behind xlator is + present; (bso#14486); + + provision: Add support for BIND 9.16.x; (bso#14487); + + ctdb-common: Avoid aliasing errors during code optimization; + (bso#14537); + + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + + docs: Fix default value of spoolss:architecture; (bso#14522); + + winbind: Fix a memleak; (bso#14388); + + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + + docs-xml/manpages: Add warning about write-behind translator for + vfs_glusterfs; (bso#14486); + + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + + examples:auth: Do not install example plugin; (bso#14550); + + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; + (bso#14471); + +------------------------------------------------------------------- +Thu Nov 5 12:23:49 UTC 2020 - Noel Power + +- Adjust smbcacls '--propagate-inheritance' feature to align with + upstream; (bsc#1178469). + +------------------------------------------------------------------- +Tue Oct 6 16:52:00 UTC 2020 - Samuel Cabrero + +- Update to samba 4.13.1 + + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with + easily crafted records; (bsc#1177613); (bso#14472); + + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); + (bso#14436); + + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; + (bsc#1173902); (bso#14434); +- Adjust systemd tmpfiles.d configuration, use /run/samba instead of + /var/run/samba; (bsc#1177355); + +------------------------------------------------------------------- +Mon Oct 5 12:44:53 UTC 2020 - David Disseldorp + +- Fix vfs_ceph query_directory regression; (bso#14519) +- Drop liburing-devel for SLE15-SP2; (bsc#1177245) + +------------------------------------------------------------------- +Thu Sep 24 16:01:26 UTC 2020 - David Disseldorp + +- Register CTDB recovery lock holder with ceph-mgr +- Add liburing-devel dependency + ------------------------------------------------------------------- Tue Sep 22 16:20:33 UTC 2020 - David Disseldorp diff --git a/samba.spec b/samba.spec index dadaa4f..e0a686e 100644 --- a/samba.spec +++ b/samba.spec @@ -155,6 +155,12 @@ BuildRequires: libgnutls-devel >= 3.2.0 BuildRequires: libgnutls-devel >= 3.5.6 BuildRequires: libtasn1-devel >= 3.8 %endif +%if 0%{?sle_version} > 150200 || 0%{?suse_version} > 1500 +# liburing not yet available for all Factory architectures +%ifnarch ppc armv6l armv7l +BuildRequires: liburing-devel +%endif +%endif %define libsmbclient_name libsmbclient0 %define libnetapi_name libnetapi0 @@ -164,7 +170,7 @@ BuildRequires: libtasn1-devel >= 3.8 %else %define build_make_smp_mflags %{?jobs:-j%jobs} %endif -Version: 4.13.0+git.138.ff2d5480c67 +Version: 4.13.2+git.176.0a5e55b510c Release: 0 Url: https://www.samba.org/ Obsoletes: samba-32bit < %{version} @@ -1360,6 +1366,12 @@ getent group ntadmin >/dev/null || groupadd -g 71 -o -r ntadmin %endif %post +if testparm -s 2>&1 | grep "server schannel =" | grep -E "Auto|No" +then + echo "CVE-2020-1472(ZeroLogon):" + echo "Please configure 'server schannel = yes'" + echo "See https://bugzilla.samba.org/show_bug.cgi?id=14497" +fi %if 0%{?suse_version} > 1220 # bsc#1088574; bsc#1071090; bsc#1065551