Accepting request 849281 from network:samba:STABLE

OBS-URL: https://build.opensuse.org/request/show/849281
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=264

samba-4.13.0+git.138.ff2d5480c67.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8e986cec5d225408e306f91071f6dc67cf3fba8ac9c80235f1ec2057980136ee
-size 24911523

samba-4.13.2+git.176.0a5e55b510c.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4c3feff36b738d9b5d5398f0410dd3df54ee89bdd51a6646523507034c383d9b
+size 24908272

samba.changes

@@ -1,3 +1,67 @@
+-------------------------------------------------------------------
+Mon Nov 16 09:30:52 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
+
+- Update to 4.13.2
+  + s3: modules: vfs_glusterfs: Fix leak of char **lines onto
+    mem_ctx on return; (bso#14486);
+  + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
+    (bso#14471);
+  + smb.conf.5: Add clarification how configuration changes reflected
+    by Samba; (bso#14538);
+  + daemons: Report status to systemd even when running in foreground;
+    (bso#14552);
+  + DNS Resolver: Support both dnspython before and after 2.0.0;
+    (bso#14553);
+  + s3-vfs_glusterfs: Refuse connection when write-behind xlator is
+    present; (bso#14486);
+  + provision: Add support for BIND 9.16.x; (bso#14487);
+  + ctdb-common: Avoid aliasing errors during code optimization;
+    (bso#14537);
+  + libndr: Avoid assigning duplicate versions to symbols; (bso#14541);
+  + docs: Fix default value of spoolss:architecture; (bso#14522);
+  + winbind: Fix a memleak; (bso#14388);
+  + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531);
+  + docs-xml/manpages: Add warning about write-behind translator for
+    vfs_glusterfs; (bso#14486);
+  + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h.
+  + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530);
+  + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547);
+  + examples:auth: Do not install example plugin; (bso#14550);
+  + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513);
+  + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
+    (bso#14471);
+
+-------------------------------------------------------------------
+Thu Nov  5 12:23:49 UTC 2020 - Noel Power <nopower@suse.com>
+
+- Adjust smbcacls '--propagate-inheritance' feature to align with
+  upstream; (bsc#1178469).
+
+-------------------------------------------------------------------
+Tue Oct  6 16:52:00 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
+
+- Update to samba 4.13.1
+  + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
+    easily crafted records; (bsc#1177613); (bso#14472);
+  + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
+    (bso#14436);
+  + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
+    (bsc#1173902); (bso#14434);
+- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
+  /var/run/samba; (bsc#1177355);
+
+-------------------------------------------------------------------
+Mon Oct  5 12:44:53 UTC 2020 - David Disseldorp <ddiss@suse.com>
+
+- Fix vfs_ceph query_directory regression; (bso#14519)
+- Drop liburing-devel for SLE15-SP2; (bsc#1177245)
+
+-------------------------------------------------------------------
+Thu Sep 24 16:01:26 UTC 2020 - David Disseldorp <ddiss@suse.com>
+
+- Register CTDB recovery lock holder with ceph-mgr
+- Add liburing-devel dependency
+
 -------------------------------------------------------------------
 Tue Sep 22 16:20:33 UTC 2020 - David Disseldorp <ddiss@suse.com>
 

samba.spec

@@ -155,6 +155,12 @@ BuildRequires:  libgnutls-devel >= 3.2.0
 BuildRequires:  libgnutls-devel >= 3.5.6
 BuildRequires:  libtasn1-devel >= 3.8
 %endif
+%if 0%{?sle_version} > 150200 || 0%{?suse_version} > 1500
+# liburing not yet available for all Factory architectures
+%ifnarch ppc armv6l armv7l
+BuildRequires:  liburing-devel
+%endif
+%endif
 
 %define libsmbclient_name libsmbclient0
 %define libnetapi_name libnetapi0
@@ -164,7 +170,7 @@ BuildRequires:  libtasn1-devel >= 3.8
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-Version:        4.13.0+git.138.ff2d5480c67
+Version:        4.13.2+git.176.0a5e55b510c
 Release:        0
 Url:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}
@@ -1360,6 +1366,12 @@ getent group ntadmin >/dev/null || groupadd -g 71 -o -r ntadmin
 %endif
 
 %post
+if testparm -s  2>&1 | grep "server schannel ="  | grep -E "Auto|No"
+then
+    echo "CVE-2020-1472(ZeroLogon):"
+    echo "Please configure 'server schannel = yes'"
+    echo "See https://bugzilla.samba.org/show_bug.cgi?id=14497"
+fi
 %if 0%{?suse_version} > 1220
 
 # bsc#1088574; bsc#1071090; bsc#1065551