Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2026-08-01 18:27:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "samba" Sat Aug 1 18:27:08 2026 rev:332 rq:1368219 version:4.24.5+git.481.dba78dbdea Changes: -------- --- /work/SRC/openSUSE:Factory/samba/samba.changes 2026-06-03 20:20:58.305577553 +0200 +++ /work/SRC/openSUSE:Factory/.samba.new.16738/samba.changes 2026-08-01 18:27:16.879609684 +0200 @@ -1,0 +2,38 @@ +Tue Jul 28 10:30:49 UTC 2026 - Noel Power <[email protected]> + +- Update to 4.24.5 + * CVE-2026-6949: TSIG packet with crafted name compression can + crash internal DNS server; (bso#16083);(bsc#1271672). + * CVE-2026-58224: CTDB: heap OOB read via unchecked packet + length fields;(bso#16085);(bsc#1271673). + * CVE-2026-58216: kpasswd service: 6-byte heap OOB read in + packet parser;(bso#16087);(bsc#1271674). + * CVE-2026-58218: DNS TKEY negotiation stores unauthenticated + GSS contexts in a fixed FIFO before authentication + completes;(bso#16115);(bsc#1271675). + * CVE-2026-58221: authenticated LDAP access to internal LDB + special DNs permits domain takeover;(bso#16147);(bsc#1271676). + * CVE-2026-58222: LDAP Compare filter injection and + trusted-request confusion disclose protected attributes; + (bso#16148);(bsc#1271677). + +------------------------------------------------------------------- +Wed Jul 1 08:33:13 UTC 2026 - Noel Power <[email protected]> + +- Update to 4.24.4 + * Use-after-free in handling acls with claims and conditions; + (bso#16095). + * Compilers may ignore overflow checks - Fix tautological- + compare warnings; (bso#16092). + * restrict anonymous = 2 breaks RODC functionality; + (bso#14638). + * warning: assignment discards 'const' qualifier from pointer + target type [-Wdiscarded-qualifiers]; (bso#16006). + * Require NTLMv2 session security on Windows makes trusts to + Samba unusable; (bso#16067). + * winbindd stuck in init_dc_connection_rpc() returning + NT_STATUS_TRUSTED_DOMAIN_FAILURE; (bso#16151). + * domain\user not split when provided as username in + smbc_set_credentials_with_fallback(); (bso#16149). + +------------------------------------------------------------------- Old: ---- samba-4.24.3+git.475.629de6765b9.tar.bz2 New: ---- samba-4.24.5+git.481.dba78dbdea.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ samba.spec ++++++ --- /var/tmp/diff_new_pack.tEm7Yf/_old 2026-08-01 18:27:19.171687992 +0200 +++ /var/tmp/diff_new_pack.tEm7Yf/_new 2026-08-01 18:27:19.183688402 +0200 @@ -169,7 +169,7 @@ %endif BuildRequires: sysuser-tools -Version: 4.24.3+git.475.629de6765b9 +Version: 4.24.5+git.481.dba78dbdea Release: 0 URL: https://www.samba.org/ Obsoletes: samba-32bit < %{version} ++++++ samba-4.24.3+git.475.629de6765b9.tar.bz2 -> samba-4.24.5+git.481.dba78dbdea.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/samba/samba-4.24.3+git.475.629de6765b9.tar.bz2 /work/SRC/openSUSE:Factory/.samba.new.16738/samba-4.24.5+git.481.dba78dbdea.tar.bz2 differ: char 11, line 1
