Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2018-10-04 18:59:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "samba" Thu Oct 4 18:59:34 2018 rev:240 rq:638223 version:4.9.1+git.46.ff87d06bace Changes: -------- --- /work/SRC/openSUSE:Factory/samba/samba.changes 2018-09-04 22:48:33.627435901 +0200 +++ /work/SRC/openSUSE:Factory/.samba.new/samba.changes 2018-10-04 18:59:42.363315712 +0200 @@ -1,0 +2,63 @@ +Mon Sep 24 09:43:08 UTC 2018 - Samuel Cabrero <scabr...@suse.de> + +- Update to samba-4.9.1 + + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; + (bso#13597); + + CTDB recovery lock has some race conditions; (bso#13617); + + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610); + +------------------------------------------------------------------- +Thu Sep 13 19:19:34 UTC 2018 - dmul...@suse.com + +- Tumbleweed doesn't define the sle_version macro, so we must + include a check for suse_version also. Otherwise python3 is + disabled on Tumbleweed. + +------------------------------------------------------------------- +Thu Sep 13 13:28:06 UTC 2018 - Samuel Cabrero <scabr...@suse.de> + +- Update to samba-4.9.0 + + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if + needed; (bso#13605); + + wafsamba: Fix 'make -j<jobs>'; (bso#13606); + +------------------------------------------------------------------- +Mon Sep 10 20:46:20 UTC 2018 - dmul...@suse.com + +- Update to samba-4.9.0rc5 + + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only + returns absolute pathnames; (bso#13565); + + s3: util: Do not take over stderr when there is no log file; (bso#13578); + + Durable Reconnect fails because cookie.allow_reconnect is not + set; (bso#13549); + + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + + vfs_fruit: Don't unlink the main file; (bso#13441); + + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + + Fix Samba GPO issue when Trust is enabled; (bso#11517); + + samba-tool: Add "virtualKerberosSalt" attribute to + 'user getpassword/syncpasswords'; (bso#13539); + + Fix CTDB configuration issues; (bso#13589); + + ctdbd logs an error until it can successfully connect to + eventd; (bso#13592); + +------------------------------------------------------------------- +Wed Aug 29 15:49:29 UTC 2018 - dmul...@suse.com + +- Update to samba-4.9.0rc4 + + s3: smbd: Ensure get_real_filename() copes with empty + pathnames; (bso#13585); + + samba domain backup online/rename commands force user to specify + password on CLI; (bso#13566); + + wafsamba/samba_abi: Always hide ABI symbols which must be + local; (bso#13579); + + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + + Fix memory and resource leaks; (bso#13567); + + python: Fix print in dns_invalid.py; (bso#13580); + + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + + Fix CTDB configuration issues; (bso#13589); + + s3: vfs: time_audit: fix handling of token_blob in + smb_time_audit_offload_read_recv(); (bso#13568); + +------------------------------------------------------------------- @@ -5,0 +69,53 @@ + +------------------------------------------------------------------- +Tue Aug 21 13:39:49 UTC 2018 - dmul...@suse.com + +- Update to samba-4.9.0rc3+git.22.3fff23ae36e + + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against + returns from malicious servers; (bso#13453); + + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query + with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when + not servicePrincipalName is set on a user; (bso#13552); + + CVE-2018-10919: acl_read: Fix unauthorized attribute access via + searches; (bso#13434); + + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it + is disabled via "ntlm auth"; (bso#13360); + + s3-tldap: do not install test_tldap; (bso#13529); + + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in + ltdb_index_dn_attr(); (bso#13374); + + ctdb-eventd: Fix CID 1438155; (bso#13554); + + Fix CIDs 1438243, (Unchecked return value) 1438244 + (Unsigned compared against 0), 1438245 (Dereference before null check) and + 1438246 (Unchecked return value); (bso#13553); + + ctdb: Fix a cut&paste error; (bso#13554); + + systemd: Only start smb when network interfaces are up; (bso#13559); + + Fix quotas don't work with SMB2; (bso#13553); + + s3/smbd: Ensure quota code is only called when quota support + detected; (bso#13563); + + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562); + +------------------------------------------------------------------- +Mon Aug 20 15:03:01 MDT 2018 - dmul...@suse.com + +- Update to samba-4.9.0rc2+git.21.a1069afb007 + + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); + (bso#13535); + + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + + Fix portability issues on freebsd; (bso#13520); + + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + + samba-tool domain trust: Fix trust compatibility to Windows + Server 1709 and FreeIPA; (bso#13308); + + Fix portability issues on freebsd; (bso#13520); + + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT + option; (bso#13546); + + ctdb-doc: Provide an example script for migrating old + configuration; (bso#13550); + + ctdb-event: Implement event tool "script list" command; (bso#13551); Old: ---- samba-4.8.4+git.37.a7a861d7982.tar.bz2 vendor-files-git.9335cd1.tar.bz2 New: ---- samba-4.9.1+git.46.ff87d06bace.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ samba.spec ++++++ ++++ 890 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/samba/samba.spec ++++ and /work/SRC/openSUSE:Factory/.samba.new/samba.spec ++++++ _service ++++++ --- /var/tmp/diff_new_pack.aZkPYY/_old 2018-10-04 18:59:43.611314408 +0200 +++ /var/tmp/diff_new_pack.aZkPYY/_new 2018-10-04 18:59:43.611314408 +0200 @@ -1,31 +1,37 @@ <services> - <service name="tar_scm" mode="disabled"> - <param name="url">https://gitlab.suse.de/samba/suse-samba.git/</param> - <param name="scm">git</param> - <param name="revision">factory-4-8-stable</param> - <param name="versionformat">@PARENT_TAG@+git.@TAG_OFFSET@.%h</param> - <param name="versionrewrite-pattern">samba(.*)</param> - <param name="versionrewrite-replacement">\1</param> - <param name="filename">samba</param> - <param name="exclude">.git</param> - </service> + <service name="tar_scm" mode="disabled"> + <param name="url">https://gitlab.suse.de/samba/suse-samba.git/</param> + <param name="scm">git</param> + <param name="revision">factory-4-9-stable</param> + <param name="versionformat">@PARENT_TAG@+git.@TAG_OFFSET@.%h</param> + <param name="versionrewrite-pattern">samba(.*)</param> + <param name="versionrewrite-replacement">\1</param> + <param name="filename">samba</param> + <param name="exclude">.git</param> + </service> - <service name="tar_scm" mode="disabled"> - <param name="url">https://gitlab.suse.de/samba/vendor.git/</param> - <param name="scm">git</param> - <param name="revision">master</param> - <param name="versionformat">git.%h</param> - <param name="subdir">vendor-files</param> - <param name="filename">vendor-files</param> - </service> + <service name="extract_file" mode="disabled"> + <param name="archive">samba*.tar</param> + <param name="files">samba-*/packaging/SuSE/samba.changes</param> + <param name="files">samba-*/packaging/SuSE/baselibs.conf</param> + <param name="files">samba-*/packaging/SuSE/samba-client-rpmlintrc</param> + <param name="files">samba-*/packaging/SuSE/samba.spec</param> + </service> - <service name="set_version" mode="disabled"> - <param name="basename">samba</param> - <param name="file">samba.spec</param> - </service> + <service name="set_version" mode="disabled"> + <param name="basename">samba</param> + <param name="regex">^samba-([^/]+)</param> + <param name="file">samba.spec</param> + </service> - <service name="recompress" mode="disabled"> - <param name="file">*.tar</param> - <param name="compression">bz2</param> - </service> + <service name="set_version" mode="disabled"> + <param name="basename">samba</param> + <param name="regex">^samba-([^/]+)</param> + <param name="file">samba.changes</param> + </service> + + <service name="recompress" mode="disabled"> + <param name="file">*.tar</param> + <param name="compression">bz2</param> + </service> </services> ++++++ samba-4.8.4+git.37.a7a861d7982.tar.bz2 -> samba-4.9.1+git.46.ff87d06bace.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/samba/samba-4.8.4+git.37.a7a861d7982.tar.bz2 /work/SRC/openSUSE:Factory/.samba.new/samba-4.9.1+git.46.ff87d06bace.tar.bz2 differ: char 11, line 1