commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2024-08-22 18:10:33
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.2698 (New)
Package is "samba"
Thu Aug 22 18:10:33 2024 rev:310 rq:1195149 version:4.20.4+git.356.d4a5fa2a818
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2024-08-01
22:04:01.579469176 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.2698/samba.changes2024-08-22
18:10:44.651357556 +0200
@@ -1,0 +2,36 @@
+Wed Aug 7 09:47:14 UTC 2024 - Noel Power
+
+- Fix a crash when joining offline and 'kerberos method' includes
+ keytab; (bsc#1228732).
+
+---
+Tue Aug 6 10:51:13 UTC 2024 - Noel Power
+
+- Update to 4.20.4
+ * --version-* options are still not ergonomic, and they reject
+tilde characters; (bso#15673).
+
+- Update to 4.20.3
+ * Running samba-bgqd a a standalone systemd service does not
+work; (bso#15683).
+ * When claims enabled with heimdal kerberos, unable to log on
+to a Windows computer when user account need to change their
+own password; (bso#15655).
+ * Invalid client warning about command line passwords;
+(bso#15671).
+ * Version string is truncated in manpages; (bso#15672).
+ * cmdline_burn does not always burn secrets; (bso#15674).
+ * Samba does not parse SDDL found in defaultSecurityDescriptor
+in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
+ * The images don\'t build after the git security release and
+CentOS 8 Stream is EOL; (bso#15660).
+ * Fix clock skew error message and memory cache clock skew
+recovery; (bso#15676).
+ * Heimdal ignores _gsskrb5_decapsulate errors in
+init_sec_context/repl_mutual; (bso#15603).
+ * s4:ldap_server: does not support tls channel bindings for
+sasl binds; (bso#15621).
+ * CTDB socket output queues may suffer unbounded delays under
+some special conditions; (bso#15678).
+
+---
Old:
samba-4.20.2+git.350.4cfcde9cdb.tar.bz2
New:
samba-4.20.4+git.356.d4a5fa2a818.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.p2qYtO/_old 2024-08-22 18:10:45.723402079 +0200
+++ /var/tmp/diff_new_pack.p2qYtO/_new 2024-08-22 18:10:45.727402245 +0200
@@ -160,7 +160,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.20.2+git.350.4cfcde9cdb
+Version:4.20.4+git.356.d4a5fa2a818
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.20.2+git.350.4cfcde9cdb.tar.bz2 ->
samba-4.20.4+git.356.d4a5fa2a818.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.20.2+git.350.4cfcde9cdb.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.2698/samba-4.20.4+git.356.d4a5fa2a818.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2024-08-01 22:03:45
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.7232 (New)
Package is "samba"
Thu Aug 1 22:03:45 2024 rev:309 rq:1190590 version:4.20.2+git.350.4cfcde9cdb
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2024-07-09
20:03:51.644399548 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.7232/samba.changes2024-08-01
22:04:01.579469176 +0200
@@ -1,0 +2,6 @@
+Wed Jul 17 11:18:52 UTC 2024 - Samuel Cabrero
+
+- Update samba-tool package to require python3-Markdown also in
+ the Heimdal ADDC build.
+
+---
Old:
samba-4.20.2+git.348.4fb6af61307.tar.bz2
New:
samba-4.20.2+git.350.4cfcde9cdb.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.3GmST3/_old 2024-08-01 22:04:03.147533849 +0200
+++ /var/tmp/diff_new_pack.3GmST3/_new 2024-08-01 22:04:03.147533849 +0200
@@ -160,7 +160,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.20.2+git.348.4fb6af61307
+Version:4.20.2+git.350.4cfcde9cdb
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -548,7 +548,7 @@
Requires: samba = %{version}
Requires: samba-ldb-ldap = %{version}
Requires: samba-python3 = %{version}
-%if %{with_mit_dc}
+%if %{with_dc}
Requires: python3-Markdown
%endif
++ samba-4.20.2+git.348.4fb6af61307.tar.bz2 ->
samba-4.20.2+git.350.4cfcde9cdb.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.20.2+git.348.4fb6af61307.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.7232/samba-4.20.2+git.350.4cfcde9cdb.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2024-07-09 20:03:23
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.2080 (New)
Package is "samba"
Tue Jul 9 20:03:23 2024 rev:308 rq:1186190 version:4.20.2+git.348.4fb6af61307
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2024-07-04
16:23:30.224013259 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.2080/samba.changes2024-07-09
20:03:51.644399548 +0200
@@ -1,0 +2,12 @@
+Thu Jul 4 10:34:20 UTC 2024 - Samuel Cabrero
+
+- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
+ (bso#15643);
+
+---
+Thu Jul 4 10:30:10 UTC 2024 - pgaj...@suse.com
+
+- remove dependency on /usr/bin/python3 using
+ %python3_fix_shebang macro, [bsc#1212476]
+
+---
Old:
samba-4.20.2+git.345.1e3d47bbda6.tar.bz2
New:
samba-4.20.2+git.348.4fb6af61307.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.avRfvH/_old 2024-07-09 20:03:52.932446739 +0200
+++ /var/tmp/diff_new_pack.avRfvH/_new 2024-07-09 20:03:52.936446885 +0200
@@ -160,7 +160,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.20.2+git.345.1e3d47bbda6
+Version:4.20.2+git.348.4fb6af61307
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -930,6 +930,7 @@
install -m 0644 examples/LDAP/samba-nds.schema
%{buildroot}/%{_datadir}/samba/LDAP/samba-nds.schema
# Hardlink duplicate files
%fdupes %{buildroot}
+%python3_fix_shebang
%pre -f samba.pre
%service_add_pre nmb.service smb.service samba-bgqd.service
++ samba-4.20.2+git.345.1e3d47bbda6.tar.bz2 ->
samba-4.20.2+git.348.4fb6af61307.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.20.2+git.345.1e3d47bbda6.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.2080/samba-4.20.2+git.348.4fb6af61307.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2024-07-04 16:22:39
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.2080 (New)
Package is "samba"
Thu Jul 4 16:22:39 2024 rev:307 rq:1185190 version:4.20.2+git.345.1e3d47bbda6
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2024-06-06
12:30:45.532403927 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.2080/samba.changes2024-07-04
16:23:30.224013259 +0200
@@ -1,0 +2,47 @@
+Wed Jun 19 15:02:44 UTC 2024 - Noel Power
+
+- Update to 4.20.2
+ * vfs_widelinks with DFS shares breaks case insensitivity;
+(bso#15662); (bsc#1213607).
+ * Samba build is not reproducible; (bso#13213).
+ * ldb qsort might r/w out of bounds with an intransitive
+compare function; (bso#15569).
+ * Many qsort() comparison functions are non-transitive, which
+can lead to out-of-bounds access in some circumstances;
+(bso#15625).
+ * Need to change gitlab-ci.yml tags in all branches to avoid CI
+bill; (bso#15638).
+ * We have added new options --vendor-name and --vendor-patch-
+revision arguments to ./configure to allow distributions and
+packagers to put their name in the Samba version string so
+that when debugging Samba the source of the binary is
+obvious; (bso#15654).
+ * CTDB RADOS mutex helper misses namespace support;
+(bso#15665).
+ * Dynamic DNS updates with the internal DNS are not working;
+(bso#13019).
+ * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
+SysvolReady=0; (bso#14981).
+ * Anonymous smb3 signing/encryption should be allowed (similar
+to Windows Server 2022); (bso#15412).
+ * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
+(bso#15573).
+ * s4:nbt_server: does not provide unexpected handling, so
+winbindd can't use nmb requests instead cldap; (bso#15620).
+ * winbindd, net ads join and other things don't work on an ipv6
+only host; (bso#15642).
+ * Segmentation fault when deleting files in vfs_recycle;
+(bso#15659).
+ * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
+ * "client use kerberos" and --use-kerberos is ignored for the
+machine account; (bso#15666).
+ * Regression DFS not working with widelinks = true;
+(bso#15435).
+ * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
+(bso#15633).
+ * idmap_ad creates an incorrect local krb5.conf in case of
+trusted domain lookups; (bso#15653).
+ * The images don't build after the git security release and
+CentOS 8 Stream is EOL; (bso#15660).
+
+---
Old:
samba-4.20.1+git.339.cf6e153bb2.tar.bz2
New:
samba-4.20.2+git.345.1e3d47bbda6.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.HxYGJl/_old 2024-07-04 16:23:31.196048758 +0200
+++ /var/tmp/diff_new_pack.HxYGJl/_new 2024-07-04 16:23:31.196048758 +0200
@@ -41,7 +41,7 @@
%define talloc_version 2.4.2
%define tevent_version 0.16.1
%define tdb_version1.4.10
-%define ldb_version2.9.0
+%define ldb_version2.9.1
# This table represents the possible combinations of build macros.
# They are defined only if not already defined in the build service
@@ -160,7 +160,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.20.1+git.339.cf6e153bb2
+Version:4.20.2+git.345.1e3d47bbda6
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.20.1+git.339.cf6e153bb2.tar.bz2 ->
samba-4.20.2+git.345.1e3d47bbda6.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.20.1+git.339.cf6e153bb2.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.2080/samba-4.20.2+git.345.1e3d47bbda6.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2024-06-06 12:30:37
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.24587 (New)
Package is "samba"
Thu Jun 6 12:30:37 2024 rev:306 rq:1178709 version:4.20.1+git.339.cf6e153bb2
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2024-05-30
15:32:45.500902550 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.24587/samba.changes 2024-06-06
12:30:45.532403927 +0200
@@ -1,0 +2,5 @@
+Mon Jun 3 07:09:54 UTC 2024 - Samuel Cabrero
+
+- Fix non deterministic builds; (bsc#1225754); (bso#13213);
+
+---
Old:
samba-4.20.1+git.335.0a46cdafe2.tar.bz2
New:
samba-4.20.1+git.339.cf6e153bb2.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.9azGRW/_old 2024-06-06 12:30:47.116461780 +0200
+++ /var/tmp/diff_new_pack.9azGRW/_new 2024-06-06 12:30:47.120461926 +0200
@@ -38,10 +38,10 @@
%define build_ceph 1
%endif
-%define talloc_version 2.4.1
-%define tevent_version 0.15.0
-%define tdb_version1.4.9
-%define ldb_version2.8.0
+%define talloc_version 2.4.2
+%define tevent_version 0.16.1
+%define tdb_version1.4.10
+%define ldb_version2.9.0
# This table represents the possible combinations of build macros.
# They are defined only if not already defined in the build service
@@ -160,7 +160,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.20.1+git.335.0a46cdafe2
+Version:4.20.1+git.339.cf6e153bb2
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.20.1+git.335.0a46cdafe2.tar.bz2 ->
samba-4.20.1+git.339.cf6e153bb2.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.20.1+git.335.0a46cdafe2.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.24587/samba-4.20.1+git.339.cf6e153bb2.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2024-05-30 15:32:30
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.24587 (New)
Package is "samba"
Thu May 30 15:32:30 2024 rev:305 rq:1177473 version:4.20.1+git.335.0a46cdafe2
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2024-02-23
16:44:40.717921663 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.24587/samba.changes 2024-05-30
15:32:45.500902550 +0200
@@ -1,0 +2,47 @@
+Thu May 16 10:47:57 UTC 2024 - Samuel Cabrero
+
+- Update to 4.20.1
+ * dns update debug message is too noisy; (bso#15630);
+ * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
+ * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
+ * Smbcacls incorrectly propagates inheritance with Inherit-Only flag;
(bso#15636);
+ * http library doesn't support 'chunked transfer encoding'; (bso#15611);
+ * Provide a systemd service file for the background queue daemon;
(bso#15600);
+
+- Update to 4.20.0
+ New features:
+* samba-tool user getpassword / syncpasswords ;rounds= change
+* Group Managed service account client-side features
+* New Windows Search Protocol Client
+* Allow 'smbcacls' to save/restore DACLs to file
+* Samba-tool extensions for AD Claims, Authentication Policies and Silos
+* AD DC support for Authentication Silos and Authentication Policies
+* Conditional ACEs and Resource Attribute ACEs
+* Service Witness Protocol [MS-SWN]
+ Removed features:
+* Get locally logged on users from utmp
+ Fixed bugs:
+* Avoid null-dereference with bad claims; (bso#15606);
+* ndr_pull_security_ace can leave resource attribute ACE coda
+ claim struct undefined; (bso#15613);
+* fd_handle_destructor() panics within an smbd_smb2_close() if
+ vfs_stat_fsp() fails in fd_close(); (bso#15527);
+* set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
+ openat() EACCES; (bso#15583);
+* libgpo: Segfault in python bindings; (bso#15599);
+* Samba AD is missing some authentication policy tests;
+ (bso#15607);
+* samba-gpupdate: Correctly implement site support; (bso#15588);
+* Remove unsupported "Final" keyword missing from Python 3.6;
+ (bso#15575);
+* Additional witness backports for 4.20.0; (bso#15577);
+* Error output with wspsearch; (bso#15579);
+* Packet marshalling push support missing for
+ CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
+ CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
+* Performance regression for NDR parsing of security
+ descriptors; (bso#15574);
+* Build and install man page for wspsearch client utility;
+ (bso#15565);
+
+---
Old:
samba-4.19.5+git.342.57620c4f7e.tar.bz2
New:
samba-4.20.1+git.335.0a46cdafe2.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.nMafEM/_old 2024-05-30 15:32:46.300931764 +0200
+++ /var/tmp/diff_new_pack.nMafEM/_new 2024-05-30 15:32:46.304931910 +0200
@@ -86,6 +86,8 @@
BuildRequires: cracklib-devel
BuildRequires: gdbm-devel
BuildRequires: keyutils-devel
+BuildRequires: flex
+BuildRequires: bison
BuildRequires: libnscd-devel
BuildRequires: libopenssl-devel
BuildRequires: zlib-devel
@@ -158,7 +160,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.19.5+git.342.57620c4f7e
+Version:4.20.1+git.335.0a46cdafe2
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -930,7 +932,7 @@
%fdupes %{buildroot}
%pre -f samba.pre
-%service_add_pre nmb.service smb.service
+%service_add_pre nmb.service smb.service samba-bgqd.service
%if 0%{?suse_version} > 1500
# Prepare for migration to /usr/etc; save any old .rpmsave
for i in logrotate.d/samba pam.d/samba; do
@@ -952,7 +954,7 @@
%endif
%preun
-%service_del_preun nmb.service smb.service
+%service_del_preun nmb.service smb.service samba-bgqd.service
%if %{with_dc}
%preun ad-dc
@@ -979,12 +981,12 @@
sed -i 's/-F *//g' %{_sysconfdir}/sysconfig/samba
fi
-%service_add_post nmb.service smb.service
+%service_add_post nmb.service smb.service samba-bgqd.service
%tmpfiles_create samba.conf
%fillup_only
%postun
-%service_del_postun nmb.service smb.service
+%service_del_postun nmb.service smb.service samba-bgqd.service
%post client
/sbin/ldconfig
@@ -1120,6 +1122,7 @@
%defattr(-,root,root)
%{_unitdir}/nmb.service
%{_unitdir}/smb.service
+%{_unitdir}/samba-bgqd.service
%ghost %{CONFIGDIR}/smbpasswd
%config(noreplace) %{CONFIGDIR}/smb
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2024-01-12 23:44:31
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.21961 (New)
Package is "samba"
Fri Jan 12 23:44:31 2024 rev:303 rq:1138117 version:4.19.4+git.339.acf1ccaa020
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-11-02
20:20:11.909028680 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.21961/samba.changes 2024-01-12
23:44:49.773286364 +0100
@@ -1,0 +2,59 @@
+Fri Jan 10 12:01:49 UTC 2024 - Noel Power
+
+- Remove -x from bash shebang update-apparmor-samba-profile;
+ (bsc#1218431).
+
+---
+Tue Jan 9 09:42:53 UTC 2024 - Noel Power
+
+- Update to 4.19.4
+ * net changesecretpw cannot set the machine account password if
+secrets.tdb is empty; (bso#13577).
+ * For generating doc, take, if defined, env XML_CATALOG_FILES;
+(bso#15540).
+ * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
+ * vfs_linux_xfs is incorrectly named; (bso#15542).
+ * systemd stumbled over copyright-message at smbd startup;
+(bso#15377).
+ * Following intermediate abolute share-local symlinks is
+broken; (bso#15505).
+ * ctdb RELEASE_IP causes a crash in release_ip if a connection
+to a non-public address disconnects first; (bso#15523).
+ * shadow_copy2 broken when current fileset's directories are
+removed; (bso#15544).
+ * smbd does not detect ctdb public ipv6 addresses for
+multichannel exclusion; (bso#15534).
+ * 'force user = localunixuser' doesn't work if 'allow trusted
+domains = no' is set; (bso#15469).
+ * smbget debug logging doesn't work; (bso#15525).
+ * smget: username in the smburl and interactive password entry
+doesn't work; (bso#15532).
+ * smbget auth function doesn't set values for password prompt
+correctly; (bso#15538).
+ * Unable to copy and write files from clients to Ceph cluster
+via SMB Linux gateway with Ceph VFS module; (bso#15440).
+ * Multichannel refresh network information; (bso#15547).
+
+---
+Mon Nov 27 12:43:02 UTC 2023 - Noel Power
+
+- Update to 4.19.3
+ * sid_strings test broken by unix epoch > 17;
+(bso#15520).
+ * smbd crashes if asked to return full information on close of
+a stream handle with delete on close disposition set;
+(bso#15487).
+ * smbd: fix close order of base_fsp and stream_fsp in
+smb_fname_fsp_destructor(); (bso#15521).
+ * Improve logging for failover scenarios; (bso#15499).
+ * Files without "read attributes" NFS4 ACL permission are not
+listed in directories; (bso#15093).
+ * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
+in AD LDAP to normal users; (bso#13595).
+ * Kerberos TGS-REQ with User2User does not work for normal
+accounts; (bso#15492).
+ * vfs_gpfs stat calls fail due to file system permissions;
+(bso#15507).
+ * Samba doesn't build with Python 3.12; (bso#15513).
+
+---
Old:
samba-4.19.2+git.324.fa0b54b91b.tar.bz2
New:
samba-4.19.4+git.339.acf1ccaa020.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.vsY2LM/_old 2024-01-12 23:44:50.949329408 +0100
+++ /var/tmp/diff_new_pack.vsY2LM/_new 2024-01-12 23:44:50.949329408 +0100
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.19.2+git.324.fa0b54b91b
+Version:4.19.4+git.339.acf1ccaa020
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.19.2+git.324.fa0b54b91b.tar.bz2 ->
samba-4.19.4+git.339.acf1ccaa020.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.19.2+git.324.fa0b54b91b.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.21961/samba-4.19.4+git.339.acf1ccaa020.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-11-02 20:20:08
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.17445 (New)
Package is "samba"
Thu Nov 2 20:20:08 2023 rev:302 rq:1121661 version:4.19.2+git.324.fa0b54b91b
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-10-19
22:49:49.115870577 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.17445/samba.changes 2023-11-02
20:20:11.909028680 +0100
@@ -1,0 +2,6 @@
+Mon Oct 23 18:59:15 UTC 2023 - David Mulder
+
+- packaging: samba-tool domain provision requires python3-Markdown;
+ (bsc#1216519).
+
+---
Old:
samba-4.19.2+git.322.7e9201cef5.tar.bz2
New:
samba-4.19.2+git.324.fa0b54b91b.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.b3GTYW/_old 2023-11-02 20:20:12.765060179 +0100
+++ /var/tmp/diff_new_pack.b3GTYW/_new 2023-11-02 20:20:12.765060179 +0100
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.19.2+git.322.7e9201cef5
+Version:4.19.2+git.324.fa0b54b91b
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -546,6 +546,9 @@
Requires: samba = %{version}
Requires: samba-ldb-ldap = %{version}
Requires: samba-python3 = %{version}
+%if %{with_mit_dc}
+Requires: python3-Markdown
+%endif
%description -n samba-tool
The package contains samba-tool, the main tool for Samba Administration.
++ samba-4.19.2+git.322.7e9201cef5.tar.bz2 ->
samba-4.19.2+git.324.fa0b54b91b.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.19.2+git.322.7e9201cef5.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.17445/samba-4.19.2+git.324.fa0b54b91b.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-10-19 22:47:24
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1945 (New)
Package is "samba"
Thu Oct 19 22:47:24 2023 rev:301 rq:1118612 version:4.19.2+git.322.7e9201cef5
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-10-13
23:13:49.397170306 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1945/samba.changes2023-10-19
22:49:49.115870577 +0200
@@ -1,0 +2,32 @@
+Mon Oct 16 16:04:22 UTC 2023 - Noel Power
+
+- Update to 4.19.2
+ * Use-after-free in aio_del_req_from_fsp during smbd shutdown
+after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
+ * clidfs.c do_connect() missing a "return" after a
+cli_shutdown() call; (bso#15426).
+ * macOS mdfind returns only 50 results; (bso#15463).
+ * GETREALFILENAME_CACHE can modify incoming new filename with
+previous cache entry value; (bso#15481).
+ * libnss_winbind causes memory corruption since samba-4.18,
+impacts sendmail, zabbix, potentially more; (bso#15464).
+ * ctdbd: setproctitle not initialized messages flooding logs;
+(bso#15479).
+ * CVE-2023-5568 Heap buffer overflow with freshness tokens in
+the Heimdal KDC in Samba 4.19; (bso#15491).
+ * The heimdal KDC doesn't detect s4u2self correctly when fast
+is in use; (bso#15477).
+
+---
+Thu Oct 12 11:33:44 UTC 2023 - Noel Power
+
+- packaging: Remove /etc/slp.reg.d from samba spec file;
+ (bsc#1216160)
+
+---
+Thu Oct 12 11:04:26 UTC 2023 - Noel Power
+
+- use systemd-logind rather than utmp for y2038 safety;
+ (bsc#1216159).
+
+---
Old:
samba-4.19.1+git.312.c912b3d2ef6.tar.bz2
New:
samba-4.19.2+git.322.7e9201cef5.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.tOilzu/_old 2023-10-19 22:49:49.991902350 +0200
+++ /var/tmp/diff_new_pack.tOilzu/_new 2023-10-19 22:49:49.991902350 +0200
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.19.1+git.312.c912b3d2ef6
+Version:4.19.2+git.322.7e9201cef5
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -721,7 +721,6 @@
%{buildroot}/%{_sysconfdir}/{xinetd.d,logrotate.d} \
%{buildroot}/%{_sysconfdir}/openldap/schema \
%{buildroot}/%{_sysconfdir}/security \
- %{buildroot}/%{_sysconfdir}/slp.reg.d \
%{buildroot}/%{CONFIGDIR} \
%{buildroot}/%{_unitdir} \
%{buildroot}/%{_lib}/security \
@@ -828,7 +827,6 @@
%{buildroot}/%{_datadir}/samba/
# PDF generator
install -p -m 0755 tools/smbprngenpdf %{buildroot}/%{_bindir}/smbprngenpdf
-install -m 0644 config/samba.reg
%{buildroot}/%{_sysconfdir}/slp.reg.d/samba.reg
install -m 0644 config/samba.pamd-common %{buildroot}/%samba_pamdir/samba
install -m 0644 config/dhcp.conf
%{buildroot}/%{_fillupdir}/samba-client-dhcp.conf
install -m 0644 config/sysconfig.dhcp-samba-client
%{buildroot}/%{_fillupdir}/sysconfig.dhcp-samba-client
@@ -1126,7 +1124,6 @@
%else
%config %samba_pamdir/samba
%endif
-%{_sysconfdir}/slp.reg.d
%dir %{_libdir}/samba
%dir %{_libdir}/samba/vfs
%dir %{_libdir}/samba/ldb
++ samba-4.19.1+git.312.c912b3d2ef6.tar.bz2 ->
samba-4.19.2+git.322.7e9201cef5.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.19.1+git.312.c912b3d2ef6.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1945/samba-4.19.2+git.322.7e9201cef5.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-10-13 23:13:42
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.20540 (New)
Package is "samba"
Fri Oct 13 23:13:42 2023 rev:300 rq:1117041 version:4.19.1+git.312.c912b3d2ef6
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-10-05
20:03:36.887713754 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.20540/samba.changes 2023-10-13
23:13:49.397170306 +0200
@@ -1,0 +2,16 @@
+Tue Oct 10 15:12:38 UTC 2023 - Noel Power
+
+- CVE-2023-4091: samba: Client can truncate file with read-only
+ permissions; (bsc#1215904); (bso#15439).
+- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
+ allows blocking sleep on request; (bso#1215905); (bso#15474).
+- CVE-2023-42670: samba: The procedure number is out of range
+ when starting Active Directory Users and Computers;
+ (bsc#1215906); (bso#15473).
+- CVE-2023-3961: samba: Unsanitized client pipe name passed to
+ local_np_connect(); (bsc#1215907); (bso#15422).
+- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
+ "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
+ (bsc#1215908); (bso#15424).
+
+---
Old:
samba-4.19.0+git.306.19d2e214c58.tar.bz2
New:
samba-4.19.1+git.312.c912b3d2ef6.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.gnordk/_old 2023-10-13 23:13:50.741219056 +0200
+++ /var/tmp/diff_new_pack.gnordk/_new 2023-10-13 23:13:50.745219201 +0200
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.19.0+git.306.19d2e214c58
+Version:4.19.1+git.312.c912b3d2ef6
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -1147,7 +1147,6 @@
%{_libdir}/samba/rpcd_fsrvp
%{_libdir}/samba/rpcd_lsad
%{_libdir}/samba/rpcd_mdssvc
-%{_libdir}/samba/rpcd_rpcecho
%{_libdir}/samba/rpcd_spoolss
%{_libdir}/samba/rpcd_winreg
%{_libdir}/samba/samba-bgqd
++ samba-4.19.0+git.306.19d2e214c58.tar.bz2 ->
samba-4.19.1+git.312.c912b3d2ef6.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.19.0+git.306.19d2e214c58.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.20540/samba-4.19.1+git.312.c912b3d2ef6.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-10-05 20:03:05
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.28202 (New)
Package is "samba"
Thu Oct 5 20:03:05 2023 rev:299 rq:1115654 version:4.19.0+git.306.19d2e214c58
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-09-01
14:18:43.279183725 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.28202/samba.changes 2023-10-05
20:03:36.887713754 +0200
@@ -1,0 +2,38 @@
+Tue Sep 26 08:36:43 UTC 2023 - Noel Power
+
+- Update to 4.19.0
+ * File doesn't show when user doesn't have permission if
+aio_pthread is loaded; (bso#15453).
+ * ctdb_killtcp fails to work with --enable-pcap and libpcap â¥
+1.9.1; (bso#15451).
+ * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can
+log to syslog; (bso#15460).
+ * âsamba-tool domain level raiseâ fails unless given a URL;
+(bso#15458).
+ * reply_sesssetup_and_X() can dereference uninitialized tmp
+pointer; (bso#15420).
+ * missing return in reply_exit_done(); (bso#15430).
+ * TREE_CONNECT without SETUP causes smbd to use uninitialized
+pointer; (bso#15432).
+ * Avoid infinite loop in initial user sync with Azure AD
+Connect when synchronising a large Samba AD domain;
+(bso#15401).
+ * Samba replication logs show (null) DN; (bso#15407).
+ * 2-3min delays at reconnect with
+smb2_validate_sequence_number: bad message_id 2; (bso#15346).
+ * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
+(bso#15446).
+ * CID 1539212 causes real issue when output contains only
+newlines; (bso#15438).
+ * KDC encodes INT64 claims incorrectly; (bso#15452).
+ * mdssvc: Do an early talloc_free() in _mdssvc_open();
+(bso#15449).
+ * Windows client join fails if a second container CN=System
+exists somewhere; (bso#9959).
+ * regression DFS not working with widelinks = true;
+(bso#15435).
+ * Heimdal fails to build on 32-bit FreeBSD; (bso#15443).
+ * samba-tool ntacl get segfault if aio_pthread appended;
+(bso#15441).
+
+---
Old:
samba-4.18.6+git.320.cfda27bacb.tar.bz2
New:
samba-4.19.0+git.306.19d2e214c58.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.icgLXi/_old 2023-10-05 20:03:38.503772137 +0200
+++ /var/tmp/diff_new_pack.icgLXi/_new 2023-10-05 20:03:38.507772282 +0200
@@ -38,10 +38,10 @@
%define build_ceph 1
%endif
-%define talloc_version 2.4.0
-%define tevent_version 0.14.1
-%define tdb_version1.4.8
-%define ldb_version2.7.1
+%define talloc_version 2.4.1
+%define tevent_version 0.15.0
+%define tdb_version1.4.9
+%define ldb_version2.8.0
# This table represents the possible combinations of build macros.
# They are defined only if not already defined in the build service
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.18.6+git.320.cfda27bacb
+Version:4.19.0+git.306.19d2e214c58
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -1188,6 +1188,7 @@
%{_bindir}/pdbedit
%{_bindir}/profiles
%{_bindir}/rpcclient
+%{_bindir}/samba-log-parser
%{_bindir}/sharesec
%{_bindir}/smbcacls
%{_bindir}/smbclient
@@ -1220,6 +1221,7 @@
%{_mandir}/man1/regtree.1.*
%{_mandir}/man1/rpcclient.1.*
%{_mandir}/man1/sharesec.1.*
+%{_mandir}/man1/samba-log-parser.1.*
%{_mandir}/man1/smbcacls.1.*
%{_mandir}/man1/smbcontrol.1.*
%{_mandir}/man1/smbclient.1.*
@@ -1231,7 +1233,6 @@
%{_mandir}/man1/mvxattr.1.*
%{_mandir}/man5/lmhosts.5.*
%{_mandir}/man5/smb.conf.5.*
-%{_mandir}/man5/smbgetrc.5.*
%{_mandir}/man7/samba.7.*
%{_mandir}/man8/cifsdd.8.*
%{_mandir}/man8/eventlogadm.8.*
@@ -1417,6 +1418,9 @@
%{_libdir}/samba/libads-samba4.so
%{_libdir}/samba/libasn1util-samba4.so
%{_libdir}/samba/libauth-samba4.so
+%if %{with_dc}
+%{_libdir}/samba/libauthn-policy-util-samba4.so
+%endif
%{_libdir}/samba/libauthkrb5-samba4.so
%{_libdir}/samba/libcli-cldap-samba4.so
%{_libdir}/samba/libcli-ldap-samba4.so
@@ -1816,8 +1820,12 @@
%{_datadir}/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Classes.txt
%{_datadir}/samba/setup/ad-schema/AD_DS_Attributes__Windows_Server_2012_R2.ldf
%{_datadir}/samba/setup/ad-schema/AD_DS_Attributes__Windows_Server_2016.ldf
+%{_datadir}/samba/setup/ad-schema/AD_DS_Attributes__Windows_Server_v1803.ldf
+%{_datadir}/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf
%{_datadir}/samba/setup/ad-schema/AD_DS_Classes__Windows_Server_2012_R2.ldf
%{_datadir}/samba/setup/ad-schema/AD_DS_Classes__Windows
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-09-01 14:18:41
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1766 (New)
Package is "samba"
Fri Sep 1 14:18:41 2023 rev:298 rq:1108201 version:4.18.6+git.320.cfda27bacb
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-07-25
11:25:48.428580739 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1766/samba.changes2023-09-01
14:18:43.279183725 +0200
@@ -1,0 +2,34 @@
+Mon Aug 21 15:16:35 UTC 2023 - Samuel Cabrero
+
+- Update to 4.18.6
+ * reply_sesssetup_and_X() can dereference uninitialized tmp pointer;
+(bso#15420);
+ * Missing return in reply_exit_done(); (bso#15430);
+ * post-exec password redaction for samba-tool is more reliable for fully
+random passwords as it no longer uses regular expressions containing the
+password value itself; (bso#15289);
+ * Windows client join fails if a second container CN=System exists somewhere;
+(bso#9959);
+ * Spotlight sometimes returns no results on latest macOS; (bso#15342);
+ * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to
+remove the destination; (bso#15417);
+ * Spotlight results return wrong date in result list; (bso#15427);
+ * "net offlinejoin provision" does not work as non-root user; (bso#15414);
+ * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400);
+ * cm_prepare_connection() calls close(fd) for the second time; (bso#15433);
+ * 2-3min delays at reconnect with smb2_validate_sequence_number: bad
+message_id 2; (bso#15346);
+ * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441);
+ * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446);
+ * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559
+mitigation); (bso#15390);
+ * Regression DFS not working with widelinks = true; (bso#15435);
+ * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
+
+---
+Tue Aug 8 15:40:54 UTC 2023 - Samuel Cabrero
+
+- Move libcluster-samba4.so from samba-libs to samba-client-libs;
+ (bsc#1213940);
+
+---
Old:
samba-4.18.5+git.313.c8e274c7852.tar.bz2
New:
samba-4.18.6+git.320.cfda27bacb.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.ZbKTUg/_old 2023-09-01 14:18:45.299255823 +0200
+++ /var/tmp/diff_new_pack.ZbKTUg/_new 2023-09-01 14:18:45.307256108 +0200
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.18.5+git.313.c8e274c7852
+Version:4.18.6+git.320.cfda27bacb
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -604,10 +604,7 @@
%setup -n samba-%{version} -q
# Create and add vendor suffix
if test "%{_project}" != "openSUSE:Factory"; then
- vendor_tag_release=$( grep -m 1 ^Release: %{_sourcedir}/samba.spec | \
- while read tag release; do \
- echo -n "${release:+${release}-}"; \
- done)
+ vendor_tag_release="%{release}"
else
vendor_tag_release=""
fi
@@ -1429,6 +1426,7 @@
%{_libdir}/samba/libcli-spoolss-samba4.so
%{_libdir}/samba/libcliauth-samba4.so
%{_libdir}/samba/libclidns-samba4.so
+%{_libdir}/samba/libcluster-samba4.so
%{_libdir}/samba/libcmdline-contexts-samba4.so
%{_libdir}/samba/libcmdline-samba4.so
%{_libdir}/samba/libcommon-auth-samba4.so
@@ -1506,7 +1504,6 @@
%{_libdir}/samba/libLIBWBCLIENT-OLD-samba4.so
%{_libdir}/samba/libauth4-samba4.so
%{_libdir}/samba/libauth-unix-token-samba4.so
-%{_libdir}/samba/libcluster-samba4.so
%{_libdir}/samba/libdnsserver-common-samba4.so
%{_libdir}/samba/libgpext-samba4.so
%{_libdir}/samba/libposix-eadb-samba4.so
++ samba-4.18.5+git.313.c8e274c7852.tar.bz2 ->
samba-4.18.6+git.320.cfda27bacb.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.18.5+git.313.c8e274c7852.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1766/samba-4.18.6+git.320.cfda27bacb.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-07-25 11:23:46
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1467 (New)
Package is "samba"
Tue Jul 25 11:23:46 2023 rev:297 rq:1099579 version:4.18.5+git.313.c8e274c7852
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-06-11
19:52:33.790176629 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1467/samba.changes2023-07-25
11:25:48.428580739 +0200
@@ -1,0 +2,43 @@
+Wed Jul 19 14:35:34 UTC 2023 - Noel Power
+
+- Update to 4.18.5
+ * CVE-2022-2127: lm_resp_len not checked properly in
+winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
+ * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
+Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
+ * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
+Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
+ * CVE-2023-34968: Spotlight server-side Share Path Disclosure;
+(bso#15388); (bsc#1213171).
+ * CVE-2023-3347: Samba doesn't require SMB2+ signing if
+`server signing = mandatory` is set; (bso#15397); (bsc#1213170).
+ * secure channel faulty since Windows 10/11 update 07/2023;
+(bso#15418); (bsc#1213384).
+
+---
+Thu Jul 6 15:30:58 UTC 2023 - Noel Power
+
+- Update to 4.18.4
+ * Backport --pidl-developer fixes; (bso#15404).
+ * Named crashes on DLZ zone update; (bso#14030).
+ * smbcacls and smbcquotas do not check // before the server;
+(bso#2312).
+ * cli_list loops 100% CPU against pre-lanman2 servers;
+(bso#15382).
+ * smbclient leaks fds with showacls; (bso#15391).
+ * smbd returns NOT_FOUND when creating files on a r/o
+filesystem; (bso#15402).
+ * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry
+and causes test timeouts; (bso#15355).
+ * net ads lookup (with unspecified realm) fails; (bso#15384).
+ * Register Samba processes with GPFS; (bso#15381).
+ * Python tarfile extraction needs change to avoid a warning
+(CVE-2007-4559 mitigation); (bso#15390).
+ * The winbind child segfaults when listing users with `winbind
+scan trusted domains = yes`; (bso#15398).
+ * Remove comments about deprecated 'write cache size';
+(bso#15383).
+ * smbget memory leak if failed to download files recursively;
+(bso#15403).
+
+---
Old:
samba-4.18.3+git.303.c08b73d523c.tar.bz2
New:
samba-4.18.5+git.313.c8e274c7852.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.mbz3MO/_old 2023-07-25 11:25:49.324585964 +0200
+++ /var/tmp/diff_new_pack.mbz3MO/_new 2023-07-25 11:25:49.328585988 +0200
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.18.3+git.303.c08b73d523c
+Version:4.18.5+git.313.c8e274c7852
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.18.3+git.303.c08b73d523c.tar.bz2 ->
samba-4.18.5+git.313.c8e274c7852.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.18.3+git.303.c08b73d523c.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1467/samba-4.18.5+git.313.c8e274c7852.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-06-11 19:52:32
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.15902 (New)
Package is "samba"
Sun Jun 11 19:52:32 2023 rev:296 rq:1091722 version:4.18.3+git.303.c08b73d523c
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-04-01
23:27:16.727425344 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.15902/samba.changes 2023-06-11
19:52:33.790176629 +0200
@@ -1,0 +2,53 @@
+Thu Jun 1 08:48:25 UTC 2023 - Noel Power
+
+- Update to 4.18.3
+ * Symlinks to files can have random DOS mode information in a
+directory listing; (bso#15375).
+ * vfs_fruit might cause a failing open for delete; (bso#15378).
+ * winbind recurses into itself via rpcd_lsad; (bso#15361).
+ * wbinfo -u fails on ad dc with >1000 users; (bso#15366).
+ * DS ACEs might be inherited to unrelated object classes;
+(bso#15338).
+ * a lot of messages: get_static_share_mode_data:
+get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND;
+(bso#15362).
+ * aes256 smb3 encryption algorithms are not allowed in
+smb3_sid_parse(); (bso#15374).
+ * Setting veto files = /.*/ break listing directories;
+(bso#15360).
+ * "samba-tool domain provision" does not run interactive mode
+if no arguments are given; (bso#15363).
+ * dsgetdcname: assumes local system uses IPv4; (bso#15325).
+
+- Update to 4.18.2
+ * Log flood: smbd_calculate_access_mask_fsp: Access denied:
+message level should be lower; (bso#15302).
+ * Floating point exception (FPE) via cli_pull_send at
+source3/libsmb/clireadwrite.c; (bso#15306).
+ * test_tstream_more_tcp_user_timeout_spin fails intermittently
+on Rackspace GitLab runners; (bso#15328).
+ * Reduce flapping of ridalloc test; (bso#15329).
+ * large_ldap test is unreliable; (bso#15351).
+ * New filename parser doesn't check veto files smb.conf
+parameter; (bso#15143).
+ * mdssvc may crash when initializing; (bso#15354).
+ * large directory optimization broken for non-lcomp path
+elements; (bso#15313).
+ * streams_depot fails to create streams; (bso#15357).
+ * shadow_copy2 and streams_depot don't play well together;
+(bso#15358).
+ * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316).
+ * winbindd idmap child contacts the domain controller without a
+need; (bso#15317).
+ * idmap_autorid may fail to map sids of trusted domains for the
+first time; (bso#15318).
+ * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
+(bso#15319).
+ * net ads search -P doesn't work against servers in other
+domains; (bso#15323).
+ * Temporary smbXsrv_tcon_global.tdb can't be parsed;
+(bso#15353).
+ * Tests use depricated and removed methods like
+assertRegexpMatches; (bso#15343).
+
+---
Old:
samba-4.18.1+git.298.4ccf830b2a4.tar.bz2
New:
samba-4.18.3+git.303.c08b73d523c.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.ZN861T/_old 2023-06-11 19:52:35.138184758 +0200
+++ /var/tmp/diff_new_pack.ZN861T/_new 2023-06-11 19:52:35.146184807 +0200
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.18.1+git.298.4ccf830b2a4
+Version:4.18.3+git.303.c08b73d523c
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.18.1+git.298.4ccf830b2a4.tar.bz2 ->
samba-4.18.3+git.303.c08b73d523c.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.18.1+git.298.4ccf830b2a4.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.15902/samba-4.18.3+git.303.c08b73d523c.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-04-01 23:27:09
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.9019 (New)
Package is "samba"
Sat Apr 1 23:27:09 2023 rev:295 rq:1076438 version:4.18.1+git.298.4ccf830b2a4
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-03-25
18:54:58.718545457 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.9019/samba.changes2023-04-01
23:27:16.727425344 +0200
@@ -1,0 +2,15 @@
+Wed Mar 29 15:10:50 UTC 2023 - Noel Power
+
+- Update to 4.18.1
+ * CVE-2023-0225: AD DC "dnsHostname" attribute can be
+deleted by unprivileged authenticated users.
+(bso#15276);(bsc#1209483).
+ * CVE-2023-0614: Access controlled AD LDAP attributes can be
+discovered (bso#15270); (bsc#1209485).
+ * CVE-2023-0922: Samba AD DC admin tool samba-tool sends
+passwords in cleartext(bso#15315);(bsc#1209481).
+ * ldb wildcard matching makes excessive allocations;
+(bso#15331).
+ * large_ldap test is inefficient; (bso#15332).
+
+---
Old:
samba-4.18.0+git.294.508b693e5c.tar.bz2
New:
samba-4.18.1+git.298.4ccf830b2a4.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.DSO2Ub/_old 2023-04-01 23:27:17.527429549 +0200
+++ /var/tmp/diff_new_pack.DSO2Ub/_new 2023-04-01 23:27:17.531429569 +0200
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.18.0+git.294.508b693e5c
+Version:4.18.1+git.298.4ccf830b2a4
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.18.0+git.294.508b693e5c.tar.bz2 ->
samba-4.18.1+git.298.4ccf830b2a4.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.18.0+git.294.508b693e5c.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.9019/samba-4.18.1+git.298.4ccf830b2a4.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-03-25 18:54:49
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.31432 (New)
Package is "samba"
Sat Mar 25 18:54:49 2023 rev:294 rq:1074016 version:4.18.0+git.294.508b693e5c
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-02-17
16:44:14.114602528 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.31432/samba.changes 2023-03-25
18:54:58.718545457 +0100
@@ -1,0 +2,13 @@
+Fri Mar 17 08:09:32 UTC 2023 - Samuel Cabrero
+
+- Update to 4.18.0
+ * SMB server performance improvements
+ * More succinct samba-tool error messages
+ * Color output with samba-tool --color
+The NO_COLOR environment variable will disable colour output
+ * New samba-tool dsacl subcommand for deleting ACEs
+ * New wbinfo option --change-secret-at
+ * Net option to change the NT ACL default location
+ * Azure AD / Office365 synchronization improvements
+
+---
Old:
samba-4.17.5+git.320.c38ca0f84a.tar.bz2
New:
samba-4.18.0+git.294.508b693e5c.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.oWVmmH/_old 2023-03-25 18:54:59.562549869 +0100
+++ /var/tmp/diff_new_pack.oWVmmH/_new 2023-03-25 18:54:59.566549891 +0100
@@ -38,10 +38,10 @@
%define build_ceph 1
%endif
-%define talloc_version 2.3.4
-%define tevent_version 0.13.0
-%define tdb_version1.4.7
-%define ldb_version2.6.1
+%define talloc_version 2.4.0
+%define tevent_version 0.14.1
+%define tdb_version1.4.8
+%define ldb_version2.7.1
# This table represents the possible combinations of build macros.
# They are defined only if not already defined in the build service
@@ -158,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.5+git.320.c38ca0f84a
+Version:4.18.0+git.294.508b693e5c
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -1298,6 +1298,7 @@
%_includedir/samba-4.0/gen_ndr/misc.h
%_includedir/samba-4.0/gen_ndr/ndr_misc.h
%_includedir/samba-4.0/gen_ndr/auth.h
+%_includedir/samba-4.0/gen_ndr/claims.h
%_includedir/samba-4.0/gen_ndr/dcerpc.h
%_includedir/samba-4.0/gen_ndr/drsblobs.h
%_includedir/samba-4.0/gen_ndr/drsuapi.h
@@ -1449,6 +1450,7 @@
%{_libdir}/samba/liblibcli-lsa3-samba4.so
%{_libdir}/samba/liblibcli-netlogon3-samba4.so
%{_libdir}/samba/liblibsmb-samba4.so
+%{_libdir}/samba/libstable-sort-samba4.so
%{_libdir}/libtevent-util.so.*
%{_libdir}/samba/libmessages-dgm-samba4.so
%{_libdir}/samba/libmessages-util-samba4.so
@@ -1842,8 +1844,12 @@
%{_datadir}/samba/setup/display-specifiers/DisplaySpecifiers-Win2k8R2.txt
%dir %{_datadir}/samba/admx
%{_datadir}/samba/admx/samba.admx
+%{_datadir}/samba/admx/GNOME_Settings.admx
%dir %{_datadir}/samba/admx/en-US
%{_datadir}/samba/admx/en-US/samba.adml
+%{_datadir}/samba/admx/en-US/GNOME_Settings.adml
+%dir %{_datadir}/samba/admx/ru-RU
+%{_datadir}/samba/admx/ru-RU/GNOME_Settings.adml
%{_mandir}/man8/samba.8.*
%{_mandir}/man8/samba_downgrade_db.8.*
%endif
++ _service ++
--- /var/tmp/diff_new_pack.oWVmmH/_old 2023-03-25 18:54:59.606550099 +0100
+++ /var/tmp/diff_new_pack.oWVmmH/_new 2023-03-25 18:54:59.606550099 +0100
@@ -2,7 +2,7 @@
https://gitlab.suse.de/samba/suse-samba.git/
git
-factory-4-17-stable
+factory-4-18-stable
@PARENT_TAG@+git.@TAG_OFFSET@.%h
samba-(.*)
\1
++ samba-4.17.5+git.320.c38ca0f84a.tar.bz2 ->
samba-4.18.0+git.294.508b693e5c.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.17.5+git.320.c38ca0f84a.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.31432/samba-4.18.0+git.294.508b693e5c.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-02-17 16:44:04
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.22824 (New)
Package is "samba"
Fri Feb 17 16:44:04 2023 rev:293 rq:1066229 version:4.17.5+git.320.c38ca0f84a
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-01-25
17:59:47.441385800 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.22824/samba.changes 2023-02-17
16:44:14.114602528 +0100
@@ -1,0 +2,35 @@
+Tue Feb 14 08:21:13 UTC 2023 - Samuel Cabrero
+
+- Update to 4.17.5
+ * smbc_getxattr() return value is incorrect; (bso#14808);
+ * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled
+correctly; (bso#15172);
+ * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210);
+ * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC
+when there is only an record for the DC in DNS; (bso#15226);
+ * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236);
+ * DFS links don't work anymore on Mac clients since 4.17; (bso#15277);
+ * vfs_virusfilter segfault on access, directory edgecase
+(accessing NULL value); (bso#15283);
+ * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based
+SChannel on NETLOGON (additional changes); (bso#15240);
+ * %U for include directive doesn't work for share listing
+(netshareenum); (bso#15243);
+ * Shares missing from netshareenum response in samba 4.17.4;
+(bso#15266);
+ * ctdb: use-after-free in run_proc; (bso#15269);
+ * irpc_destructor may crash during shutdown; (bso#15280);
+ * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286);
+ * smbclient segfaults with use after free on an optimized build;
+(bso#15268);
+ * smbstatus leaking files in msg.sock and msg.lock; (bso#15282);
+ * Leak in wbcCtxPingDc2; (bso#15164);
+ * Access based share enum does not work in Samba 4.16+; (bso#15265);
+ * Crash during share enumeration; (bso#15267);
+ * rep_listxattr on FreeBSD does not properly check for reads off
+end of returned buffer; (bso#15271);
+ * Avoid relying on C89 features in a few places; (bso#15281);
+- named crashes on DLZ zone update; (bso#14030); (bsc#1206996);
+- Drop libnsl build requirement; (bsc#1208220);
+
+---
Old:
samba-4.17.4+git.314.7b07e3c51a6.tar.bz2
New:
samba-4.17.5+git.320.c38ca0f84a.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.Mw3OJD/_old 2023-02-17 16:44:14.926607100 +0100
+++ /var/tmp/diff_new_pack.Mw3OJD/_new 2023-02-17 16:44:14.938607169 +0100
@@ -87,7 +87,6 @@
BuildRequires: gdbm-devel
BuildRequires: keyutils-devel
BuildRequires: libnscd-devel
-BuildRequires: libnsl-devel
BuildRequires: libopenssl-devel
BuildRequires: zlib-devel
BuildRequires: libtirpc-devel
@@ -159,7 +158,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.4+git.314.7b07e3c51a6
+Version:4.17.5+git.320.c38ca0f84a
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.17.4+git.314.7b07e3c51a6.tar.bz2 ->
samba-4.17.5+git.320.c38ca0f84a.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.17.4+git.314.7b07e3c51a6.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.22824/samba-4.17.5+git.320.c38ca0f84a.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-01-25 17:42:18
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.32243 (New)
Package is "samba"
Wed Jan 25 17:42:18 2023 rev:292 rq:1060506 version:4.17.4+git.314.7b07e3c51a6
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2023-01-11
14:34:19.288982302 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.32243/samba.changes 2023-01-25
17:59:47.441385800 +0100
@@ -1,0 +2,12 @@
+Mon Jan 23 09:24:07 UTC 2023 - Noel Power
+
+- libdsdb-module-samba4 should be packaged as part of samba-libs and
+ not samba-ad-dc-libs. Additionally no need for it to be
+ removed conditionally.
+
+---
+Thu Jan 12 15:24:55 UTC 2023 - Noel Power
+
+- Clean up logic for PAM migration settings in spec file.
+
+---
Old:
samba-4.17.4+git.303.89e23854eb7.tar.bz2
New:
samba-4.17.4+git.314.7b07e3c51a6.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.o5FmVv/_old 2023-01-25 17:59:48.453391207 +0100
+++ /var/tmp/diff_new_pack.o5FmVv/_new 2023-01-25 17:59:48.457391228 +0100
@@ -24,8 +24,10 @@
%{!?_pam_moduledir:%global _pam_moduledir /%{_lib}/security}
%if 0%{?suse_version} > 1500
%{!?_pam_vendordir:%global _pam_vendordir %{_prefix}/lib/pam.d}
+%global samba_pamdir %_pam_vendordir
%else
%{!?_pam_confdir:%global _pam_confdir %{_sysconfdir}/pam.d}
+%global samba_pamdir %_pam_confdir
%endif
%{!?_pam_secconfdir:%global _pam_secconfdir %{_sysconfdir}/security}
@@ -157,7 +159,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.4+git.303.89e23854eb7
+Version:4.17.4+git.314.7b07e3c51a6
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -716,13 +718,8 @@
%install
-%if 0%{?suse_version} > 1500
-install -d -m 0755 -p \
- %{buildroot}/%_pam_vendordir
-%else
install -d -m 0755 -p \
- %{buildroot}/%_pam_confdir
-%endif
+ %{buildroot}/%samba_pamdir
install -d -m 0755 -p \
%{buildroot}/%{_sysconfdir}/{xinetd.d,logrotate.d} \
@@ -760,8 +757,7 @@
rm \
%{buildroot}/%{_mandir}/man8/samba.8* \
%{buildroot}/%{_mandir}/man8/samba_downgrade_db.8* \
- %{buildroot}/%{_unitdir}/samba-ad-dc.service \
- %{buildroot}/%{_libdir}/samba/libdsdb-module-samba4.so
+ %{buildroot}/%{_unitdir}/samba-ad-dc.service
%endif
# CTDB
@@ -837,11 +833,7 @@
# PDF generator
install -p -m 0755 tools/smbprngenpdf %{buildroot}/%{_bindir}/smbprngenpdf
install -m 0644 config/samba.reg
%{buildroot}/%{_sysconfdir}/slp.reg.d/samba.reg
-%if 0%{?suse_version} > 1500
-install -m 0644 config/samba.pamd-common %{buildroot}/%_pam_vendordir/samba
-%else
-install -m 0644 config/samba.pamd-common %{buildroot}/%_pam_confdir/samba
-%endif
+install -m 0644 config/samba.pamd-common %{buildroot}/%samba_pamdir/samba
install -m 0644 config/dhcp.conf
%{buildroot}/%{_fillupdir}/samba-client-dhcp.conf
install -m 0644 config/sysconfig.dhcp-samba-client
%{buildroot}/%{_fillupdir}/sysconfig.dhcp-samba-client
@@ -1134,9 +1126,9 @@
%ghost %{CONFIGDIR}/smbpasswd
%config(noreplace) %{CONFIGDIR}/smbusers
%if 0%{?suse_version} > 1500
-%_pam_vendordir/samba
+%samba_pamdir/samba
%else
-%config %_pam_confdir/samba
+%config %samba_pamdir/samba
%endif
%{_sysconfdir}/slp.reg.d
%dir %{_libdir}/samba
@@ -1527,6 +1519,7 @@
%{_libdir}/samba/libREG-FULL-samba4.so
%{_libdir}/samba/libRPC-SERVER-LOOP-samba4.so
%{_libdir}/samba/libRPC-WORKER-samba4.so
+%{_libdir}/samba/libdsdb-module-samba4.so
%if ! %{with_mitkrb5}
%{_libdir}/samba/libasn1-samba4.so
%{_libdir}/samba/libcom-err-samba4.so
@@ -1865,7 +1858,6 @@
%files ad-dc-libs
%defattr(-,root,root)
%{_libdir}/samba/libdb-glue-samba4.so
-%{_libdir}/samba/libdsdb-module-samba4.so
%{_libdir}/samba/libdsdb-garbage-collect-tombstones-samba4.so
%{_libdir}/samba/libscavenge-dns-records-samba4.so
%{_libdir}/samba/libprocess-model-samba4.so
++ samba-4.17.4+git.303.89e23854eb7.tar.bz2 ->
samba-4.17.4+git.314.7b07e3c51a6.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.17.4+git.303.89e23854eb7.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.32243/samba-4.17.4+git.314.7b07e3c51a6.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2023-01-11 14:33:39
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.32243 (New)
Package is "samba"
Wed Jan 11 14:33:39 2023 rev:291 rq:1057608 version:4.17.4+git.303.89e23854eb7
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-12-25
15:14:16.569177203 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.32243/samba.changes 2023-01-11
14:34:19.288982302 +0100
@@ -1,0 +2,10 @@
+Wed Jan 4 14:05:15 UTC 2023 - Stefan Schubert
+
+- Migration of PAM settings to /usr/lib/pam.d.
+
+---
+Wed Dec 21 12:17:58 UTC 2022 - Noel Power
+
+- Change with_dc default to 0 (for non TW builds).
+
+---
Old:
samba-4.17.4+git.300.305b22bfce.tar.bz2
New:
samba-4.17.4+git.303.89e23854eb7.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.AcbEgY/_old 2023-01-11 14:34:20.184987367 +0100
+++ /var/tmp/diff_new_pack.AcbEgY/_new 2023-01-11 14:34:20.188987390 +0100
@@ -23,7 +23,7 @@
%{!?_tmpfilesdir:%global _tmpfilesdir /usr/lib/tmpfiles.d}
%{!?_pam_moduledir:%global _pam_moduledir /%{_lib}/security}
%if 0%{?suse_version} > 1500
-%global _pam_confdir %{_distconfdir}/pam.d
+%{!?_pam_vendordir:%global _pam_vendordir %{_prefix}/lib/pam.d}
%else
%{!?_pam_confdir:%global _pam_confdir %{_sysconfdir}/pam.d}
%endif
@@ -58,7 +58,12 @@
#-
%{!?with_mitkrb5: %define with_mitkrb5 1}
%{!?with_mit_dc: %define with_mit_dc 1}
+# if factory/tw default with_dc to 1 (if not already defined in project config)
+%if 0%{?suse_version} > 1500
%{!?with_dc: %define with_dc 1}
+%else
+%{!?with_dc: %define with_dc 0}
+%endif
# Define whether smbd is built with SMB1 disabled
%{!?without_smb1_server: %define without_smb1_server 1}
@@ -152,7 +157,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.4+git.300.305b22bfce
+Version:4.17.4+git.303.89e23854eb7
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -710,8 +715,16 @@
%sysusers_generate_pre packaging/SuSE/systemd/sysusers.samba samba samba.conf
%install
+
+%if 0%{?suse_version} > 1500
+install -d -m 0755 -p \
+ %{buildroot}/%_pam_vendordir
+%else
+install -d -m 0755 -p \
+ %{buildroot}/%_pam_confdir
+%endif
+
install -d -m 0755 -p \
- %{buildroot}/%_pam_confdir \
%{buildroot}/%{_sysconfdir}/{xinetd.d,logrotate.d} \
%{buildroot}/%{_sysconfdir}/openldap/schema \
%{buildroot}/%{_sysconfdir}/security \
@@ -824,7 +837,11 @@
# PDF generator
install -p -m 0755 tools/smbprngenpdf %{buildroot}/%{_bindir}/smbprngenpdf
install -m 0644 config/samba.reg
%{buildroot}/%{_sysconfdir}/slp.reg.d/samba.reg
+%if 0%{?suse_version} > 1500
+install -m 0644 config/samba.pamd-common %{buildroot}/%_pam_vendordir/samba
+%else
install -m 0644 config/samba.pamd-common %{buildroot}/%_pam_confdir/samba
+%endif
install -m 0644 config/dhcp.conf
%{buildroot}/%{_fillupdir}/samba-client-dhcp.conf
install -m 0644 config/sysconfig.dhcp-samba-client
%{buildroot}/%{_fillupdir}/sysconfig.dhcp-samba-client
@@ -1116,7 +1133,11 @@
%{_unitdir}/smb.service
%ghost %{CONFIGDIR}/smbpasswd
%config(noreplace) %{CONFIGDIR}/smbusers
+%if 0%{?suse_version} > 1500
+%_pam_vendordir/samba
+%else
%config %_pam_confdir/samba
+%endif
%{_sysconfdir}/slp.reg.d
%dir %{_libdir}/samba
%dir %{_libdir}/samba/vfs
++ samba-4.17.4+git.300.305b22bfce.tar.bz2 ->
samba-4.17.4+git.303.89e23854eb7.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.17.4+git.300.305b22bfce.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.32243/samba-4.17.4+git.303.89e23854eb7.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-12-25 15:14:14
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1563 (New)
Package is "samba"
Sun Dec 25 15:14:14 2022 rev:290 rq:1044036 version:4.17.4+git.300.305b22bfce
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-12-03
10:03:24.099161990 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.1563/samba.changes2022-12-25
15:14:16.569177203 +0100
@@ -1,0 +2,54 @@
+Thu Dec 15 16:45:28 UTC 2022 - Samuel Cabrero
+
+- Update to 4.17.4
+ * CVE-2022-44640 Upstream Heimdal free of user-controlled
+ pointer in FAST; (bsc#14929);
+ * CVE-2021-20251 Bad password count not incremented atomically;
+ (bsc#14611);
+ * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
+ (bsc#15203);
+ * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
+ modern servers; (bso#15237);
+ * CVE-2022-37967 Kerberos constrained delegation ticket forgery
+ possible against Samba AD DC; (bso#15231);
+ * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
+ and should be avoided; (bso#15240);
+ * pam_winbind uses time_t and pointers assuming they are of the
+ same size; (bso#15224);
+ * Heimdal session key selection in AS-REQ examines wrong entry;
+ (bso#15219);
+ * filter-subunit is inefficient with large numbers of
+ knownfails; (bso#15258);
+ * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
+ (bso#15252);
+ * The KDC logic arround msDs-supportedEncryptionTypes differs
+ from Windows; (bso#13135);
+ * libnet: change_password() doesn't work with
+ dcerpc_samr_ChangePasswordUser4(); (bso#15206);
+ * Heimdal session key selection in AS-REQ examines wrong entry;
+ (bso#15219);
+ * Memory leak in snprintf replacement functions; (bso#15230);
+ * RODC doesn't reset badPwdCount reliable via an RWDC
+ (CVE-2021-20251 regression); (bso#15253);
+ * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
+ * %U for include directive doesn't work for share listing
+ (netshareenum); (bso#15243);
+ * Stack smashing in net offlinejoin requestodj; (bso#15257);
+ * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
+ (bso#15197);
+ * Heimdal session key selection in AS-REQ examines wrong entry;
+ (bso#15219);
+- Remove deprecated if-{down,up} scripts; (bsc#1206444);
+- Adjust the systemd drop-in file for named service; (bsc#1201689);
+ * Paths are additive so do not repeat paths from named.service
+ * Prefix the samba DLZ directory with "-" to ignore this path
+if it does not exists
+
+---
+Mon Dec 12 08:56:12 UTC 2022 - Stefan Schubert
+
+- Migration PAM settings to /usr/etc: Saving user changed
+ configuration files in /etc and restoring them while an RPM
+ update.
+
+---
@@ -9 +63,2 @@
-- CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
+- Update to 4.17.3
+ * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
Old:
samba-4.17.3+git.283.2157972742b.tar.bz2
New:
samba-4.17.4+git.300.305b22bfce.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.xVRq7g/_old 2022-12-25 15:14:17.481182365 +0100
+++ /var/tmp/diff_new_pack.xVRq7g/_new 2022-12-25 15:14:17.485182387 +0100
@@ -22,7 +22,11 @@
%{!?_fillupdir:%global _fillupdir /var/adm/fillup-templates}
%{!?_tmpfilesdir:%global _tmpfilesdir /usr/lib/tmpfiles.d}
%{!?_pam_moduledir:%global _pam_moduledir /%{_lib}/security}
+%if 0%{?suse_version} > 1500
+%global _pam_confdir %{_distconfdir}/pam.d
+%else
%{!?_pam_confdir:%global _pam_confdir %{_sysconfdir}/pam.d}
+%endif
%{!?_pam_secconfdir:%global _pam_secconfdir %{_sysconfdir}/security}
%define with_mscat 1
@@ -148,7 +152,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.3+git.283.2157972742b
+Version:4.17.4+git.300.305b22bfce
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -181,7 +185,6 @@
%defineCONFIGDIR %{_sysconfdir}/samba
%defineINITDIR %{_sysconfdir}/init.d
%definePIDDIR /run/samba
-%defineNET_CFGDIR network
%defineauth_modules
auth_unix,auth_wbc,auth_server,auth_netlogond,auth_script,auth_samba4
%defineidmap_modules
idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_rfc2307,idmap_rid,idmap_tdb2
%definepdb_modules pdb_tdbsam,pdb_ldapsam,pdb_smbpasswd,pdb_samba_dsdb
@@ -711,7 +714,6 @@
%{buil
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-12-03 10:03:17
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1835 (New)
Package is "samba"
Sat Dec 3 10:03:17 2022 rev:289 rq:1039573 version:4.17.3+git.283.2157972742b
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-11-18
15:43:45.558621710 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.1835/samba.changes2022-12-03
10:03:24.099161990 +0100
@@ -1,0 +2,5 @@
+Thu Dec 1 16:43:05 UTC 2022 - David Mulder
+
+- Introduce without-smb1-server spec flag; (bsc#1205104);
+
+---
Old:
samba-4.17.3+git.279.ff9bb8a298.tar.bz2
New:
samba-4.17.3+git.283.2157972742b.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.83N5oc/_old 2022-12-03 10:03:24.839166102 +0100
+++ /var/tmp/diff_new_pack.83N5oc/_new 2022-12-03 10:03:24.843166124 +0100
@@ -56,6 +56,9 @@
%{!?with_mit_dc: %define with_mit_dc 1}
%{!?with_dc: %define with_dc 1}
+# Define whether smbd is built with SMB1 disabled
+%{!?without_smb1_server: %define without_smb1_server 1}
+
Name: samba
BuildRequires: autoconf
BuildRequires: cups-devel
@@ -145,7 +148,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.3+git.279.ff9bb8a298
+Version:4.17.3+git.283.2157972742b
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -682,8 +685,10 @@
--bundled-libraries=NONE,socket_wrapper,cmocka,${bundled_libraries_extra} \
--without-fam \
%if 0%{?suse_version} > 1500
+%if %{without_smb1_server}
--without-smb1-server \
%endif
+%endif
"
./configure ${CONFIGURE_OPTIONS}
++ samba-4.17.3+git.279.ff9bb8a298.tar.bz2 ->
samba-4.17.3+git.283.2157972742b.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.17.3+git.279.ff9bb8a298.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1835/samba-4.17.3+git.283.2157972742b.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-11-18 15:43:16
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1597 (New)
Package is "samba"
Fri Nov 18 15:43:16 2022 rev:288 rq:1036489 version:4.17.3+git.279.ff9bb8a298
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-10-27
13:52:24.996032918 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1597/samba.changes2022-11-18
15:43:45.558621710 +0100
@@ -1,0 +2,12 @@
+Tue Nov 15 17:14:58 UTC 2022 - Samuel Cabrero
+
+- CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
+ systems; (bsc#1205126); (bso#15203);
+
+---
+Tue Nov 8 17:20:21 UTC 2022 - Ben Greiner
+
+- Replace obsolete python-gpgme with python-gpg
+ * Upstream replaced it in v4.9.5 -- bso#13728
+
+---
Old:
samba-4.17.2+git.273.a55a83528b9.tar.bz2
New:
samba-4.17.3+git.279.ff9bb8a298.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.Df7IiJ/_old 2022-11-18 15:43:46.598626279 +0100
+++ /var/tmp/diff_new_pack.Df7IiJ/_new 2022-11-18 15:43:46.606626315 +0100
@@ -119,7 +119,7 @@
%if %{with_dc}
BuildRequires: gpgme-devel
BuildRequires: libjansson-devel
-BuildRequires: python3-gpgme
+BuildRequires: python3-gpg
%if %{with_mit_dc}
BuildRequires: krb5-devel >= 1.15.1
BuildRequires: krb5-server >= 1.15.1
@@ -145,7 +145,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.2+git.273.a55a83528b9
+Version:4.17.3+git.279.ff9bb8a298
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.17.2+git.273.a55a83528b9.tar.bz2 ->
samba-4.17.3+git.279.ff9bb8a298.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.17.2+git.273.a55a83528b9.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1597/samba-4.17.3+git.279.ff9bb8a298.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-10-27 13:52:20
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.2275 (New)
Package is "samba"
Thu Oct 27 13:52:20 2022 rev:287 rq:1031263 version:4.17.2+git.273.a55a83528b9
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-10-22
14:12:43.876687412 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.2275/samba.changes2022-10-27
13:52:24.996032918 +0200
@@ -1,0 +2,9 @@
+Tue Oct 25 09:26:59 UTC 2022 - Noel Power
+
+- Update to 4.17.2
+ * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
+(bso#15207); (bsc#1204499).
+ * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
+unwrap_des3();(bso#15134); (bsc#1204254).
+
+---
Old:
samba-4.17.1+git.270.17afe7cb6b.tar.bz2
New:
samba-4.17.2+git.273.a55a83528b9.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.vImvc7/_old 2022-10-27 13:52:26.316039528 +0200
+++ /var/tmp/diff_new_pack.vImvc7/_new 2022-10-27 13:52:26.324039568 +0200
@@ -145,7 +145,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.1+git.270.17afe7cb6b
+Version:4.17.2+git.273.a55a83528b9
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.17.1+git.270.17afe7cb6b.tar.bz2 ->
samba-4.17.2+git.273.a55a83528b9.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.17.1+git.270.17afe7cb6b.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.2275/samba-4.17.2+git.273.a55a83528b9.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-10-22 14:12:23
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.2275 (New)
Package is "samba"
Sat Oct 22 14:12:23 2022 rev:286 rq:1030329 version:4.17.1+git.270.17afe7cb6b
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-10-10
18:45:52.859038924 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.2275/samba.changes2022-10-22
14:12:43.876687412 +0200
@@ -1,0 +2,53 @@
+Wed Oct 19 12:48:21 UTC 2022 - Noel Power
+
+- Update to 4.17.1
+ * CVE-2021-20251 [SECURITY] Bad password count not incremented
+atomically; (bso#14611).
+ * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
+ * Flush on a named stream never completes; (bso#15182).
+ * Permission denied calling SMBC_getatr when file not exists;
+(bso#15195).
+ * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
+over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
+(bso#15189).
+ * pytest: add file removal helpers for TestCaseInTempDir;
+(bso#15191).
+ * CVE-2021-20251 [SECURITY] Bad password count not incremented
+atomically; (bso#14611).
+ * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
+over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
+(bso#15189).
+ * Flush on a named stream never completes; (bso#15182).
+ * vfs_gpfs silently garbles timestamps > year 2106;
+(bso#15151).
+ * CVE-2021-20251 [SECURITY] Bad password count not incremented
+atomically; (bso#14611).
+ * multi-channel socket passing may hit a race if one of the
+involved processes already existed; (bso#15200).
+ * memory leak on temporary of struct imessaging_post_state and
+struct tevent_immediate on struct imessaging_context (in
+rpcd_spoolss and maybe others); (bso#15201).
+ * Since popt1.19 various use after free errors using result of
+poptGetArg are now exposed; (bso#15205); (boo#1204279).
+ * Remove special case for O_CREAT in SMB_VFS_OPENAT from
+vfs_glusterfs; (bso#15192).
+ * GETPWSID in memory cache grows indefinetly with each NTLM
+auth; (bso#15169).
+ * CVE-2021-20251 [SECURITY] Bad password count not incremented
+atomically; (bso#14611).
+- Install a systemd drop-in file for named service to allow
+ read/write access to the DLZ directory; (bsc#1201689);
+
+---
+Fri Oct 14 14:20:51 UTC 2022 - Noel Power
+
+- Fix use after free errors resulting from using return of
+ poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
+
+---
+Mon Sep 26 10:40:18 UTC 2022 - Noel Power
+
+- s3: smbd: Fix memory leak in
+ smbd_server_connection_terminate_done(); (bso#15174).
+
+---
Old:
samba-4.17.0+git.257.5f0ed03584a.tar.bz2
New:
samba-4.17.1+git.270.17afe7cb6b.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.9rbnzV/_old 2022-10-22 14:12:44.748689478 +0200
+++ /var/tmp/diff_new_pack.9rbnzV/_new 2022-10-22 14:12:44.756689497 +0200
@@ -145,7 +145,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.17.0+git.257.5f0ed03584a
+Version:4.17.1+git.270.17afe7cb6b
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -791,6 +791,9 @@
%if %{with_dc}
ln -s service %{buildroot}/%{_sbindir}/rcsamba-ad-dc
install -m 0644 systemd/sysconfig.samba-ad-dc %{buildroot}%{_fillupdir}
+ # Drop-in file for named to allow r/w access to dlz dir (bsc#1201689)
+ install -d -m 0755 -p %{buildroot}%{_unitdir}/named.service.d
+ install -m 0644 systemd/named-override.conf
%{buildroot}%{_unitdir}/named.service.d/26-samba-dlz.conf
%endif
rm %{buildroot}/%{_sysconfdir}/sysconfig/samba
install -m 0644 systemd/sysconfig.samba %{buildroot}%{_fillupdir}
@@ -1751,6 +1754,8 @@
%files ad-dc
%{_fillupdir}/sysconfig.samba-ad-dc
%{_unitdir}/samba-ad-dc.service
+%dir %{_unitdir}/named.service.d
+%{_unitdir}/named.service.d/26-samba-dlz.conf
%{_sbindir}/samba
%{_sbindir}/samba_dnsupdate
%{_sbindir}/samba_kcc
++ samba-4.17.0+git.257.5f0ed03584a.tar.bz2 ->
samba-4.17.1+git.270.17afe7cb6b.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.17.0+git.257.5f0ed03584a.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.2275/samba-4.17.1+git.270.17afe7cb6b.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-10-10 18:44:45
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.2275 (New)
Package is "samba"
Mon Oct 10 18:44:45 2022 rev:285 rq:1008206 version:4.17.0+git.257.5f0ed03584a
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-08-05
19:50:53.833439579 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.2275/samba.changes2022-10-10
18:45:52.859038924 +0200
@@ -1,0 +2,62 @@
+Mon Sep 26 09:38:59 UTC 2022 - Noel Power
+
+- Disable SMB1 for tumbleweed builds.
+
+---
+Fri Sep 23 16:22:12 UTC 2022 - Noel Power
+
+- Update to 4.17.0
+ * acl_xattr VFS module may unintentionally use filesystem
+permissions instead of ACL from xattr; (bso#15126).
+ * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
+(bso#15153).
+ * assert failed: !is_named_stream(smb_fname)") at
+../../lib/util/fault.c:197; (bso#15161).
+ * acl_xattr VFS module may unintentionally use filesystem
+permissions instead of ACL from xattr; (bso#15126).
+ * assert failed: !is_named_stream(smb_fname)") at
+../../lib/util/fault.c:197; (bso#15161).
+ * Cross-node multi-channel reconnects result in SMB2 Negotiate
+returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
+ * winbind at info level debug can coredump when processing
+wb_lookupusergroups; (bso#15160).
+ * Make use of glfs_*at() API calls in vfs_glusterfs;
+(bso#15157).
+ * Possible use after free of connection_struct when iterating
+smbd_server_connection->connections; (bso#15128).
+ * `net usershare add` fails with flag works with --long but
+fails with -l; (bso#15145).
+ * acl_xattr VFS module may unintentionally use filesystem
+permissions instead of ACL from xattr; (bso#15126).
+ * Performance regression on contended path based operations;
+(bso#15125).
+ * Missing READ_LEASE break could cause data corruption;
+(bso#15148).
+ * libsamba-errors uses a wrong version number; (bso#15141).
+ * SMB1 negotiation can fail to handle connection errors;
+(bso#15152).
+ * New filename parser doesn't check veto files smb.conf
+parameter; (bso#15143).
+ * 4.17.rc1 still uses symlink-race prone unix_convert();
+(bso#15144).
+ * Backport fileserver related changed to 4.17.0rc2;
+(bso#15146).
+ * Manpage for smbstatus json is missing; (bso#15147).
+ * Backport fileserver related changed to 4.17.0rc2;
+(bso#15146).
+ * Performance regression on contended path based operations;
+(bso#15125).
+ * Backport fileserver related changed to 4.17.0rc2;
+(bso#15146).
+ * Fix issues found by coverity in smbstatus json code;
+(bso#15140).
+ * Backport fileserver related changed to 4.17.0rc2;
+(bso#15146).
+
+---
+Thu Sep 1 06:07:15 UTC 2022 - Stefan Schubert
+
+- Migration to /usr/etc: Saving user changed configuration files
+ in /etc and restoring them while an RPM update.
+
+---
Old:
samba-4.16.4+git.297.1497eb221ed.tar.bz2
New:
samba-4.17.0+git.257.5f0ed03584a.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.7mBhlF/_old 2022-10-10 18:45:53.939041248 +0200
+++ /var/tmp/diff_new_pack.7mBhlF/_new 2022-10-10 18:45:53.943041257 +0200
@@ -32,10 +32,10 @@
%define build_ceph 1
%endif
-%define talloc_version 2.3.3
-%define tevent_version 0.11.0
-%define tdb_version1.4.6
-%define ldb_version2.5.0
+%define talloc_version 2.3.4
+%define tevent_version 0.13.0
+%define tdb_version1.4.7
+%define ldb_version2.6.1
# This table represents the possible combinations of build macros.
# They are defined only if not already defined in the build service
@@ -145,7 +145,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.16.4+git.297.1497eb221ed
+Version:4.17.0+git.257.5f0ed03584a
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -681,6 +681,9 @@
%endif
--bundled-libraries=NONE,socket_wrapper,cmocka,${bundled_libraries_extra} \
--without-fam \
+%if 0%{?suse_version} > 1500
+ --without-smb1-server \
+%endif
"
./configure ${CONFIGURE_OPTIONS}
@@ -743,7 +746,6 @@
# CTDB
install -m 0644 packaging/SuSE/config/sysconfig.ctdb %{buildroot}/%{_fillupdir}
-install -m 0755 ctdb/config/ctdb.service %{buildroot}%{_unitdir}/ctdb.service
ln -s service %{buildroot}/%{_sbindir}/rcctdb
# create tmpfile conf
install -d -m 07
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-08-05 19:50:23
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1521 (New)
Package is "samba"
Fri Aug 5 19:50:23 2022 rev:284 rq:993097 version:4.16.4+git.297.1497eb221ed
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-07-22
19:20:30.424586488 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1521/samba.changes2022-08-05
19:50:53.833439579 +0200
@@ -1,0 +2,47 @@
+Thu Jul 28 11:56:31 UTC 2022 - Samuel Cabrero
+
+- Update to 4.16.4
+ * CVE-2022-2031: Samba AD users can bypass certain restrictions
+associated with changing passwords; (bsc#1201495); (bso#15047);
+ * CVE-2022-32744: Samba AD users can forge password change
+requests for any user; (bsc#1201493); (bso#15074);
+ * CVE-2022-32745: Samba AD users can crash the server process
+with an LDAP add or modify request; (bsc#1201492); (bso#15008);
+ * CVE-2022-32746: Samba AD users can induce a use-after-free in
+the server process with an LDAP add or modify request;
+(bsc#1201490); (bso#15009);
+ * CVE-2022-32742: Server memory information leak via SMB1;
+(bsc#1201496); (bso#15085);
+
+---
+Tue Jul 19 11:25:59 UTC 2022 - Samuel Cabrero
+
+- Update to 4.16.3
+ * Using vfs_streams_xattr and deleting a file causes a panic;
+(bso#15099);
+ * Add support for bind 9.18; (bso#14986);
+ * logging dsdb audit to specific files does not work;
+(bso#15076);
+ * Problem when winbind renews Kerberos; (bso#14979);
+(bsc#1196224);
+ * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
+developer mode; (bso#15095);
+ * Crash in streams_xattr because fsp->base_fsp->fsp_name is
+NULL; (bso#15105);
+ * Crash in rpcd_classic - NULL pointer deference in
+mangle_is_mangled(); (bso#15118);
+ * smbclient commands del & deltree fail with
+NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
+(bsc#1200556);
+ * Fix check for chown when processing NFSv4 ACL; (bso#15120);
+ * The pcap background queue process should not be stopped;
+(bso#15082);
+ * testparm: Fix typo in idmap rangesize check; (bso#15097);
+ * net ads info returns LDAP server and LDAP server name as
+null; (bso#15106);
+ * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
+(bso#15108);
+ * CTDB child process logging does not work as expected;
+(bso#15090);
+
+---
Old:
samba-4.16.2+git.288.4d64e4651f0.tar.bz2
New:
samba-4.16.4+git.297.1497eb221ed.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.gaCjv9/_old 2022-08-05 19:50:54.801442079 +0200
+++ /var/tmp/diff_new_pack.gaCjv9/_new 2022-08-05 19:50:54.805442089 +0200
@@ -145,7 +145,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.16.2+git.288.4d64e4651f0
+Version:4.16.4+git.297.1497eb221ed
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -1865,6 +1865,7 @@
%{_libdir}/samba/bind9/dlz_bind9_12.so
%{_libdir}/samba/bind9/dlz_bind9_14.so
%{_libdir}/samba/bind9/dlz_bind9_16.so
+%{_libdir}/samba/bind9/dlz_bind9_18.so
%dir %{_libdir}/samba/gensec
%{_libdir}/samba/gensec/krb5.so
%{_libdir}/samba/libdlz-bind9-for-torture-samba4.so
++ samba-4.16.2+git.288.4d64e4651f0.tar.bz2 ->
samba-4.16.4+git.297.1497eb221ed.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.16.2+git.288.4d64e4651f0.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1521/samba-4.16.4+git.297.1497eb221ed.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-07-22 19:20:25
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.21925 (New)
Package is "samba"
Fri Jul 22 19:20:25 2022 rev:283 rq:990442 version:4.16.2+git.288.4d64e4651f0
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-06-18
22:05:59.363639021 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.21925/samba.changes 2022-07-22
19:20:30.424586488 +0200
@@ -1,0 +2,21 @@
+Tue Jul 12 10:48:47 UTC 2022 - Samuel Cabrero
+
+- Update spec file to fix the optional Heimdal DC build
+- Fix external trusts with MIT Kerberos 1.20
+- Add missing samba-client requirement to samba-winbind package;
+ (bsc#1198255);
+- Move pdb backends from package samba-libs to package
+ samba-client-libs and remove samba-libs requirement from
+ samba-winbind; (bsc#1200964); (bsc#1198255);
+- Add sysuser-shadow requirement for packages using
+ systemd-sysusers
+- Use the canonical realm name to refresh the Kerberos tickets;
+ (bsc#1196224); (bso#14979);
+
+---
+Tue Jun 21 14:29:52 UTC 2022 - Stefan Schubert
+
+- Moved logrotate files from user specific directory /etc/logrotate.d
+ to vendor specific directory /usr/etc/logrotate.d.
+
+---
Old:
samba-4.16.2+git.262.6acc6531bc7.tar.bz2
New:
samba-4.16.2+git.288.4d64e4651f0.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.3pHG3U/_old 2022-07-22 19:20:31.664588617 +0200
+++ /var/tmp/diff_new_pack.3pHG3U/_new 2022-07-22 19:20:31.668588624 +0200
@@ -130,19 +130,22 @@
%if ! %{with_mitkrb5}
BuildRequires: bison
BuildRequires: flex
+BuildRequires: perl-JSON
%endif
%if %{with_mscat}
BuildRequires: libgnutls-devel >= 3.5.6
BuildRequires: libtasn1-devel >= 3.8
+%if 0%{?suse_version} > 1500
BuildRequires: libtasn1-tools
%endif
+%endif
# liburing not yet available for all Factory architectures
%ifnarch ppc armv6l armv7l
BuildRequires: liburing-devel
%endif
BuildRequires: sysuser-tools
-Version:4.16.2+git.262.6acc6531bc7
+Version:4.16.2+git.288.4d64e4651f0
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -160,6 +163,7 @@
Requires: system-user-nobody
Requires: %{fillup_prereq}
Requires: samba-client >= %{version}
+Requires: sysuser-shadow
Provides: group(ntadmin)
%{?systemd_ordering}
@@ -177,7 +181,7 @@
%defineNET_CFGDIR network
%defineauth_modules
auth_unix,auth_wbc,auth_server,auth_netlogond,auth_script,auth_samba4
%defineidmap_modules
idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_rfc2307,idmap_rid,idmap_tdb2
-%definepdb_modules
pdb_tdbsam,pdb_ldap,pdb_ads,pdb_smbpasswd,pdb_wbc_sam,pdb_samba4
+%definepdb_modules pdb_tdbsam,pdb_ldapsam,pdb_smbpasswd,pdb_samba_dsdb
%definevfs_modules vfs_cacheprime,vfs_readahead
%defineVENDOR SUSE
%define cups_lib_dir %{_prefix}/lib/cups
@@ -431,8 +435,10 @@
Recommends: cron
Recommends: logrotate
Requires: coreutils
+Requires: samba-client = %{version}
Requires: samba-winbind-libs = %{version}
Recommends: samba-gpupdate = %{version}
+Requires: sysuser-shadow
Requires(post): /sbin/ldconfig
Requires(postun):/sbin/ldconfig
@@ -823,12 +829,20 @@
done
# Add logrotate settings for nmbd and smbd only on systems newer than 8.1.
+%if 0%{?suse_version} > 1500
+mkdir -p %{buildroot}%{_distconfdir}/logrotate.d
+%endif
LOGROTATE_FILES="samba samba-winbind"
for file in ${LOGROTATE_FILES}; do
- install -m 0644 logrotate/${file}
%{buildroot}/%{_sysconfdir}/logrotate.d/${file}
rm -f "%{_builddir}/samba-%{version}/filelist-${file}"
touch "%{_builddir}/samba-%{version}/filelist-${file}"
+%if 0%{?suse_version} > 1500
+install -m 0644 logrotate/${file}
%{buildroot}/%{_distconfdir}/logrotate.d/${file}
+echo "%{_distconfdir}/logrotate.d/${file}"
>>%{_builddir}/samba-%{version}/filelist-${file}
+%else
+install -m 0644 logrotate/${file}
%{buildroot}/%{_sysconfdir}/logrotate.d/${file}
echo "%config(noreplace) %{_sysconfdir}/logrotate.d/${file}"
>>%{_builddir}/samba-%{version}/filelist-${file}
+%endif
done
install -m 0644 docu/README.SUSE %{buildroot}/%{DOCDIR}/
# SUSEhelp files
@@ -1449,6 +1463,10 @@
%if %{with_dc}
%{_libdir}/samba/libdfs-server-ad-samba4.so
%endif
+%dir %{_libdir}/samba/pdb
+%{_libdir}/samba/pdb/ldapsam.so
+%{_libdir}/samba/pdb/smb
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-06-18 22:05:53
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1548 (New)
Package is "samba"
Sat Jun 18 22:05:53 2022 rev:282 rq:983456 version:4.16.2+git.262.6acc6531bc7
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-05-14
22:52:16.498999357 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1548/samba.changes2022-06-18
22:05:59.363639021 +0200
@@ -1,0 +2,26 @@
+Mon Jun 13 13:32:24 UTC 2022 - Samuel Cabrero
+
+- Update to 4.16.2
+ * Use pathref fd instead of io fd in vfs_default_durable_cookie;
+(bso#15042);
+ * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
+file had been deleted; (bso#15069);
+ * Reintroduce netgroups support; (bso#15087);
+ * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
+server; (bso#14674);
+ * Update from 4.15 to 4.16 breaks discovery of [homes] on
+standalone server from Win and IOS; (bso#15062);
+ * waf produces incorrect names for python extensions with Python
+3.11; (bso#15071);
+ * smbclient -E doesn't work as advertised; (bso#15075);
+ * The samba background daemon doesn't refresh the printcap cache
+on startup; (bso#15081);
+ * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
+- Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7
+- Support building with MIT Kerberos 1.20
+- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
+ (CVE-2020-17049);
+- Resource Based Constrained Delegation (RBCD) for Samba AD DC
+- Support building with gcc 12.1
+
+---
Old:
samba-4.16.1+git.237.1d04c5f421f.tar.bz2
New:
samba-4.16.2+git.262.6acc6531bc7.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.cxNtG7/_old 2022-06-18 22:06:00.511640653 +0200
+++ /var/tmp/diff_new_pack.cxNtG7/_new 2022-06-18 22:06:00.515640658 +0200
@@ -142,7 +142,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.16.1+git.237.1d04c5f421f
+Version:4.16.2+git.262.6acc6531bc7
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.16.1+git.237.1d04c5f421f.tar.bz2 ->
samba-4.16.2+git.262.6acc6531bc7.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.16.1+git.237.1d04c5f421f.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1548/samba-4.16.2+git.262.6acc6531bc7.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-05-14 22:52:11
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1538 (New)
Package is "samba"
Sat May 14 22:52:11 2022 rev:281 rq:976588 version:4.16.1+git.237.1d04c5f421f
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-05-05
23:04:37.893425352 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1538/samba.changes2022-05-14
22:52:16.498999357 +0200
@@ -1,0 +2,6 @@
+Wed May 11 09:30:15 UTC 2022 - Samuel Cabrero
+
+- Use requires_eq macro to require the libldb2 version available at
+ samba-dsdb-modules build time; (bsc#1199362);
+
+---
Old:
samba-4.16.1+git.235.f435da606f7.tar.bz2
New:
samba-4.16.1+git.237.1d04c5f421f.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.2QUQBx/_old 2022-05-14 22:52:17.727000893 +0200
+++ /var/tmp/diff_new_pack.2QUQBx/_new 2022-05-14 22:52:17.731000897 +0200
@@ -142,7 +142,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.16.1+git.235.f435da606f7
+Version:4.16.1+git.237.1d04c5f421f
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -567,7 +567,13 @@
Summary:Samba LDB modules
License:GPL-3.0-or-later
Group: Productivity/Networking/Samba
-Requires: libldb2 = %{ldb_version}
+# The ldb modules provided by this package check their own version matches
+# the libldb2 version. It the version do not match (e.g. libldb2 version
+# is updated and samba-dsdb-modules is not rebuilt against it) programs using
+# libldb2 won't start. The requires_eq macro will require the libldb2 version
+# available at build time without having to manually maintain the global
+# ldb_version variable in this spec file (bsc#1118508, bsc#1199362)
+%requires_eq libldb2
Requires: samba-ldb-ldap = %{version}
Requires(post): /sbin/ldconfig
Requires(postun):/sbin/ldconfig
++ samba-4.16.1+git.235.f435da606f7.tar.bz2 ->
samba-4.16.1+git.237.1d04c5f421f.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.16.1+git.235.f435da606f7.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1538/samba-4.16.1+git.237.1d04c5f421f.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-05-05 23:04:33
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1538 (New)
Package is "samba"
Thu May 5 23:04:33 2022 rev:280 rq:974677 version:4.16.1+git.235.f435da606f7
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-04-16
00:14:24.989662500 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1538/samba.changes2022-05-05
23:04:37.893425352 +0200
@@ -1,0 +2,33 @@
+Tue May 3 07:38:02 UTC 2022 - Samuel Cabrero
+
+- Update to 4.16.1
+ * Share and server swapped in smbget password prompt; (bso#14831);
+ * Durable handles won't reconnect if the leased file is written to;
+(bso#15022);
+ * rmdir silently fails if directory contains unreadable files and
+hide unreadable is yes; (bso#15023);
+ * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
+on renamed file handle; (bso#15038);
+ * Need to describe --builtin-libraries= better (compare with
+--bundled-libraries); (bso#8731);
+ * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
+(bso#14957);
+ * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
+(bso#15035);
+ * PAM Kerberos authentication incorrectly fails with a clock skew
+error; (bso#15046);
+ * Username map - samba erroneously applies unix group memberships
+to user account entries; (bso#15041);
+ * KVNO off by 10; (bso#14951);
+ * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
+ * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
+ * smbd doesn't handle UPNs for looking up names; (bso#15054);
+
+---
+Wed Apr 20 09:00:49 UTC 2022 - Noel Power
+
+- Update update-apparmor-samba-profile script, replace
+ non-printable delimiter with more human readable separator as
+ sed can accept separators that can appear in the input data.
+
+---
Old:
samba-4.16.0+git.227.931848a12ab.tar.bz2
New:
samba-4.16.1+git.235.f435da606f7.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.ZfQCWE/_old 2022-05-05 23:04:38.977426706 +0200
+++ /var/tmp/diff_new_pack.ZfQCWE/_new 2022-05-05 23:04:38.985426716 +0200
@@ -142,7 +142,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.16.0+git.227.931848a12ab
+Version:4.16.1+git.235.f435da606f7
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.16.0+git.227.931848a12ab.tar.bz2 ->
samba-4.16.1+git.235.f435da606f7.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.16.0+git.227.931848a12ab.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1538/samba-4.16.1+git.235.f435da606f7.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-04-16 00:14:05
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1941 (New)
Package is "samba"
Sat Apr 16 00:14:05 2022 rev:279 rq:970232 version:4.16.0+git.227.931848a12ab
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-04-08
00:26:56.150849496 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1941/samba.changes2022-04-16
00:14:24.989662500 +0200
@@ -1,0 +2,6 @@
+Wed Apr 13 15:33:22 UTC 2022 - Noel Power
+
+- Fix update-apparmor-samba-profile script, sed doesn't like
+ multibyte separators; (bsc#1198309).
+
+---
Old:
samba-4.16.0+git.224.70319beb8f8.tar.bz2
New:
samba-4.16.0+git.227.931848a12ab.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.7IyPa3/_old 2022-04-16 00:14:26.265664203 +0200
+++ /var/tmp/diff_new_pack.7IyPa3/_new 2022-04-16 00:14:26.269664209 +0200
@@ -142,7 +142,7 @@
%endif
BuildRequires: sysuser-tools
-Version:4.16.0+git.224.70319beb8f8
+Version:4.16.0+git.227.931848a12ab
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.16.0+git.224.70319beb8f8.tar.bz2 ->
samba-4.16.0+git.227.931848a12ab.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.16.0+git.224.70319beb8f8.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1941/samba-4.16.0+git.227.931848a12ab.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2022-04-08 00:26:35 Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new.1900 (New) Package is "samba" Fri Apr 8 00:26:35 2022 rev:278 rq:966947 version:4.16.0+git.224.70319beb8f8 Changes: --- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-02-04 00:45:49.485327958 +0100 +++ /work/SRC/openSUSE:Factory/.samba.new.1900/samba.changes2022-04-08 00:26:56.150849496 +0200 @@ -1,0 +2,84 @@ +Thu Mar 24 15:00:36 UTC 2022 - Samuel Cabrero + +- Update to 4.16.0 + * New samba-dcerpcd binary to provide DCERPC in the member server +setup + * Certificate Auto Enrollment + * Ability to add ports to dns forwarder addresses in internal DNS +backend + * No longer using Linux mandatory locks for sharemodes + * SMB1 protocol has been deprecated, particularly older dialects + * SMB1 protocol SMBCopy command removed + * SMB1 server-side wildcard expansion removed +- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); +- Use systemd-sysusers to create system users; (bsc#1182847); + +--- +Tue Mar 15 17:54:57 UTC 2022 - Samuel Cabrero + +- Update to 4.15.6 + * Renaming file on DFS root fails with +NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); + * Samba does not response STATUS_INVALID_PARAMETER when opening 2 +objects with same lease key; (bso#14737); + * NT error code is not set when overwriting a file during rename +in libsmbclient; (bso#14938); + * Fix ldap simple bind with TLS auditing; (bso#14996); + * net ads info shows LDAP Server: 0.0.0.0 depending on contacted +server; (bso#14674); + * Problem when winbind renews Kerberos; (bso#14979); +(bsc#1196224); + * pam_winbind will not allow gdm login if password about to +expire; (bso#8691); + * virusfilter_vfs_openat: Not scanned: Directory or special file; +(bso#14971); + * DFS fix for AIX broken; (bso#13631); + * Solaris and AIX acl modules: wrong function arguments; +(bso#14974); + * Function aixacl_sys_acl_get_file not declared / coredump; +(bso#7239); + * Regression: Samba 4.15.2 on macOS segfaults intermittently +during strcpy in tdbsam_getsampwnam; (bso#14900); + * Fix a use-after-free in SMB1 server; (bso#14989); + * smb2_signing_decrypt_pdu() may not decrypt with +gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; +(bso#14968); + * Changing the machine password against an RODC likely destroys +the domain join; (bso#14984); + * authsam_make_user_info_dc() steals memory from its struct +ldb_message *msg argument; (bso#14993); + * Use Heimdal 8.0 (pre) rather than an earlier snapshot; +(bso#14995); + * Samba autorid fails to map AD users if id rangesize fits in the +id range only once; (bso#14967); + +--- +Mon Mar 07 16:05:42 UTC 2022 - David Mulder + +- Fix mismatched version of libldb2; (bsc#1196788). +- Drop obsolete SuSEfirewall2 service files. + +--- +Fri Mar 4 20:25:41 UTC 2022 - David Disseldorp + +- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; + (bsc#1080338). + +--- +Wed Feb 23 10:04:15 UTC 2022 - Noel Power + +- Fix ntlm authentications with "winbind use default domain = yes"; + (bso#13126); (bsc#1173429); (bsc#1196308). + +--- +Mon Feb 14 18:15:29 UTC 2022 - David Mulder + +- Fix samba-ad-dc status warning notification message by disabling + systemd notifications in bgqd; (bsc#1195896); (bso#14947). + +--- +Mon Feb 07 20:15:46 UTC 2022 - David Mulder + +- libldb version mismatch in Samba dsdb component; (bsc#1118508); + +--- Old: samba-4.15.5+git.328.f1f29505d84.tar.bz2 New: samba-4.16.0+git.224.70319beb8f8.tar.bz2 Other differences: -- ++ samba.spec ++ 1049 lines (skipped) between /work/SRC/openSUSE:Factory/samba/samba.spec and /work/SRC/openSUSE:Factory/.samba.new.1900/samba.spec ++ _service ++ --- /var/tmp/diff_new_pack.BiA4xN/_old 2022-04-08 00:26:57.450834906 +0200 +++ /var/tmp/diff_new_pack.BiA4xN/_new 2022-04-08 00:26:57.450834906 +0200 @@ -2,7 +2,7 @@ https://gitlab.suse.de/samba/suse-samba.git/ git -factory-4-15-stable +
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-02-04 00:45:43
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1898 (New)
Package is "samba"
Fri Feb 4 00:45:43 2022 rev:277 rq:950370 version:4.15.5+git.328.f1f29505d84
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-01-26
21:26:49.498058392 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.1898/samba.changes2022-02-04
00:45:49.485327958 +0100
@@ -1,0 +2,25 @@
+Mon Jan 31 14:23:44 UTC 2022 - Noel Power
+
+- Update to 4.15.5
+ * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the
+outside target of a symlink exists; (bso#14911);
+(bsc#1193690).
+ * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
+module; (bso#14914); (bsc#1194859).
+ * CVE-2022-0336: Re-adding an SPN skips subsequent SPN
+conflict checks; bso#14950); (bsc#1195048).
+
+---
+Wed Jan 26 12:00:35 UTC 2022 - Samuel Cabrero
+
+- CVE-2021-44141: Information leak via symlinks of existance of
+ files or directories outside of the exported share; (bso#14911);
+ (bsc#1193690);
+- CVE-2021-44142: Out-of-bounds heap read/write vulnerability
+ in VFS module vfs_fruit allows code execution; (bso#14914);
+ (bsc#1194859);
+- CVE-2022-0336: Samba AD users with permission to write to an
+ account can impersonate arbitrary services; (bso#14950);
+ (bsc#1195048);
+
+---
Old:
samba-4.15.4+git.224.dea2f6dc836.tar.bz2
New:
samba-4.15.5+git.328.f1f29505d84.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.JSfxli/_old 2022-02-04 00:45:50.589319907 +0100
+++ /var/tmp/diff_new_pack.JSfxli/_new 2022-02-04 00:45:50.593319878 +0100
@@ -208,7 +208,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.15.4+git.224.dea2f6dc836
+Version:4.15.5+git.328.f1f29505d84
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.15.4+git.224.dea2f6dc836.tar.bz2 ->
samba-4.15.5+git.328.f1f29505d84.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.15.4+git.224.dea2f6dc836.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1898/samba-4.15.5+git.328.f1f29505d84.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2022-01-26 21:26:37
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1938 (New)
Package is "samba"
Wed Jan 26 21:26:37 2022 rev:276 rq:948369 version:4.15.4+git.224.dea2f6dc836
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2022-01-22
08:17:58.418988872 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.1938/samba.changes2022-01-26
21:26:49.498058392 +0100
@@ -1,0 +2,24 @@
+Fri Jan 21 12:37:42 UTC 2022 - Samuel Cabrero
+
+- Update to 4.15.4
+ * Duplicate SMB file_ids leading to Windows client cache
+poisoning; (bso#14928);
+ * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error -
+NT_STATUS_BUFFER_TOO_SMALL; (bso#14932);
+ * kill_tcp_connections does not work; (bso#14934);
+ * Can't connect to Windows shares not requiring authentication
+using KDE/Gnome; (bso#14935);
+ * smbclient -L doesn't set "client max protocol" to NT1 before
+calling the "Reconnecting with SMB1 for workgroup listing"
+path; (bso#14939);
+ * Cross device copy of the crossrename module always fails;
+(bso#14940);
+ * symlinkat function from VFS cap module always fails with an
+error; (bso#14941);
+ * Fix possible fsp pointer deference; (bso#14942);
+ * Missing pop_sec_ctx() in error path inside close_directory();
+(bso#14944);
+ * "smbd --build-options" no longer works without an smb.conf file;
+(bso#14945);
+
+---
Old:
samba-4.15.3+git.219.40cc1cd8591.tar.bz2
New:
samba-4.15.4+git.224.dea2f6dc836.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.dLJC9W/_old 2022-01-26 21:26:50.570051001 +0100
+++ /var/tmp/diff_new_pack.dLJC9W/_new 2022-01-26 21:26:50.574050973 +0100
@@ -141,6 +141,8 @@
%endif
%define pkgconfig_req pkg-config
BuildRequires: %{pkgconfig_req}
+%if 0%{?sle_version} != 120500 || 0%{?is_opensuse}
+# Build with embedded libraries only in SLE 12 SP5, jsc#SLE-23330
BuildRequires: libldb-devel >= %{ldb_version}
BuildRequires: libtalloc-devel >= %{talloc_version}
BuildRequires: libtdb-devel >= %{tdb_version}
@@ -149,6 +151,7 @@
BuildRequires: python3-talloc-devel
BuildRequires: python3-tdb
BuildRequires: python3-tevent
+%endif
# to generate the man pages
BuildRequires: docbook-xsl-stylesheets
BuildRequires: libxslt
@@ -205,7 +208,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.15.3+git.219.40cc1cd8591
+Version:4.15.4+git.224.dea2f6dc836
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -724,6 +727,12 @@
%if ! 0%{?with_mscat}
bundled_libraries_extra+=",libtasn1"
%endif
+%if 0%{?sle_version} == 120500 && !0%{?is_opensuse}
+# Build with embedded libraries only in SLE 12 SP5, jsc#SLE-23330
+bundled_libraries_extra+=",talloc,pytalloc,tdb,pytdb,tevent,pytevent,ldb,pyldb"
+bundled_libraries_extra+=",pytalloc-util.%{py3_soflags}"
+bundled_libraries_extra+=",pyldb-util.%{py3_soflags}"
+%endif
CONFIGURE_OPTIONS="\
--prefix=%{_prefix} \
--localstatedir=%{_localstatedir} \
@@ -842,6 +851,44 @@
CONFIGDIR=%{CONFIGDIR}
%endif
+%if 0%{?sle_version} == 120500 && !0%{?is_opensuse}
+# Build with embedded libraries only in SLE 12 SP5, jsc#SLE-23330
+# Move the ldb and tdb tools to libdir to do not interfere with
+# system-wide tools provided by libldb1 and libtdb1 system packages
+
+install -d -m 0755 %{buildroot}/%{_libdir}/samba/bin
+mv %{buildroot}/%{_bindir}/ldbadd \
+ %{buildroot}/%{_bindir}/ldbdel \
+ %{buildroot}/%{_bindir}/ldbedit \
+ %{buildroot}/%{_bindir}/ldbmodify \
+ %{buildroot}/%{_bindir}/ldbrename \
+ %{buildroot}/%{_bindir}/ldbsearch \
+ %{buildroot}/%{_bindir}/tdbbackup \
+ %{buildroot}/%{_bindir}/tdbdump \
+ %{buildroot}/%{_bindir}/tdbrestore \
+ %{buildroot}/%{_bindir}/tdbtool \
+ %{buildroot}/%{_libdir}/samba/bin
+
+install -d -m 0755 %{buildroot}/%{_libdir}/samba/man/man1
+install -d -m 0755 %{buildroot}/%{_libdir}/samba/man/man3
+install -d -m 0755 %{buildroot}/%{_libdir}/samba/man/man8
+mv %{buildroot}/%{_mandir}/man1/ldbadd.1 \
+ %{buildroot}/%{_mandir}/man1/ldbdel.1 \
+ %{buildroot}/%{_mandir}/man1/ldbedit.1 \
+ %{buildroot}/%{_mandir}/man1/ldbmodify.1 \
+ %{buildroot}/%{_mandir}/man1/ldbrename.1 \
+ %{buildroot}/%{_mandir}/man1/ldbsearch.1 \
+ %{buildroot}/%{_libdir}/samba/man/man1/
+mv %{buildroot}/%{_mandir}/man3/ldb.3 \
+ %{buildroot}/%{_mandir}/man3/talloc.3 \
+ %{buildroot}/%{_libdir}/samba/man/man3/
+mv %{
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2022-01-22 08:17:50 Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new.1938 (New) Package is "samba" Sat Jan 22 08:17:50 2022 rev:275 rq:947217 version:4.15.3+git.219.40cc1cd8591 Changes: --- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-11-12 15:59:58.574584686 +0100 +++ /work/SRC/openSUSE:Factory/.samba.new.1938/samba.changes2022-01-22 08:17:58.418988872 +0100 @@ -1,0 +2,81 @@ +Tue Jan 18 09:14:20 UTC 2022 - Dominique Leuenberger + +- Use pkgconfig(krb5) as dependency for the -devel package: allow + OBS to pick the right flavor of krb5-devel (full vs mini). +- Do not require the 'krb5' symbol by samba-client-libs: this + package has an automatic dependency due to linkage on + libgssapi_krb5.so.2. Automatic deps are always better. +- Do not require the 'krb5' symbol from samba-libs: samba-libs + requires samba-client-libs, which in turn requires krb5 + libraries. Samba-libs itself has no need for krb5 (but get it + indirectly anyway). + +--- +Thu Jan 13 19:39:42 UTC 2022 - Samuel Cabrero + +- Reorganize libs packages. Split samba-libs into samba-client-libs, + samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba + public libraries depending on internal samba libraries into these + packages as there were dependency problems everytime one of these + public libraries changed its version (bsc#1192684). The devel + packages are merged into samba-devel. +- Rename package samba-core-devel to samba-devel +- Add python-rpm-macros to build requirements +- Update the symlink create by samba-dsdb-modules to private samba + ldb modules following libldb2 changes from /usr/lib64/ldb/samba to + /usr/lib64/ldb2/modules/ldb/samba + +--- +Fri Dec 10 17:13:28 UTC 2021 - Samuel Cabrero + +- Update to 4.15.3 + * Recursive directory delete with veto files is broken in 4.15.0; +(bso#14878); + * A directory containing dangling symlinks cannot be deleted by +SMB2 alone when they are the only entry in the directory; +(bso#14879); + * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used +uninitialized in rmdir_internals(); (bso#14892); + * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); + * The CVE-2020-25717 username map [script] advice has undesired +side effects for the local nt token; (bso#14901); (bsc#1192849); + * User with multiple spaces (eg FredNurk) become +un-deletable; (bso#14902); + * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); + * smbXsrv_client_global record validation leads to crash if existing +record points at non-existing process; (bso#14882); + * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; +(bso#14890); + * Samba process doesn't log to logfile; (bso#14897); + * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() +triggers locking.tdb assert; (bso#14907); + * Kerberos authentication on standalone server in MIT realm broken; +(bso#14922); + * Segmentation fault when joining the domain; (bso#14923); + * Support for ROLE_IPA_DC is incomplete; (bso#14903); + * rpcclient cannot connect to ncacn_ip_tcp services anymore; +(bso#14767); + * winexe crashes since 4.15.0 after popt parsing; (bso#14893); + * net ads status -P broken in a clustered environment; (bso#14908); + * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before +smbd_smb2_ioctl_send; (bso#14788); + * winbindd doesn't start when "allow trusted domains" is off; +(bso#14899); + * smbclient login without password using '-N' fails with +NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); + * A schannel client incorrectly detects a downgrade connecting to +an AES only server; (bso#14912); + * Possible null pointer dereference in winbind; (bso#14921); + * Fix -k legacy option for client tools like smbclient, rpcclient, +net, etc.; (bso#14846); + * Add Debian 11 CI bootstrap support; (bso#14872); + * Crash in recycle_unlink_internal(); (bso#14888); + +--- +Thu Nov 18 17:18:40 UTC 2021 - Samuel Cabrero + +- Fix dependency problem upgrading from libndr0 to libndr2 and + from libsamba-credentials0 to libsamba-credentials1; + (bsc#1192684); + +--- Old: samba-4.15.2+git.193.a4d6307f1fd.tar.bz2 New: samba-4.15.3+git.219.40cc1cd8591.tar.bz2 Other differences: -
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2021-11-12 15:59:16
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1890 (New)
Package is "samba"
Fri Nov 12 15:59:16 2021 rev:274 rq:930760 version:4.15.2+git.193.a4d6307f1fd
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-10-08
22:05:14.964579979 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1890/samba.changes2021-11-12
15:59:58.574584686 +0100
@@ -1,0 +2,56 @@
+Wed Nov 10 10:26:01 UTC 2021 - Samuel Cabrero
+
+- Fix regression introduced by CVE-2020-25717 patches, winbindd
+ does not start when 'allow trusted domains' is off; (bso#14899);
+
+- Update to 4.15.2
+ * CVE-2016-2124: SMB1 client connections can be downgraded to
+plaintext authentication; (bso#12444); (bsc#1014440);
+ * CVE-2020-25717: A user on the domain can become root on domain
+members; (bso#14556); (bsc#1192284);
+ * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos
+tickets issued by an RODC; (bso#14558); (bsc#1192246);
+ * CVE-2020-25719: Samba AD DC did not always rely on the SID and
+PAC in Kerberos tickets; (bso#14561); (bsc#1192247);
+ * CVE-2020-25721: Kerberos acceptors need easy access to stable
+AD identifiers (eg objectSid); (bso#14557); (bsc#1192505);
+ * CVE-2020-25722: Samba AD DC did not do suffienct access and
+conformance checking of data stored; (bso#14564);
+(bsc#1192283);
+ * CVE-2021-3738: Use after free in Samba AD DC RPC server;
+(bso#14468); (bsc#1192215);
+ * CVE-2021-23192: Subsequent DCE/RPC fragment injection
+vulnerability; (bso#14875); (bsc#1192214);
+
+- Update to 4.15.1
+ * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682);
+ * Log clutter from filename_convert_internal; (bso#14685);
+ * MacOSX compilation fixes; (bso#14862);
+ * rodc_rwdc test flaps; (bso#14868);
+ * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
+ bit' S4U2Proxy Constrained Delegation bypass in Samba with
+ embedded Heimdal; (bso#14642);
+ * Python ldb.msg_diff() memory handling failure; (bso#14836);
+ * "in" operator on ldb.Message is case sensitive; (bso#14845);
+ * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848);
+ * samldb_krbtgtnumber_available() looks for incorrect string;
+ (bso#14854);
+ * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871);
+ * Allow special chars like "@" in samAccountName when generating
+ the salt; (bso#14874);
+ * Correctly ignore comments in CTDB public addresses file;
+ (bso#14826);
+ * Fix transit path validation; (bso#12998);
+ * Fix that child winbindd logs to log.winbindd instead of
+ log.wb-; (bso#14852);
+ * SMB3 cancel requests should only include the MID together with
+ AsyncID when AES-128-GMAC is used; (bso#14855);
+ * Prepare to operate with MIT krb5 >= 1.20; (bso#14870);
+ * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);
+
+---
+Wed Oct 13 17:07:47 UTC 2021 - David Mulder
+
+- Enable samba-tool without ad dc.
+
+---
Old:
samba-4.15.0+git.185.378416e547c.tar.bz2
New:
samba-4.15.2+git.193.a4d6307f1fd.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.UyI4GL/_old 2021-11-12 15:59:59.310585027 +0100
+++ /var/tmp/diff_new_pack.UyI4GL/_new 2021-11-12 15:59:59.310585027 +0100
@@ -53,7 +53,7 @@
%define talloc_version 2.3.3
%define tevent_version 0.11.0
%define tdb_version1.4.4
-%define ldb_version2.4.0
+%define ldb_version2.4.1
# This table represents the possible combinations of build macros.
# They are defined only if not already defined in the build service
@@ -184,7 +184,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.15.0+git.185.378416e547c
+Version:4.15.2+git.193.a4d6307f1fd
Release:0
URL:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -873,6 +873,18 @@
distributed file system. A Ceph CTDB lock helper binary is included so
that RADOS locks can be used for CTDB split-brain avoidance.
+
+%package -n samba-tool
+Summary:Main Samba administration tool
+License:GPL-3.0-or-later
+Group: Productivity/Networking/Samba
+Requires: samba = %{version}
+Requires: samba-python3 = %{version}
+Requires: samba-ldb-ldap = %{version}
+
+%description -n samba-tool
+The package contains samba-tool, the main tool for Samba Administration.
+
%package ad-dc
Summary:Samba Active Directory-c
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2021-10-08 22:04:53 Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new.2443 (New) Package is "samba" Fri Oct 8 22:04:53 2021 rev:273 rq:923243 version:4.15.0+git.185.378416e547c Changes: --- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-09-21 21:13:06.202635970 +0200 +++ /work/SRC/openSUSE:Factory/.samba.new.2443/samba.changes2021-10-08 22:05:14.964579979 +0200 @@ -1,0 +2,63 @@ +Thu Sep 30 15:57:14 UTC 2021 - Noel Power + +- Adjust spec to use pam macros; (bsc#1191046). + +--- +Wed Sep 29 08:58:28 UTC 2021 - Noel Power + +- Adjust spec for size + * allow some Recommends instead Requires to be configured +for cifs-utils, samba-libs-python3 & samba-gpupdate; +(bsc#1182847). + * remove fam, undocumented and unneeded. + +--- +Thu Sep 23 11:41:44 UTC 2021 - Samuel Cabrero + +- Add missing build dependency on bison when building with the + embedded Heimdal Kerberos + +--- +Mon Sep 20 14:25:41 UTC 2021 - Samuel Cabrero + +- Update to 4.15.0 + * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 + * VFS layer modernized. + * Add the ability to set allow/deny lists for zone transfer clients +in Bind DLZ plugin + * Server multi-channel support no longer experimental + * Improved command line user experience, unifying the options in +different commands + * Winbindd no longer scans trusted domains on startup and will use +enterprise principals by default. + * The net utility is now able to support the offline domain join feature + * New options for 'samba-tool dns zoneoptions' for aging control +and to mark old records as static or dynamic + * DNS tombstones are now deleted as appropriate and use a consistent +timestamp format + * The 'samba-tool dns update' command validates and rejects now malformed +IPv4 and IPv6 addresses + * The 'samba-tool domain backup' command correctly takes out locks +against concurrent modification during backup when using the LMDB +backend + * TruACL support has been removed + * NIS support has been removed + +--- +Thu Sep 16 07:55:35 UTC 2021 - Samuel Cabrero + +- Update to 4.14.7 + * smbd panic on force-close share during offload write; (bso#14769); + * smbd should support copy_file_range() for FSCTL_SRV_COPYCHUNK; +(bso#12033); + * Fix returned attributes on fake quota file handle and avoid hitting +the VFS; (bso#14731); + * vfs_shadow_copy2 fix inodes not correctly updating inode numbers; +(bso#14756); + * Fix build on Solaris; (bso#14774); + * Make dos attributes available for unreadable files; (bso#14654); + * Work around special SMB2 READ response behavior of NetApp Ontap +7.3.7; (bso#14607); + * Start the SMB encryption as soon as possible; (bso#14793); + +--- Old: samba-4.14.6+git.182.2205d5224e3.tar.bz2 New: samba-4.15.0+git.185.378416e547c.tar.bz2 Other differences: -- ++ samba.spec ++ 880 lines (skipped) between /work/SRC/openSUSE:Factory/samba/samba.spec and /work/SRC/openSUSE:Factory/.samba.new.2443/samba.spec ++ _service ++ --- /var/tmp/diff_new_pack.pP4x1X/_old 2021-10-08 22:05:15.908581532 +0200 +++ /var/tmp/diff_new_pack.pP4x1X/_new 2021-10-08 22:05:15.912581538 +0200 @@ -2,7 +2,7 @@ https://gitlab.suse.de/samba/suse-samba.git/ git -factory-4-14-stable +factory-4-15-stable @PARENT_TAG@+git.@TAG_OFFSET@.%h samba-(.*) \1 ++ baselibs.conf ++ --- /var/tmp/diff_new_pack.pP4x1X/_old 2021-10-08 22:05:15.928581565 +0200 +++ /var/tmp/diff_new_pack.pP4x1X/_new 2021-10-08 22:05:15.928581565 +0200 @@ -1,7 +1,9 @@ libdcerpc0 libdcerpc-binding0 libdcerpc-samr0 -libndr1 +libndr2 + provides "libndr1- = " + obsoletes "libndr1- < " libndr-krb5pac0 libndr-nbt0 libndr-standard0 ++ samba-4.14.6+git.182.2205d5224e3.tar.bz2 -> samba-4.15.0+git.185.378416e547c.tar.bz2 ++ /work/SRC/openSUSE:Factory/samba/samba-4.14.6+git.182.2205d5224e3.tar.bz2 /work/SRC/openSUSE:Factory/.samba.new.2443/samba-4.15.0+git.185.378416e547c.tar.bz2 differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2021-09-21 21:12:25
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1899 (New)
Package is "samba"
Tue Sep 21 21:12:25 2021 rev:272 rq:919671 version:4.14.6+git.182.2205d5224e3
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-08-05
20:48:19.887916658 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1899/samba.changes2021-09-21
21:13:06.202635970 +0200
@@ -1,0 +2,5 @@
+Tue Aug 17 16:30:25 UTC 2021 - David Mulder
+
+- Add Certificate Auto Enrollment Policy; (jsc#SLE-18457).
+
+---
Old:
samba-4.14.6+git.168.6a9fc8a1ddd.tar.bz2
New:
samba-4.14.6+git.182.2205d5224e3.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.aJu7or/_old 2021-09-21 21:13:07.450637380 +0200
+++ /var/tmp/diff_new_pack.aJu7or/_new 2021-09-21 21:13:07.454637385 +0200
@@ -172,7 +172,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.14.6+git.168.6a9fc8a1ddd
+Version:4.14.6+git.182.2205d5224e3
Release:0
Url:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -343,6 +343,29 @@
The samba-python3 package contains the Python libraries needed by programs
that use SMB, RPC and other Samba provided protocols in Python3 programs.
+%package gpupdate
+Summary:Samba Group Policy
+License:GPL-3.0-or-later
+Group: Productivity/Networking/Samba
+Requires: samba-ldb-ldap = %{version}
+Requires: sscep
+Requires: certmonger
+Requires: cepces
+Requires: samba-python3 = %{version}
+
+%description gpupdate
+The samba-gpupdate package provides the samba-gpupdate tool for applying
+Group Policies on a Samba client.
+
+%package ldb-ldap
+Summary:Samba Ldb Ldap Modules
+License:GPL-3.0-or-later
+Group: Productivity/Networking/Samba
+
+%description ldb-ldap
+samba-ldb-ldap contains the ldb ldap module required by samba-tool and
+samba-gpupdate.
+
%package test
Summary:Testing tools for Samba servers and clients
License:GPL-3.0-or-later
@@ -373,6 +396,7 @@
Requires: coreutils
Requires: samba-client >= %{version}
Requires: libtevent-util0 >= %{version}
+Requires: samba-gpupdate = %{version}
Requires(post): /sbin/ldconfig
Requires(postun): /sbin/ldconfig
@@ -930,6 +954,7 @@
License:GPL-3.0-or-later
Group: Productivity/Networking/Samba
Requires: libldb2 >= %{ldb_version}
+Requires: samba-ldb-ldap = %{version}
Requires(post): /sbin/ldconfig
Requires(postun): /sbin/ldconfig
@@ -1097,8 +1122,6 @@
# debug symbols are created and installed if the files are excluded only
%if ! %{with_dc}
rm \
- %{buildroot}/%{_libdir}/samba/ldb/ildap.so \
- %{buildroot}/%{_libdir}/samba/ldb/ldbsamba_extensions.so \
%{buildroot}/%{_mandir}/man8/samba.8* \
%{buildroot}/%{_mandir}/man8/samba-tool.8* \
%{buildroot}/%{_mandir}/man8/samba_downgrade_db.8*
@@ -1979,6 +2002,11 @@
%defattr(-,root,root)
%{python3_sitearch}/*
+%files gpupdate
+%defattr(-,root,root)
+%{_sbindir}/samba-gpupdate
+%{_mandir}/man8/samba-gpupdate.8.gz
+
%files test
%defattr(-,root,root)
%{_bindir}/gentest
@@ -2013,7 +2041,6 @@
%{_bindir}/wbinfo
%{_sbindir}/rcwinbind
%{_sbindir}/winbindd
-%{_sbindir}/samba-gpupdate
/%{_lib}/security/pam_winbind.so
%{_libdir}/libnss_winbind.so.*
%{_libdir}/samba/idmap
@@ -2027,7 +2054,6 @@
%{_mandir}/man8/winbind_krb5_localauth.8.*
%{_mandir}/man8/winbind_krb5_locator.8.*
%{_mandir}/man5/pam_winbind.conf.5.*
-%{_mandir}/man8/samba-gpupdate.8.gz
%{_mandir}/man8/idmap_ad.8.*
%{_mandir}/man8/idmap_autorid.8.*
%{_mandir}/man8/idmap_hash.8.*
@@ -2526,6 +2552,11 @@
%{_mandir}/man8/samba-tool.8.*
%{_mandir}/man8/samba_downgrade_db.8.*
+%files ldb-ldap
+%defattr(-,root,root)
+%{_libdir}/samba/ldb/ildap.so
+%{_libdir}/samba/ldb/ldbsamba_extensions.so
+
%files dsdb-modules
%defattr(-,root,root)
%{_libdir}/samba/ldb/acl.so
@@ -2539,10 +2570,8 @@
%{_libdir}/samba/ldb/extended_dn_in.so
%{_libdir}/samba/ldb/extended_dn_out.so
%{_libdir}/samba/ldb/extended_dn_store.so
-%{_libdir}/samba/ldb/ildap.so
%{_libdir}/samba/ldb/instancetype.so
%{_libdir}/samba/ldb/lazy_commit.so
-%{_libdir}/samba/ldb/ldbsamba_extensions.so
%{_libdir}/samba/ldb/linked_attributes.so
%{_libdir}/samba/ldb/new_partition.so
%{_libdir}/samba/ldb/objectclass.so
++ samba-4.14.6+git.168.6a9fc8a1ddd.tar.bz2 ->
samba-4.14.6+git.182.2205d5224e3.tar.bz2
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2021-08-05 20:47:55
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1899 (New)
Package is "samba"
Thu Aug 5 20:47:55 2021 rev:271 rq:910101 version:4.14.6+git.168.6a9fc8a1ddd
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-06-13
23:05:35.791609269 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1899/samba.changes2021-08-05
20:48:19.887916658 +0200
@@ -1,0 +2,22 @@
+Fri Jul 23 16:05:05 UTC 2021 - David Mulder
+
+- Update to 4.14.6
+ * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722).
+ * smbd: Fix pathref unlinking in create_file_unixpath(); (bso#14732).
+ * s3: VFS: default: Add proc_fd's fallback for vfswrap_fchown();
(bso#14734).
+ * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
+ change_file_owner_to_parent() error path; (bso#14736).
+ * NT_STATUS_FILE_IS_A_DIRECTORY error messages when using
+ glusterfs VFS module; (bso#14730).
+ * s3/modules: fchmod: Fallback to path based chmod if pathref; (bso#14734).
+ * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740).
+ * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750).
+ * smbXsrv_{open,session,tcon}: protect
+ smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records;
+ (bso#14752).
+ * samba-tool domain backup offline doesn't work against bind DLZ
+ backend; (bso#14027).
+ * netcmd: Use next_free_rid() function to calculate a SID for
+ restoring a backup; (bso#14669).
+
+---
Old:
samba-4.14.5+git.165.70143cb153d.tar.bz2
New:
samba-4.14.6+git.168.6a9fc8a1ddd.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.r9s91y/_old 2021-08-05 20:48:20.803915630 +0200
+++ /var/tmp/diff_new_pack.r9s91y/_new 2021-08-05 20:48:20.807915626 +0200
@@ -172,7 +172,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.14.5+git.165.70143cb153d
+Version:4.14.6+git.168.6a9fc8a1ddd
Release:0
Url:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ samba-4.14.5+git.165.70143cb153d.tar.bz2 ->
samba-4.14.6+git.168.6a9fc8a1ddd.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.14.5+git.165.70143cb153d.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1899/samba-4.14.6+git.168.6a9fc8a1ddd.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2021-06-13 23:05:30
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.32437 (New)
Package is "samba"
Sun Jun 13 23:05:30 2021 rev:270 rq:898328 version:4.14.5+git.165.70143cb153d
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-05-02
18:35:28.609111236 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.32437/samba.changes 2021-06-13
23:05:35.791609269 +0200
@@ -1,0 +2,21 @@
+Tue Jun 1 08:38:12 UTC 2021 - Samuel Cabrero
+
+- Update to 4.14.5
+ * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success;
+(bso#14696);
+ * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows
+ACL for directory handles; (bso#14708);
+ * s3: smbd: Fix uninitialized memory read in process_symlink_open()
+when used with vfs_shadow_copy2(); (bso#14721);
+ * docs: Expand the "log level" docs on audit logging; (bso#14689);
+ * smbd: Correctly initialize close timestamp fields; (bso#14714);
+ * Fix gcc11 compiler issues; (bso#14699);
+ * docs-xml: Update smbcacls manpage; (bso#14718);
+ * docs: Update list of available commands in rpcclient; (bso#14719);
+ * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475);
+ * s3:winbind: For 'security = ADS' require realm/workgroup to be set;
+(bso#14695);
+ * lib:replace: Do not build strndup test with gcc 11 or newer;
+(bso#14699);
+
+---
Old:
samba-4.14.4+git.162.18fd73a39a0.tar.bz2
New:
samba-4.14.5+git.165.70143cb153d.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.jnU0Ic/_old 2021-06-13 23:05:37.003611461 +0200
+++ /var/tmp/diff_new_pack.jnU0Ic/_new 2021-06-13 23:05:37.007611467 +0200
@@ -172,7 +172,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.14.4+git.162.18fd73a39a0
+Version:4.14.5+git.165.70143cb153d
Release:0
Url:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ _service ++
--- /var/tmp/diff_new_pack.jnU0Ic/_old 2021-06-13 23:05:37.035611519 +0200
+++ /var/tmp/diff_new_pack.jnU0Ic/_new 2021-06-13 23:05:37.039611526 +0200
@@ -4,7 +4,7 @@
git
factory-4-14-stable
@PARENT_TAG@+git.@TAG_OFFSET@.%h
-samba(.*)
+samba-(.*)
\1
samba
.git
++ samba-4.14.4+git.162.18fd73a39a0.tar.bz2 ->
samba-4.14.5+git.165.70143cb153d.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.14.4+git.162.18fd73a39a0.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.32437/samba-4.14.5+git.165.70143cb153d.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2021-05-02 18:35:17
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.1947 (New)
Package is "samba"
Sun May 2 18:35:17 2021 rev:269 rq:889576 version:4.14.4+git.162.18fd73a39a0
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-04-22
18:03:18.986446464 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.1947/samba.changes2021-05-02
18:35:28.609111236 +0200
@@ -1,0 +2,28 @@
+Thu Apr 29 08:34:02 UTC 2021 - Noel Power
+- Update to 4.14.4
+ * CVE-2021-20254: Fix buffer overrun in sids_to_unixids();
+(bso#14571); (bsc#1184677).
+
+- Update to 4.14.3
+ * s3:modules:vfs_virusfilter: Recent New_VFS changes break
+vfs_virusfilter_openat; (bso#14671).
+ * build: Notice if flex is missing at configure time; (bso#14586).
+ * Fix smbd panic when two clients open same file; (bso#14672).
+ * Fix memory leak in the RPC server; (bso#14675).
+ * s3: smbd: fix deferred renames; (bso#14679).
+ * s3-iremotewinspool: Set the per-request memory context;
+(bso#14675)
+ * Fix memory leak in the RPC server; (bso#14675).
+ * third_party: Update socket_wrapper to version 1.3.2;
+(bso#11899).
+ * third_party: Update socket_wrapper to version 1.3.3;
+(bso#14640).
+ * samba-gpupdate: Test that sysvol paths download in
+case-insensitive way; (bso#14665).
+ * smbd: Ensure errno is preserved across fsp destructor;
+(bso#14662).
+ * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid
+conflict; (bso#14663).
+ * build: Only add -Wl,--as-needed when supported; (bso#14288).
+
+---
Old:
samba-4.14.2+git.159.2a8872214bf.tar.bz2
New:
samba-4.14.4+git.162.18fd73a39a0.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.vxXJf5/_old 2021-05-02 18:35:29.461107605 +0200
+++ /var/tmp/diff_new_pack.vxXJf5/_new 2021-05-02 18:35:29.465107588 +0200
@@ -172,7 +172,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.14.2+git.159.2a8872214bf
+Version:4.14.4+git.162.18fd73a39a0
Release:0
Url:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
++ _service ++
--- /var/tmp/diff_new_pack.vxXJf5/_old 2021-05-02 18:35:29.513107383 +0200
+++ /var/tmp/diff_new_pack.vxXJf5/_new 2021-05-02 18:35:29.517107367 +0200
@@ -4,7 +4,7 @@
git
factory-4-14-stable
@PARENT_TAG@+git.@TAG_OFFSET@.%h
-samba-(.*)
+samba(.*)
\1
samba
.git
++ samba-4.14.2+git.159.2a8872214bf.tar.bz2 ->
samba-4.14.4+git.162.18fd73a39a0.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.14.2+git.159.2a8872214bf.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.1947/samba-4.14.4+git.162.18fd73a39a0.tar.bz2
differ: char 11, line 1
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2021-04-22 18:03:13
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.12324 (New)
Package is "samba"
Thu Apr 22 18:03:13 2021 rev:268 rq:885268 version:4.14.2+git.159.2a8872214bf
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-03-08
15:16:24.101900837 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.12324/samba.changes 2021-04-22
18:03:18.986446464 +0200
@@ -1,0 +2,22 @@
+Wed Mar 31 14:59:15 UTC 2021 - Samuel Cabrero
+
+- Update to 4.14.2
+ * Release with dependency on ldb version 2.3.0.
+
+- Update to 4.14.1
+ * CVE-2021-20277: Fix out of bounds read in ldb_handler_fold; (bso#14655);
+ * CVE-2020-27840: Fix unauthenticated remote heap corruption via bad DNs;
+(bso#14595);
+
+- Update to 4.14.0
+ * VFS layer modernized.
+ * Printers publishing in AD improved.
+ * Client group policies support for sudoers configuration and
+cron jobs.
+ * Improved consistency of samba-tool subcommands.
+ * CTDB now uses the terms leader and follower instead of master and
+slave. Configuration options have changed accordingly.
+ * The ctdb isnotrecmaster command is removed.
+ * For details on all items see WHATSNEW.txt in samba-doc package.
+
+---
Old:
samba-4.13.4+git.199.be6e11f5ab2.tar.bz2
New:
samba-4.14.2+git.159.2a8872214bf.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.YYjhvu/_old 2021-04-22 18:03:19.898447874 +0200
+++ /var/tmp/diff_new_pack.YYjhvu/_new 2021-04-22 18:03:19.906447886 +0200
@@ -50,10 +50,10 @@
%endif
%endif
-%define talloc_version 2.3.1
+%define talloc_version 2.3.2
%define tevent_version 0.10.2
%define tdb_version1.4.3
-%define ldb_version2.1.4
+%define ldb_version2.3.0
%global with_mitkrb5 1
%global with_dc 0
@@ -103,6 +103,8 @@
BuildRequires: popt-devel
BuildRequires: python3-devel
BuildRequires: python3-xml
+BuildRequires: python3-Markdown
+BuildRequires: python3-dnspython
BuildRequires: readline-devel
%if 0%{?suse_version} >= 1330
BuildRequires: rpcgen
@@ -170,7 +172,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.13.4+git.199.be6e11f5ab2
+Version:4.14.2+git.159.2a8872214bf
Release:0
Url:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -397,6 +399,8 @@
Requires(pre): /bin/mktemp
Requires(pre): /usr/bin/killall
Requires(pre): /usr/bin/sed
+Provides: ctdb-tests = %{version}
+Obsoletes: ctdb-tests <= %{version}
%description -n ctdb
ctdb is the clustered database used by Samba
@@ -411,14 +415,6 @@
clients to view and capture detailed real-time performance metrics for
one or more cluster nodes.
-%package -n ctdb-tests
-Summary:CTDB clustered database test suite
-License:GPL-3.0-or-later
-Group: Development/Tools
-
-%description -n ctdb-tests
-Test suite for clustered database (CTDB).
-
%package -n libdcerpc-binding0
Summary:Some samba library
@@ -585,12 +581,13 @@
-%package -n libsamba-credentials0
+%package -n libsamba-credentials1
Summary:Samba credential management library
License:GPL-3.0-or-later
Group: System/Libraries
+Obsoletes: libsamba-credentials0 < %{version}
-%description -n libsamba-credentials0
+%description -n libsamba-credentials1
This subpackage contains libraries for credentials management.
@@ -598,7 +595,7 @@
Summary:Development files for the Samba credential management library
License:GPL-3.0-or-later
Group: Development/Libraries/C and C++
-Requires: libsamba-credentials0 = %{version}
+Requires: libsamba-credentials1 = %{version}
%description -n libsamba-credentials-devel
This subpackage contains libraries and header files for developing
@@ -1483,8 +1480,8 @@
%postun -n libndr1 -p /sbin/ldconfig
%post -n %{libnetapi_name} -p /sbin/ldconfig
%postun -n %{libnetapi_name} -p /sbin/ldconfig
-%post -n libsamba-credentials0 -p /sbin/ldconfig
-%postun -n libsamba-credentials0 -p /sbin/ldconfig
+%post -n libsamba-credentials1 -p /sbin/ldconfig
+%postun -n libsamba-credentials1 -p /sbin/ldconfig
%post -n libsamba-errors0 -p /sbin/ldconfig
%postun -n libsamba-errors0 -p /sbin/ldconfig
%post -n libsamba-hostconfig0 -p /sbin/ldconfig
@@ -2022,6 +2019,7 @@
%{_libdir}/samba/idmap
%{_libdir}/samba/nss_info
%dir %{_libdir}/samba/krb5
+%{_libdir}/samba/krb5/async_dns_krb5_locator.so
%{_libdir}/samba/krb5/winbind_krb5_l
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2021-03-08 15:15:11
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.2378 (New)
Package is "samba"
Mon Mar 8 15:15:11 2021 rev:267 rq:876695 version:4.13.4+git.199.be6e11f5ab2
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2021-02-18
20:48:51.103235451 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.2378/samba.changes2021-03-08
15:16:24.101900837 +0100
@@ -1,0 +2,6 @@
+Mon Mar 1 12:09:56 UTC 2021 - Samuel Cabrero
+
+- Spec file fixes around systemd and requires; (bsc#1182830);
+- Align systemd service unit files with upstream provided ones.
+
+---
Old:
samba-4.13.4+git.187.5ad4708741a.tar.bz2
New:
samba-4.13.4+git.199.be6e11f5ab2.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.HGIwMy/_old 2021-03-08 15:16:25.333901787 +0100
+++ /var/tmp/diff_new_pack.HGIwMy/_new 2021-03-08 15:16:25.337901790 +0100
@@ -170,7 +170,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.13.4+git.187.5ad4708741a
+Version:4.13.4+git.199.be6e11f5ab2
Release:0
Url:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -187,7 +187,7 @@
Requires(pre): /usr/sbin/groupadd
Requires: system-user-nobody
Requires: coreutils
-Requires: grep
+Requires: /usr/bin/grep
%if 0%{?suse_version} > 1220
Requires: %{fillup_prereq}
%endif
@@ -257,7 +257,6 @@
Requires(post): /sbin/ldconfig
Requires(postun): /sbin/ldconfig
Requires: coreutils
-%{?systemd_requires}
Requires: cifs-utils
%description client
@@ -397,7 +396,7 @@
Requires(pre): coreutils
Requires(pre): /bin/mktemp
Requires(pre): /usr/bin/killall
-Requires(pre): sed
+Requires(pre): /usr/bin/sed
%description -n ctdb
ctdb is the clustered database used by Samba
@@ -1027,6 +1026,8 @@
%if 0%{?suse_version} > 1220
--enable-avahi \
--with-systemd \
+ --with-systemddir=%{_unitdir} \
+ --systemd-install-services \
%endif
--with-shared-modules=%{auth_modules},%{vfs_modules},%{pdb_modules},%{idmap_modules}
\
%if %with_mitkrb5
@@ -1174,14 +1175,15 @@
%endif
%if 0%{?suse_version} > 1220
for srv_name in nmb smb winbind; do
- install -m 0644 -p systemd/${srv_name}.service %{buildroot}/%{_unitdir}
ln -s service %{buildroot}/%{_sbindir}/rc${srv_name}
done
%if %{with_dc}
- install -m 0644 -p systemd/samba-ad-dc.service %{buildroot}/%{_unitdir}
ln -s service %{buildroot}/%{_sbindir}/rcsamba-ad-dc
%endif
-install -m 0644 systemd/sysconfig.* %{buildroot}%{_fillupdir}
+rm %{buildroot}/%{_sysconfdir}/sysconfig/samba
+install -m 0644 systemd/sysconfig.samba %{buildroot}%{_fillupdir}
+install -m 0644 systemd/sysconfig.samba-winbind %{buildroot}%{_fillupdir}
+install -m 0644 systemd/sysconfig.samba-ad-dc %{buildroot}%{_fillupdir}
install -m 0644 -p ../systemd/samba.conf.tmp
%{buildroot}/%{_tmpfilesdir}/samba.conf
%else
for script in ${startScripts}; do
@@ -1387,7 +1389,7 @@
fi
%service_add_post nmb.service smb.service
-%{_bindir}/systemd-tmpfiles --create %{_tmpfilesdir}/samba.conf
+%tmpfiles_create samba.conf
%fillup_only
%endif
@@ -1512,6 +1514,7 @@
%post ad-dc
/sbin/ldconfig
%service_add_post samba-ad-dc.service
+%{fillup_only -ans samba ad-dc}
%postun ad-dc
/sbin/ldconfig
@@ -1547,7 +1550,7 @@
fi
%if 0%{?suse_version} > 1220
%service_add_post winbind.service
-%{_bindir}/systemd-tmpfiles --create %{_tmpfilesdir}/samba.conf
+%tmpfiles_create samba.conf
%{fillup_only -ans samba winbind}
%endif
@@ -1617,7 +1620,7 @@
%if 0%{?suse_version} > 1220
%{fillup_only -n ctdb}
%service_add_post ctdb.service
-%{_bindir}/systemd-tmpfiles --create %{_tmpfilesdir}/ctdb.conf || :
+%tmpfiles_create ctdb.conf
%else
%{fillup_and_insserv -n ctdb}
%endif
@@ -2424,6 +2427,7 @@
%if %{with_dc}
%files ad-dc
+%{_fillupdir}/sysconfig.samba-ad-dc
%{_unitdir}/samba-ad-dc.service
%{_bindir}/samba-tool
%{_sbindir}/samba
++ _service ++
--- /var/tmp/diff_new_pack.HGIwMy/_old 2021-03-08 15:16:25.385901827 +0100
+++ /var/tmp/diff_new_pack.HGIwMy/_new 2021-03-08 15:16:25.389901830 +0100
@@ -4,7 +4,7 @@
git
factory-4-13-stable
@PARENT_TAG@+git.@TAG_OFFSET@.%h
-samba(.*)
+samba-(.*)
\1
samba
.git
++ samba-4.13.4+git.187.5ad4708741a.tar.bz2 ->
samba-4.13.4+git.199.be6e11f5ab2.tar.bz2
commit samba for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2021-02-18 20:38:48
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.28504 (New)
Package is "samba"
Thu Feb 18 20:38:48 2021 rev:266 rq:872361 version:4.13.4+git.187.5ad4708741a
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2020-12-23
14:20:56.325707941 +0100
+++ /work/SRC/openSUSE:Factory/.samba.new.28504/samba.changes 2021-02-18
20:48:51.103235451 +0100
@@ -1,0 +2,29 @@
+Tue Jan 26 15:15:08 UTC 2021 - Samuel Cabrero
+
+- Update to 4.13.4
+ * Work around special SMB2 IOCTL response behavior of NetApp Ontap
+7.3.7; (bso#14607);
+ * Temporary DFS share setup doesn't set case parameters in the same
+way as a regular share definition does; (bso#14612);
+ * lib: Avoid declaring zero-length VLAs in various messaging functions;
+(bso#14605);
+ * Do not create an empty DB when accessing a sam.ldb; (bso#14579);
+ * vfs_fruit may close wrong backend fd; (bso#14596);
+ * Temporary DFS share setup doesn't set case parameters in the same way
+as a regular share definition does; (bso#14612);
+ * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606);
+ * vfs_fruit may close wrong backend fd; (bso#14596);
+ * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7;
+(bso#14607);
+ * The cache directory for the user gencache should be created recursively;
+(bso#14601);
+ * Be more flexible with repository names in CentOS 8 test environments;
+(bso#14594);
+
+---
+Mon Dec 28 09:41:57 UTC 2020 - Samuel Cabrero
+
+- Uninstalling samba-client: Failed to disable unit, cifs.service
+ does not exists; (bsc#1180388);
+
+---
Old:
samba-4.13.3+git.181.fc4672a5b81.tar.bz2
New:
samba-4.13.4+git.187.5ad4708741a.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.5XQBS5/_old 2021-02-18 20:48:51.963236291 +0100
+++ /var/tmp/diff_new_pack.5XQBS5/_new 2021-02-18 20:48:51.967236296 +0100
@@ -170,7 +170,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.13.3+git.181.fc4672a5b81
+Version:4.13.4+git.187.5ad4708741a
Release:0
Url:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -1412,7 +1412,9 @@
%endif
%preun client
+%if 0%{?suse_version} < 1221
%{?stop_on_removal:%{stop_on_removal %cifs_init_script}}
+%endif
%post client
/sbin/ldconfig
@@ -1938,7 +1940,6 @@
%{_libdir}/samba/libsmb-transport-samba4.so
%{_libdir}/samba/libsmbclient-raw-samba4.so
%{_libdir}/samba/libsmbd-base-samba4.so
-%{_libdir}/samba/libsmbd-conn-samba4.so
%{_libdir}/samba/libsmbd-shim-samba4.so
%{_libdir}/samba/libsmbldaphelper-samba4.so
%{_libdir}/samba/libsmbpasswdparser-samba4.so
++ samba-4.13.3+git.181.fc4672a5b81.tar.bz2 ->
samba-4.13.4+git.187.5ad4708741a.tar.bz2 ++
/work/SRC/openSUSE:Factory/samba/samba-4.13.3+git.181.fc4672a5b81.tar.bz2
/work/SRC/openSUSE:Factory/.samba.new.28504/samba-4.13.4+git.187.5ad4708741a.tar.bz2
differ: char 11, line 1
[opensuse-commit] commit samba for openSUSE:Factory
Hello community,
here is the log from the commit of package samba for openSUSE:Factory checked
in at 2020-11-21 12:40:16
Comparing /work/SRC/openSUSE:Factory/samba (Old)
and /work/SRC/openSUSE:Factory/.samba.new.5913 (New)
Package is "samba"
Sat Nov 21 12:40:16 2020 rev:264 rq:849281 version:4.13.2+git.176.0a5e55b510c
Changes:
--- /work/SRC/openSUSE:Factory/samba/samba.changes 2020-09-25
16:28:47.287744396 +0200
+++ /work/SRC/openSUSE:Factory/.samba.new.5913/samba.changes2020-11-23
10:49:41.670554506 +0100
@@ -1,0 +2,64 @@
+Mon Nov 16 09:30:52 UTC 2020 - Samuel Cabrero
+
+- Update to 4.13.2
+ + s3: modules: vfs_glusterfs: Fix leak of char **lines onto
+mem_ctx on return; (bso#14486);
+ + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
+(bso#14471);
+ + smb.conf.5: Add clarification how configuration changes reflected
+by Samba; (bso#14538);
+ + daemons: Report status to systemd even when running in foreground;
+(bso#14552);
+ + DNS Resolver: Support both dnspython before and after 2.0.0;
+(bso#14553);
+ + s3-vfs_glusterfs: Refuse connection when write-behind xlator is
+present; (bso#14486);
+ + provision: Add support for BIND 9.16.x; (bso#14487);
+ + ctdb-common: Avoid aliasing errors during code optimization;
+(bso#14537);
+ + libndr: Avoid assigning duplicate versions to symbols; (bso#14541);
+ + docs: Fix default value of spoolss:architecture; (bso#14522);
+ + winbind: Fix a memleak; (bso#14388);
+ + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531);
+ + docs-xml/manpages: Add warning about write-behind translator for
+vfs_glusterfs; (bso#14486);
+ + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h.
+ + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530);
+ + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547);
+ + examples:auth: Do not install example plugin; (bso#14550);
+ + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513);
+ + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
+(bso#14471);
+
+---
+Thu Nov 5 12:23:49 UTC 2020 - Noel Power
+
+- Adjust smbcacls '--propagate-inheritance' feature to align with
+ upstream; (bsc#1178469).
+
+---
+Tue Oct 6 16:52:00 UTC 2020 - Samuel Cabrero
+
+- Update to samba 4.13.1
+ + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
+easily crafted records; (bsc#1177613); (bso#14472);
+ + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
+(bso#14436);
+ + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
+(bsc#1173902); (bso#14434);
+- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
+ /var/run/samba; (bsc#1177355);
+
+---
+Mon Oct 5 12:44:53 UTC 2020 - David Disseldorp
+
+- Fix vfs_ceph query_directory regression; (bso#14519)
+- Drop liburing-devel for SLE15-SP2; (bsc#1177245)
+
+---
+Thu Sep 24 16:01:26 UTC 2020 - David Disseldorp
+
+- Register CTDB recovery lock holder with ceph-mgr
+- Add liburing-devel dependency
+
+---
Old:
samba-4.13.0+git.138.ff2d5480c67.tar.bz2
New:
samba-4.13.2+git.176.0a5e55b510c.tar.bz2
Other differences:
--
++ samba.spec ++
--- /var/tmp/diff_new_pack.Po948V/_old 2020-11-23 10:49:42.458555294 +0100
+++ /var/tmp/diff_new_pack.Po948V/_new 2020-11-23 10:49:42.462555299 +0100
@@ -155,6 +155,12 @@
BuildRequires: libgnutls-devel >= 3.5.6
BuildRequires: libtasn1-devel >= 3.8
%endif
+%if 0%{?sle_version} > 150200 || 0%{?suse_version} > 1500
+# liburing not yet available for all Factory architectures
+%ifnarch ppc armv6l armv7l
+BuildRequires: liburing-devel
+%endif
+%endif
%define libsmbclient_name libsmbclient0
%define libnetapi_name libnetapi0
@@ -164,7 +170,7 @@
%else
%definebuild_make_smp_mflags %{?jobs:-j%jobs}
%endif
-Version:4.13.0+git.138.ff2d5480c67
+Version:4.13.2+git.176.0a5e55b510c
Release:0
Url:https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -1360,6 +1366,12 @@
%endif
%post
+if testparm -s 2>&1 | grep "server schannel =" | grep -E "Auto|No"
+then
+echo "CVE-2020-1472(ZeroLogon):"
+echo "Please configure 'server schannel = yes'"
+echo "See https://bugzilla.samba.org/show_bug.cgi?id=14497";
+fi
%if 0%{?suse_version} > 1220
# bsc#1088574; bsc#1071090; bsc#1065551
++ samba-4.13.0+gi
