Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2020-11-21 12:40:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new.5913 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "samba" Sat Nov 21 12:40:16 2020 rev:264 rq:849281 version:4.13.2+git.176.0a5e55b510c Changes: -------- --- /work/SRC/openSUSE:Factory/samba/samba.changes 2020-09-25 16:28:47.287744396 +0200 +++ /work/SRC/openSUSE:Factory/.samba.new.5913/samba.changes 2020-11-23 10:49:41.670554506 +0100 @@ -1,0 +2,64 @@ +Mon Nov 16 09:30:52 UTC 2020 - Samuel Cabrero <scabr...@suse.de> + +- Update to 4.13.2 + + s3: modules: vfs_glusterfs: Fix leak of char **lines onto + mem_ctx on return; (bso#14486); + + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; + (bso#14471); + + smb.conf.5: Add clarification how configuration changes reflected + by Samba; (bso#14538); + + daemons: Report status to systemd even when running in foreground; + (bso#14552); + + DNS Resolver: Support both dnspython before and after 2.0.0; + (bso#14553); + + s3-vfs_glusterfs: Refuse connection when write-behind xlator is + present; (bso#14486); + + provision: Add support for BIND 9.16.x; (bso#14487); + + ctdb-common: Avoid aliasing errors during code optimization; + (bso#14537); + + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + + docs: Fix default value of spoolss:architecture; (bso#14522); + + winbind: Fix a memleak; (bso#14388); + + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + + docs-xml/manpages: Add warning about write-behind translator for + vfs_glusterfs; (bso#14486); + + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + + examples:auth: Do not install example plugin; (bso#14550); + + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; + (bso#14471); + +------------------------------------------------------------------- +Thu Nov 5 12:23:49 UTC 2020 - Noel Power <nopo...@suse.com> + +- Adjust smbcacls '--propagate-inheritance' feature to align with + upstream; (bsc#1178469). + +------------------------------------------------------------------- +Tue Oct 6 16:52:00 UTC 2020 - Samuel Cabrero <scabr...@suse.de> + +- Update to samba 4.13.1 + + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with + easily crafted records; (bsc#1177613); (bso#14472); + + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); + (bso#14436); + + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; + (bsc#1173902); (bso#14434); +- Adjust systemd tmpfiles.d configuration, use /run/samba instead of + /var/run/samba; (bsc#1177355); + +------------------------------------------------------------------- +Mon Oct 5 12:44:53 UTC 2020 - David Disseldorp <dd...@suse.com> + +- Fix vfs_ceph query_directory regression; (bso#14519) +- Drop liburing-devel for SLE15-SP2; (bsc#1177245) + +------------------------------------------------------------------- +Thu Sep 24 16:01:26 UTC 2020 - David Disseldorp <dd...@suse.com> + +- Register CTDB recovery lock holder with ceph-mgr +- Add liburing-devel dependency + +------------------------------------------------------------------- Old: ---- samba-4.13.0+git.138.ff2d5480c67.tar.bz2 New: ---- samba-4.13.2+git.176.0a5e55b510c.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ samba.spec ++++++ --- /var/tmp/diff_new_pack.Po948V/_old 2020-11-23 10:49:42.458555294 +0100 +++ /var/tmp/diff_new_pack.Po948V/_new 2020-11-23 10:49:42.462555299 +0100 @@ -155,6 +155,12 @@ BuildRequires: libgnutls-devel >= 3.5.6 BuildRequires: libtasn1-devel >= 3.8 %endif +%if 0%{?sle_version} > 150200 || 0%{?suse_version} > 1500 +# liburing not yet available for all Factory architectures +%ifnarch ppc armv6l armv7l +BuildRequires: liburing-devel +%endif +%endif %define libsmbclient_name libsmbclient0 %define libnetapi_name libnetapi0 @@ -164,7 +170,7 @@ %else %define build_make_smp_mflags %{?jobs:-j%jobs} %endif -Version: 4.13.0+git.138.ff2d5480c67 +Version: 4.13.2+git.176.0a5e55b510c Release: 0 Url: https://www.samba.org/ Obsoletes: samba-32bit < %{version} @@ -1360,6 +1366,12 @@ %endif %post +if testparm -s 2>&1 | grep "server schannel =" | grep -E "Auto|No" +then + echo "CVE-2020-1472(ZeroLogon):" + echo "Please configure 'server schannel = yes'" + echo "See https://bugzilla.samba.org/show_bug.cgi?id=14497" +fi %if 0%{?suse_version} > 1220 # bsc#1088574; bsc#1071090; bsc#1065551 ++++++ samba-4.13.0+git.138.ff2d5480c67.tar.bz2 -> samba-4.13.2+git.176.0a5e55b510c.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/samba/samba-4.13.0+git.138.ff2d5480c67.tar.bz2 /work/SRC/openSUSE:Factory/.samba.new.5913/samba-4.13.2+git.176.0a5e55b510c.tar.bz2 differ: char 11, line 1 _______________________________________________ openSUSE Commits mailing list -- commit@lists.opensuse.org To unsubscribe, email commit-le...@lists.opensuse.org List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette List Archives: https://lists.opensuse.org/archives/list/commit@lists.opensuse.org