pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/trunk]: pkgsrc/net/samba Update samba package to 3.0.37.
details: https://anonhg.NetBSD.org/pkgsrc/rev/ffb389cc9e80
branches: trunk
changeset: 565696:ffb389cc9e80
user: taca <taca%pkgsrc.org@localhost>
date: Sun Oct 04 16:58:38 2009 +0000
description:
Update samba package to 3.0.37.
This is a security release in order to address CVE-2009-2813, CVE-2009-2948
and CVE-2009-2906.
Please note that Samba 3.0 is not maintained any longer. This security
release is shipped on a voluntary basis.
o CVE-2009-2813:
In all versions of Samba later than 3.0.11, connecting to the home
share of a user will use the root of the filesystem
as the home directory if this user is misconfigured to have
an empty home directory in /etc/passwd.
o CVE-2009-2948:
If mount.cifs is installed as a setuid program, a user can pass it a
credential or password path to which he or she does not have access and
then use the --verbose option to view the first line of that file.
o CVE-2009-2906:
Specially crafted SMB requests on authenticated SMB connections can
send smbd into a 100% CPU loop, causing a DoS on the Samba server.
diffstat:
net/samba/Makefile | 5 ++---
net/samba/distinfo | 25 +++++++++++++------------
net/samba/patches/patch-aa | 6 +++---
net/samba/patches/patch-at | 36 ++++++++++++++++++------------------
net/samba/patches/patch-au | 24 ++++++++++++------------
net/samba/patches/patch-bg | 10 +++++-----
net/samba/patches/patch-bo | 6 +++---
net/samba/patches/patch-bp | 6 +++---
net/samba/patches/patch-bu | 10 +++++-----
net/samba/patches/patch-bw | 10 +++++-----
net/samba/patches/patch-ci | 13 +++++++++++++
11 files changed, 82 insertions(+), 69 deletions(-)
diffs (truncated from 453 to 300 lines):
diff -r 808933529df8 -r ffb389cc9e80 net/samba/Makefile
--- a/net/samba/Makefile Sun Oct 04 15:59:56 2009 +0000
+++ b/net/samba/Makefile Sun Oct 04 16:58:38 2009 +0000
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.195 2009/09/09 15:15:17 wiz Exp $
+# $NetBSD: Makefile,v 1.196 2009/10/04 16:58:38 taca Exp $
.include "Makefile.mirrors"
DISTNAME= samba-${VERSION}
-PKGREVISION= 2
CATEGORIES= net
MASTER_SITES= ${SAMBA_MIRRORS:=old-versions/}
@@ -14,7 +13,7 @@
COMMENT= SMB/CIFS protocol server suite
LICENSE= gnu-gpl-v2
-VERSION= 3.0.36
+VERSION= 3.0.37
CONFLICTS+= ja-samba-[0-9]* pam-smbpass-[0-9]* tdb-[0-9]* \
winbind-[0-9]*
MAKE_JOBS_SAFE= NO
diff -r 808933529df8 -r ffb389cc9e80 net/samba/distinfo
--- a/net/samba/distinfo Sun Oct 04 15:59:56 2009 +0000
+++ b/net/samba/distinfo Sun Oct 04 16:58:38 2009 +0000
@@ -1,16 +1,16 @@
-$NetBSD: distinfo,v 1.71 2009/09/09 11:22:22 sketch Exp $
+$NetBSD: distinfo,v 1.72 2009/10/04 16:58:38 taca Exp $
-SHA1 (samba-3.0.36.tar.gz) = 6465a574a02823ecd0973d1f0fc0e851f04900cc
-RMD160 (samba-3.0.36.tar.gz) = aa50924ed9634e90be5fa4082477d57b48b55313
-Size (samba-3.0.36.tar.gz) = 23416298 bytes
-SHA1 (patch-aa) = b323c778c0c4f01cd102d019a996914d0d7eb106
+SHA1 (samba-3.0.37.tar.gz) = 5ec6bc6558b3c799f747eb49fbba019d5edf0cbd
+RMD160 (samba-3.0.37.tar.gz) = 06b76ae22729e10c83d6af42d03b03ad69e49103
+Size (samba-3.0.37.tar.gz) = 23416703 bytes
+SHA1 (patch-aa) = c3a1fd7cf6f8db8ea4001c697b19df555b496b29
SHA1 (patch-ac) = 47529dfe904768e6a3076131978c89fe2d1e3619
SHA1 (patch-ae) = 28fc3d1ad158f8025f1f9ba8e170d93c31fa45ba
SHA1 (patch-af) = 9f14842b7d0b5e66bf1d52bcacefe5e1aa392b7c
SHA1 (patch-ag) = c73e717e053b6618b2a334602fefabe5a5f98a98
SHA1 (patch-ak) = 0c69720954282022c7982d36eaee94a03db7b689
-SHA1 (patch-at) = d8f7ce814a2ce460d419ce6abf047505f170f3f2
-SHA1 (patch-au) = a3990e7da879e35bc184704547c08311bd8fa05e
+SHA1 (patch-at) = de18d1fa7f1d4a2e9e3c0b28173584c7d42ed710
+SHA1 (patch-au) = e8a86ff28c2e22e1a9c3b80b90bcaea573b856ca
SHA1 (patch-av) = c29ba19e96c24ef95a9a043f8678d77c00d73506
SHA1 (patch-aw) = 5b6c1bf65d23564eaabf1bafda41a29d1f687538
SHA1 (patch-ax) = e528921710514bc2651bfca808c21d608f928a95
@@ -19,22 +19,23 @@
SHA1 (patch-bc) = d525b9201a5cda85346704ad7b860e2b3a3aeb08
SHA1 (patch-bd) = faf24c792ecff76972d0a80f5418d8c38ca9ed21
SHA1 (patch-be) = b3386824969a1a02cf8e5d5a9889ce55f6813f48
-SHA1 (patch-bg) = d9081df9d43a686eaca8e3fad57cb99ed9fa844a
+SHA1 (patch-bg) = fb37c0496006258ac437f95acf6fe506bd19a68a
SHA1 (patch-bh) = 3098da6f800f66f46615af853c94e09e2a984b24
SHA1 (patch-bi) = 187427d1b884c6ae49369a7d33785cdd810e1769
SHA1 (patch-bm) = 20107d012f7e17f34cbaca8b8059214273f687ba
SHA1 (patch-bn) = e6071e4adf05c132d7e5ef0cc529b4e3df1cf567
-SHA1 (patch-bo) = 5d3091f33287f4d2f0bc7dadee119abd92f91653
-SHA1 (patch-bp) = 08f2387324aaec8161f3114de84d81c815dd8179
+SHA1 (patch-bo) = a846f8ae3f7c92c99cf34c04a33ef0cf89dae9cf
+SHA1 (patch-bp) = ab55020e477ff36403b1e5a9ce97b2118cdf5cde
SHA1 (patch-bq) = dc25eb43336d4ad7ecef1b4ea8c5dcd72cc91a7b
SHA1 (patch-br) = fc0d4c1f638a534f86e59ed8ebaddbf1978fa64f
SHA1 (patch-bs) = 1c08caf388e337497464097a11c909ddd5f9a3ff
-SHA1 (patch-bu) = b5f5dd7b2f4d8d246acc32a71556e0ff2f005b68
+SHA1 (patch-bu) = 317d0a197e4564c6ab734890302c1f73cc54e1df
SHA1 (patch-bv) = 2d80f4e24edab32bf4f620f651e70b9e63d28cc5
-SHA1 (patch-bw) = 11f9b3713382a23075ed5980d7b8a2dbd11ecf54
+SHA1 (patch-bw) = 83a57fd2c21e1abd1bfab046e867096d46931958
SHA1 (patch-ca) = 0c2c4c1bdb3348de3e8719cc468a6e0c28a36b73
SHA1 (patch-ce) = 81c6c2d9c6c0df7180d41a0382f2b4600f545620
SHA1 (patch-cf) = 8b50f657f8f4fa71936ec4766c2517ca5d128ff7
SHA1 (patch-cg) = 2755a019759826a39c3e201f6a0d1646e6dd2fba
SHA1 (patch-ch) = 3c4c404519154e294cee134ddb4d2b9c7d8e02a2
+SHA1 (patch-ci) = d78298d0997cf7877cfe2411355fb6c61dec17f6
SHA1 (patch-da) = 2dddd250b2207d658b02ff43b46199ce4305b7f8
diff -r 808933529df8 -r ffb389cc9e80 net/samba/patches/patch-aa
--- a/net/samba/patches/patch-aa Sun Oct 04 15:59:56 2009 +0000
+++ b/net/samba/patches/patch-aa Sun Oct 04 16:58:38 2009 +0000
@@ -1,8 +1,8 @@
-$NetBSD: patch-aa,v 1.32 2008/04/03 20:19:42 jlam Exp $
+$NetBSD: patch-aa,v 1.33 2009/10/04 16:58:38 taca Exp $
---- nsswitch/pam_winbind.c.orig 2008-03-08 10:56:27.000000000 -0500
+--- nsswitch/pam_winbind.c.orig 2009-09-30 21:21:56.000000000 +0900
+++ nsswitch/pam_winbind.c
-@@ -1291,6 +1291,8 @@ static char *_pam_delete(register char *
+@@ -1295,6 +1295,8 @@ static char *_pam_delete(register char *
return NULL;
}
diff -r 808933529df8 -r ffb389cc9e80 net/samba/patches/patch-at
--- a/net/samba/patches/patch-at Sun Oct 04 15:59:56 2009 +0000
+++ b/net/samba/patches/patch-at Sun Oct 04 16:58:38 2009 +0000
@@ -1,8 +1,8 @@
-$NetBSD: patch-at,v 1.13 2009/07/08 19:37:27 tron Exp $
+$NetBSD: patch-at,v 1.14 2009/10/04 16:58:38 taca Exp $
---- configure.orig 2009-06-22 22:02:40.000000000 +0100
-+++ configure 2009-07-08 15:21:45.000000000 +0100
-@@ -765,6 +765,7 @@
+--- configure.orig 2009-09-30 22:08:58.000000000 +0900
++++ configure
+@@ -765,6 +765,7 @@ swatdir
privatedir
logfilebase
piddir
@@ -10,7 +10,7 @@
lockdir
configdir
target_os
-@@ -827,6 +828,7 @@
+@@ -827,6 +828,7 @@ with_fhs
with_privatedir
with_rootsbindir
with_lockdir
@@ -18,7 +18,7 @@
with_piddir
with_swatdir
with_configdir
-@@ -1537,6 +1539,7 @@
+@@ -1537,6 +1539,7 @@ Optional Packages:
--with-privatedir=DIR Where to put smbpasswd ($ac_default_prefix/private)
--with-rootsbindir=DIR Which directory to use for root sbin ($ac_default_prefix/sbin)
--with-lockdir=DIR Where to put lock files ($ac_default_prefix/var/locks)
@@ -26,7 +26,7 @@
--with-piddir=DIR Where to put pid files ($ac_default_prefix/var/locks)
--with-swatdir=DIR Where to put SWAT files ($ac_default_prefix/swat)
--with-configdir=DIR Where to put configuration files ($libdir)
-@@ -2296,6 +2299,7 @@
+@@ -2296,6 +2299,7 @@ fi
rootsbindir="\${SBINDIR}"
lockdir="\${VARDIR}/locks"
@@ -34,7 +34,7 @@
piddir="\${VARDIR}/locks"
test "${mandir}" || mandir="\${prefix}/man"
logfilebase="\${VARDIR}"
-@@ -2310,7 +2314,8 @@
+@@ -2310,7 +2314,8 @@ swatdir="\${prefix}/swat"
if test "${with_fhs+set}" = set; then
withval=$with_fhs; case "$withval" in
yes)
@@ -44,7 +44,7 @@
piddir="\${VARDIR}/run"
mandir="\${prefix}/share/man"
logfilebase="\${VARDIR}/log/samba"
-@@ -2384,6 +2389,26 @@
+@@ -2384,6 +2389,26 @@ fi
#################################################
@@ -71,7 +71,7 @@
# set pid directory location
# Check whether --with-piddir was given.
-@@ -2624,6 +2649,7 @@
+@@ -2624,6 +2649,7 @@ fi
@@ -79,7 +79,7 @@
## check for --enable-debug first before checking CFLAGS before
## so that we don't mix -O and -g
# Check whether --enable-debug was given.
-@@ -33459,7 +33485,8 @@
+@@ -33670,7 +33696,8 @@ done
@@ -89,7 +89,7 @@
do
as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
{ $as_echo "$as_me:$LINENO: checking for $ac_func" >&5
-@@ -49772,6 +49799,77 @@
+@@ -49983,6 +50010,77 @@ done
##################
# look for a method of finding the list of network interfaces
iface=no;
@@ -167,7 +167,7 @@
{ $as_echo "$as_me:$LINENO: checking for iface AIX" >&5
$as_echo_n "checking for iface AIX... " >&6; }
if test "${samba_cv_HAVE_IFACE_AIX+set}" = set; then
-@@ -49842,6 +49940,7 @@
+@@ -50053,6 +50151,7 @@ cat >>confdefs.h <<\_ACEOF
_ACEOF
fi
@@ -175,7 +175,7 @@
if test $iface = no; then
{ $as_echo "$as_me:$LINENO: checking for iface ifconf" >&5
-@@ -53369,9 +53468,9 @@
+@@ -53580,9 +53679,9 @@ LIBS="-lcrypto $KRB5_LIBS $LIBS"
@@ -188,7 +188,7 @@
$as_echo_n "(cached) " >&6
else
cat >conftest.$ac_ext <<_ACEOF
-@@ -53387,11 +53486,11 @@
+@@ -53598,11 +53697,11 @@ cat >>conftest.$ac_ext <<_ACEOF
#ifdef __cplusplus
extern "C"
#endif
@@ -202,7 +202,7 @@
;
return 0;
}
-@@ -53417,13 +53516,13 @@
+@@ -53628,13 +53727,13 @@ $as_echo "$ac_try_echo") >&5
test "$cross_compiling" = yes ||
$as_test_x conftest$ac_exeext
}; then
@@ -218,7 +218,7 @@
ac_cv_lib_ext_crypto=no
fi
-@@ -53432,11 +53531,11 @@
+@@ -53643,11 +53742,11 @@ rm -f core conftest.err conftest.$ac_obj
conftest$ac_exeext conftest.$ac_ext
fi
@@ -234,7 +234,7 @@
_ACEOF
fi
-@@ -67188,31 +67287,39 @@
+@@ -67399,31 +67498,39 @@ case "$host_os" in
NSSSONAMEVERSIONSUFFIX=".2"
WINBIND_NSS_EXTRA_OBJS="nsswitch/winbind_nss_linux.o"
;;
diff -r 808933529df8 -r ffb389cc9e80 net/samba/patches/patch-au
--- a/net/samba/patches/patch-au Sun Oct 04 15:59:56 2009 +0000
+++ b/net/samba/patches/patch-au Sun Oct 04 16:58:38 2009 +0000
@@ -1,7 +1,7 @@
-$NetBSD: patch-au,v 1.10 2009/03/03 17:50:49 sborrill Exp $
---- configure.in.orig 2008-08-25 22:09:21.000000000 +0100
-+++ configure.in 2009-03-03 17:11:54.000000000 +0000
-@@ -38,6 +38,7 @@
+$NetBSD: patch-au,v 1.11 2009/10/04 16:58:38 taca Exp $
+--- configure.in.orig 2009-09-30 21:21:56.000000000 +0900
++++ configure.in
+@@ -38,6 +38,7 @@ AC_PREFIX_DEFAULT(/usr/local/samba)
rootsbindir="\${SBINDIR}"
lockdir="\${VARDIR}/locks"
@@ -9,7 +9,7 @@
piddir="\${VARDIR}/locks"
test "${mandir}" || mandir="\${prefix}/man"
logfilebase="\${VARDIR}"
-@@ -51,7 +52,8 @@
+@@ -51,7 +52,8 @@ AC_ARG_WITH(fhs,
[ --with-fhs Use FHS-compliant paths (default=no)],
[ case "$withval" in
yes)
@@ -19,7 +19,7 @@
piddir="\${VARDIR}/run"
mandir="\${prefix}/share/man"
logfilebase="\${VARDIR}/log/samba"
-@@ -111,6 +113,22 @@
+@@ -111,6 +113,22 @@ AC_ARG_WITH(lockdir,
esac])
#################################################
@@ -42,7 +42,7 @@
# set pid directory location
AC_ARG_WITH(piddir,
[ --with-piddir=DIR Where to put pid files ($ac_default_prefix/var/locks)],
-@@ -257,6 +275,7 @@
+@@ -257,6 +275,7 @@ fi
AC_SUBST(configdir)
AC_SUBST(lockdir)
@@ -50,7 +50,7 @@
AC_SUBST(piddir)
AC_SUBST(logfilebase)
AC_SUBST(privatedir)
-@@ -1242,7 +1261,7 @@
+@@ -1245,7 +1264,7 @@ AC_CHECK_FUNCS(lstat64 fopen64 atexit gr
AC_CHECK_FUNCS(fseek64 fseeko64 ftell64 ftello64 setluid getpwanam setlinebuf)
AC_CHECK_FUNCS(opendir64 readdir64 seekdir64 telldir64 rewinddir64 closedir64)
AC_CHECK_FUNCS(getpwent_r)
@@ -59,7 +59,7 @@
AC_CHECK_FUNCS(srandom random srand rand setenv usleep strcasecmp fcvt fcvtl symlink readlink)
AC_CHECK_FUNCS(syslog vsyslog timegm)
AC_CHECK_FUNCS(setlocale nl_langinfo)
-@@ -2821,6 +2840,20 @@
+@@ -2824,6 +2843,20 @@ AC_CHECK_FUNCS(getpagesize)
##################
# look for a method of finding the list of network interfaces
iface=no;
@@ -80,7 +80,7 @@
AC_CACHE_CHECK([for iface AIX],samba_cv_HAVE_IFACE_AIX,[
SAVE_CPPFLAGS="$CPPFLAGS"
CPPFLAGS="$CPPFLAGS ${SAMBA_CONFIGURE_CPPFLAGS}"
Home |
Main Index |
Thread Index |
Old Index