CVS commit: pkgsrc/net/samba4

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Nov 10 13:33:20 UTC 2021

Modified Files:
        pkgsrc/net/samba4: Makefile PLIST distinfo

Log Message:
samba4: updated to 4.13.14

Changes since 4.13.13
---------------------

o  Douglas Bagnall <douglas.bagnall%catalyst.net.nz@localhost>
   * CVE-2020-25722

o  Andrew Bartlett <abartlet%samba.org@localhost>
   * CVE-2020-25718
   * CVE-2020-25719
   * CVE-2020-25721
   * CVE-2020-25722

o  Ralph Boehme <slow%samba.org@localhost>
   * CVE-2020-25717

o  Alexander Bokovoy <ab%samba.org@localhost>
   * CVE-2020-25717

o  Samuel Cabrero <scabrero%samba.org@localhost>
   * CVE-2020-25717

o  Nadezhda Ivanova <nivanova%symas.com@localhost>
   * CVE-2020-25722

o  Stefan Metzmacher <metze%samba.org@localhost>
   * CVE-2016-2124
   * CVE-2020-25717
   * CVE-2020-25719
   * CVE-2020-25722
   * CVE-2021-23192
   * CVE-2021-3738
   * ldb: version 2.2.3

o  Andreas Schneider <asn%samba.org@localhost>
   * CVE-2020-25719

o  Joseph Sutton <josephsutton%catalyst.net.nz@localhost>
   * CVE-2020-17049
   * CVE-2020-25718
   * CVE-2020-25719
   * CVE-2020-25721
   * CVE-2020-25722
   * MS CVE-2020-17049

Changes since 4.13.12
---------------------

o  Douglas Bagnall <douglas.bagnall%catalyst.net.nz@localhost>
   * BUG 14868: rodc_rwdc test flaps.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Andrew Bartlett <abartlet%samba.org@localhost>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with
     embedded Heimdal.
   * BUG 14836: Python ldb.msg_diff() memory handling failure.
   * BUG 14845: "in" operator on ldb.Message is case sensitive.
   * BUG 14848: Release LDB 2.3.1 for Samba 4.14.9.
   * BUG 14871: Fix Samba support for UF_NO_AUTH_DATA_REQUIRED.
   * BUG 14874: Allow special chars like "@" in samAccountName when generating
     the salt.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Isaac Boukris <iboukris%gmail.com@localhost>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with
     embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Viktor Dukhovni <viktor%twosigma.com@localhost>
   * BUG 12998: Fix transit path validation.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Luke Howard <lukeh%padl.com@localhost>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with
     embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Stefan Metzmacher <metze%samba.org@localhost>
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  David Mulder <dmulder%suse.com@localhost>
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Andreas Schneider <asn%samba.org@localhost>
   * BUG 14870: Prepare to operate with MIT krb5 >= 1.20.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Joseph Sutton <josephsutton%catalyst.net.nz@localhost>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with
     embedded Heimdal.
   * BUG 14645: rpcclient NetFileEnum and net rpc file both cause lock order
     violation: brlock.tdb, share_entries.tdb.
   * BUG 14836: Python ldb.msg_diff() memory handling failure.
   * BUG 14845: "in" operator on ldb.Message is case sensitive.
   * BUG 14848: Release LDB 2.3.1 for Samba 4.14.9.
   * BUG 14868: rodc_rwdc test flaps.
   * BUG 14871: Fix Samba support for UF_NO_AUTH_DATA_REQUIRED.
   * BUG 14874: Allow special chars like "@" in samAccountName when generating
     the salt.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Nicolas Williams <nico%twosigma.com@localhost>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with
     embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.


To generate a diff of this commit:
cvs rdiff -u -r1.131 -r1.132 pkgsrc/net/samba4/Makefile
cvs rdiff -u -r1.39 -r1.40 pkgsrc/net/samba4/PLIST
cvs rdiff -u -r1.68 -r1.69 pkgsrc/net/samba4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/samba4/Makefile
diff -u pkgsrc/net/samba4/Makefile:1.131 pkgsrc/net/samba4/Makefile:1.132
--- pkgsrc/net/samba4/Makefile:1.131    Fri Oct  8 13:20:34 2021
+++ pkgsrc/net/samba4/Makefile  Wed Nov 10 13:33:20 2021
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.131 2021/10/08 13:20:34 adam Exp $
+# $NetBSD: Makefile,v 1.132 2021/11/10 13:33:20 adam Exp $
 
 # WARNING: DO NOT UPDATE WITHOUT RESOLVING THIS ISSUE:
 #
@@ -7,7 +7,7 @@
 #
 # Please do not update without testing on NetBSD 9.2!
 #
-DISTNAME=      samba-4.13.12
+DISTNAME=      samba-4.13.14
 CATEGORIES=    net
 MASTER_SITES=  https://download.samba.org/pub/samba/stable/
 
@@ -214,14 +214,14 @@ REPLACE_PYTHON+=  source4/scripting/bin/*
 .endif
 .include "../../archivers/libarchive/buildlink3.mk"
 .include "../../converters/libiconv/buildlink3.mk"
-BUILDLINK_API_DEPENDS.ldb+=    ldb>=2.2.1
+BUILDLINK_API_DEPENDS.ldb+=    ldb>=2.2.3
 .include "../../databases/ldb/buildlink3.mk"
 .include "../../databases/lmdb/buildlink3.mk"
 .include "../../devel/cmocka/buildlink3.mk"
 .include "../../devel/gettext-lib/buildlink3.mk"
 .include "../../devel/popt/buildlink3.mk"
 .include "../../devel/readline/buildlink3.mk"
-BUILDLINK_API_DEPENDS.talloc+= talloc>=2.2.0
+BUILDLINK_API_DEPENDS.talloc+= talloc>=2.3.1
 .include "../../devel/talloc/buildlink3.mk"
 .include "../../devel/tevent/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"

Index: pkgsrc/net/samba4/PLIST
diff -u pkgsrc/net/samba4/PLIST:1.39 pkgsrc/net/samba4/PLIST:1.40
--- pkgsrc/net/samba4/PLIST:1.39        Fri Oct  8 13:20:34 2021
+++ pkgsrc/net/samba4/PLIST     Wed Nov 10 13:33:20 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.39 2021/10/08 13:20:34 adam Exp $
+@comment $NetBSD: PLIST,v 1.40 2021/11/10 13:33:20 adam Exp $
 bin/cifsdd
 bin/dbwrap_tool
 bin/dumpmscat
@@ -416,6 +416,7 @@ ${PYSITELIB}/samba/tests/docs.py
 ${PYSITELIB}/samba/tests/domain_backup.py
 ${PYSITELIB}/samba/tests/domain_backup_offline.py
 ${PYSITELIB}/samba/tests/dsdb.py
+${PYSITELIB}/samba/tests/dsdb_api.py
 ${PYSITELIB}/samba/tests/dsdb_lock.py
 ${PYSITELIB}/samba/tests/dsdb_schema_attributes.py
 ${PYSITELIB}/samba/tests/emulate/__init__.py
@@ -436,6 +437,7 @@ ${PYSITELIB}/samba/tests/kcc/graph.py
 ${PYSITELIB}/samba/tests/kcc/graph_utils.py
 ${PYSITELIB}/samba/tests/kcc/kcc_utils.py
 ${PYSITELIB}/samba/tests/kcc/ldif_import_export.py
+${PYSITELIB}/samba/tests/krb5/alias_tests.py
 ${PYSITELIB}/samba/tests/krb5/as_canonicalization_tests.py
 ${PYSITELIB}/samba/tests/krb5/as_req_tests.py
 ${PYSITELIB}/samba/tests/krb5/compatability_tests.py
@@ -448,16 +450,22 @@ ${PYSITELIB}/samba/tests/krb5/ms_kile_cl
 ${PYSITELIB}/samba/tests/krb5/raw_testcase.py
 ${PYSITELIB}/samba/tests/krb5/rfc4120_constants.py
 ${PYSITELIB}/samba/tests/krb5/rfc4120_pyasn1.py
+${PYSITELIB}/samba/tests/krb5/rodc_tests.py
 ${PYSITELIB}/samba/tests/krb5/s4u_tests.py
+${PYSITELIB}/samba/tests/krb5/salt_tests.py
 ${PYSITELIB}/samba/tests/krb5/simple_tests.py
+${PYSITELIB}/samba/tests/krb5/spn_tests.py
 ${PYSITELIB}/samba/tests/krb5/test_ccache.py
 ${PYSITELIB}/samba/tests/krb5/test_ldap.py
+${PYSITELIB}/samba/tests/krb5/test_min_domain_uid.py
 ${PYSITELIB}/samba/tests/krb5/test_rpc.py
 ${PYSITELIB}/samba/tests/krb5/test_smb.py
 ${PYSITELIB}/samba/tests/krb5/xrealm_tests.py
 ${PYSITELIB}/samba/tests/krb5_credentials.py
 ${PYSITELIB}/samba/tests/ldap_raw.py
 ${PYSITELIB}/samba/tests/ldap_referrals.py
+${PYSITELIB}/samba/tests/ldap_spn.py
+${PYSITELIB}/samba/tests/ldap_upn_sam_account.py
 ${PYSITELIB}/samba/tests/libsmb.py
 ${PYSITELIB}/samba/tests/loadparm.py
 ${PYSITELIB}/samba/tests/lsa_string.py
@@ -655,6 +663,7 @@ lib/samba/private/libcom_err-samba4.so.0
 lib/samba/private/libcommon-auth-samba4.so
 lib/samba/private/libdb-glue-samba4.so
 lib/samba/private/libdbwrap-samba4.so
+lib/samba/private/libdcerpc-pkt-auth-samba4.so
 lib/samba/private/libdcerpc-samba-samba4.so
 lib/samba/private/libdcerpc-samba4.so
 lib/samba/private/libdfs-server-ad-samba4.so

Index: pkgsrc/net/samba4/distinfo
diff -u pkgsrc/net/samba4/distinfo:1.68 pkgsrc/net/samba4/distinfo:1.69
--- pkgsrc/net/samba4/distinfo:1.68     Tue Oct 26 11:06:54 2021
+++ pkgsrc/net/samba4/distinfo  Wed Nov 10 13:33:20 2021
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.68 2021/10/26 11:06:54 nia Exp $
+$NetBSD: distinfo,v 1.69 2021/11/10 13:33:20 adam Exp $
 
-BLAKE2s (samba-4.13.12.tar.gz) = beb30c0f119e2b8603faada6240d19d30728253d20925ff7700d2d8e54de4dec
-SHA512 (samba-4.13.12.tar.gz) = 6447733e4c07669bd2dd95a0056be92c507fa4f8c29dd0bc86881004cc24206d9c2c49ace1cb00c4fc7f08109cbf110015f51cd3ab77f2fa95818bcebc437974
-Size (samba-4.13.12.tar.gz) = 18586809 bytes
+BLAKE2s (samba-4.13.14.tar.gz) = 801388e4323c8b4c53b046fd06beb5fd4d5e719da137e77b8207f682d23dfc1b
+SHA512 (samba-4.13.14.tar.gz) = cf15d6dba308502dac1630cbc48dff035da90a4ffeb7cba523741f0946a02d16952a6a88728574a83678f284933af8f8fb4f924e27c8afb9b3472c0c4be50dd2
+Size (samba-4.13.14.tar.gz) = 18943381 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = d927db17124d2bb5b382885e70a41f84c3929926
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = e4c0ed3dacfcf5613a5b397b3c6cf88509497da7