CVS commit: pkgsrc/net/samba4

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sat Dec 25 03:36:02 UTC 2021

Modified Files:
        pkgsrc/net/samba4: Makefile PLIST distinfo

Log Message:
net/samba4: update to 4.13.15

This release contain security fixes.

                   ===============================
                   Release Notes for Samba 4.13.15
                          December 15, 2021
                   ===============================

This is the latest stable release of the Samba 4.13 release series.

Important Notes
===============

There have been a few regressions in the security release 4.13.14:

o CVE-2020-25717: A user on the domain can become root on domain members.
                  https://www.samba.org/samba/security/CVE-2020-25717.html
                  PLEASE [RE-]READ!
                  The instructions have been updated and some workarounds
                  initially adviced for 4.13.14 are no longer required and
                  should be reverted in most cases.

o BUG-14902: User with multiple spaces (eg Fred<space><space>Nurk) become
             un-deletable. While this release should fix this bug, it is
             adviced to have a look at the bug report for more detailed
             information, see https://bugzilla.samba.org/show_bug.cgi?id=14902.

Changes since 4.13.14
---------------------

o  Andrew Bartlett <abartlet%samba.org@localhost>
   * BUG 14656: Spaces incorrectly collapsed in ldb attributes.
   * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired
     side effects for the local nt token.
   * BUG 14902: User with multiple spaces (eg Fred<space><space>Nurk) become un-
     deletable.

o  Ralph Boehme <slow%samba.org@localhost>
   * BUG 14922: Kerberos authentication on standalone server in MIT realm
     broken.

o  Alexander Bokovoy <ab%samba.org@localhost>
   * BUG 14903: Support for ROLE_IPA_DC is incomplete.

o  Stefan Metzmacher <metze%samba.org@localhost>
   * BUG 14899: winbindd doesn't start when "allow trusted domains" is off.
   * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired
     side effects for the local nt token.

o  Joseph Sutton <josephsutton%catalyst.net.nz@localhost>
   * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired
     side effects for the local nt token.


To generate a diff of this commit:
cvs rdiff -u -r1.133 -r1.134 pkgsrc/net/samba4/Makefile
cvs rdiff -u -r1.40 -r1.41 pkgsrc/net/samba4/PLIST
cvs rdiff -u -r1.69 -r1.70 pkgsrc/net/samba4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/samba4/Makefile
diff -u pkgsrc/net/samba4/Makefile:1.133 pkgsrc/net/samba4/Makefile:1.134
--- pkgsrc/net/samba4/Makefile:1.133    Wed Dec  8 16:02:30 2021
+++ pkgsrc/net/samba4/Makefile  Sat Dec 25 03:36:01 2021
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.133 2021/12/08 16:02:30 adam Exp $
+# $NetBSD: Makefile,v 1.134 2021/12/25 03:36:01 taca Exp $
 
 # WARNING: DO NOT UPDATE WITHOUT RESOLVING THIS ISSUE:
 #
@@ -7,8 +7,7 @@
 #
 # Please do not update without testing on NetBSD 9.2!
 #
-DISTNAME=      samba-4.13.14
-PKGREVISION=   1
+DISTNAME=      samba-4.13.15
 CATEGORIES=    net
 MASTER_SITES=  https://download.samba.org/pub/samba/stable/
 
@@ -205,6 +204,7 @@ REPLACE_PERL+=              script/*.pl
 REPLACE_PERL+=         source3/script/*.pl
 REPLACE_PERL+=         source4/build/pasn1/pasn1.pl
 REPLACE_PERL+=         source4/script/*.pl
+REPLACE_PERL+=         source4/scripting/bin/nsupdate-gss
 REPLACE_PERL+=         third_party/nss_wrapper/nss_wrapper.pl
 REPLACE_PYTHON+=       buildtools/bin/waf
 REPLACE_PYTHON+=       source4/setup/wscript_build

Index: pkgsrc/net/samba4/PLIST
diff -u pkgsrc/net/samba4/PLIST:1.40 pkgsrc/net/samba4/PLIST:1.41
--- pkgsrc/net/samba4/PLIST:1.40        Wed Nov 10 13:33:20 2021
+++ pkgsrc/net/samba4/PLIST     Sat Dec 25 03:36:01 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.40 2021/11/10 13:33:20 adam Exp $
+@comment $NetBSD: PLIST,v 1.41 2021/12/25 03:36:01 taca Exp $
 bin/cifsdd
 bin/dbwrap_tool
 bin/dumpmscat
@@ -456,6 +456,7 @@ ${PYSITELIB}/samba/tests/krb5/salt_tests
 ${PYSITELIB}/samba/tests/krb5/simple_tests.py
 ${PYSITELIB}/samba/tests/krb5/spn_tests.py
 ${PYSITELIB}/samba/tests/krb5/test_ccache.py
+${PYSITELIB}/samba/tests/krb5/test_idmap_nss.py
 ${PYSITELIB}/samba/tests/krb5/test_ldap.py
 ${PYSITELIB}/samba/tests/krb5/test_min_domain_uid.py
 ${PYSITELIB}/samba/tests/krb5/test_rpc.py

Index: pkgsrc/net/samba4/distinfo
diff -u pkgsrc/net/samba4/distinfo:1.69 pkgsrc/net/samba4/distinfo:1.70
--- pkgsrc/net/samba4/distinfo:1.69     Wed Nov 10 13:33:20 2021
+++ pkgsrc/net/samba4/distinfo  Sat Dec 25 03:36:01 2021
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.69 2021/11/10 13:33:20 adam Exp $
+$NetBSD: distinfo,v 1.70 2021/12/25 03:36:01 taca Exp $
 
-BLAKE2s (samba-4.13.14.tar.gz) = 801388e4323c8b4c53b046fd06beb5fd4d5e719da137e77b8207f682d23dfc1b
-SHA512 (samba-4.13.14.tar.gz) = cf15d6dba308502dac1630cbc48dff035da90a4ffeb7cba523741f0946a02d16952a6a88728574a83678f284933af8f8fb4f924e27c8afb9b3472c0c4be50dd2
-Size (samba-4.13.14.tar.gz) = 18943381 bytes
+BLAKE2s (samba-4.13.15.tar.gz) = a77479237477a75e1400517ba431beb8417d12f2dfab0037ae956f7682fd54a4
+SHA512 (samba-4.13.15.tar.gz) = dc059650831d6f473d510502a92a8122bba9079f2204cecf375873a160b1d8e60434a8aa01ff479d4e1b7d34b0058b1468a7c8600782c4dbddb16717181acad8
+Size (samba-4.13.15.tar.gz) = 18944873 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = d927db17124d2bb5b382885e70a41f84c3929926
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = e4c0ed3dacfcf5613a5b397b3c6cf88509497da7