CVS commit: pkgsrc/net/samba4

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Apr  8 18:35:59 UTC 2019

Modified Files:
        pkgsrc/net/samba4: Makefile PLIST distinfo

Log Message:
samba4: updated to 4.10.2

Release Notes for Samba 4.10.2

This is a security release in order to address the following defects:
o  CVE-2019-3870 (World writable files in Samba AD DC private/ dir)
o  CVE-2019-3880 (Save registry file outside share as unprivileged user)

Details

o  CVE-2019-3870:
   During the provision of a new Active Directory DC, some files in the private/
   directory are created world-writable.

o  CVE-2019-3880:
   Authenticated users with write permission can trigger a symlink traversal to
   write or detect files outside the Samba share.

For more details and workarounds, please refer to the security advisories.

Changes since 4.10.1:
* BUG 13834: CVE-2019-3870: pysmbd: Ensure a zero umask is set for
  smbd.mkdir().
* BUG 13851: CVE-2018-14629: rpc: winreg: Remove implementations of
  SaveKey/RestoreKey.


To generate a diff of this commit:
cvs rdiff -u -r1.64 -r1.65 pkgsrc/net/samba4/Makefile
cvs rdiff -u -r1.21 -r1.22 pkgsrc/net/samba4/PLIST
cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/samba4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/samba4/Makefile
diff -u pkgsrc/net/samba4/Makefile:1.64 pkgsrc/net/samba4/Makefile:1.65
--- pkgsrc/net/samba4/Makefile:1.64     Wed Apr  3 14:23:06 2019
+++ pkgsrc/net/samba4/Makefile  Mon Apr  8 18:35:58 2019
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.64 2019/04/03 14:23:06 adam Exp $
+# $NetBSD: Makefile,v 1.65 2019/04/08 18:35:58 adam Exp $
 
-DISTNAME=      samba-4.10.1
+DISTNAME=      samba-4.10.2
 CATEGORIES=    net
 MASTER_SITES=  http://download.samba.org/pub/samba/stable/
 

Index: pkgsrc/net/samba4/PLIST
diff -u pkgsrc/net/samba4/PLIST:1.21 pkgsrc/net/samba4/PLIST:1.22
--- pkgsrc/net/samba4/PLIST:1.21        Wed Mar 20 19:09:10 2019
+++ pkgsrc/net/samba4/PLIST     Mon Apr  8 18:35:58 2019
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.21 2019/03/20 19:09:10 adam Exp $
+@comment $NetBSD: PLIST,v 1.22 2019/04/08 18:35:58 adam Exp $
 bin/cifsdd
 bin/dbwrap_tool
 bin/dumpmscat
@@ -514,6 +514,7 @@ ${PYSITELIB}/samba/tests/samdb.py
 ${PYSITELIB}/samba/tests/samdb_api.py
 ${PYSITELIB}/samba/tests/security.py
 ${PYSITELIB}/samba/tests/smb.py
+${PYSITELIB}/samba/tests/smbd_base.py
 ${PYSITELIB}/samba/tests/source.py
 ${PYSITELIB}/samba/tests/strings.py
 ${PYSITELIB}/samba/tests/subunitrun.py

Index: pkgsrc/net/samba4/distinfo
diff -u pkgsrc/net/samba4/distinfo:1.26 pkgsrc/net/samba4/distinfo:1.27
--- pkgsrc/net/samba4/distinfo:1.26     Wed Apr  3 14:23:06 2019
+++ pkgsrc/net/samba4/distinfo  Mon Apr  8 18:35:59 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.26 2019/04/03 14:23:06 adam Exp $
+$NetBSD: distinfo,v 1.27 2019/04/08 18:35:59 adam Exp $
 
-SHA1 (samba-4.10.1.tar.gz) = 4dc043bd680ac625a54bbe94e4df85ac3598359c
-RMD160 (samba-4.10.1.tar.gz) = d1bb83f5acc18ec2399beae32a2ceba010f1f6cc
-SHA512 (samba-4.10.1.tar.gz) = cfd86999d2eacb7700f03a25112211f4c79f64685d758744f690046728b5f5d66e4699d6cc9dc3e1ae108eb630ed18d9f62791ca101daabcebafa3cca2b3d838
-Size (samba-4.10.1.tar.gz) = 18280677 bytes
+SHA1 (samba-4.10.2.tar.gz) = b0b5dd49e92b266315cea6530dcfc926f27dd4ed
+RMD160 (samba-4.10.2.tar.gz) = 6d91d2d581e095753deaae1fae28b8a048e103fc
+SHA512 (samba-4.10.2.tar.gz) = 3d146ea12567ebb02a7babcad779b82339ffbfb19f6f2be5cac33eb18af2c9b546dc1cd910072a5c9e152ba9c4a632ed6870c48a8f6ad9d04304b130f240a4bf
+Size (samba-4.10.2.tar.gz) = 18280710 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = 0f9ca14e3a77d7dfad06aa8c4d2de2f6cc3c0646
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = a7cc41a55ce032c3fe1e0b660f88fa7871710e0e