CVS commit: pkgsrc

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Mar 24 16:33:46 UTC 2021

Modified Files:
        pkgsrc/databases/ldb: Makefile distinfo
        pkgsrc/net/samba4: Makefile distinfo

Log Message:
ldb: updated to 2.2.1; samba: updated to 4.13.7

                   ==============================
                   Release Notes for Samba 4.13.7
                           March 24, 2021
                   ==============================

This is a follow-up release to depend on the correct ldb version. This is only
needed when building against a system ldb library.

This is a security release in order to address the following defects:

o CVE-2020-27840: Heap corruption via crafted DN strings.
o CVE-2021-20277: Out of bounds read in AD DC LDAP server.

=======
Details
=======

o  CVE-2020-27840:
   An anonymous attacker can crash the Samba AD DC LDAP server by sending easily
   crafted DNs as part of a bind request. More serious heap corruption is likely
   also possible.

o  CVE-2021-20277:
   User-controlled LDAP filter strings against the AD DC LDAP server may crash
   the LDAP server.

For more details, please refer to the security advisories.

Changes since 4.13.6
--------------------

o  Release with dependency on ldb version 2.2.1.


To generate a diff of this commit:
cvs rdiff -u -r1.19 -r1.20 pkgsrc/databases/ldb/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/databases/ldb/distinfo
cvs rdiff -u -r1.116 -r1.117 pkgsrc/net/samba4/Makefile
cvs rdiff -u -r1.57 -r1.58 pkgsrc/net/samba4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/databases/ldb/Makefile
diff -u pkgsrc/databases/ldb/Makefile:1.19 pkgsrc/databases/ldb/Makefile:1.20
--- pkgsrc/databases/ldb/Makefile:1.19  Fri Dec  4 20:45:04 2020
+++ pkgsrc/databases/ldb/Makefile       Wed Mar 24 16:33:46 2021
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.19 2020/12/04 20:45:04 nia Exp $
+# $NetBSD: Makefile,v 1.20 2021/03/24 16:33:46 adam Exp $
 
 # Before updating, make sure net/samba4 supports the newer version.
-DISTNAME=      ldb-2.2.0
-PKGREVISION=   1
+DISTNAME=      ldb-2.2.1
 CATEGORIES=    databases
 MASTER_SITES=  http://www.samba.org/ftp/ldb/
 

Index: pkgsrc/databases/ldb/distinfo
diff -u pkgsrc/databases/ldb/distinfo:1.10 pkgsrc/databases/ldb/distinfo:1.11
--- pkgsrc/databases/ldb/distinfo:1.10  Thu Nov 12 06:26:57 2020
+++ pkgsrc/databases/ldb/distinfo       Wed Mar 24 16:33:46 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.10 2020/11/12 06:26:57 adam Exp $
+$NetBSD: distinfo,v 1.11 2021/03/24 16:33:46 adam Exp $
 
-SHA1 (ldb-2.2.0.tar.gz) = 7c6d0827a20195636fcd84d713eea278d39064d4
-RMD160 (ldb-2.2.0.tar.gz) = 17a28ffab01db86619fe28917b184d104863af20
-SHA512 (ldb-2.2.0.tar.gz) = 3814078a51d2110eeda291ac859c0027df88475812bd6b5f2ce8f8f50aba9c84faced97c37aa1f45e406783a8df97c60ae778df897bb0e89ba3ac8568acced69
-Size (ldb-2.2.0.tar.gz) = 1676551 bytes
+SHA1 (ldb-2.2.1.tar.gz) = c334d5a398b7a61c003d3cefbdb5736c49f0013c
+RMD160 (ldb-2.2.1.tar.gz) = 0949458a58ca2c9905574a8f9626501d37e13c2f
+SHA512 (ldb-2.2.1.tar.gz) = a2b1598869e3d9f17c5b82fc2b7289f1f08a7378a1d72609af5ed5cc91fb571ac67d3a8c22d64dad5dcc9fe32520baccd5cc37d5b4fc5f1b00a7064902296344
+Size (ldb-2.2.1.tar.gz) = 1676819 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = 813c639e404e3b301444decae318c702c87f0cc1
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__utils.py) = 0a587421870c1974175fadbb02dde215f35938f2

Index: pkgsrc/net/samba4/Makefile
diff -u pkgsrc/net/samba4/Makefile:1.116 pkgsrc/net/samba4/Makefile:1.117
--- pkgsrc/net/samba4/Makefile:1.116    Sat Mar 20 19:27:35 2021
+++ pkgsrc/net/samba4/Makefile  Wed Mar 24 16:33:46 2021
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.116 2021/03/20 19:27:35 adam Exp $
+# $NetBSD: Makefile,v 1.117 2021/03/24 16:33:46 adam Exp $
 
-DISTNAME=      samba-4.13.5
+DISTNAME=      samba-4.13.7
 CATEGORIES=    net
 MASTER_SITES=  https://download.samba.org/pub/samba/stable/
 
@@ -206,7 +206,7 @@ REPLACE_PYTHON+=    source4/scripting/bin/*
 .endif
 .include "../../archivers/libarchive/buildlink3.mk"
 .include "../../converters/libiconv/buildlink3.mk"
-BUILDLINK_API_DEPENDS.ldb+=    ldb>=2.2.0
+BUILDLINK_API_DEPENDS.ldb+=    ldb>=2.2.1
 .include "../../databases/ldb/buildlink3.mk"
 .include "../../databases/lmdb/buildlink3.mk"
 .include "../../devel/cmocka/buildlink3.mk"

Index: pkgsrc/net/samba4/distinfo
diff -u pkgsrc/net/samba4/distinfo:1.57 pkgsrc/net/samba4/distinfo:1.58
--- pkgsrc/net/samba4/distinfo:1.57     Sat Mar 20 19:27:35 2021
+++ pkgsrc/net/samba4/distinfo  Wed Mar 24 16:33:46 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.57 2021/03/20 19:27:35 adam Exp $
+$NetBSD: distinfo,v 1.58 2021/03/24 16:33:46 adam Exp $
 
-SHA1 (samba-4.13.5.tar.gz) = abdfc52c7326e30508a6167d5e3e9256e17e1980
-RMD160 (samba-4.13.5.tar.gz) = 8148c4debd7c56693676b405970306ce7cf8b695
-SHA512 (samba-4.13.5.tar.gz) = 4187337fecf60fa133c6e81e894634f36028d34ccc521e5e856a5736a4f58fc2ad2cd136a206d141f17f7bc519a6168a27e83705fb2d38559667a60b24ad1c1f
-Size (samba-4.13.5.tar.gz) = 18426722 bytes
+SHA1 (samba-4.13.7.tar.gz) = c9c2238b04cc2e93054628fcdf82335c6ca51967
+RMD160 (samba-4.13.7.tar.gz) = e1baf0f450814cece012c00514f8abe2d9e35cb6
+SHA512 (samba-4.13.7.tar.gz) = eac0c0b60d50591ecd8e730bd6f24ec3d5731a9dd4172640259d841cca988f20265e5a57967a070713ab7b4bd95766a21247cc8e6b32177b79eb766520a3288a
+Size (samba-4.13.7.tar.gz) = 18432921 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = d927db17124d2bb5b382885e70a41f84c3929926
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = e4c0ed3dacfcf5613a5b397b3c6cf88509497da7