CVS commit: pkgsrc/net/samba4

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Tue Oct 10 16:05:01 UTC 2023

Modified Files:
        pkgsrc/net/samba4: Makefile PLIST distinfo

Log Message:
net/samba4: update to 4.18.8

                   ==============================
                   Release Notes for Samba 4.18.8
                          October 10, 2023
                   ==============================

This is a security release in order to address the following defects:

o CVE-2023-3961:  Unsanitized pipe names allow SMB clients to connect as root to
                  existing unix domain sockets on the file system.
                  https://www.samba.org/samba/security/CVE-2023-3961.html

o CVE-2023-4091:  SMB client can truncate files to 0 bytes by opening files with
                  OVERWRITE disposition when using the acl_xattr Samba VFS
                  module with the smb.conf setting
                  "acl_xattr:ignore system acls = yes"
                  https://www.samba.org/samba/security/CVE-2023-4091.html

o CVE-2023-4154:  An RODC and a user with the GET_CHANGES right can view all
                  attributes, including secrets and passwords.  Additionally,
                  the access check fails open on error conditions.
                  https://www.samba.org/samba/security/CVE-2023-4154.html

o CVE-2023-42669: Calls to the rpcecho server on the AD DC can request that the
                  server block for a user-defined amount of time, denying
                  service.
                  https://www.samba.org/samba/security/CVE-2023-42669.html

o CVE-2023-42670: Samba can be made to start multiple incompatible RPC
                  listeners, disrupting service on the AD DC.
                  https://www.samba.org/samba/security/CVE-2023-42670.html


To generate a diff of this commit:
cvs rdiff -u -r1.170 -r1.171 pkgsrc/net/samba4/Makefile
cvs rdiff -u -r1.51 -r1.52 pkgsrc/net/samba4/PLIST
cvs rdiff -u -r1.97 -r1.98 pkgsrc/net/samba4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/samba4/Makefile
diff -u pkgsrc/net/samba4/Makefile:1.170 pkgsrc/net/samba4/Makefile:1.171
--- pkgsrc/net/samba4/Makefile:1.170    Wed Sep 27 12:02:48 2023
+++ pkgsrc/net/samba4/Makefile  Tue Oct 10 16:05:01 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.170 2023/09/27 12:02:48 taca Exp $
+# $NetBSD: Makefile,v 1.171 2023/10/10 16:05:01 taca Exp $
 
-DISTNAME=      samba-4.18.7
+DISTNAME=      samba-4.18.8
 CATEGORIES=    net
 MASTER_SITES=  https://download.samba.org/pub/samba/stable/
 

Index: pkgsrc/net/samba4/PLIST
diff -u pkgsrc/net/samba4/PLIST:1.51 pkgsrc/net/samba4/PLIST:1.52
--- pkgsrc/net/samba4/PLIST:1.51        Sat Apr 29 08:01:06 2023
+++ pkgsrc/net/samba4/PLIST     Tue Oct 10 16:05:01 2023
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.51 2023/04/29 08:01:06 wiz Exp $
+@comment $NetBSD: PLIST,v 1.52 2023/10/10 16:05:01 taca Exp $
 bin/cifsdd
 bin/dbwrap_tool
 bin/dumpmscat
@@ -874,7 +874,6 @@ libexec/samba/rpcd_epmapper
 libexec/samba/rpcd_fsrvp
 libexec/samba/rpcd_lsad
 libexec/samba/rpcd_mdssvc
-libexec/samba/rpcd_rpcecho
 libexec/samba/rpcd_spoolss
 libexec/samba/rpcd_winreg
 libexec/samba/samba-bgqd

Index: pkgsrc/net/samba4/distinfo
diff -u pkgsrc/net/samba4/distinfo:1.97 pkgsrc/net/samba4/distinfo:1.98
--- pkgsrc/net/samba4/distinfo:1.97     Wed Sep 27 12:02:48 2023
+++ pkgsrc/net/samba4/distinfo  Tue Oct 10 16:05:01 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.97 2023/09/27 12:02:48 taca Exp $
+$NetBSD: distinfo,v 1.98 2023/10/10 16:05:01 taca Exp $
 
-BLAKE2s (samba-4.18.7.tar.gz) = 22a5e1b4039e18e913dcb19794fe8862990a431cc7ebda73e6fa53f100d753b8
-SHA512 (samba-4.18.7.tar.gz) = 86baf5c76e92f4b194726441e1d0efe11dc3db4d399f141f76c1abb4f4a3ab05473dded3294d2019f7999305ca6d5e56961d71434e9e214b960895e53bedd7a9
-Size (samba-4.18.7.tar.gz) = 41328101 bytes
+BLAKE2s (samba-4.18.8.tar.gz) = 29c777cfe80f360809ee6a3d62aa6729890f581ac0e5be632a930891a4133333
+SHA512 (samba-4.18.8.tar.gz) = 2924c360f6299129527457547b13c1b282e2907a0ecde1036dbca894c752935d693914b4846a9eab436b33798c53c9974692e51fd071301b1174598be944a246
+Size (samba-4.18.8.tar.gz) = 41335959 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = d927db17124d2bb5b382885e70a41f84c3929926
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = e4c0ed3dacfcf5613a5b397b3c6cf88509497da7