[pkgsrc/trunk]: pkgsrc/net/samba4 net/samba4: update to 4.13.15

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/3ede28a8995d
branches:  trunk
changeset: 771739:3ede28a8995d
user:      taca <taca%pkgsrc.org@localhost>
date:      Sat Dec 25 03:36:01 2021 +0000

description:
net/samba4: update to 4.13.15

This release contain security fixes.


                   ===============================
                   Release Notes for Samba 4.13.15
                          December 15, 2021
                   ===============================


This is the latest stable release of the Samba 4.13 release series.

Important Notes
===============

There have been a few regressions in the security release 4.13.14:

o CVE-2020-25717: A user on the domain can become root on domain members.
                  https://www.samba.org/samba/security/CVE-2020-25717.html
                  PLEASE [RE-]READ!
                  The instructions have been updated and some workarounds
                  initially adviced for 4.13.14 are no longer required and
                  should be reverted in most cases.

o BUG-14902: User with multiple spaces (eg Fred<space><space>Nurk) become
             un-deletable. While this release should fix this bug, it is
             adviced to have a look at the bug report for more detailed
             information, see https://bugzilla.samba.org/show_bug.cgi?id=14902.

Changes since 4.13.14
---------------------

o  Andrew Bartlett <abartlet%samba.org@localhost>
   * BUG 14656: Spaces incorrectly collapsed in ldb attributes.
   * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired
     side effects for the local nt token.
   * BUG 14902: User with multiple spaces (eg Fred<space><space>Nurk) become un-
     deletable.

o  Ralph Boehme <slow%samba.org@localhost>
   * BUG 14922: Kerberos authentication on standalone server in MIT realm
     broken.

o  Alexander Bokovoy <ab%samba.org@localhost>
   * BUG 14903: Support for ROLE_IPA_DC is incomplete.

o  Stefan Metzmacher <metze%samba.org@localhost>
   * BUG 14899: winbindd doesn't start when "allow trusted domains" is off.
   * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired
     side effects for the local nt token.

o  Joseph Sutton <josephsutton%catalyst.net.nz@localhost>
   * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired
     side effects for the local nt token.

diffstat:

 net/samba4/Makefile |  6 +++---
 net/samba4/PLIST    |  3 ++-
 net/samba4/distinfo |  8 ++++----
 3 files changed, 9 insertions(+), 8 deletions(-)

diffs (60 lines):

diff -r 27745bb51e7d -r 3ede28a8995d net/samba4/Makefile
--- a/net/samba4/Makefile       Fri Dec 24 22:28:38 2021 +0000
+++ b/net/samba4/Makefile       Sat Dec 25 03:36:01 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.133 2021/12/08 16:02:30 adam Exp $
+# $NetBSD: Makefile,v 1.134 2021/12/25 03:36:01 taca Exp $
 
 # WARNING: DO NOT UPDATE WITHOUT RESOLVING THIS ISSUE:
 #
@@ -7,8 +7,7 @@
 #
 # Please do not update without testing on NetBSD 9.2!
 #
-DISTNAME=      samba-4.13.14
-PKGREVISION=   1
+DISTNAME=      samba-4.13.15
 CATEGORIES=    net
 MASTER_SITES=  https://download.samba.org/pub/samba/stable/
 
@@ -205,6 +204,7 @@
 REPLACE_PERL+=         source3/script/*.pl
 REPLACE_PERL+=         source4/build/pasn1/pasn1.pl
 REPLACE_PERL+=         source4/script/*.pl
+REPLACE_PERL+=         source4/scripting/bin/nsupdate-gss
 REPLACE_PERL+=         third_party/nss_wrapper/nss_wrapper.pl
 REPLACE_PYTHON+=       buildtools/bin/waf
 REPLACE_PYTHON+=       source4/setup/wscript_build
diff -r 27745bb51e7d -r 3ede28a8995d net/samba4/PLIST
--- a/net/samba4/PLIST  Fri Dec 24 22:28:38 2021 +0000
+++ b/net/samba4/PLIST  Sat Dec 25 03:36:01 2021 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.40 2021/11/10 13:33:20 adam Exp $
+@comment $NetBSD: PLIST,v 1.41 2021/12/25 03:36:01 taca Exp $
 bin/cifsdd
 bin/dbwrap_tool
 bin/dumpmscat
@@ -456,6 +456,7 @@
 ${PYSITELIB}/samba/tests/krb5/simple_tests.py
 ${PYSITELIB}/samba/tests/krb5/spn_tests.py
 ${PYSITELIB}/samba/tests/krb5/test_ccache.py
+${PYSITELIB}/samba/tests/krb5/test_idmap_nss.py
 ${PYSITELIB}/samba/tests/krb5/test_ldap.py
 ${PYSITELIB}/samba/tests/krb5/test_min_domain_uid.py
 ${PYSITELIB}/samba/tests/krb5/test_rpc.py
diff -r 27745bb51e7d -r 3ede28a8995d net/samba4/distinfo
--- a/net/samba4/distinfo       Fri Dec 24 22:28:38 2021 +0000
+++ b/net/samba4/distinfo       Sat Dec 25 03:36:01 2021 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.69 2021/11/10 13:33:20 adam Exp $
+$NetBSD: distinfo,v 1.70 2021/12/25 03:36:01 taca Exp $
 
-BLAKE2s (samba-4.13.14.tar.gz) = 801388e4323c8b4c53b046fd06beb5fd4d5e719da137e77b8207f682d23dfc1b
-SHA512 (samba-4.13.14.tar.gz) = cf15d6dba308502dac1630cbc48dff035da90a4ffeb7cba523741f0946a02d16952a6a88728574a83678f284933af8f8fb4f924e27c8afb9b3472c0c4be50dd2
-Size (samba-4.13.14.tar.gz) = 18943381 bytes
+BLAKE2s (samba-4.13.15.tar.gz) = a77479237477a75e1400517ba431beb8417d12f2dfab0037ae956f7682fd54a4
+SHA512 (samba-4.13.15.tar.gz) = dc059650831d6f473d510502a92a8122bba9079f2204cecf375873a160b1d8e60434a8aa01ff479d4e1b7d34b0058b1468a7c8600782c4dbddb16717181acad8
+Size (samba-4.13.15.tar.gz) = 18944873 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = d927db17124d2bb5b382885e70a41f84c3929926
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = e4c0ed3dacfcf5613a5b397b3c6cf88509497da7