Release notes:
https://www.samba.org/samba/history/samba-4.17.4.html
Essentially RC4 related, of the three CVEs two of them are not limited
to samba AD DC servers according to upstream, therefore we should
upgrade too.
Test reports/oks welcome.
Index: Makefile
===================================================================
RCS file: /home/cvs/ports/net/samba/Makefile,v
retrieving revision 1.325
diff -u -p -r1.325 Makefile
--- Makefile 16 Nov 2022 14:58:57 -0000 1.325
+++ Makefile 15 Dec 2022 23:52:23 -0000
@@ -1,4 +1,4 @@
-VERSION = 4.17.3
+VERSION = 4.17.4
DISTNAME = samba-${VERSION}
EPOCH = 0
@@ -22,12 +22,12 @@ SHARED_LIBS = dcerpc 1.1 \
netapi 3.2 \
samba-credentials 1.2 \
samba-errors 2.1 \
- samba-hostconfig 10.0 \
+ samba-hostconfig 11.0 \
samba-passdb 3.0 \
samba-util 8.0 \
samdb 2.1 \
smbclient 6.1 \
- smbconf 12.1 \
+ smbconf 12.2 \
smbldap 1.0 \
tevent 2.1 \
tevent-util 2.0 \
Index: distinfo
===================================================================
RCS file: /home/cvs/ports/net/samba/distinfo,v
retrieving revision 1.100
diff -u -p -r1.100 distinfo
--- distinfo 16 Nov 2022 14:58:57 -0000 1.100
+++ distinfo 15 Dec 2022 23:15:34 -0000
@@ -1,2 +1,2 @@
-SHA256 (samba-4.17.3.tar.gz) = XRxCDLMexhPHhvmFN/lZZZCB7ca+g3PmjocUCGiTjiY=
-SIZE (samba-4.17.3.tar.gz) = 30805080
+SHA256 (samba-4.17.4.tar.gz) = wFEgedtMrHB8zqTBiuu9ay6zrPbpBzXn9kWjJr4fRTc=
+SIZE (samba-4.17.4.tar.gz) = 30838334
Index: patches/patch-buildtools_wafsamba_samba_autoconf_py
===================================================================
RCS file:
/home/cvs/ports/net/samba/patches/patch-buildtools_wafsamba_samba_autoconf_py,v
retrieving revision 1.17
diff -u -p -r1.17 patch-buildtools_wafsamba_samba_autoconf_py
--- patches/patch-buildtools_wafsamba_samba_autoconf_py 5 Oct 2022 17:03:41
-0000 1.17
+++ patches/patch-buildtools_wafsamba_samba_autoconf_py 15 Dec 2022 23:16:00
-0000
@@ -5,7 +5,7 @@
Index: buildtools/wafsamba/samba_autoconf.py
--- buildtools/wafsamba/samba_autoconf.py.orig
+++ buildtools/wafsamba/samba_autoconf.py
-@@ -916,6 +916,27 @@ def ADD_LDFLAGS(conf, flags, testflags=False):
+@@ -918,6 +918,27 @@ def ADD_LDFLAGS(conf, flags, testflags=False):
if not 'EXTRA_LDFLAGS' in conf.env:
conf.env['EXTRA_LDFLAGS'] = []
conf.env['EXTRA_LDFLAGS'].extend(TO_LIST(flags))
@@ -33,7 +33,7 @@ Index: buildtools/wafsamba/samba_autocon
return flags
-@@ -985,7 +1006,7 @@ def SAMBA_CHECK_UNDEFINED_SYMBOL_FLAGS(conf):
+@@ -987,7 +1008,7 @@ def SAMBA_CHECK_UNDEFINED_SYMBOL_FLAGS(conf):
# symbols used for fuzzers are only defined by compiler wrappers.
return
Index: pkg/PLIST-main
===================================================================
RCS file: /home/cvs/ports/net/samba/pkg/PLIST-main,v
retrieving revision 1.69
diff -u -p -r1.69 PLIST-main
--- pkg/PLIST-main 26 Oct 2022 00:22:49 -0000 1.69
+++ pkg/PLIST-main 15 Dec 2022 23:51:04 -0000
@@ -1072,6 +1072,8 @@ lib/python${MODPY_VERSION}/site-packages
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/${MODPY_PYCACHE}as_req_tests.${MODPY_PYC_MAGIC_TAG}pyc
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/${MODPY_PYCACHE}compatability_tests.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/${MODPY_PYCACHE}compatability_tests.${MODPY_PYC_MAGIC_TAG}pyc
+lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/${MODPY_PYCACHE}etype_tests.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
+lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/${MODPY_PYCACHE}etype_tests.${MODPY_PYC_MAGIC_TAG}pyc
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/${MODPY_PYCACHE}fast_tests.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/${MODPY_PYCACHE}fast_tests.${MODPY_PYC_MAGIC_TAG}pyc
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/${MODPY_PYCACHE}kcrypto.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
@@ -1128,6 +1130,7 @@ lib/python${MODPY_VERSION}/site-packages
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/as_canonicalization_tests.py
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/as_req_tests.py
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/compatability_tests.py
+lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/etype_tests.py
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/fast_tests.py
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/kcrypto.py
lib/python${MODPY_VERSION}/site-packages/samba/tests/krb5/kdc_base_test.py
--
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE