[PATCH 0/2] Security update for samba and ldb

[PATCH 0/2] Security update for samba and ldb

[Leo Famulari]

This updates samba to 4.3.3 and ldb to 1.1.24.

According to WHATSNEW.txt in the samba tarball, it fixes:


Leo Famulari (2):
  gnu: ldb: Update to 1.1.24.
  gnu: samba: Update to 4.3.3.

 gnu/packages/samba.scm | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

-- 
2.6.4

[PATCH 1/2] gnu: ldb: Update to 1.1.24.

[Leo Famulari]

Required for samba-4.3.3 in order to fix CVE-2015-5330 and
CVE-2015-3223.

* gnu/packages/samba.scm (ldb): Update to 1.2.24.
---
 gnu/packages/samba.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/samba.scm b/gnu/packages/samba.scm
index ac3a17d..732880c 100644
--- a/gnu/packages/samba.scm
+++ b/gnu/packages/samba.scm
@@ -236,14 +236,14 @@ many event types, including timers, signals, and the classic file descriptor eve
 (define-public ldb
   (package
     (name "ldb")
-    (version "1.1.23")
+    (version "1.1.24")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://www.samba.org/ftp/ldb/ldb-"
                                   version ".tar.gz"))
               (sha256
                (base32
-                "0ncmwgga6q9v7maiywgw21w6rb3149m1w2ca11yq8k5j0izjz2wg"))))
+                "08ab66qzigfsfxqdvp6lx1knwsl3sqsww309xbq17l7hfcjgbsa5"))))
     (build-system gnu-build-system)
     (arguments
      '(#:phases
-- 
2.6.4

[PATCH 2/2] gnu: samba: Update to 4.3.3.

[Leo Famulari]

Fixes CVE-2015-{3223,5252,5299,5296,8467,5330}.

* gnu/packages/samba.scm (samba): Update to 4.3.3.
---
 gnu/packages/samba.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/samba.scm b/gnu/packages/samba.scm
index 732880c..1adc8aa 100644
--- a/gnu/packages/samba.scm
+++ b/gnu/packages/samba.scm
@@ -98,14 +98,14 @@ anywhere.")
 (define-public samba
   (package
     (name "samba")
-    (version "4.3.2")
+    (version "4.3.3")
     (source (origin
              (method url-fetch)
              (uri (string-append "https://www.samba.org/samba/ftp/stable/samba-"
                                  version ".tar.gz"))
              (sha256
               (base32
-               "0xcs2bcim421mlk6l9rcrkx4cq9y41gfssyfa7xzdw5draar3631"))))
+               "1pvh78d5magc7lriyx7v9k7crlgxccmsy2mqn0j9xcnb78qj2bg6"))))
     (build-system gnu-build-system)
     (arguments
      '(#:phases
-- 
2.6.4

Re: [PATCH 0/2] Security update for samba and ldb

[Leo Famulari]

On Sun, Jan 03, 2016 at 03:07:29PM -0500, Leo Famulari wrote:
> This updates samba to 4.3.3 and ldb to 1.1.24.
> 
> According to WHATSNEW.txt in the samba tarball, it fixes:

Not sure what happen to the CVE list I put here... another try:
CVE-2015-{3223,5252,5299,5296,8467,5330}
> 
> 
> Leo Famulari (2):
>   gnu: ldb: Update to 1.1.24.
>   gnu: samba: Update to 4.3.3.
> 
>  gnu/packages/samba.scm | 8 ++++----
>  1 file changed, 4 insertions(+), 4 deletions(-)
> 
> -- 
> 2.6.4
> 
> 

Re: [PATCH 0/2] Security update for samba and ldb

[Leo Famulari]

On Sun, Jan 03, 2016 at 03:15:31PM -0500, Leo Famulari wrote:
> On Sun, Jan 03, 2016 at 03:07:29PM -0500, Leo Famulari wrote:
> > This updates samba to 4.3.3 and ldb to 1.1.24.
> > 
> > According to WHATSNEW.txt in the samba tarball, it fixes:
> 
> Not sure what happen to the CVE list I put here... another try:
> CVE-2015-{3223,5252,5299,5296,8467,5330}

And, pushed as f6cddbefcc and 77553dff86.

> > 
> > 
> > Leo Famulari (2):
> >   gnu: ldb: Update to 1.1.24.
> >   gnu: samba: Update to 4.3.3.
> > 
> >  gnu/packages/samba.scm | 8 ++++----
> >  1 file changed, 4 insertions(+), 4 deletions(-)
> > 
> > -- 
> > 2.6.4
> > 
> > 
> 

Re: [PATCH 0/2] Security update for samba and ldb

[Ludovic Courtès]

Leo Famulari <leo@famulari.name> skribis:

> On Sun, Jan 03, 2016 at 03:15:31PM -0500, Leo Famulari wrote:
>> On Sun, Jan 03, 2016 at 03:07:29PM -0500, Leo Famulari wrote:
>> > This updates samba to 4.3.3 and ldb to 1.1.24.
>> > 
>> > According to WHATSNEW.txt in the samba tarball, it fixes:
>> 
>> Not sure what happen to the CVE list I put here... another try:
>> CVE-2015-{3223,5252,5299,5296,8467,5330}
>
> And, pushed as f6cddbefcc and 77553dff86.

Thanks!

Ludo’.