-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 25 Oct 2022 12:48:20 +0300 Source: samba Architecture: source Version: 2:4.16.6+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Changes: samba (2:4.16.6+dfsg-1) unstable; urgency=medium . * new upstream security release 4.16.6, fixing: CVE-2022-3437: There is a limited write heap buffer overflow in the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba). https://www.samba.org/samba/security/CVE-2022-3437.html * use explicit_bzero() instead of bzero() for the substitute of memset_s() * d/rules: make it a bit more consistent with other samba packages * d/rules: stop exporting ${PYTHON} * a bunch of ubuntu-related changes: - d/rules: omit glusterfs on ubuntu-i386 - apply Ubuntu changes to smb.conf at install time (d/smb.conf.ubuntu.diff) - d/tests/: ensure io_uring module is built before testing it - d/rules: inline parallel check from dpkg/buildopts.mk (buildopts.mk does not exist on ubuntu 20.04 focal) Checksums-Sha1: 19c16685146a0f1feaca089614d7313af44766c2 4205 samba_4.16.6+dfsg-1.dsc 1ce525610be3956524c104bb24ff993a18f8efb3 18275516 samba_4.16.6+dfsg.orig.tar.xz 648d0a9ce4de08b216079a8ef9a1f62f14072d4a 264856 samba_4.16.6+dfsg-1.debian.tar.xz 9e6f6bf9ed27a06b2c0d77267082539a6d298b72 5907 samba_4.16.6+dfsg-1_source.buildinfo Checksums-Sha256: 16464131f45c51b5756bf9a3803434052ccaa79e67516d454f0c5d01f27df8ce 4205 samba_4.16.6+dfsg-1.dsc edb46f2c9cf622ed2d64549d885c67a597b2775ace288200a01ebe130798feaf 18275516 samba_4.16.6+dfsg.orig.tar.xz 103fc7a9a34bd27d737414a6a88a254778106c9dffea9bffc3a9ca4181f4fca2 264856 samba_4.16.6+dfsg-1.debian.tar.xz 4e2f5548409b9abcac29b20c04280322d77ba751e77f3a2d070ba7e8ec562bae 5907 samba_4.16.6+dfsg-1_source.buildinfo Files: 189ab7f6b323196c415ab4488acf6578 4205 net optional samba_4.16.6+dfsg-1.dsc 7ac18b475c5acdff75b06cb8fe1f9b7e 18275516 net optional samba_4.16.6+dfsg.orig.tar.xz 8b9de58d6420cd4f185c6abcf5f88f2e 264856 net optional samba_4.16.6+dfsg-1.debian.tar.xz 52803605421b9ee22e508a5720891fee 5907 net optional samba_4.16.6+dfsg-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmNXsScPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5ZFeMH/i+DUIKbk6fGInyVr0hCq/pYjFC+J8+LZf/h qj4aiPcAjkvqkPMiMlzPmtTRlwA/FJEdhcuq2j+a+sgEsSUYSful1bJYhGNMcDji gK2OLTnU8r30xUw4/jC01myhS8p58FE1XpP8ya2S8iLvNBn51Bi7+OFyF1XjRRu4 /hyxzcVsNMbkULJZIWXvmfHYPL9uIJDl89mWWM3pGz0qAw/4PtmcJe/dYMwCoyRu HqKx1lTNUcqzyqBtEBx95EiubuFNpn0pRvxHWpQES+o5WTtv1sZCnMju3ov/MmyH 6u6PCy7D5FvHgYc5QGxSY+6mnS3BvTGZjVkpucZofVLJsG94qGQ= =CRQS -----END PGP SIGNATURE-----