Subject: CVS commit: pkgsrc/net/samba4
From: Takahiro Kambe
Date: 2020-01-21 15:12:36
Message id: 20200121141236.F347FFBF4@cvs.NetBSD.org

Log Message:
net/samba4: update to 4.11.5

Update samba4 to 4.11.5.

                   ==============================
                   Release Notes for Samba 4.11.5
                          January 21, 2020
		   ==============================

This is a security release in order to address the following defects:

o CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD
		  Directory not automatic.
o CVE-2019-14907: Crash after failed character conversion at log level 3 or
		  above.
o CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC.

=======
Details
=======

o  CVE-2019-14902:
   The implementation of ACL inheritance in the Samba AD DC was not complete,
   and so absent a 'full-sync' replication, ACLs could get out of sync between
   domain controllers.

o  CVE-2019-14907:
   When processing untrusted string input Samba can read past the end of the
   allocated buffer when printing a "Conversion error" message to the logs.

o  CVE-2019-19344:
   During DNS zone scavenging (of expired dynamic entries) there is a read of
   memory after it has been freed.

Files:
RevisionActionfile
1.88modifypkgsrc/net/samba4/Makefile
1.41modifypkgsrc/net/samba4/distinfo