Re: UPDATE net/samba-4.24.5

Ian McWilliam <[email protected]> Thu, 30 Jul 2026 10:42:27 +1000
Newsgroups gmane.os.openbsd.ports
Message-ID <[email protected]>
Hi,

Thanks for the update. Builds and tests fine. Ok for -current and =
-stable.

Ian McWilliam

> On 29 Jul 2026, at 13:22, Bjorn Ketelaars <[email protected]> wrote:
>=20
> Diff below update samba to 4.24.5, which is a security release. =
Changes:
> https://www.samba.org/samba/history/samba-4.24.5.html.
>=20
> As we build without the necessary bits, Active Directory and DNS/KDC
> vulnerabilities in this release do not affect OpenBSD in standard
> deployments. I think only CVE-2026-58224 applies if CTDB clustering is
> actively configured:
>=20
> The CTDB protocol has bounds checking issues - CTDB fails to do
> integrity checking of received packets. This includes failure to check
> field lengths against packet lengths when unmarshalling packets.
>=20
> Comments / OK to commit to both -current and -stable?
>=20
>=20
> diff --git Makefile Makefile
> index c1e666cd8a2..69489b8ec97 100644
> --- Makefile
> +++ Makefile
> @@ -1,4 +1,4 @@
> -VERSION =3D		4.24.4
> +VERSION =3D		4.24.5
> DISTNAME =3D		samba-${VERSION}
> EPOCH =3D			0
>=20
> diff --git distinfo distinfo
> index 449885108de..6347e588b8e 100644
> --- distinfo
> +++ distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.24.4.tar.gz) =3D =
3yxRq0Nh7GJquZiOWUbvzKhGW8evroNCkdVVhGgmX/g=3D
> -SIZE (samba-4.24.4.tar.gz) =3D 43431734
> +SHA256 (samba-4.24.5.tar.gz) =3D =
bV1+6C9c6dpBNQhsmxhOR6WLSwI1ZfWKu7H4yKkiMGs=3D
> +SIZE (samba-4.24.5.tar.gz) =3D 43445051