From: Bjorn Ketelaars <bket@openbsd.org>
Subject: UPDATE net/samba-4.24.5
To: ports@openbsd.org
Cc: Ian McWilliam <kaosagnt@gmail.com>
Date: Wed, 29 Jul 2026 05:22:37 +0200

Diff below update samba to 4.24.5, which is a security release. Changes:
https://www.samba.org/samba/history/samba-4.24.5.html.

As we build without the necessary bits, Active Directory and DNS/KDC
vulnerabilities in this release do not affect OpenBSD in standard
deployments. I think only CVE-2026-58224 applies if CTDB clustering is
actively configured:

The CTDB protocol has bounds checking issues - CTDB fails to do
integrity checking of received packets. This includes failure to check
field lengths against packet lengths when unmarshalling packets.

Comments / OK to commit to both -current and -stable?


diff --git Makefile Makefile
index c1e666cd8a2..69489b8ec97 100644
--- Makefile
+++ Makefile
@@ -1,4 +1,4 @@
-VERSION =		4.24.4
+VERSION =		4.24.5
 DISTNAME =		samba-${VERSION}
 EPOCH =			0
 
diff --git distinfo distinfo
index 449885108de..6347e588b8e 100644
--- distinfo
+++ distinfo
@@ -1,2 +1,2 @@
-SHA256 (samba-4.24.4.tar.gz) = 3yxRq0Nh7GJquZiOWUbvzKhGW8evroNCkdVVhGgmX/g=
-SIZE (samba-4.24.4.tar.gz) = 43431734
+SHA256 (samba-4.24.5.tar.gz) = bV1+6C9c6dpBNQhsmxhOR6WLSwI1ZfWKu7H4yKkiMGs=
+SIZE (samba-4.24.5.tar.gz) = 43445051