From 0582429c2163660850c21cc5289e27885f976a01 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?G=C3=BCnther=20Deschner?= <gd@samba.org>
Date: Fri, 16 Dec 2022 17:11:52 +0100
Subject: [PATCH] Update to 4.16.8

resolves: #2154303, #2154304 - Security fixes for CVE-2022-37966
resolves: #2154320, #2154322 - Security fixes for CVE-2022-37967
resolves: #2154362, #2154363 - Security fixes for CVE-2022-38023

Guenther
---
 .gitignore |  2 ++
 samba.spec | 11 ++++++++++-
 sources    |  4 ++--
 3 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index e5d90b5..360d63e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -303,3 +303,5 @@ samba-3.6.0pre1.tar.gz
 /samba-4.16.6.tar.asc
 /samba-4.16.7.tar.xz
 /samba-4.16.7.tar.asc
+/samba-4.16.8.tar.xz
+/samba-4.16.8.tar.asc
diff --git a/samba.spec b/samba.spec
index 7ff2fe7..4d354ba 100644
--- a/samba.spec
+++ b/samba.spec
@@ -136,7 +136,7 @@
 
 %global baserelease 0
 
-%global samba_version 4.16.7
+%global samba_version 4.16.8
 %global talloc_version 2.3.3
 %global tdb_version 1.4.6
 %global tevent_version 0.12.0
@@ -2966,12 +2966,14 @@ fi
 %{python3_sitearch}/samba/tests/krb5/__pycache__/as_canonicalization_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/as_req_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/compatability_tests.*.pyc
+%{python3_sitearch}/samba/tests/krb5/__pycache__/etype_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/fast_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/kcrypto.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_base_test.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_tgs_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/kpasswd_tests.*.pyc
+%{python3_sitearch}/samba/tests/krb5/__pycache__/lockout_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/ms_kile_client_principal_lookup_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/pac_align_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/raw_testcase.*.pyc
@@ -2993,12 +2995,14 @@ fi
 %{python3_sitearch}/samba/tests/krb5/as_canonicalization_tests.py
 %{python3_sitearch}/samba/tests/krb5/as_req_tests.py
 %{python3_sitearch}/samba/tests/krb5/compatability_tests.py
+%{python3_sitearch}/samba/tests/krb5/etype_tests.py
 %{python3_sitearch}/samba/tests/krb5/fast_tests.py
 %{python3_sitearch}/samba/tests/krb5/kcrypto.py
 %{python3_sitearch}/samba/tests/krb5/kdc_base_test.py
 %{python3_sitearch}/samba/tests/krb5/kdc_tests.py
 %{python3_sitearch}/samba/tests/krb5/kdc_tgs_tests.py
 %{python3_sitearch}/samba/tests/krb5/kpasswd_tests.py
+%{python3_sitearch}/samba/tests/krb5/lockout_tests.py
 %{python3_sitearch}/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py
 %{python3_sitearch}/samba/tests/krb5/pac_align_tests.py
 %{python3_sitearch}/samba/tests/krb5/raw_testcase.py
@@ -4157,6 +4161,11 @@ fi
 %endif
 
 %changelog
+* Fri Dec 16 2022 Guenther Deschner <gdeschner@redhat.com> - 4.16.8-0
+- resolves: #2154303, #2154304 - Security fixes for CVE-2022-37966
+- resolves: #2154320, #2154322 - Security fixes for CVE-2022-37967
+- resolves: #2154362, #2154363 - Security fixes for CVE-2022-38023
+
 * Tue Nov 15 2022 Guenther Deschner <gdeschner@redhat.com> - 4.16.7-0
 - Update to version 4.16.7
 - resolves: #2140960, #2143116 - Security fixes for CVE-2022-42898
diff --git a/sources b/sources
index 6b51acf..f0f18e7 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (samba-4.16.7.tar.xz) = 9a2c62b1ab55df3597d3f3182791e201501a8f13e46a9a18b5e3516da9061d6fd451c0da1f7d9ad09de0bbcdcd310c6f4c7d1ccffd67c284b1795d737862b4a2
-SHA512 (samba-4.16.7.tar.asc) = be3221efa6212dfd7ad22febfdb789f3e7566c4c34e6df2afb1f55d66040bc0081e2dbdfb91c40419c51c1755922248c16490f5d7e4e60442dc2e054b1235851
+SHA512 (samba-4.16.8.tar.xz) = 5efb32db6a54d23c69a0e6ec5696a0f7c8688e44fcc69e1f01fe8aa2c163d74b2fb257711aebd97d4023e8be2211f4ee5e95b168ed4365d7e2cc8eda96b063a7
+SHA512 (samba-4.16.8.tar.asc) = ce4d013616cd536c7964ac8e989beab6d247067da65512f401661cb1cd395c21ff8a19d9cf296fec4991912b1e7137f7856b33f681da56cb2a29be538442f6c8