samba (2:4.22.6+dfsg-0+deb13u1) trixie; urgency=medium

samba (2:4.22.6+dfsg-0+deb13u1) trixie; urgency=medium

  * new upstream stable/security release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15843:
     macOS Finder client DFS broken on 4.22.0
   - https://bugzilla.samba.org/show_bug.cgi?id=15900:
     'net ads group' failed to list domain groups
   - https://bugzilla.samba.org/show_bug.cgi?id=15905:
     samba-4.21 fails to join AD when multiple DCs are returned
   - https://bugzilla.samba.org/show_bug.cgi?id=15919:
     vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev for fsync_send
   - https://bugzilla.samba.org/show_bug.cgi?id=15921:
     CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set
   - https://bugzilla.samba.org/show_bug.cgi?id=15926:
     Samba 4.22 breaks Time Machine
   - https://bugzilla.samba.org/show_bug.cgi?id=15927:
     Spotlight search restriction for shares incomplete and default search
     searches in too many attributes
   - https://bugzilla.samba.org/show_bug.cgi?id=15931:
     rpcd_mdssvc may crash because name mangling is not initialized
   - https://bugzilla.samba.org/show_bug.cgi?id=15933:
     Only increment lease epoch if a lease was granted

  * new upstream security release:
   - CVE-2025-9640: Uninitialized memory disclosure via vfs_streams_xattr
     https://www.samba.org/samba/security/CVE-2025-9640.html
   - CVE-2025-10230: Command injection via WINS server hook script
     https://www.samba.org/samba/security/CVE-2025-10230.html

[dgit import unpatched samba 2:4.22.6+dfsg-0+deb13u1]