- samba (2:4.22.4+dfsg-1~deb13u1+rpi1) trixie-staging; urgency=medium
++samba (2:4.22.6+dfsg-0+deb13u1+rpi1) trixie-staging; urgency=medium
+
+ [changes brought forward from 2:4.19.1+dfsg-4+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Thu, 12 Oct 2023 15:37:21 +0000]
+ * Link with libatomic on armhf too.
+
- -- Raspbian forward porter <root@raspbian.org> Sat, 13 Sep 2025 18:51:55 +0000
++ -- Raspbian forward porter <root@raspbian.org> Fri, 09 Jan 2026 17:36:41 +0000
++
+ samba (2:4.22.6+dfsg-0+deb13u1) trixie; urgency=medium
+
+ * new upstream stable/security release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=15843:
+ macOS Finder client DFS broken on 4.22.0
+ - https://bugzilla.samba.org/show_bug.cgi?id=15900:
+ 'net ads group' failed to list domain groups
+ - https://bugzilla.samba.org/show_bug.cgi?id=15905:
+ samba-4.21 fails to join AD when multiple DCs are returned
+ - https://bugzilla.samba.org/show_bug.cgi?id=15919:
+ vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev for fsync_send
+ - https://bugzilla.samba.org/show_bug.cgi?id=15921:
+ CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set
+ - https://bugzilla.samba.org/show_bug.cgi?id=15926:
+ Samba 4.22 breaks Time Machine
+ - https://bugzilla.samba.org/show_bug.cgi?id=15927:
+ Spotlight search restriction for shares incomplete and default search
+ searches in too many attributes
+ - https://bugzilla.samba.org/show_bug.cgi?id=15931:
+ rpcd_mdssvc may crash because name mangling is not initialized
+ - https://bugzilla.samba.org/show_bug.cgi?id=15933:
+ Only increment lease epoch if a lease was granted
+
+ * new upstream security release:
+ - CVE-2025-9640: Uninitialized memory disclosure via vfs_streams_xattr
+ https://www.samba.org/samba/security/CVE-2025-9640.html
+ - CVE-2025-10230: Command injection via WINS server hook script
+ https://www.samba.org/samba/security/CVE-2025-10230.html
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 16 Oct 2025 19:19:45 +0300
samba (2:4.22.4+dfsg-1~deb13u1) trixie; urgency=medium