- samba (2:4.22.4+dfsg-1~deb13u1+rpi1) trixie-staging; urgency=medium
++samba (2:4.23.4+dfsg-1+rpi1) forky-staging; urgency=medium
+
+ [changes brought forward from 2:4.19.1+dfsg-4+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Thu, 12 Oct 2023 15:37:21 +0000]
+ * Link with libatomic on armhf too.
+
- -- Raspbian forward porter <root@raspbian.org> Sat, 13 Sep 2025 18:51:55 +0000
++ -- Raspbian forward porter <root@raspbian.org> Sat, 24 Jan 2026 23:40:59 +0000
+
- samba (2:4.22.4+dfsg-1~deb13u1) trixie; urgency=medium
+ samba (2:4.23.4+dfsg-1) unstable; urgency=medium
* new upstream stable/bugfix release:
- - https://bugzilla.samba.org/show_bug.cgi?id=14981:
- netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0
- - https://bugzilla.samba.org/show_bug.cgi?id=15663:
- Apparently there is a conflict between shadow_copy2 module
- and virusfilter (action quarantine)
- - https://bugzilla.samba.org/show_bug.cgi?id=15816:
- vfs_streams_depot fstatat broken
- - https://bugzilla.samba.org/show_bug.cgi?id=15840:
- kinit command is failing with Missing cache Error
- - https://bugzilla.samba.org/show_bug.cgi?id=15844:
- getpwuid does not shift to new DC when current DC is down
- - https://bugzilla.samba.org/show_bug.cgi?id=15876:
- Windows security hardening locks out schannel'ed
- netlogon dc calls like netr_DsRGetDCName
- - https://bugzilla.samba.org/show_bug.cgi?id=15877:
- Fix handling of empty GPO link
- - https://bugzilla.samba.org/show_bug.cgi?id=15880:
- SMB ACL inheritance doesn't work for files created
- - https://bugzilla.samba.org/show_bug.cgi?id=15881:
- Unresponsive second DC can cause idmapping failure when using idmap_ad
- (was libads-fix-get_kdc_ip_string.patch)
- - https://bugzilla.samba.org/show_bug.cgi?id=15891:
- Figuring out the DC name from IP address fails
- and breaks fork_domain_child()
- - https://bugzilla.samba.org/show_bug.cgi?id=15892:
- Delayed leader broadcast can block ctdb forever
- * libads-fix-get_kdc_ip_string.patch: remove, included upstream
- * d/gbp.conf: debian-branch=debian/4.22
-
- -- Michael Tokarev <mjt@tls.msk.ru> Thu, 21 Aug 2025 20:37:38 +0300
+ - https://bugzilla.samba.org/show_bug.cgi?id=15809:
+ samba-bgqd: rework man page
+ - https://bugzilla.samba.org/show_bug.cgi?id=15897:
+ Assert failed: (dirfd != -1) || (smb_fname->base_name[0] == '/')
+ in vfswrap_openat
+ - https://bugzilla.samba.org/show_bug.cgi?id=15926:
+ Samba 4.22 breaks Time Machine
+ - https://bugzilla.samba.org/show_bug.cgi?id=15936:
+ samba-bgqd can't find [printers] share
+ - https://bugzilla.samba.org/show_bug.cgi?id=15947:
+ mdssvc doesn't support $time.iso dates before 1970
+ - https://bugzilla.samba.org/show_bug.cgi?id=15950:
+ ctdb can crash with inconsistent cluster lock configuration
+ - https://bugzilla.samba.org/show_bug.cgi?id=15955:
+ Winbind can hang forever in gssapi if there are network issues
+ - https://bugzilla.samba.org/show_bug.cgi?id=15961:
+ libldb requires linking libreplace on Linux
+ - https://bugzilla.samba.org/show_bug.cgi?id=15963:
+ * d/patches: remove revert-ldb-use-hexchars_upper-from-replace.h.patch
+ (applied upstream)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 12 Dec 2025 23:10:50 +0300
+
+ samba (2:4.23.3+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=15926:
+ Samba 4.22 breaks Time Machine
+ - https://bugzilla.samba.org/show_bug.cgi?id=15927:
+ Spotlight search restriction for shares incomplete and
+ default search searches in too many attributes
+ - https://bugzilla.samba.org/show_bug.cgi?id=15930:
+ Searching for numbers doesn't work with Spotlight
+ - https://bugzilla.samba.org/show_bug.cgi?id=15931:
+ rpcd_mdssvc may crash because name mangling is not initialized
+ - https://bugzilla.samba.org/show_bug.cgi?id=15933:
+ Only increment lease epoch if a lease was granted
+ - https://bugzilla.samba.org/show_bug.cgi?id=15935:
+ Crash in ctdbd on failed updateip
+ - https://bugzilla.samba.org/show_bug.cgi?id=15940:
+ vfs_recycle does not update mtime
+ - https://bugzilla.samba.org/show_bug.cgi?id=15943:
+ samba-log-parser fails with UnicodeDecodeError:
+ 'utf-8' codec can't decode byte
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 07 Nov 2025 16:45:53 +0300
+
+ samba (2:4.23.2+dfsg-1) unstable; urgency=medium
+
+ * new upstream security release:
+ * CVE-2025-9640: Uninitialized memory disclosure via vfs_streams_xattr
+ https://www.samba.org/samba/security/CVE-2025-9640.html
+ * CVE-2025-10230: Command injection via WINS server hook script
+ https://www.samba.org/samba/security/CVE-2025-10230.html
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 15 Oct 2025 17:21:11 +0300
+
+ samba (2:4.23.1+dfsg-1) unstable; urgency=medium
+
+ [ Michael Tokarev ]
+ * new upstream stable/bugfix release (Closes: #1116050):
+ - https://bugzilla.samba.org/show_bug.cgi?id=15904:
+ CTDB does not support PCP 7.0.0
+ - https://bugzilla.samba.org/show_bug.cgi?id=15914:
+ winbind can crash at startup
+ - https://bugzilla.samba.org/show_bug.cgi?id=15919:
+ vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
+ for fsync_send
+ - https://bugzilla.samba.org/show_bug.cgi?id=15920:
+ Incomplete bind configuration causes DLZ plugin to crash
+ - https://bugzilla.samba.org/show_bug.cgi?id=15921:
+ CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set
+ * d/control: describe the forgotten mitkrb5 build profile
+ * d/control: Standards-Version: 4.7.2 (no changes)
+ * d/control: sort python build-deps together
+ * d/control: clarify some :native usages and add non-:native
+ alternatives for gcc-mingw*
+ * d/control: clarify python3-dev:native, libpython3-dev:host
+ * usershare.patch: remove
+ * d/samba.postinst: add `usershare max shares` parameter on upgrade
+ * debian/samba{,-libs}.lintian-overrides: remove unused
+ hardening-no-fortify-functions overrides
+
+ [ Grzegorz Szymaszek ]
+ * d/smb.conf: delete trailing spaces in comments
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 26 Sep 2025 22:31:59 +0300
+
+ samba (2:4.23.0+dfsg-3) unstable; urgency=medium
+
+ * libmscat-deps.patch (Closes: #1103869)
+ * disable building undocumented dumpmscat binary, but provide
+ pkg.samba.dumpmscat build profile to enable buildig it
+ * enable system libngtcp2 (for !pkg.samba.builtin-ngtcp2 build profile)
+ * d/control: describe all current build profiles
+ * d/smb.conf: disable netbios by default
+ * d/samba.postinst: remove hunk for samba << 4.16.0 (pre-bookworm)
+ concerning socket directory
+ * d/samba.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm)
+ concerning handling of samba spool dir
+ * d/samba.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm)
+ concerning masking of services
+ * d/winbind.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm)
+ concerning masking of services
+ * d/samba-common.postinst: actually clean-up old debconf entries
+ * d/changelog: fix typo in previous entry
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 16 Sep 2025 16:17:37 +0300
+
+ samba (2:4.23.0+dfsg-2) unstable; urgency=medium
+
+ * d/rules: override dh_gencontrol for arch build only
+ (no need to do that for indep build)
+ * d/samba-libs.install: libquic is linux-specific
+ * d/samba-libs.install: ngtcp2 is linux-specific, not non-hurd
+ * d/control: build-depend on :native variant of mingw gcc/tools
+ (helps building for bookworm where these tools aren't M-A:foreign)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 14 Sep 2025 15:35:35 +0300
+
+ samba (2:4.23.0+dfsg-1) unstable; urgency=medium
+
+ * new upstream release
+ * d/watch: 4.23
+ * d/gbp.conf: switch to 4.23 upstream branch
+ * d/rules: tevent=0.17.1 tdb=1.4.14
+ * libads-fix-get_kdc_ip_string.patch: remove (included upstream)
+ * d/copyright: remove entries for two removed files
+ * d/libpam-winbind.install: install message catalogs
+ * d/samba-common-bin.install: install message catalog(s) for the net command
+ * d/libsmbclient0.symbols,d/libtevent0t64.symbols: add new symbols
+ * d/libtdb1.symbols: add new version
+ * d/samba-dsdb-modules.install: add new AD module (trust_notify.so)
+ * d/samba-libs.install: refresh private libraries list (-1, +4 libs)
+ * d/samba-libs.preinst: remove, used in distant past
+ for upgrades from ancient versions
+ * d/control: stop recommending samba-ad-dc (and python3-samba)
+ from samba package (was needed for transition)
+ * d/control: stop recommending attr by samba
+ * d/control: remove pre-bookworm (samba<<4.17) breaks/replaces
+ * d/control: stop samba from being dependent on procps
+ (ps was used in initscript long ago)
+ * d/control: stop ctdb from being dependent on psmisc and sudo
+ * stop ctdb from depending on time package
+ * d/libnss-winbind.triggers: remove, ldconfig call is generated by genshlibs
+ * d/rules: explicitly specify --pythondir= & --pythonarchdir=
+ (so it doesn't install to /usr/lib/python3.13/site-packages/)
+ * d/rules,d/lib{nss,pam}-winbind.install: use ${SYSLIBDIR}
+ for /lib vs /usr/lib, stop using dh_movetousr
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 12 Sep 2025 12:38:48 +0300
samba (2:4.22.3+dfsg-4) unstable; urgency=medium
projects / samba.git / commitdiff