From: Raspbian automatic forward porter Date: Sat, 24 Jan 2026 23:41:00 +0000 (+0000) Subject: Merge version 2:4.22.4+dfsg-1~deb13u1+rpi1 and 2:4.23.4+dfsg-1 to produce 2:4.23... X-Git-Tag: archive/raspbian/2%4.23.4+dfsg-1+rpi1^0 X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=2c7d4452715c0168484e169f45d9a43d8dce35ba;p=samba.git Merge version 2:4.22.4+dfsg-1~deb13u1+rpi1 and 2:4.23.4+dfsg-1 to produce 2:4.23.4+dfsg-1+rpi1 --- 2c7d4452715c0168484e169f45d9a43d8dce35ba diff --cc debian/changelog index 47060cbf,dc25c1be..7bd2ccad --- a/debian/changelog +++ b/debian/changelog @@@ -1,43 -1,157 +1,164 @@@ - samba (2:4.22.4+dfsg-1~deb13u1+rpi1) trixie-staging; urgency=medium ++samba (2:4.23.4+dfsg-1+rpi1) forky-staging; urgency=medium + + [changes brought forward from 2:4.19.1+dfsg-4+rpi1 by Peter Michael Green at Thu, 12 Oct 2023 15:37:21 +0000] + * Link with libatomic on armhf too. + - -- Raspbian forward porter Sat, 13 Sep 2025 18:51:55 +0000 ++ -- Raspbian forward porter Sat, 24 Jan 2026 23:40:59 +0000 + - samba (2:4.22.4+dfsg-1~deb13u1) trixie; urgency=medium + samba (2:4.23.4+dfsg-1) unstable; urgency=medium * new upstream stable/bugfix release: - - https://bugzilla.samba.org/show_bug.cgi?id=14981: - netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0 - - https://bugzilla.samba.org/show_bug.cgi?id=15663: - Apparently there is a conflict between shadow_copy2 module - and virusfilter (action quarantine) - - https://bugzilla.samba.org/show_bug.cgi?id=15816: - vfs_streams_depot fstatat broken - - https://bugzilla.samba.org/show_bug.cgi?id=15840: - kinit command is failing with Missing cache Error - - https://bugzilla.samba.org/show_bug.cgi?id=15844: - getpwuid does not shift to new DC when current DC is down - - https://bugzilla.samba.org/show_bug.cgi?id=15876: - Windows security hardening locks out schannel'ed - netlogon dc calls like netr_DsRGetDCName - - https://bugzilla.samba.org/show_bug.cgi?id=15877: - Fix handling of empty GPO link - - https://bugzilla.samba.org/show_bug.cgi?id=15880: - SMB ACL inheritance doesn't work for files created - - https://bugzilla.samba.org/show_bug.cgi?id=15881: - Unresponsive second DC can cause idmapping failure when using idmap_ad - (was libads-fix-get_kdc_ip_string.patch) - - https://bugzilla.samba.org/show_bug.cgi?id=15891: - Figuring out the DC name from IP address fails - and breaks fork_domain_child() - - https://bugzilla.samba.org/show_bug.cgi?id=15892: - Delayed leader broadcast can block ctdb forever - * libads-fix-get_kdc_ip_string.patch: remove, included upstream - * d/gbp.conf: debian-branch=debian/4.22 - - -- Michael Tokarev Thu, 21 Aug 2025 20:37:38 +0300 + - https://bugzilla.samba.org/show_bug.cgi?id=15809: + samba-bgqd: rework man page + - https://bugzilla.samba.org/show_bug.cgi?id=15897: + Assert failed: (dirfd != -1) || (smb_fname->base_name[0] == '/') + in vfswrap_openat + - https://bugzilla.samba.org/show_bug.cgi?id=15926: + Samba 4.22 breaks Time Machine + - https://bugzilla.samba.org/show_bug.cgi?id=15936: + samba-bgqd can't find [printers] share + - https://bugzilla.samba.org/show_bug.cgi?id=15947: + mdssvc doesn't support $time.iso dates before 1970 + - https://bugzilla.samba.org/show_bug.cgi?id=15950: + ctdb can crash with inconsistent cluster lock configuration + - https://bugzilla.samba.org/show_bug.cgi?id=15955: + Winbind can hang forever in gssapi if there are network issues + - https://bugzilla.samba.org/show_bug.cgi?id=15961: + libldb requires linking libreplace on Linux + - https://bugzilla.samba.org/show_bug.cgi?id=15963: + * d/patches: remove revert-ldb-use-hexchars_upper-from-replace.h.patch + (applied upstream) + + -- Michael Tokarev Fri, 12 Dec 2025 23:10:50 +0300 + + samba (2:4.23.3+dfsg-1) unstable; urgency=medium + + * new upstream stable/bugfix release: + - https://bugzilla.samba.org/show_bug.cgi?id=15926: + Samba 4.22 breaks Time Machine + - https://bugzilla.samba.org/show_bug.cgi?id=15927: + Spotlight search restriction for shares incomplete and + default search searches in too many attributes + - https://bugzilla.samba.org/show_bug.cgi?id=15930: + Searching for numbers doesn't work with Spotlight + - https://bugzilla.samba.org/show_bug.cgi?id=15931: + rpcd_mdssvc may crash because name mangling is not initialized + - https://bugzilla.samba.org/show_bug.cgi?id=15933: + Only increment lease epoch if a lease was granted + - https://bugzilla.samba.org/show_bug.cgi?id=15935: + Crash in ctdbd on failed updateip + - https://bugzilla.samba.org/show_bug.cgi?id=15940: + vfs_recycle does not update mtime + - https://bugzilla.samba.org/show_bug.cgi?id=15943: + samba-log-parser fails with UnicodeDecodeError: + 'utf-8' codec can't decode byte + + -- Michael Tokarev Fri, 07 Nov 2025 16:45:53 +0300 + + samba (2:4.23.2+dfsg-1) unstable; urgency=medium + + * new upstream security release: + * CVE-2025-9640: Uninitialized memory disclosure via vfs_streams_xattr + https://www.samba.org/samba/security/CVE-2025-9640.html + * CVE-2025-10230: Command injection via WINS server hook script + https://www.samba.org/samba/security/CVE-2025-10230.html + + -- Michael Tokarev Wed, 15 Oct 2025 17:21:11 +0300 + + samba (2:4.23.1+dfsg-1) unstable; urgency=medium + + [ Michael Tokarev ] + * new upstream stable/bugfix release (Closes: #1116050): + - https://bugzilla.samba.org/show_bug.cgi?id=15904: + CTDB does not support PCP 7.0.0 + - https://bugzilla.samba.org/show_bug.cgi?id=15914: + winbind can crash at startup + - https://bugzilla.samba.org/show_bug.cgi?id=15919: + vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev + for fsync_send + - https://bugzilla.samba.org/show_bug.cgi?id=15920: + Incomplete bind configuration causes DLZ plugin to crash + - https://bugzilla.samba.org/show_bug.cgi?id=15921: + CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set + * d/control: describe the forgotten mitkrb5 build profile + * d/control: Standards-Version: 4.7.2 (no changes) + * d/control: sort python build-deps together + * d/control: clarify some :native usages and add non-:native + alternatives for gcc-mingw* + * d/control: clarify python3-dev:native, libpython3-dev:host + * usershare.patch: remove + * d/samba.postinst: add `usershare max shares` parameter on upgrade + * debian/samba{,-libs}.lintian-overrides: remove unused + hardening-no-fortify-functions overrides + + [ Grzegorz Szymaszek ] + * d/smb.conf: delete trailing spaces in comments + + -- Michael Tokarev Fri, 26 Sep 2025 22:31:59 +0300 + + samba (2:4.23.0+dfsg-3) unstable; urgency=medium + + * libmscat-deps.patch (Closes: #1103869) + * disable building undocumented dumpmscat binary, but provide + pkg.samba.dumpmscat build profile to enable buildig it + * enable system libngtcp2 (for !pkg.samba.builtin-ngtcp2 build profile) + * d/control: describe all current build profiles + * d/smb.conf: disable netbios by default + * d/samba.postinst: remove hunk for samba << 4.16.0 (pre-bookworm) + concerning socket directory + * d/samba.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm) + concerning handling of samba spool dir + * d/samba.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm) + concerning masking of services + * d/winbind.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm) + concerning masking of services + * d/samba-common.postinst: actually clean-up old debconf entries + * d/changelog: fix typo in previous entry + + -- Michael Tokarev Tue, 16 Sep 2025 16:17:37 +0300 + + samba (2:4.23.0+dfsg-2) unstable; urgency=medium + + * d/rules: override dh_gencontrol for arch build only + (no need to do that for indep build) + * d/samba-libs.install: libquic is linux-specific + * d/samba-libs.install: ngtcp2 is linux-specific, not non-hurd + * d/control: build-depend on :native variant of mingw gcc/tools + (helps building for bookworm where these tools aren't M-A:foreign) + + -- Michael Tokarev Sun, 14 Sep 2025 15:35:35 +0300 + + samba (2:4.23.0+dfsg-1) unstable; urgency=medium + + * new upstream release + * d/watch: 4.23 + * d/gbp.conf: switch to 4.23 upstream branch + * d/rules: tevent=0.17.1 tdb=1.4.14 + * libads-fix-get_kdc_ip_string.patch: remove (included upstream) + * d/copyright: remove entries for two removed files + * d/libpam-winbind.install: install message catalogs + * d/samba-common-bin.install: install message catalog(s) for the net command + * d/libsmbclient0.symbols,d/libtevent0t64.symbols: add new symbols + * d/libtdb1.symbols: add new version + * d/samba-dsdb-modules.install: add new AD module (trust_notify.so) + * d/samba-libs.install: refresh private libraries list (-1, +4 libs) + * d/samba-libs.preinst: remove, used in distant past + for upgrades from ancient versions + * d/control: stop recommending samba-ad-dc (and python3-samba) + from samba package (was needed for transition) + * d/control: stop recommending attr by samba + * d/control: remove pre-bookworm (samba<<4.17) breaks/replaces + * d/control: stop samba from being dependent on procps + (ps was used in initscript long ago) + * d/control: stop ctdb from being dependent on psmisc and sudo + * stop ctdb from depending on time package + * d/libnss-winbind.triggers: remove, ldconfig call is generated by genshlibs + * d/rules: explicitly specify --pythondir= & --pythonarchdir= + (so it doesn't install to /usr/lib/python3.13/site-packages/) + * d/rules,d/lib{nss,pam}-winbind.install: use ${SYSLIBDIR} + for /lib vs /usr/lib, stop using dh_movetousr + + -- Michael Tokarev Fri, 12 Sep 2025 12:38:48 +0300 samba (2:4.22.3+dfsg-4) unstable; urgency=medium