- samba (2:4.19.5+dfsg-1+rpi1) trixie-staging; urgency=medium
++samba (2:4.20.2+dfsg-6+rpi1) trixie-staging; urgency=medium
+
+ [changes brought forward from 2:4.19.1+dfsg-4+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Thu, 12 Oct 2023 15:37:21 +0000]
+ * Link with libatomic on armhf too.
+
- -- Raspbian forward porter <root@raspbian.org> Thu, 22 Feb 2024 08:03:25 +0000
++ -- Raspbian forward porter <root@raspbian.org> Mon, 15 Jul 2024 19:59:21 +0000
++
+ samba (2:4.20.2+dfsg-6) unstable; urgency=medium
+
+ * make-python-optional.diff: remove the forgotten unneeded patch
+ * d/samba.NEWS: re-wrap it a little bit
+ * d/samba.postinst: notify the user about probably-missing samba-ad-dc
+ package on upgrade (debconf template samba/no-samba-ad-dc)
+ * d/samba-common.postinst: remove (clean up) old debconf entries
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Jul 2024 16:40:49 +0300
+
+ samba (2:4.20.2+dfsg-5) unstable; urgency=medium
+
+ * replace internal-to-samba-build python3-ldb-dev package
+ with a transitional empty package (to be removed in trixie+1)
+ * d/control: ensure python3-samba depends on exact version of python3-ldb,
+ the same way as samba-libs depends on exact version of libldb2
+ * d/rules: ensure python3-ldb does not depend on samba-libs|python3-samba
+ * d/rules: refine and explain --with-shared-modules
+ * d/control: d/control: drop old (buster and before) Breaks
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 01 Jul 2024 10:41:04 +0300
+
+ samba (2:4.20.2+dfsg-4) unstable; urgency=medium
+
+ * d/control: add the forgotten epoch for Breaks/Replaces
+ of samba-vfs-ceph & samba-vfs-glusterfs (Closes: #1074299)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 26 Jun 2024 12:20:08 +0300
+
+ samba (2:4.20.2+dfsg-3) unstable; urgency=medium
+
+ * split out samba-vfs-glusterfs from samba-vfs-modules
+ (pick up and rework ubuntu changes)
+ * split out samba-vfs-ceph from samba-vfs-modules
+ * merge samba-vfs-modules (remaining) into main samba package
+ * the only remaining extra vfs module, snapper, does not need extra handling
+ * d/samba-ad-dc.lintian-overrides: add conflicts-with-version override
+ for /usr-move
+ * samba-common-bin: use trivial separate shell wrapper for the python script
+ * d/rules: use before-trixie build profile to control dh_movetousr run too
+ * d/*.service: provide empty value for referenced environment vars
+ (Closes: #1073969)
+ * d/dirs: remove leftover file
+ * d/samba-common-bin.dirs: stop creating /etc/samba/tls/
+ * d/samba.dirs: stop creating bin & sbin
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Jun 2024 07:58:16 +0300
+
+ samba (2:4.20.2+dfsg-2) unstable; urgency=medium
+
+ * tilde-in-version.diff - allow tilde in version string
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 20 Jun 2024 09:49:50 +0300
+
+ samba (2:4.20.2+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=13019
+ Dynamic DNS updates with the internal DNS are not working
+ - https://bugzilla.samba.org/show_bug.cgi?id=13213
+ Samba build is not reproducible
+ - https://bugzilla.samba.org/show_bug.cgi?id=14981
+ netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0
+ - https://bugzilla.samba.org/show_bug.cgi?id=15412 Anonymous smb3
+ signing/encryption should be allowed (similar to Windows Server 2022)
+ - https://bugzilla.samba.org/show_bug.cgi?id=15435
+ Regression DFS not working with widelinks = true
+ - https://bugzilla.samba.org/show_bug.cgi?id=15569
+ ldb qsort might r/w out of bounds with an intransitive compare function
+ - https://bugzilla.samba.org/show_bug.cgi?id=15573
+ Panic in dreplsrv_op_pull_source_apply_changes_trigger
+ - https://bugzilla.samba.org/show_bug.cgi?id=15620
+ s4:nbt_server: does not provide unexpected handling, so winbindd
+ can't use nmb requests instead cldap
+ - https://bugzilla.samba.org/show_bug.cgi?id=15625
+ Many qsort() comparison functions are non-transitive, which can lead
+ to out-of-bounds access in some circumstances
+ - https://bugzilla.samba.org/show_bug.cgi?id=15633
+ samba-gpupdate - Invalid NtVer in netlogon_samlogon_response
+ - https://bugzilla.samba.org/show_bug.cgi?id=15638
+ Need to change gitlab-ci.yml tags in all branches to avoid CI bill
+ - https://bugzilla.samba.org/show_bug.cgi?id=15642 winbindd,
+ net ads join and other things don't work on an ipv6 only host
+ - https://bugzilla.samba.org/show_bug.cgi?id=15653 idmap_ad creates
+ an incorrect local krb5.conf in case of trusted domain lookups
+ - https://bugzilla.samba.org/show_bug.cgi?id=15654
+ new --vendor-name and --vendor-patch-revision options for ./configure
+ - https://bugzilla.samba.org/show_bug.cgi?id=15659
+ Segmentation fault when deleting files in vfs_recycle
+ Closes: #1073252
+ - https://bugzilla.samba.org/show_bug.cgi?id=15660 The images don't build
+ after the git security release and CentOS 8 Stream is EOL
+ - https://bugzilla.samba.org/show_bug.cgi?id=15662
+ vfs_widelinks with DFS shares breaks case insensitivity
+ - https://bugzilla.samba.org/show_bug.cgi?id=15664
+ Panic in vfs_offload_token_db_fetch_fsp()
+ - https://bugzilla.samba.org/show_bug.cgi?id=15665
+ CTDB RADOS mutex helper misses namespace support
+ - https://bugzilla.samba.org/show_bug.cgi?id=15666 "client use kerberos"
+ and --use-kerberos is ignored for the machine account
+ * d/libldb2.symbols,d.python3-ldb.symbols.in: add new version (2.9.1)
+ * use ./configure --vendor-name= instead of patching ./VERSION
+ * omit samba-ad-dc for i386 ubuntu
+ * samba-ad-dc: usr-move compensation maintscripts: add "set -e"
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Jun 2024 23:59:36 +0300
+
+ samba (2:4.20.1+dfsg-5) unstable; urgency=medium
+
+ * Build-Depends: dpkg-dev>=trixie for Arch packages only (for t64 rename)
+ * d/samba.NEWS: reword the last entry a bit
+ * d/samba-ad-dc.init: chmod +x
+ * d/control: bump Standards-Version to 4.7.0 (no changes needed)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 10 Jun 2024 20:17:53 +0300
+
+ samba (2:4.20.1+dfsg-4) unstable; urgency=medium
+
+ [ Helmut Grohne ]
+ * Mitigate ineffective replaces due to /usr-move (DEP17 P1)
+ (Closes: #1072102)
+
+ [ Michael Tokarev ]
+ * d/control: mark libkeyutils-dev as linux-only [linux-any]
+ * d/control: drop old versions of versioned dependencies
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 29 May 2024 20:31:41 +0300
+
+ samba (2:4.20.1+dfsg-3) unstable; urgency=medium
+
+ * d/rules: move samba-common install to d/samba-common.install
+ * d/rules: install samba-ad-dc init files for the right package
+ * d/samba.postinst: remove nmbd_error_handler for the initscript
+ (it is not used in systemd case)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 26 May 2024 18:48:17 +0300
+
+ samba (2:4.20.1+dfsg-2) unstable; urgency=medium
+
+ * move many files from samba package to samba-ad-dc package.
+ From now on, samba-ad-dc isn't just a meta-package, it is actually
+ needed for AD-DC functionality. If you run AD-DC, please ensure
+ that samba-ad-dc package is installed (it is not recommended by samba)
+ Closes: #1051770
+ * move samba-tool and samba-gpupdate from samba-common-bin and samba
+ packages to python3-samba. This is an Active Directory stuff, not
+ needed for a stand-alone server or a client, but might be useful
+ for auth-only (neither file-server nor file-client) AD installs
+ Closes: #1068360
+ * remove addshare.py, setoption.py and source_samba.py python scripts
+ These aren't used by samba packages and are hardly useful generally, esp.
+ having in mind their unusual locations. The apport hook (source_samba.py)
+ is mostly obsolete, it hasn't been updated for a very long time.
+ * add make-python-optional.diff, so python3 can be made optional
+ for samba-common-bin
+ * remove python3-samba and python from Depends of samba and samba-common-bin
+ packages, moving it to Recommends. This lets the user to install a stand-
+ alone samba file server without any Active Directory bits and even without
+ python interpreter
+ * d/samba.install: do not install samba_downgrade_db (to old pre-4.8 version)
+ * move smbcontrol binary from samba to samba-common-bin,
+ since it can also be used to control winbindd
+ * d/control: tdb-tools (tdbbackup) are run from python modules,
+ move from samba:Depends to python3-samba:Recommends
+ * d/control: samba: no need to depend on libpam-runtime or libpam-modules
+ * d/control: samba: no need to recommend samba-ad-provision
+ * debian/TODO: update a bit, remove many obsolete entries
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 26 May 2024 17:48:13 +0300
+
+ samba (2:4.20.1+dfsg-1) unstable; urgency=medium
+
+ * new upstream major release
+ * d/control: bump tevent/talloc/tdb versions for Build-Depends
+ * d/libldb2.symbols, d/python3-ldb.symbols.in: add new version (2.9.0)
+ * d/patches/meaningful-error-if-no-python3-markdown.patch: fixup
+ * d/*.install: internal library names changed:
+ libfoo-samba4.so.0 => libfoo-private-samba.so.0
+ * d/samba-libs.install: update names for libdcerpc & libndr private libs
+ * d/samba-libs.install, d/samba-libs.links, d/samba-libs.symbols:
+ libndr has soversion 4 now. This breaks binaries linked with libndr!
+ * d/samba-libs.symbols: update with new ndr4 symbols
+ * d/libsmbclient.symbols: update with new symbols
+ * d/samba-dev.install: add smb3posix.h
+ * d/not-installed: add usr/bin/wspsearch experimental windows search binary
+ * d/control: libperl-json is not needed for build anymore
+ * d/control: bump minimum mit-krb5 version in Build-Depends to 1.21
+ (for pkg.samba.mitkrb5 build profile)
+ * Closes: #1070335 (wronly filed)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 08 May 2024 13:23:57 +0300
+
+ samba (2:4.19.6+dfsg-3) unstable; urgency=medium
+
+ * fix brown-paper-bag bugs in previous upload
+ (in meaningful-error-if-no-python3-markdown.patch)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 02 May 2024 20:47:15 +0300
+
+ samba (2:4.19.6+dfsg-2) unstable; urgency=medium
+
+ [ Michael Tokarev ]
+ * meaningful-error-if-no-python3-markdown.patch:
+ update to include 2 other places where markdown gets improted
+ * d/winbind.service:
+ - order it before nss-user-lookup.target (Closes: #1068649)
+ - fix typo
+ - nmb.service is nmbd.service in debian
+ * move include/samba/core/*.h from samba-libs to libwbclient-dev
+ (Closes: #1064544)
+
+ [ Alex Murray ]
+ * fix smbd apparmor breakage since change to local systemd services
+ (Cloes: #1069661)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 02 May 2024 14:08:31 +0300
+
+ samba (2:4.19.6+dfsg-1) unstable; urgency=medium
+
+ * new upstream stable/bugfix release:
+ - https://bugzilla.samba.org/show_bug.cgi?id=15527 fd_handle_destructor()
+ panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close()
+ - https://bugzilla.samba.org/show_bug.cgi?id=15580
+ Packet marshalling push support missing for
+ CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED
+ - https://bugzilla.samba.org/show_bug.cgi?id=15588
+ samba-gpupdate: Correctly implement site support
+ - https://bugzilla.samba.org/show_bug.cgi?id=15599
+ libgpo: Segfault in python bindings
+ * revert d/rules: remove Debian/Ubuntu "branding"
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Apr 2024 11:18:38 +0300
+
+ samba (2:4.19.5+dfsg-5) unstable; urgency=medium
+
+ * implement pkg.samba.before-trixie build profile
+ (undo t64 changhes and drop build-dep)
+ * d/rules: remove Debian/Ubuntu "branding", no need in that
+ * d/control: samba-dsdb-modules: drop hardcoded dependency on libgpgme11
+ (Closes: #1068526)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 07 Apr 2024 16:04:30 +0300
+
+ samba (2:4.19.5+dfsg-4) unstable; urgency=medium
+
+ * stop shipping python3/dist-packages/samba/tests
+ (Closes: #1064512, #1063149)
+ * add Debian-Specific tag to debian-specific patches
+ * d/genshlibs: run dh_makeshlibs on libsmbclient0
+ (Closes: #1065349)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 03 Mar 2024 15:37:16 +0300
+
+ samba (2:4.19.5+dfsg-3) unstable; urgency=medium
+
+ * d/control: add versioned depends on dpkg-dev to avoid accidental
+ build of time64_t packages on older systems
+ * +lower-dns-lookup-mismatch-messages.patch (reduce log noise)
+ * d/control: add libtirpc-dev and rpcsvc-proto to Build-Depends-Arch
+ (Closes: #1065188)
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 01 Mar 2024 19:18:35 +0300
+
+ samba (2:4.19.5+dfsg-2) unstable; urgency=medium
+
+ * rename libsmbclient => libsmbclient0 for 64-bit time_t transition
+ Closes: #1064337
+ * d/libsmbclient.lintian-overrides: remove, soname now = package name
+ * add Breaks: of sssd packages to samba-libs
+ * +passchange-error-message.patch - fix password change error message
+ * +edns0.patch: enable EDNS0 support in internal UDP-only DNS client
+ https://bugzilla.samba.org/show_bug.cgi?id=15536
+
+ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 28 Feb 2024 19:38:48 +0300
samba (2:4.19.5+dfsg-1) unstable; urgency=medium