Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2025-12-17 17:31:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new.1939 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "samba" Wed Dec 17 17:31:24 2025 rev:325 rq:1323105 version:4.23.4+git.428.6b48e7eba5b Changes: -------- --- /work/SRC/openSUSE:Factory/samba/samba.changes 2025-11-21 16:54:43.629426975 +0100 +++ /work/SRC/openSUSE:Factory/.samba.new.1939/samba.changes 2025-12-17 17:34:59.768188821 +0100 @@ -1,0 +2,76 @@ +Fri Dec 12 15:42:05 UTC 2025 - Noel Power <[email protected]> + +- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20; + (bso#15790); (bsc#1249058). + +------------------------------------------------------------------- +Tue Dec 9 11:18:45 UTC 2025 - Noel Power <[email protected]> + +- Update to 4.23.4 + * Samba 4.22 breaks Time Machine; (bso#15926). + * mdssvc doesn't support $time.iso dates before 1970; + (bso#15947). + * Fix winbind cache consistency; (bso#15963). + * Assert failed: (dirfd != -1) || (smb_fname->base_name[0] == + '/') in vfswrap_openat; (bso#15897). + * ctdb can crash with inconsistent cluster lock configuration; + (bso#15950). + * samba-bgqd: rework man page; (bso#15809). + * samba-bgqd can't find [printers] share; (bso#15936). + * Winbind can hang forever in gssapi if there are network + issues; (bso#15955). + * libldb requires linking libreplace on Linux; (bso#15961). + +- Update to 4.23.3 + * Spotlight search restriction for shares incomplete and + default search searches in too many attributes; (bso#15927). + * Searching for numbers doesn't work with Spotlight; + (bso#15930). + * rpcd_mdssvc may crash because name mangling is not + initialized; (bso#15931). + * Only increment lease epoch if a lease was granted; + (bso#15933). + * vfs_recycle does not update mtime; (bso#15940). + * samba-log-parser fails with UnicodeDecodeError: 'utf-8' codec + can't decode byte; (bso#15943). + * Crash in ctdbd on failed updateip; (bso#15935). + +- Update to 4.23.2 + * CVE-2025-10230: Command injection via WINS server hook + script (bso#15903); (bsc#1251280). + * CVE-2025-9640: uninitialized memory disclosure via + vfs_streams_xattr; (bso#15885); (bsc#1251279). + +- Update to 4.23.1 + * Incomplete bind configuration causes DLZ plugin to crash; + (bso#15920). + * winbind can crash at startup; (bso#15914). + * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev + for fsync_send; (bso#15919). + * CTDB does not support PCP 7.0.0; (bso#15904). + * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set; + (bso#15921). + +- Update to 4.23.0 + * samba.tests.safe_tarfile fails on Python 3.13 with additional + security fixes for tarfile support; (bso#15911). + * samba-4.21 fails to join AD when multiple DCs are returned; + (bso#15905). + * Uninitialized read leads to hanging rpcd_spoolss; + (bso#15908). + * Stack buffer overflow in samba3.smb2.dirlease.fileserver; + (bso#15907). + * Regression in gssproxy support in 4.23.rc1+; (bso#15902). + * 'net ads group' failed to list domain groups; (bso#15900). + * macOS Finder client DFS broken on 4.22.0; (bso#15843). + * Self-signed certificates don't have X509v3 Subject + Alternative Name for DNS; (bso#15899). + * Improve handling of principals and realms in client tools; + (bso#15893). + * libquic build fixes; (bso#15896). + * getpwuid does not shift to new DC when current DC is down; + (bso#15844). + * Windows security hardening locks out schannel'ed netlogon dc + calls like netr_DsRGetDCName; (bso#15876). + +------------------------------------------------------------------- Old: ---- samba-4.22.6+git.435.014e5eceb5d.tar.bz2 New: ---- samba-4.23.4+git.428.6b48e7eba5b.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ samba.spec ++++++ --- /var/tmp/diff_new_pack.MsvL4P/_old 2025-12-17 17:35:01.544263410 +0100 +++ /var/tmp/diff_new_pack.MsvL4P/_new 2025-12-17 17:35:01.552263747 +0100 @@ -39,8 +39,8 @@ %endif %define talloc_version 2.4.3 -%define tevent_version 0.16.2 -%define tdb_version 1.4.13 +%define tevent_version 0.17.1 +%define tdb_version 1.4.14 # This table represents the possible combinations of build macros. # They are defined only if not already defined in the build service @@ -137,6 +137,7 @@ BuildRequires: librados-devel %endif BuildRequires: libgnutls-devel >= 3.4.7 +BuildRequires: libngtcp2_crypto_gnutls-devel >= 1.12.0 %if %{with_dc} BuildRequires: pkgconfig(gpgme) BuildRequires: libjansson-devel @@ -168,7 +169,7 @@ %endif BuildRequires: sysuser-tools -Version: 4.22.6+git.435.014e5eceb5d +Version: 4.23.4+git.428.6b48e7eba5b Release: 0 URL: https://www.samba.org/ Obsoletes: samba-32bit < %{version} @@ -255,6 +256,8 @@ binary packages of the most current Samba version, and a bug reporting how to. +%lang_package -n samba-client + %package devel Summary: Development files shared by Samba subpackages License: GPL-3.0-or-later @@ -485,6 +488,8 @@ %description winbind-libs This package contains the libraries required by the Winbind daemon. +%lang_package -n samba-winbind-libs + %package dcerpc Summary: Samba dcerpc service binaries License: GPL-3.0-or-later @@ -680,7 +685,7 @@ export CFLAGS="%{optflags} -D_GNU_SOURCE -D_LARGEFILE64_SOURCE -DIDMAP_RID_SUPPORT_TRUSTED_DOMAINS -I/usr/include/tirpc" export LDFLAGS="-ltirpc" -bundled_libraries="NONE" +bundled_libraries=",libquic" %if ! 0%{?with_mscat} bundled_libraries+=",libtasn1" %endif @@ -702,6 +707,7 @@ --enable-debug \ --with-profiling-data \ --private-libraries=${private_libraries} \ + --pythonarchdir=%{python3_sitearch} %if !%{with_lmdb} --without-ldb-lmdb \ %endif @@ -802,6 +808,9 @@ %{buildroot}/%{_unitdir}/samba-ad-dc.service %endif +%find_lang pam_winbind +%find_lang net + # CTDB install -m 0644 packaging/SuSE/config/sysconfig.ctdb %{buildroot}/%{_fillupdir} ln -s service %{buildroot}/%{_sbindir}/rcctdb @@ -1206,6 +1215,10 @@ %{_fillupdir}/sysconfig.samba %{_sysusersdir}/samba.conf + +%files client-lang -f net.lang +%defattr(-,root,root) + %files client %defattr(-,root,root) %dir %{CONFIGDIR} @@ -1522,7 +1535,8 @@ %{_libdir}/samba/libsamba3-util-private-samba.so %{_libdir}/samba/libsamba-modules-private-samba.so %{_libdir}/samba/libsamdb-common-private-samba.so -%{_libdir}/samba/libsmb-transport-private-samba.so +%{_libdir}/samba/libsamba-security-trusts-private-samba.so +%{_libdir}/samba/libquic-private-samba.so %{_libdir}/samba/libsmbclient-raw-private-samba.so %{_libdir}/samba/libsmbd-base-private-samba.so %{_libdir}/samba/libsmbd-shim-private-samba.so @@ -1542,6 +1556,7 @@ %{_libdir}/samba/libmscat-private-samba.so %endif %if %{with_dc} +%{_libdir}/samba/service/ft_scanner.so %{_libdir}/samba/libdfs-server-ad-private-samba.so %endif %dir %{_libdir}/samba/pdb @@ -1618,6 +1633,9 @@ %{_mandir}/man1/ndrdump.1.* %{_mandir}/man1/mdsearch.1.* +%files winbind-libs-lang -f pam_winbind.lang +%defattr(-,root,root) + %files winbind-libs %defattr(-,root,root) %{_pam_moduledir}/pam_winbind.so @@ -1919,6 +1937,9 @@ %{_libdir}/samba/ldb/ldap.so %{_libdir}/samba/ldb/ildap.so %{_libdir}/samba/ldb/ldbsamba_extensions.so +%if %{with_dc} +%{_libdir}/samba/ldb/trust_notify.so +%endif %if %{with_dc} %files ad-dc-libs ++++++ _service ++++++ --- /var/tmp/diff_new_pack.MsvL4P/_old 2025-12-17 17:35:01.716270635 +0100 +++ /var/tmp/diff_new_pack.MsvL4P/_new 2025-12-17 17:35:01.728271139 +0100 @@ -2,7 +2,7 @@ <service name="tar_scm" mode="manual"> <param name="url">https://gitlab.suse.de/samba/suse-samba.git/</param> <param name="scm">git</param> - <param name="revision">factory-4-22-stable</param> + <param name="revision">factory-4-23-stable</param> <param name="versionformat">@PARENT_TAG@+git.@TAG_OFFSET@.%h</param> <param name="versionrewrite-pattern">samba-(.*)</param> <param name="versionrewrite-replacement">\1</param> ++++++ samba-4.22.6+git.435.014e5eceb5d.tar.bz2 -> samba-4.23.4+git.428.6b48e7eba5b.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/samba/samba-4.22.6+git.435.014e5eceb5d.tar.bz2 /work/SRC/openSUSE:Factory/.samba.new.1939/samba-4.23.4+git.428.6b48e7eba5b.tar.bz2 differ: char 11, line 1
