[ubuntu/plucky-proposed] samba 2:4.21.4+dfsg-1ubuntu1 (Accepted)

Andreas Hasenack andreas at canonical.com
Thu Feb 20 11:15:24 UTC 2025


samba (2:4.21.4+dfsg-1ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable (LP: #2085212). Remaining changes:
    - debian/control: Ubuntu i386 binary compatibility:
      + enable the liburing vfs module, except on i386 where liburing is
        not available
    - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
      samba AD DC provisioning and domain join tests with internal DNS
      (LP #1977746, LP #2011745)
    - d/control: adjust breaks/replaces for file move that Debian did in
      4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
      file conflict in a dist-upgrade from earlier Ubuntu releases, like
      Kinetic (LP #2024663)
    - Fix t64 package name in 'Enhances' attribute.
    - debian/tests: launch container with security.nesting=true
      Otherwise, systemd-resolved in the member-server container will
      fail to start, and cause the test to fail. (LP #2046486)
    - d/control: make samba-vfs-modules-extra a transitional package.
      The glusterfs vfs module (the only vfs module shipped in it
      previously) is now in bin:samba-vfs-glusterfs
    - d/control: have the (now transitional) samba-vfs-modules package
      depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
      module
    - d/control: samba-vfs-modules and samba-vfs-modules-extra, now
      transitional packages, should only depend on the new samba-vfs-ceph and
      samba-vfs-glusterfs packages on the architectures where those two
      packages are built (LP #2076682)
    - d/control:
      + samba-vfs-modules-extra was not built before for 32bit architectures,
        adjust Architectures line
      + samba-vfs-modules: this one was build for 32bit architectures before,
        so we need the conditional Depends for ceph
    - d/p/fix-update-motd-gpo.patch: fix crash when updating an already existing
      MOTD GPO (LP #2092308)
  * Added:
    - d/t/samba-ad-dc-provisioning-internal-dns: force samba-tool to use
      kerberos when interrogating the DNS server, otherwise it will prompt for
      a password
    - d/t/control: dpkg-vendor is also needed for the AD test
    - d/p/fix-update-motd-gpo.patch: fix another crash when the GPO doesn't
      exist yet (LP: #2098755)

samba (2:4.21.4+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release (Closes: #1084559):
   - https://bugzilla.samba.org/show_bug.cgi?id=14213:
     Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing security tab
   - https://bugzilla.samba.org/show_bug.cgi?id=15151:
     vfs_gpfs silently garbles timestamps > year 2106
   - https://bugzilla.samba.org/show_bug.cgi?id=15703:
     General improvements for vfs_ceph_new module
   - https://bugzilla.samba.org/show_bug.cgi?id=15738:
     Creation of GPOs applicable to more than one group is impossible
     with Samba 4.20.0 and later
   - https://bugzilla.samba.org/show_bug.cgi?id=15756:
     Replace `crypt` module in python/samba/netcmd/user/readpasswords/common.py
   - https://bugzilla.samba.org/show_bug.cgi?id=15759:
     net ads create/join/winbind producing unix dysfunctional keytabs
   - https://bugzilla.samba.org/show_bug.cgi?id=15769:
     The values from hresult_errstr_const and hresult_errstr
     are reversed in 4.20 and 4.21
   - https://bugzilla.samba.org/show_bug.cgi?id=15777:
     net offlinejoin not working correctly
   - https://bugzilla.samba.org/show_bug.cgi?id=15778:
     Kerberos referral tickets are generated for principals in our domain
     if we have a trust to a top level domain
   - https://bugzilla.samba.org/show_bug.cgi?id=15780:
     Increasing slowness of sharesec performance with high number
     of registry shares
   - https://bugzilla.samba.org/show_bug.cgi?id=15782:
     winbindd shows memleak in kerberos_decode_pac
   - https://bugzilla.samba.org/show_bug.cgi?id=15783:
     NETLOGON_NTLMV2_ENABLED is missing in the SamLogon* user_flags field
   - https://bugzilla.samba.org/show_bug.cgi?id=15784:
     Regression: stack-use-after-return in crypt_as_best_we_can()
   - https://bugzilla.samba.org/show_bug.cgi?id=15788:
     libreplace:readline: gcc 15 complains about incompatible pointer types
   - https://bugzilla.samba.org/show_bug.cgi?id=15796:
     Spotlight search results don't show file size and creation date
  * replace-xpg-strerror.patch: to avoid linking other libs with libreplace
  * samba-libs: add libutil-crypt-private-samba.so.0

samba (2:4.21.3+dfsg-6) unstable; urgency=medium

  * d/genshlibs: remove the special-case for libsmbclient0 since
    we expand t64:Provides in d/control directly
  * d/control: add ${t64:Provides} comments
  * d/control: more t64 work: for libtevent0t64, break libtevent0
    not <<${source:Version} but <<${binary:Version}, because source
    is samba not tevent (Closes: #1092881)

samba (2:4.21.3+dfsg-5) unstable; urgency=medium

  * the Fixing Big Mishaps release.

  * d/rules: fix talloc, tevent, tdb subpackages version numbers, add epoch

    Due to a mistake, I screwed up sub-packages versions completely,
    by using the wrong variable when generating the versions, - so
    all mentioned packages had version number of ldb, not their own.

    Fix this.

    Unfortunately, the wrong version is larger than all the correct ones.
    To compensate, use the same epoch number as is already used by current
    samba package (2:).

    While at it, use common variable to hold the +samba version suffix.

  * d/*.symbols: mark most recent version markers with 2: epoch too

  * d/control,d/rules: ensure we use the most recent libtalloc/libtevent/libtdb
    for now, to compensate for the wrong versions.

  * d/control: add explicit Provides of non-t64 libs

    Apparentlty due to usage of both t64 and pre-t64 packages
    (with different build profiles), debhelper is not populating
    necessary values for ${t64:Provides}.  So libtevent0t64 is
    not providing libtevent0 on the relevant architectures.
    Ditto for libsmbclient0 providing libsmbclient.

    Add explicit arch-specific Provides: for libsmbclient0 and
    libtevent0t64.

    List only the affected release architectures in there.

    This removes the only user of X-Time64-Compat control field
    in debian.

  * d/rules: do not install wscript_build in examples

  * d/control: fix libtevent wrong build profile when building for mjt's
    repository.  Does not affect debian thankfully.  The problem is that
    libtevent0t64 slipped into the repository for older (before-trixie)
    distributions, where t64 migration hasn't been completed.  This should
    not cause actual problems as a problem is only possible when upgrading
    to the new debian (or ubuntu) release where t64 transition has happened,
    and during such upgrade, new libtevent0t64 will be pulled in - thanks to
    the first big mistake above, since it now has 2: epoch.
  * d/control: add Breaks for libtevent0t64 on mjt repo.  This also
    does not affect debian, but makes my life definitely easier.

samba (2:4.21.3+dfsg-4) unstable; urgency=medium

  * Revert "d/control: mark arch-all perl and python packages with :native
    for now" - it worked just fine on local build but fails on buildds?
  * d/control: add :native alternative for arch-all perl & python packages
    for now, to help cross-building samba on bookworm and before
    (no difference for trixie).  Use foo:native|foo alternative to work
    around dpkg/apt disparity in handling :native deps.

samba (2:4.21.3+dfsg-2) unstable; urgency=medium

  * ctdb-failover-statd_callout-PATH_MAX-workaround.patch
    another tweak for hurd (for missing PATH_MAX)
  * d/control: add a note about ntp & signd socket, replace ntp with ntpsec
  * d/control: provide ability to cross-build samba finally
    (using qemu-user helper)
  * d/control: mark arch-all perl and python packages with :native for now
    (to help cross-building on bookworm)

samba (2:4.21.3+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=6750:
     After 'machine password timeout' /etc/krb5.keytab is not updated
   - https://bugzilla.samba.org/show_bug.cgi?id=15697:
     Compound rename from Mac clients can fail with
     NT_STATUS_INTERNAL_ERROR if the file has a lease
   - https://bugzilla.samba.org/show_bug.cgi?id=15701:
     More possible replication loops against Azure AD
   - https://bugzilla.samba.org/show_bug.cgi?id=15724:
     vfs crossrename seems not work correctly
   - https://bugzilla.samba.org/show_bug.cgi?id=15755:
     Avoid event failure race when disabling an event script
   - https://bugzilla.samba.org/show_bug.cgi?id=15758:
     Segfault in vfs_btrfs
   - https://bugzilla.samba.org/show_bug.cgi?id=15765:
     Fix heap-user-after-free with association groups
   - https://bugzilla.samba.org/show_bug.cgi?id=15771:
     Memory leak wbcCtxLookupSid
  * d/patches/: specify more Forwarded: urls
  * d/patches/: source3-lib-util_sec.c-include-grp.h-for-setgroups.patch >
                include-grp.h-for-setgroups-in-a-few-places.patch:
    add 1 more place for setgroups()
  * d/rules: remember last versions of ldb/talloc/tevent/tdb, reality check
  * d/control: since we don't use debconf anymore, no need
    to (build-)depend on po-debconf either

samba (2:4.21.2+dfsg-4) unstable; urgency=medium

  * d/rules: guard building compile_et target with !mitkrb5
  * source3-lib-util_sec.c-include-grp.h-for-setgroups.patch for hurd ftbfs
  * build talloc/tevent/tdb from samba source:
   - import talloc, tevent and tdb packaging into samba
   - stop shipping internal-to-samba libpytalloc-util development files
  * d/copyright: mention myself for d/*

samba (2:4.21.2+dfsg-3) unstable; urgency=medium

  * Revert "d/rules: as of 4.17, no need to explicitly build intermediate
    targets anymore".  It is still a problem with samba 4.21, it just were
    hidden.
  * ldb-no-replace.diff: avoid embedding rpath to private samba libs
    for libldb.so
  * heimdal-spelling.patch: remove (forgotten, applied upstream)
  * d/patches/* update dep3 metadata
  * add-missing-libs-deps.diff: update to include more missing deps
    (as submitted upstream)

samba (2:4.21.2+dfsg-2) unstable; urgency=medium

  * resurrect python3-ldb (removed in previous release)
    The removal of python3-ldb were unwarranted, as long as libldb
    itself is stand-alone, lets keep its python bindings stand-alone
    too.
  * d/rules: s/execute_after_dh_install/execute_after_dh_install-arch/
    since it is arch-specific

samba (2:4.21.2+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=14356
     protocol error - Unclear debug message "pad length mismatch"
     for invalid bind packet
   - https://bugzilla.samba.org/show_bug.cgi?id=15320
     Update CTDB to track all TCP connections to public IP addresses
   - https://bugzilla.samba.org/show_bug.cgi?id=15425
     NetrGetLogonCapabilities QueryLevel 2 needs to be implemented
   - https://bugzilla.samba.org/show_bug.cgi?id=15732
     smbd fails to correctly check sharemode against OVERWRITE dispositions
   - https://bugzilla.samba.org/show_bug.cgi?id=15740
     gss_accept_sec_context() from Heimdal does not imply GSS_C_MUTUAL_FLAG
     with GSS_C_DCE_STYLE
   - https://bugzilla.samba.org/show_bug.cgi?id=15749
     winbindd should call process_set_title() for locator child
   - https://bugzilla.samba.org/show_bug.cgi?id=15752
     winexe no longer works with samba 4.21
   - https://bugzilla.samba.org/show_bug.cgi?id=15754
     Panic in close_directory
  * d/control: add python3-cryptography to python3-samba Depends
    (Closes: #1086768)
  * d/control: move python3-gpg recommends from python3-samba to samba-ad-dc
  * d/control: extend libpcap-dev from hurd-i386 to hurd-any (Closes: #1087409)
  * ship winexe binary (Closes: #1081269).
    New Build-Depends: gcc-mingw-w64-i686-win32 gcc-mingw-w64-x86-64-win32
  * d/control: provide Breaks/Replaces for winexe in kali linux (#1081269)
  * swallow python3-ldb by python3-samba (and remove python3-ldb-dev)
  * d/rules: drop mis-using --bundled-libraries configure option
  * d/samba.postinst: replace test for /usr/bin/deb-systemd-helper file
    with "command -v" (lintian)
  * d/libldb2.lintian-overrides: remove overrides which were needed for compat
    symlink (compat for older ldb in separate source)
  * d/samba.install: stop shipping log2pcap.1 (the tool is not installed)
  * d/rules: rename LDB_* vars to ldb-, and use common var for -Vldb:Version
  * move-msg.sock-from-var-lib-samba-to-run-samba.patch: update
    to cover failing tests too

samba (2:4.21.1+dfsg-2) unstable; urgency=medium

  * d/control: add Recommends: samba-ad-dc for samba for now
    to avoid breaking existing installs
  * d/samba.postrm: stop unmasking of samba-ad-dc
    (it is already done in postinst)
  * d/samba.postinst,d/samba.maintscripts: remove samba-ad-dc
    startup files and stop the service (Closes: #1085617)

samba (2:4.21.1+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release
  * d/salsa-ci.yml: disable reprotest vary build_path
  * d/control: Build-Depend on python3-setuptools (Closes: #1080851)
  * d/rules: stop providing compat symlink for old ldb
    modules location for old sssd
  * d/changelog: mention closing of #835404 by 4.21.0-1

samba (2:4.21.0+dfsg-1) unstable; urgency=medium

  * switch to 4.21 branch
  * update to 4.21.0 (new upstream)
    (Closes: #835404)
  * fix-nfs-service-name-to-nfs-kernel-server.patch: refresh
  * Force-LDB-as-standalone.patch: remove (ldb is always internal now)
  * d/rules: ldb lib is now private by default, expose it as public
  * d/rules: ldb uses LDB_VERSION variable now, not VERSION
  * tilde-in-version.diff: remove (applied upstream)
  * heimdal-spelling.patch: disable for now
  * d/rules: s/vendor-name/vendor-suffix/
  * d/ctdb.install: no more sudoers file
  * d/samba-libs.symbols, d/control, d/samba-libs.install: libndr4=>libndr5
    This requires sssd to be rebuilt
  * samba-{libs,dev}.install, python3-{samba,ldb).install: refresh libs
    (with lintian-overrides)
  * samba-libs.install, samba-dev.install: new (semi-public) library:
    libsamba-policy.so (used by the python stuff only, for now)
  * samba-libs.install: new private library: libsamba-net-private-samba.so.0
  * libldb2.symbols: add new symbols & 2.10.0 version
    (and remove 2.9.1 minor version)
  * d/control: bump libtdb version dependency to 1.4.12
  * d/ctdb.install: install winbind_ctdb_updatekeytab.sh file

Date: Thu, 20 Feb 2025 07:56:20 -0300
Changed-By: Andreas Hasenack <andreas at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/samba/2:4.21.4+dfsg-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 20 Feb 2025 07:56:20 -0300
Source: samba
Built-For-Profiles: noudeb
Architecture: source
Version: 2:4.21.4+dfsg-1ubuntu1
Distribution: plucky
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andreas Hasenack <andreas at canonical.com>
Closes: 835404 1080851 1081269 1084559 1085617 1086768 1087409 1092881
Launchpad-Bugs-Fixed: 2085212 2098755
Changes:
 samba (2:4.21.4+dfsg-1ubuntu1) plucky; urgency=medium
 .
   * Merge with Debian unstable (LP: #2085212). Remaining changes:
     - debian/control: Ubuntu i386 binary compatibility:
       + enable the liburing vfs module, except on i386 where liburing is
         not available
     - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
       samba AD DC provisioning and domain join tests with internal DNS
       (LP #1977746, LP #2011745)
     - d/control: adjust breaks/replaces for file move that Debian did in
       4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
       file conflict in a dist-upgrade from earlier Ubuntu releases, like
       Kinetic (LP #2024663)
     - Fix t64 package name in 'Enhances' attribute.
     - debian/tests: launch container with security.nesting=true
       Otherwise, systemd-resolved in the member-server container will
       fail to start, and cause the test to fail. (LP #2046486)
     - d/control: make samba-vfs-modules-extra a transitional package.
       The glusterfs vfs module (the only vfs module shipped in it
       previously) is now in bin:samba-vfs-glusterfs
     - d/control: have the (now transitional) samba-vfs-modules package
       depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
       module
     - d/control: samba-vfs-modules and samba-vfs-modules-extra, now
       transitional packages, should only depend on the new samba-vfs-ceph and
       samba-vfs-glusterfs packages on the architectures where those two
       packages are built (LP #2076682)
     - d/control:
       + samba-vfs-modules-extra was not built before for 32bit architectures,
         adjust Architectures line
       + samba-vfs-modules: this one was build for 32bit architectures before,
         so we need the conditional Depends for ceph
     - d/p/fix-update-motd-gpo.patch: fix crash when updating an already existing
       MOTD GPO (LP #2092308)
   * Added:
     - d/t/samba-ad-dc-provisioning-internal-dns: force samba-tool to use
       kerberos when interrogating the DNS server, otherwise it will prompt for
       a password
     - d/t/control: dpkg-vendor is also needed for the AD test
     - d/p/fix-update-motd-gpo.patch: fix another crash when the GPO doesn't
       exist yet (LP: #2098755)
 .
 samba (2:4.21.4+dfsg-1) unstable; urgency=medium
 .
   * new upstream stable/bugfix release (Closes: #1084559):
    - https://bugzilla.samba.org/show_bug.cgi?id=14213:
      Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing security tab
    - https://bugzilla.samba.org/show_bug.cgi?id=15151:
      vfs_gpfs silently garbles timestamps > year 2106
    - https://bugzilla.samba.org/show_bug.cgi?id=15703:
      General improvements for vfs_ceph_new module
    - https://bugzilla.samba.org/show_bug.cgi?id=15738:
      Creation of GPOs applicable to more than one group is impossible
      with Samba 4.20.0 and later
    - https://bugzilla.samba.org/show_bug.cgi?id=15756:
      Replace `crypt` module in python/samba/netcmd/user/readpasswords/common.py
    - https://bugzilla.samba.org/show_bug.cgi?id=15759:
      net ads create/join/winbind producing unix dysfunctional keytabs
    - https://bugzilla.samba.org/show_bug.cgi?id=15769:
      The values from hresult_errstr_const and hresult_errstr
      are reversed in 4.20 and 4.21
    - https://bugzilla.samba.org/show_bug.cgi?id=15777:
      net offlinejoin not working correctly
    - https://bugzilla.samba.org/show_bug.cgi?id=15778:
      Kerberos referral tickets are generated for principals in our domain
      if we have a trust to a top level domain
    - https://bugzilla.samba.org/show_bug.cgi?id=15780:
      Increasing slowness of sharesec performance with high number
      of registry shares
    - https://bugzilla.samba.org/show_bug.cgi?id=15782:
      winbindd shows memleak in kerberos_decode_pac
    - https://bugzilla.samba.org/show_bug.cgi?id=15783:
      NETLOGON_NTLMV2_ENABLED is missing in the SamLogon* user_flags field
    - https://bugzilla.samba.org/show_bug.cgi?id=15784:
      Regression: stack-use-after-return in crypt_as_best_we_can()
    - https://bugzilla.samba.org/show_bug.cgi?id=15788:
      libreplace:readline: gcc 15 complains about incompatible pointer types
    - https://bugzilla.samba.org/show_bug.cgi?id=15796:
      Spotlight search results don't show file size and creation date
   * replace-xpg-strerror.patch: to avoid linking other libs with libreplace
   * samba-libs: add libutil-crypt-private-samba.so.0
 .
 samba (2:4.21.3+dfsg-6) unstable; urgency=medium
 .
   * d/genshlibs: remove the special-case for libsmbclient0 since
     we expand t64:Provides in d/control directly
   * d/control: add ${t64:Provides} comments
   * d/control: more t64 work: for libtevent0t64, break libtevent0
     not <<${source:Version} but <<${binary:Version}, because source
     is samba not tevent (Closes: #1092881)
 .
 samba (2:4.21.3+dfsg-5) unstable; urgency=medium
 .
   * the Fixing Big Mishaps release.
 .
   * d/rules: fix talloc, tevent, tdb subpackages version numbers, add epoch
 .
     Due to a mistake, I screwed up sub-packages versions completely,
     by using the wrong variable when generating the versions, - so
     all mentioned packages had version number of ldb, not their own.
 .
     Fix this.
 .
     Unfortunately, the wrong version is larger than all the correct ones.
     To compensate, use the same epoch number as is already used by current
     samba package (2:).
 .
     While at it, use common variable to hold the +samba version suffix.
 .
   * d/*.symbols: mark most recent version markers with 2: epoch too
 .
   * d/control,d/rules: ensure we use the most recent libtalloc/libtevent/libtdb
     for now, to compensate for the wrong versions.
 .
   * d/control: add explicit Provides of non-t64 libs
 .
     Apparentlty due to usage of both t64 and pre-t64 packages
     (with different build profiles), debhelper is not populating
     necessary values for ${t64:Provides}.  So libtevent0t64 is
     not providing libtevent0 on the relevant architectures.
     Ditto for libsmbclient0 providing libsmbclient.
 .
     Add explicit arch-specific Provides: for libsmbclient0 and
     libtevent0t64.
 .
     List only the affected release architectures in there.
 .
     This removes the only user of X-Time64-Compat control field
     in debian.
 .
   * d/rules: do not install wscript_build in examples
 .
   * d/control: fix libtevent wrong build profile when building for mjt's
     repository.  Does not affect debian thankfully.  The problem is that
     libtevent0t64 slipped into the repository for older (before-trixie)
     distributions, where t64 migration hasn't been completed.  This should
     not cause actual problems as a problem is only possible when upgrading
     to the new debian (or ubuntu) release where t64 transition has happened,
     and during such upgrade, new libtevent0t64 will be pulled in - thanks to
     the first big mistake above, since it now has 2: epoch.
   * d/control: add Breaks for libtevent0t64 on mjt repo.  This also
     does not affect debian, but makes my life definitely easier.
 .
 samba (2:4.21.3+dfsg-4) unstable; urgency=medium
 .
   * Revert "d/control: mark arch-all perl and python packages with :native
     for now" - it worked just fine on local build but fails on buildds?
   * d/control: add :native alternative for arch-all perl & python packages
     for now, to help cross-building samba on bookworm and before
     (no difference for trixie).  Use foo:native|foo alternative to work
     around dpkg/apt disparity in handling :native deps.
 .
 samba (2:4.21.3+dfsg-2) unstable; urgency=medium
 .
   * ctdb-failover-statd_callout-PATH_MAX-workaround.patch
     another tweak for hurd (for missing PATH_MAX)
   * d/control: add a note about ntp & signd socket, replace ntp with ntpsec
   * d/control: provide ability to cross-build samba finally
     (using qemu-user helper)
   * d/control: mark arch-all perl and python packages with :native for now
     (to help cross-building on bookworm)
 .
 samba (2:4.21.3+dfsg-1) unstable; urgency=medium
 .
   * new upstream stable/bugfix release:
    - https://bugzilla.samba.org/show_bug.cgi?id=6750:
      After 'machine password timeout' /etc/krb5.keytab is not updated
    - https://bugzilla.samba.org/show_bug.cgi?id=15697:
      Compound rename from Mac clients can fail with
      NT_STATUS_INTERNAL_ERROR if the file has a lease
    - https://bugzilla.samba.org/show_bug.cgi?id=15701:
      More possible replication loops against Azure AD
    - https://bugzilla.samba.org/show_bug.cgi?id=15724:
      vfs crossrename seems not work correctly
    - https://bugzilla.samba.org/show_bug.cgi?id=15755:
      Avoid event failure race when disabling an event script
    - https://bugzilla.samba.org/show_bug.cgi?id=15758:
      Segfault in vfs_btrfs
    - https://bugzilla.samba.org/show_bug.cgi?id=15765:
      Fix heap-user-after-free with association groups
    - https://bugzilla.samba.org/show_bug.cgi?id=15771:
      Memory leak wbcCtxLookupSid
   * d/patches/: specify more Forwarded: urls
   * d/patches/: source3-lib-util_sec.c-include-grp.h-for-setgroups.patch >
                 include-grp.h-for-setgroups-in-a-few-places.patch:
     add 1 more place for setgroups()
   * d/rules: remember last versions of ldb/talloc/tevent/tdb, reality check
   * d/control: since we don't use debconf anymore, no need
     to (build-)depend on po-debconf either
 .
 samba (2:4.21.2+dfsg-4) unstable; urgency=medium
 .
   * d/rules: guard building compile_et target with !mitkrb5
   * source3-lib-util_sec.c-include-grp.h-for-setgroups.patch for hurd ftbfs
   * build talloc/tevent/tdb from samba source:
    - import talloc, tevent and tdb packaging into samba
    - stop shipping internal-to-samba libpytalloc-util development files
   * d/copyright: mention myself for d/*
 .
 samba (2:4.21.2+dfsg-3) unstable; urgency=medium
 .
   * Revert "d/rules: as of 4.17, no need to explicitly build intermediate
     targets anymore".  It is still a problem with samba 4.21, it just were
     hidden.
   * ldb-no-replace.diff: avoid embedding rpath to private samba libs
     for libldb.so
   * heimdal-spelling.patch: remove (forgotten, applied upstream)
   * d/patches/* update dep3 metadata
   * add-missing-libs-deps.diff: update to include more missing deps
     (as submitted upstream)
 .
 samba (2:4.21.2+dfsg-2) unstable; urgency=medium
 .
   * resurrect python3-ldb (removed in previous release)
     The removal of python3-ldb were unwarranted, as long as libldb
     itself is stand-alone, lets keep its python bindings stand-alone
     too.
   * d/rules: s/execute_after_dh_install/execute_after_dh_install-arch/
     since it is arch-specific
 .
 samba (2:4.21.2+dfsg-1) unstable; urgency=medium
 .
   * new upstream stable/bugfix release:
    - https://bugzilla.samba.org/show_bug.cgi?id=14356
      protocol error - Unclear debug message "pad length mismatch"
      for invalid bind packet
    - https://bugzilla.samba.org/show_bug.cgi?id=15320
      Update CTDB to track all TCP connections to public IP addresses
    - https://bugzilla.samba.org/show_bug.cgi?id=15425
      NetrGetLogonCapabilities QueryLevel 2 needs to be implemented
    - https://bugzilla.samba.org/show_bug.cgi?id=15732
      smbd fails to correctly check sharemode against OVERWRITE dispositions
    - https://bugzilla.samba.org/show_bug.cgi?id=15740
      gss_accept_sec_context() from Heimdal does not imply GSS_C_MUTUAL_FLAG
      with GSS_C_DCE_STYLE
    - https://bugzilla.samba.org/show_bug.cgi?id=15749
      winbindd should call process_set_title() for locator child
    - https://bugzilla.samba.org/show_bug.cgi?id=15752
      winexe no longer works with samba 4.21
    - https://bugzilla.samba.org/show_bug.cgi?id=15754
      Panic in close_directory
   * d/control: add python3-cryptography to python3-samba Depends
     (Closes: #1086768)
   * d/control: move python3-gpg recommends from python3-samba to samba-ad-dc
   * d/control: extend libpcap-dev from hurd-i386 to hurd-any (Closes: #1087409)
   * ship winexe binary (Closes: #1081269).
     New Build-Depends: gcc-mingw-w64-i686-win32 gcc-mingw-w64-x86-64-win32
   * d/control: provide Breaks/Replaces for winexe in kali linux (#1081269)
   * swallow python3-ldb by python3-samba (and remove python3-ldb-dev)
   * d/rules: drop mis-using --bundled-libraries configure option
   * d/samba.postinst: replace test for /usr/bin/deb-systemd-helper file
     with "command -v" (lintian)
   * d/libldb2.lintian-overrides: remove overrides which were needed for compat
     symlink (compat for older ldb in separate source)
   * d/samba.install: stop shipping log2pcap.1 (the tool is not installed)
   * d/rules: rename LDB_* vars to ldb-, and use common var for -Vldb:Version
   * move-msg.sock-from-var-lib-samba-to-run-samba.patch: update
     to cover failing tests too
 .
 samba (2:4.21.1+dfsg-2) unstable; urgency=medium
 .
   * d/control: add Recommends: samba-ad-dc for samba for now
     to avoid breaking existing installs
   * d/samba.postrm: stop unmasking of samba-ad-dc
     (it is already done in postinst)
   * d/samba.postinst,d/samba.maintscripts: remove samba-ad-dc
     startup files and stop the service (Closes: #1085617)
 .
 samba (2:4.21.1+dfsg-1) unstable; urgency=medium
 .
   * new upstream stable/bugfix release
   * d/salsa-ci.yml: disable reprotest vary build_path
   * d/control: Build-Depend on python3-setuptools (Closes: #1080851)
   * d/rules: stop providing compat symlink for old ldb
     modules location for old sssd
   * d/changelog: mention closing of #835404 by 4.21.0-1
 .
 samba (2:4.21.0+dfsg-1) unstable; urgency=medium
 .
   * switch to 4.21 branch
   * update to 4.21.0 (new upstream)
     (Closes: #835404)
   * fix-nfs-service-name-to-nfs-kernel-server.patch: refresh
   * Force-LDB-as-standalone.patch: remove (ldb is always internal now)
   * d/rules: ldb lib is now private by default, expose it as public
   * d/rules: ldb uses LDB_VERSION variable now, not VERSION
   * tilde-in-version.diff: remove (applied upstream)
   * heimdal-spelling.patch: disable for now
   * d/rules: s/vendor-name/vendor-suffix/
   * d/ctdb.install: no more sudoers file
   * d/samba-libs.symbols, d/control, d/samba-libs.install: libndr4=>libndr5
     This requires sssd to be rebuilt
   * samba-{libs,dev}.install, python3-{samba,ldb).install: refresh libs
     (with lintian-overrides)
   * samba-libs.install, samba-dev.install: new (semi-public) library:
     libsamba-policy.so (used by the python stuff only, for now)
   * samba-libs.install: new private library: libsamba-net-private-samba.so.0
   * libldb2.symbols: add new symbols & 2.10.0 version
     (and remove 2.9.1 minor version)
   * d/control: bump libtdb version dependency to 1.4.12
   * d/ctdb.install: install winbind_ctdb_updatekeytab.sh file
Checksums-Sha1:
 c67c0e52166048a099debc8699057d810386fd4f 5936 samba_4.21.4+dfsg-1ubuntu1.dsc
 192883ec7fe87c8249c3430318fa461bb1c9ac17 26196420 samba_4.21.4+dfsg.orig.tar.xz
 08ddc61550b455d75ed2f7f2832ff43f3e10a0b7 209692 samba_4.21.4+dfsg-1ubuntu1.debian.tar.xz
 1a584771dbe16efa7852e8b6d8651e8de11cc065 6846 samba_4.21.4+dfsg-1ubuntu1_source.buildinfo
Checksums-Sha256:
 0b1ce764c7230e53b44a7e56d53c82b5d27e71967bc4a32f52efe6f4c939180a 5936 samba_4.21.4+dfsg-1ubuntu1.dsc
 bcab93f96b1ac17e6e6726101d072a7bff63c7ca90a3f5ca3fee67301f1ec711 26196420 samba_4.21.4+dfsg.orig.tar.xz
 6aa615554470572ceb0657e765b8a07da5c2c7d1ce96f9c92b43fc01ec4604de 209692 samba_4.21.4+dfsg-1ubuntu1.debian.tar.xz
 97b5a32556580c3790316efd60ad3bea739b24bcf592c026a3a534bbdcd78753 6846 samba_4.21.4+dfsg-1ubuntu1_source.buildinfo
Files:
 cf8b23fb56c880cb9e1e272a37a6affd 5936 net optional samba_4.21.4+dfsg-1ubuntu1.dsc
 66e36171478750baab9494f7849b8d6a 26196420 net optional samba_4.21.4+dfsg.orig.tar.xz
 7d34c807a23f3135154d0361b330d487 209692 net optional samba_4.21.4+dfsg-1ubuntu1.debian.tar.xz
 3730d4bd016c6975af74fb58e8666edc 6846 net optional samba_4.21.4+dfsg-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>
Vcs-Git: https://git.launchpad.net/~ahasenack/ubuntu/+source/samba
Vcs-Git-Commit: 008113299264f13a2458b772635398c8d3976a1d
Vcs-Git-Ref: refs/heads/plucky-samba-merge-1


More information about the plucky-changes mailing list