From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bGkRR5Gh9z330S for ; Tue, 10 Jun 2025 09:45:07 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bGkRN1h1Sz2xXH for ; Tue, 10 Jun 2025 09:45:04 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4bGkRM2FSCzYc; Tue, 10 Jun 2025 09:45:03 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1749548703; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=6cmx3FrumZHVai46l5OExymd1CiY/Ki+j33ZFchLxKc=; b=DDoc6ix5AAEHGWfITdPehfcub5GNEPTocrsuK0MAqw75DULXMoICEPXRYXh8Bbsa4O3Khj vTMBvYjhPhkzWoAA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1749548703; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=6cmx3FrumZHVai46l5OExymd1CiY/Ki+j33ZFchLxKc=; b=czG5pgnNwgMutsKRaaJlqO28A1FrQHjgatBXfPtiliviR3XCNkx48sFlrVxxCKXsTDXdUV 0F3B62gq+Cd8NeulInZY/P9jad66G6ZLcZssSnmdNOuqOsactVlvRDQxeKl6ju+qIRuUo4 igMM1x7FbS3Q4ntxQ3GyR1TsMJnipWXv8kdXphdOnZB3id7D1A4TYWRNd/MSOrI/9CDPgy gZSvZ+sgmE+z+3a10VzCfnL20cLNPiSkSYKhYUeTFgzLphyRZVMM/XxW9jpYAhjTb9bjYl xJ3LZLAQN8pRFBeyjI5NuT5wqlngpN5ojgoJSE4/wd310tG+7w0x9HNbWTBvkA== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] samba: Update to version 4.22.2 Date: Tue, 10 Jun 2025 11:44:57 +0200 Message-ID: <20250610094457.3473-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit - Update from version 4.22.0 to 4.22.2 - Update of rootfiles not required. Confirmed on all three architectures - CVE fix in 4.22.2 - Changelog 4.22.2 * BUG 15707: (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick up group membership changes when re-authenticating an expired SMB session. * BUG 15861: Profile sync fails due to Directory Leases. * BUG 15727: net ad join fails with "Failed to join domain: failed to create kerberos keytab". * BUG 15851: dcerpcd not able to bind to listening port. * BUG 15819: vfs_ceph_snapshots fails to list snapshots for entries at any level beyond share root. * BUG 15858: CTDB does not put nodes running NFS into grace on graceful shutdown. 4.22.1 * BUG 15774: Running "gpo manage motd set" twice fails with backtrace. * BUG 15829: samba-tool gpo backup creates entity backups it can't read. * BUG 15839: gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with prepended 0's. * BUG 15767: Deadlock between two smbd processes. * BUG 15823: Subnet based interfaces definition not listening on all covered IP addresses. * BUG 15836: PANIC: assert failed at source3/smbd/smb2_oplock.c(156): sconn->oplocks.exclusive_open>=0. * BUG 15727: net ad join fails with "Failed to join domain: failed to create kerberos keytab". * BUG 15774: Running "gpo manage motd set" twice fails with backtrace. * BUG 15822: Enable support for cephfs case insensitive behavior. * BUG 15791: Remove of file or directory not possible with vfs_acl_tdb. * BUG 15841: Wide link issue in samba 4.22. * BUG 15767: Deadlock between two smbd processes. * BUG 15845: NT_STATUS_INVALID_PARAMETER: Can't create folders on share of an exfat file system. * BUG 15849: Lease code is not endian-safe. * BUG 15818: vfs_ceph_new module does not work with other modules for snapshot management. * BUG 15834: vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN, SMB_VFS_FCHMOD and SMB_VFS_FNTIMES. * BUG 15810: Add async io API from libcephfs to ceph_new VFS module. Signed-off-by: Adolf Belka --- lfs/samba | 40 ++++++++++++++++++++-------------------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/lfs/samba b/lfs/samba index 5101244b3..42ce431bf 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.22.0 +VER = 4.22.2 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 112 +PAK_VER = 113 DEPS = avahi libtalloc perl-Parse-Yapp wsdd @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 27997ad025cbdc246c906bb05bf1c67749decc8e760c68cd4837b5121295613824b11f0eea91de6e7cb551ccc5193d189d5742dc7096305565ca8794baa7b585 +$(DL_FILE)_BLAKE2 = 33c173a855f2a573e93891345727a48d13ac042d35fc2d568472a52dcd06b365d986a947271d21fa6dfb73588068958daab0751b95b54fdf7b15421fdbdfc78c install : $(TARGET) @@ -81,23 +81,23 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --libdir=/usr/lib/ \ - --sysconfdir=/var/ipfire \ - --localstatedir=/var \ - --without-ad-dc \ - --with-cachedir=/var/lib/samba \ - --with-lockdir=/var/lib/samba \ - --with-piddir=/var/run \ - --with-ads \ - --with-acl-support \ - --with-sendfile-support \ - --with-winbind \ - --enable-avahi \ - --disable-cups \ - --enable-fhs \ - --with-syslog \ - --without-smb1-server + --prefix=/usr \ + --libdir=/usr/lib/ \ + --sysconfdir=/var/ipfire \ + --localstatedir=/var \ + --without-ad-dc \ + --with-cachedir=/var/lib/samba \ + --with-lockdir=/var/lib/samba \ + --with-piddir=/var/run \ + --with-ads \ + --with-acl-support \ + --with-sendfile-support \ + --with-winbind \ + --enable-avahi \ + --disable-cups \ + --enable-fhs \ + --with-syslog \ + --without-smb1-server cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install -- 2.49.0