Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2025-10-18 14:34:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new.18484 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "samba" Sat Oct 18 14:34:55 2025 rev:323 rq:1311516 version:4.22.5+git.431.dc5a539f124 Changes: -------- --- /work/SRC/openSUSE:Factory/samba/samba.changes 2025-07-31 17:45:10.273587164 +0200 +++ /work/SRC/openSUSE:Factory/.samba.new.18484/samba.changes 2025-10-18 14:35:00.843388765 +0200 @@ -1,0 +2,60 @@ +Wed Oct 15 12:55:57 UTC 2025 - Noel Power <[email protected]> + +- Update to 4.22.5 + * CVE-2025-10230: Command injection via WINS server hook + script (bso#15903); (bsc#1251280). + * CVE-2025-9640: uninitialized memory disclosure via + vfs_streams_xattr; (bso#15885); (bsc#1251279). + +------------------------------------------------------------------- +Wed Oct 1 13:38:09 UTC 2025 - Samuel Cabrero <[email protected]> + +- Relax samba-gpupdate requirement for cepces, certmonger, and sscep + to a recommends. They are only required if utilizing certificate + auto enrollment (bsc#1249087). + +------------------------------------------------------------------- +Thu Sep 25 08:56:20 UTC 2025 - Noel Power <[email protected]> + +- Disable timeouts for smb.service so that possibly slow running + ExecStartPre script 'update-samba-security-profile' doesn't + cause service start to fail due to timeouts;(bsc#1249181). + +------------------------------------------------------------------- +Thu Sep 25 08:55:56 UTC 2025 - Noel Power <[email protected]> + +- Ensure semanage is pulled in as a requirement when samba in + installed when selinux security access mechanism that is used; + (bsc#1249180). + +------------------------------------------------------------------- +Thu Sep 25 08:55:22 UTC 2025 - Noel Power <[email protected]> + +- don't attempt to label paths that don't exist, also remove + unecessary evaluation of semange & restorecon cmds;(bsc#1249179). + +------------------------------------------------------------------- +Thu Sep 25 08:51:52 UTC 2025 - Noel Power <[email protected]> + +- Update to 4.22.4 + * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with + SysvolReady=0; (bso#14981). + * getpwuid does not shift to new DC when current DC is down; + (bso#15844). + * Windows security hardening locks out schannel'ed netlogon dc + calls like netr_DsRGetDCName-; (bso#15876). + * Unresponsive second DC can cause idmapping failure when using + idmap_ad-; (bso#15881). + * kinit command is failing with Missing cache Error; + (bso#15840). + * Figuring out the DC name from IP address fails and breaks + fork_domain_child(); (bso#15891). + * vfs_streams_depot fstatat broken; (bso#15816). + * Delayed leader broadcast can block ctdb forever; (bso#15892). + * Apparently there is a conflict between shadow_copy2 module + and virusfilter (action quarantine); (bso#15663). + * Fix handling of empty GPO link; (bso#15877). + * SMB ACL inheritance doesn't work for files created; + (bso#15880). + +------------------------------------------------------------------- Old: ---- samba-4.22.3+git.403.4e078bdb832.tar.bz2 New: ---- samba-4.22.5+git.431.dc5a539f124.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ samba.spec ++++++ --- /var/tmp/diff_new_pack.TTUQzR/_old 2025-10-18 14:35:02.247447511 +0200 +++ /var/tmp/diff_new_pack.TTUQzR/_new 2025-10-18 14:35:02.259448013 +0200 @@ -168,7 +168,7 @@ %endif BuildRequires: sysuser-tools -Version: 4.22.3+git.403.4e078bdb832 +Version: 4.22.5+git.431.dc5a539f124 Release: 0 URL: https://www.samba.org/ Obsoletes: samba-32bit < %{version} @@ -188,6 +188,7 @@ Requires: samba-client >= %{version} Requires: samba-dcerpc = %{version} Requires: sysuser-shadow +Requires: (/usr/sbin/semanage if selinux-policy) Provides: group(ntadmin) %{?systemd_ordering} @@ -419,11 +420,11 @@ Summary: Samba Group Policy License: GPL-3.0-or-later Group: Productivity/Networking/Samba -Requires: cepces -Requires: certmonger Requires: samba-ldb-ldap = %{version} Requires: samba-python3 = %{version} -Requires: sscep +Recommends: cepces +Recommends: certmonger +Recommends: sscep %description gpupdate The samba-gpupdate package provides the samba-gpupdate tool for applying ++++++ samba-4.22.3+git.403.4e078bdb832.tar.bz2 -> samba-4.22.5+git.431.dc5a539f124.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/samba/samba-4.22.3+git.403.4e078bdb832.tar.bz2 /work/SRC/openSUSE:Factory/.samba.new.18484/samba-4.22.5+git.431.dc5a539f124.tar.bz2 differ: char 11, line 1
