Hi Michael, Yesterday the following heads up was posted to the Samba announce list: https://lists.samba.org/archive/samba-announce/2025/000693.html https://bugzilla.samba.org/show_bug.cgi?id=15876 https://gitlab.com/samba-team/samba/-/merge_requests/4086 To be on the safe side I make this RC level, since my understanding is that samba servers acting s AD members in such environments will stop working properly if tomorrows Windows updates are deployed, is this correct? The upstream bug contains references to the two upstream changes. Regards, Salvatore
Hi Michael, Proposed MRs (but untested so far!) https://salsa.debian.org/samba-team/samba/-/merge_requests/67 (unstable,trixie) https://salsa.debian.org/samba-team/samba/-/merge_requests/68 (bookworm) Regards, Salvatore
We believe that the bug you reported is fixed in the latest version of
samba, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1108904@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <mjt@tls.msk.ru> (supplier of updated samba package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 07 Jul 2025 23:16:23 +0300
Source: samba
Architecture: source
Version: 2:4.22.3+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Closes: 1108904
Changes:
samba (2:4.22.3+dfsg-1) unstable; urgency=medium
.
* new upstream stable/bugfix release, mostly targetting the Jul-08 update
for Active Directory Domain Controllers
(https://bugzilla.samba.org/show_bug.cgi?id=15876, Closes: #1108904):
- https://bugzilla.samba.org/show_bug.cgi?id=15854:
samba-tool cannot add user to group whose name
is exactly 16 characters long
- https://bugzilla.samba.org/show_bug.cgi?id=15869:
Startup messages of rpc daemons fills /var/log/messages
- https://bugzilla.samba.org/show_bug.cgi?id=15876:
Windows security hardening locks out schannel'ed netlogon
dc calls like netr_DsRGetDCName
* update d/copyright to point to https://www.gnu.org/licenses/
instead of FSF postal address
Checksums-Sha1:
524a7d138340effa3b431aead731f51b9bbef284 5626 samba_4.22.3+dfsg-1.dsc
cdcb3761d0b3f67c72117d4eb2a106dbfede849b 25672304 samba_4.22.3+dfsg.orig.tar.xz
1347e0ac1061ec5fe617bf6a66c815d4c94e7b8c 187460 samba_4.22.3+dfsg-1.debian.tar.xz
588643afb2a36a3db1b93e90fcd075ba7a63e86b 5493 samba_4.22.3+dfsg-1_source.buildinfo
Checksums-Sha256:
174ba8392ead0a53e9689c153e25ed18b37806fd7240372cef7f250af487664d 5626 samba_4.22.3+dfsg-1.dsc
1f6ee82ed47c0c6d03e68c96a47b7cef56413a2fda57fd7aa9a1cc57df6b2ccc 25672304 samba_4.22.3+dfsg.orig.tar.xz
a7d5118283c69db8da56d0a84574d402a30600516ceeed453613c6c33bb3e176 187460 samba_4.22.3+dfsg-1.debian.tar.xz
cf8cf7b2a97aad3adfd32455f9510003d805b693aacd7ed8e5af62e5149e9b18 5493 samba_4.22.3+dfsg-1_source.buildinfo
Files:
1d44172f78f2ab20af205b1c953b29f6 5626 net optional samba_4.22.3+dfsg-1.dsc
fa1acde952957a73a68ba792b5cfffac 25672304 net optional samba_4.22.3+dfsg.orig.tar.xz
08fe96c3e0756c2d207befd1c48f83f5 187460 net optional samba_4.22.3+dfsg-1.debian.tar.xz
9a6b3433c32821ac0e83d2921ce77670 5493 net optional samba_4.22.3+dfsg-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=YJXG
-----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of
samba, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1108904@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <mjt@tls.msk.ru> (supplier of updated samba package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 11 Jul 2025 11:21:51 +0300
Source: samba
Architecture: source
Version: 2:4.17.12+dfsg-0+deb12u2
Distribution: bookworm
Urgency: medium
Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Closes: 1108904
Changes:
samba (2:4.17.12+dfsg-0+deb12u2) bookworm; urgency=medium
.
[ Salvatore Bonaccorso ]
* several patches from upstream:
- s3-libsmb-dsgetdcname-use-NETLOGON_NT_VERSION_AVOID_.patch:
s3:libsmb/dsgetdcname: use NETLOGON_NT_VERSION_AVOID_NT4EMUL
- s3-libsmb-allow-store_cldap_reply-to-work-with-a-ipv.patch:
s3:libsmb: allow store_cldap_reply() to work with a ipv6 response
- s3-libsmb-let-discover_dc_netbios-return-DOMAIN_CONT.patch:
s3:libsmb: let discover_dc_netbios() return DOMAIN_CONTROLLER_NOT_FOUND
- s3-winbindd-use-better-debug-messages-than-talloc_st.patch:
s3:winbindd: use better debug messages than 'talloc_strdup failed'
- s3-winbindd-avoid-using-any-netlogon-call-to-get-a-d.patch:
s3:winbindd: avoid using any netlogon call to get a dc name
s3-winbindd-Fix-internal-winbind-dsgetdcname-calls-w.patch:
s3-winbindd: Fix internal winbind dsgetdcname calls w.r.t. domain name
(Closes: #1108904)
.
[ Michael Tokarev ]
* d/control: fix versioned dependency on samba for samba-ad-dc
samba-ad-dc is arch-all package. We need samba >= ${source:Version}~
(note the tilde at the end), not ${binary:Version} (without tilde)
Checksums-Sha1:
0f57409e01f39e2b40bcd2eee62bd622e6ccd82f 4791 samba_4.17.12+dfsg-0+deb12u2.dsc
8edda896e9b03a9a394365ee51d3328f6340ef1f 277520 samba_4.17.12+dfsg-0+deb12u2.debian.tar.xz
d6e3f188f19c91e88d4290b0dceb7ada709705e8 5529 samba_4.17.12+dfsg-0+deb12u2_source.buildinfo
Checksums-Sha256:
a6f9090578ff60e19b36cf726a2d8ed28e71ba4e9deab431828b4e75e717a19b 4791 samba_4.17.12+dfsg-0+deb12u2.dsc
fd30a8fe36c7f4a5c076ded18033474fc7aae7780970cd948d5b9c2254dcb268 277520 samba_4.17.12+dfsg-0+deb12u2.debian.tar.xz
e5b0eac98c9d0076e917d610fc7da125fa9316987233a2cf54a15ed8de0a0baf 5529 samba_4.17.12+dfsg-0+deb12u2_source.buildinfo
Files:
a6224e006a539a912b80f79dc2da0487 4791 net optional samba_4.17.12+dfsg-0+deb12u2.dsc
e1ce016816c502d3aff41b5fa158a6f7 277520 net optional samba_4.17.12+dfsg-0+deb12u2.debian.tar.xz
ab1b5dbc033f8ab0b71bbd496e418ec5 5529 net optional samba_4.17.12+dfsg-0+deb12u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ZUj5
-----END PGP SIGNATURE-----