Merge samba from Debian unstable for oracular

[Bryce Harrington]

Upstream: 4.19.6
Debian: 2:4.19.6+dfsg-1 2:4.20.0+dfsg-1~exp2
Ubuntu: 2:4.19.5+dfsg-4ubuntu9

Debian new has 2:4.20.0+dfsg-1~exp2, which may be available for merge soon.

If it turns out this needs a sync rather than a merge, please change the tag 'needs-merge' to 'needs-sync', and (optionally) update the title as desired.

If this merge pulls in a new upstream version, also consider adding an entry to the Oracular Release Notes: https://discourse.ubuntu.com/c/release/38

### New Debian Changes ###

samba (2:4.19.6+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15527 fd_handle_destructor()
     panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close()
   - https://bugzilla.samba.org/show_bug.cgi?id=15580
     Packet marshalling push support missing for
     CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED
   - https://bugzilla.samba.org/show_bug.cgi?id=15588
     samba-gpupdate: Correctly implement site support
   - https://bugzilla.samba.org/show_bug.cgi?id=15599
     libgpo: Segfault in python bindings
  * revert d/rules: remove Debian/Ubuntu 'branding'

 -- Michael Tokarev <email address hidden> Mon, 08 Apr 2024 11:18:38 +0300

samba (2:4.19.5+dfsg-5) unstable; urgency=medium

  * implement pkg.samba.before-trixie build profile
    (undo t64 changhes and drop build-dep)
  * d/rules: remove Debian/Ubuntu 'branding', no need in that
  * d/control: samba-dsdb-modules: drop hardcoded dependency on libgpgme11
    (Closes: #1068526)

 -- Michael Tokarev <email address hidden> Sun, 07 Apr 2024 16:04:30 +0300

samba (2:4.19.5+dfsg-4) unstable; urgency=medium

  * stop shipping python3/dist-packages/samba/tests
    (Closes: #1064512, #1063149)
  * add Debian-Specific tag to debian-specific patches
  * d/genshlibs: run dh_makeshlibs on libsmbclient0
    (Closes: #1065349)

 -- Michael Tokarev <email address hidden> Sun, 03 Mar 2024 15:37:16 +0300

samba (2:4.19.5+dfsg-3) unstable; urgency=medium

  * d/control: add versioned depends on dpkg-dev to avoid accidental
    build of time64_t packages on older systems
  * +lower-dns-lookup-mismatch-messages.patch (reduce log noise)
  * d/control: add libtirpc-dev and rpcsvc-proto to Build-Depends-Arch
    (Closes: #1065188)

 -- Michael Tokarev <email address hidden> Fri, 01 Mar 2024 19:18:35 +0300

samba (2:4.19.5+dfsg-2) unstable; urgency=medium

  * rename libsmbclient => libsmbclient0 for 64-bit time_t transition
    Closes: #1064337
  * d/libsmbclient.lintian-overrides: remove, soname now = package name
  * add Breaks: of sssd packages to samba-libs
  * +passchange-error-message.patch - fix password change error message
  * +edns0.patch: enable EDNS0 support in internal UDP-only DNS client
    https://bugzilla.samba.org/show_bug.cgi?id=15536

 -- Michael Tokarev <email address hidden> Wed, 28 Feb 2024 19:38:48 +0300

samba (2:4.19.5+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release (4.19.5)
  * reformat previous changelog entry to fit in 80cols
  * d/winbind.postrm: stop recursively removing plain files
  * d/winbind.postrm: winbindd_cache.tdb is in /var/lib now,
    not in /var/cache
  * d/control: RulesRequiresRoot:no
  * d/*.symbols: use #PACKAGE# placeholders where appropriate
    (or add comments where it is not)
  * +silence-can-not-convert-group-sid.diff -
    make another log message less annoying
  * -python-fix-invalid-escape-sequences.patch (applied upstream)
  * d/control: replace pkg-config=>pkgconf in Build-Depends, remove
    pkg-config from Depends of libldb-dev and python3-ldb-dev
  * d/samba-libs.symbols, d/control: make libsmbldapN a virtual package
    provided by samba-libs too, like libndrN

 -- Michael Tokarev <email address hidden> Mon, 19 Feb 2024 15:21:14 +0300

samba (2:4.19.4+dfsg-3) unstable; urgency=medium

  * samba,winbind: remove logrotate scripts
    samba does its own log rotation (max log size (=5000 by default) and
    renaming to .old). The two clashes with each other in an interesting way.
  * d/samba-libs.symbols, d/control: make libndrN a virtual package
    to ensure rdeps pick the right dependency

 -- Michael Tokarev <email address hidden> Tue, 30 Jan 2024 12:12:42 +0300

samba (2:4.19.4+dfsg-2) unstable; urgency=medium

  * d/samba.smbd.service, d/samba.nmbd.service: expand forgotten @BINDIR@

 -- Michael Tokarev <email address hidden> Mon, 08 Jan 2024 20:44:51 +0300

samba (2:4.19.4+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release. See WHATSNEW.txt for details.
  * d/control: drop pkg.samba.nouring build profile: was needed
    for focal which we do not support anymore
  * remove /etc/cron.daily/samba: there's no reason to keep backing it up,

### Old Ubuntu Delta ###

samba (2:4.19.5+dfsg-4ubuntu9) noble; urgency=high

  * No change rebuild against libgpgme11t64.

 -- Julian Andres Klode <email address hidden> Mon, 08 Apr 2024 16:49:25 +0200

samba (2:4.19.5+dfsg-4ubuntu8) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden> Sun, 31 Mar 2024 08:22:04 +0000

samba (2:4.19.5+dfsg-4ubuntu7) noble; urgency=medium

  * Fix t64 package name in 'Enhances' attribute.

 -- Matthias Klose <email address hidden> Sat, 23 Mar 2024 18:12:30 +0100

samba (2:4.19.5+dfsg-4ubuntu6) noble; urgency=high

  * No change rebuild against libkrb5-26t64-heimdal.

 -- Julian Andres Klode <email address hidden> Fri, 22 Mar 2024 18:18:35 +0100

samba (2:4.19.5+dfsg-4ubuntu5) noble; urgency=medium

  * Drop explicit, wrong, redundant dependency from samba-dsdb-modules on
    libgpgme11.

 -- Michael Hudson-Doyle <email address hidden> Thu, 21 Mar 2024 09:47:23 +1300

samba (2:4.19.5+dfsg-4ubuntu4) noble; urgency=medium

  * No-change rebuild against libcups2t64

 -- Michael Hudson-Doyle <email address hidden> Wed, 20 Mar 2024 13:56:46 +1300

samba (2:4.19.5+dfsg-4ubuntu3) noble; urgency=medium

  * No-change rebuild against libgpgme t64.

 -- Matthias Klose <email address hidden> Fri, 15 Mar 2024 16:50:16 +0100

samba (2:4.19.5+dfsg-4ubuntu2) noble; urgency=medium

  * No-change rebuild against libgnutls30t64

 -- Steve Langasek <email address hidden> Sun, 10 Mar 2024 02:13:07 +0000

samba (2:4.19.5+dfsg-4ubuntu1) noble; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/control: Ubuntu i386 binary compatibility:
      + enable the liburing vfs module, except on i386 where liburing is
        not available
    - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
      samba AD DC provisioning and domain join tests with internal DNS
      (LP #1977746, LP #2011745)
    - d/control: adjust breaks/replaces for file move that Debian did in
      4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
      file conflict in a dist-upgrade from earlier Ubuntu releases, like
      Kinetic (LP #2024663)
    - d/control: python3-samba has a runtime dep on python3-markdown
    - glusterfs is no longer in main, create new binary package in
      universe to ship the samba glusterfs vfs modules and manpages
      (LP #2045063):
      + d/control: new samba-vfs-modules-glusterfs package
      + d/rules: glusterfs vfs modules and manpages are now in the
        samba-vfs-modules-extra package
      + d/samba-vfs-modules-extra.install: add glusterfs vfs modules and
        manpage
    - d/t/util: handle breakage introduced by lxd-installer. If on
      Ubuntu, assume lxd comes from a snap and install it if needed
    - d/t/util: ignore cloud-init's warning exit status, which is
      happening because of LP #2048129 (also see LP #2048522)

 -- Andreas Hasenack <email address hidden> Mon, 04 Mar 2024 15:05:13 -0300

[Andreas Hasenack (ahasenack)]

Uploaded

[Launchpad Janitor (janitor)]

This bug was fixed in the package samba - 2:4.20.2+dfsg-2ubuntu1

---------------
samba (2:4.20.2+dfsg-2ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable (LP: #2064384). Remaining changes:
    - debian/control: Ubuntu i386 binary compatibility:
      + enable the liburing vfs module, except on i386 where liburing is
        not available
    - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
      samba AD DC provisioning and domain join tests with internal DNS
      (LP #1977746, LP #2011745)
    - d/control: adjust breaks/replaces for file move that Debian did in
      4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
      file conflict in a dist-upgrade from earlier Ubuntu releases, like
      Kinetic (LP #2024663)
    - glusterfs is no longer in main, create new binary package in
      universe to ship the samba glusterfs vfs modules and manpages
      (LP #2045063):
      + d/control: new samba-vfs-modules-glusterfs package
      + d/rules: glusterfs vfs modules and manpages are now in the
        samba-vfs-modules-extra package
      + d/samba-vfs-modules-extra.install: add glusterfs vfs modules and
        manpage
    - d/t/util: handle breakage introduced by lxd-installer. If on
      Ubuntu, assume lxd comes from a snap and install it if needed
    - d/t/util: ignore cloud-init's warning exit status, which is
      happening because of LP #2048129 (also see LP #2048522)
    - Fix t64 package name in 'Enhances' attribute.
  * Dropped:
    - Drop explicit, wrong, redundant dependency from samba-dsdb-modules on
      libgpgme11.
      [Included in 2:4.19.5+dfsg-5]
    - d/control: python3-samba has a runtime dep on python3-markdown
      [Fixed in 2:4.19.6+dfsg-2 via
       meaningful-error-if-no-python3-markdown.patch]

samba (2:4.20.2+dfsg-2) unstable; urgency=medium

  * tilde-in-version.diff - allow tilde in version string

samba (2:4.20.2+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=13019
     Dynamic DNS updates with the internal DNS are not working
   - https://bugzilla.samba.org/show_bug.cgi?id=13213
     Samba build is not reproducible
   - https://bugzilla.samba.org/show_bug.cgi?id=14981
     netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0
   - https://bugzilla.samba.org/show_bug.cgi?id=15412 Anonymous smb3
     signing/encryption should be allowed (similar to Windows Server 2022)
   - https://bugzilla.samba.org/show_bug.cgi?id=15435
     Regression DFS not working with widelinks = true
   - https://bugzilla.samba.org/show_bug.cgi?id=15569
     ldb qsort might r/w out of bounds with an intransitive compare function
   - https://bugzilla.samba.org/show_bug.cgi?id=15573
     Panic in dreplsrv_op_pull_source_apply_changes_trigger
   - https://bugzilla.samba.org/show_bug.cgi?id=15620
     s4:nbt_server: does not provide unexpected handling, so winbindd
     can't use nmb requests instead cldap
   - https://bugzilla.samba.org/show_bug.cgi?id=15625
     Many qsort() comparison functions are non-transitive, which can lead
     to out-of-bounds access in some circumstances
   - https:...