← Back to team overview

enterprise-support team mailing list archive

[Bug 2108981] Re: samba segfaults when renaming a file with open RHW lease

 

This bug was fixed in the package samba - 2:4.22.2+dfsg-1ubuntu1

---------------
samba (2:4.22.2+dfsg-1ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2110446, LP: #2108981). Remaining changes:
    - debian/control: Ubuntu i386 binary compatibility:
      + enable the liburing vfs module, except on i386 where liburing is
        not available
      + python3-samba depends on python3-cryptography, which Ubuntu doesn't
        build on i386 (LP #2099895):
        - d/control: don't recommend python3-samba on i386
        - d/rules: don't build python3-samba on ubuntu i386
    - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
      samba AD DC provisioning and domain join tests with internal DNS
      (LP #1977746, LP #2011745)
    - d/control: adjust breaks/replaces for file move that Debian did in
      4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
      file conflict in a dist-upgrade from earlier Ubuntu releases, like
      Kinetic (LP #2024663)
    - d/control: Fix t64 package name in 'Enhances' attribute.
    - d/control: make samba-vfs-modules-extra a transitional package.
      The glusterfs vfs module (the only vfs module shipped in it
      previously) is now in bin:samba-vfs-glusterfs
    - d/control: have the (now transitional) samba-vfs-modules package
      depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
      module
    - d/control: samba-vfs-modules and samba-vfs-modules-extra, now
      transitional packages, should only depend on the new samba-vfs-ceph and
      samba-vfs-glusterfs packages on the architectures where those two
      packages are built (LP #2076682)
    - d/control: samba-vfs-modules i386 adjustments:
      + samba-vfs-modules-extra was not built before for 32bit architectures,
        adjust Architectures line
      + samba-vfs-modules: this one was build for 32bit architectures before,
        so we need the conditional Depends for ceph
    - d/p/fix-update-motd-gpo.patch: multiple fixes for MOTD GPO:
      + fix crash when updating an already existing MOTD GPO (LP #2092308)
      + fix another crash when the GPO doesn't exist yet (LP #2098755)
      + replace instead of append MOTD GPO text
    - d/p/fix-motd-gpo-list-empty.patch: fix crash when listing an empty MOTD
      GPO
    - d/t/samba-ad-dc-provisioning-internal-dns: add MOTD GPO test
    - d/control: don't have bin:samba recommend bin:samba-ad-dc (LP #2101838)
  * Dropped:
    - d/samba-vfs-ceph.install: add the ceph_new vfs module and manpage
      (LP #2099928)
      [In 2:4.22.0+dfsg-1]

samba (2:4.22.2+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15707:
     CVE-2025-0620: smbd doesn't pick up group membership changes when
     re-authenticating an expired SMB session
     Closes: #1107248
   - https://bugzilla.samba.org/show_bug.cgi?id=15727:
     net ad join fails with
    "Failed to join domain: failed to create kerberos keytab"
   - https://bugzilla.samba.org/show_bug.cgi?id=15819:
     vfs_ceph_snapshots fails to list snapshots for entries at any level
     beyond share root
   - https://bugzilla.samba.org/show_bug.cgi?id=15851:
     dcerpcd not able to bind to listening port
   - https://bugzilla.samba.org/show_bug.cgi?id=15858:
     CTDB does not put nodes running NFS into grace on graceful shutdown
   - https://bugzilla.samba.org/show_bug.cgi?id=15861:
     Profile sync fails due to Directory Leases
  * d/control: add libcrypt-dev build-dependency (Closes: #1106959)
  * add-support-for-bind-9.20.patch (Closes: #1107139)

samba (2:4.22.1+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15727:
     net ad join fails with "Failed to join domain:
     failed to create kerberos keytab"
   - https://bugzilla.samba.org/show_bug.cgi?id=15767:
     Deadlock between two smbd processes
   - https://bugzilla.samba.org/show_bug.cgi?id=15774:
     Running "gpo manage motd set" twice fails with backtrace
   - https://bugzilla.samba.org/show_bug.cgi?id=15791:
     Remove of file or directory not possible with vfs_acl_tdb
   - https://bugzilla.samba.org/show_bug.cgi?id=15810:
     Add async io API from libcephfs to ceph_new VFS module
   - https://bugzilla.samba.org/show_bug.cgi?id=15818:
     vfs_ceph_new module does not work with other modules
     for snapshot management
   - https://bugzilla.samba.org/show_bug.cgi?id=15822:
     Enable support for cephfs case insensitive behavior
   - https://bugzilla.samba.org/show_bug.cgi?id=15823:
     Subnet based interfaces definition not listening
     on all covered IP addresses
   - https://bugzilla.samba.org/show_bug.cgi?id=15829:
     samba-tool gpo backup creates entity backups it can't read
   - https://bugzilla.samba.org/show_bug.cgi?id=15834:
     vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
     SMB_VFS_FCHMOD and SMB_VFS_FNTIMES
   - https://bugzilla.samba.org/show_bug.cgi?id=15836:
     PANIC: assert failed at source3/smbd/smb2_oplock.c(156):
     sconn->oplocks.exclusive_open>=0
   - https://bugzilla.samba.org/show_bug.cgi?id=15839:
     gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with prepended 0's
   - https://bugzilla.samba.org/show_bug.cgi?id=15841:
     Wide link issue in samba 4.22
   - https://bugzilla.samba.org/show_bug.cgi?id=15845:
     NT_STATUS_INVALID_PARAMETER: Can't create folders
     on share of an exfat file system
   - https://bugzilla.samba.org/show_bug.cgi?id=15849:
     Lease code is not endian-safe
  * drop widelinks-nofollow.patch (included upstream)
  * drop smbd-fix-handling-of-directory-leases-and-oplock-lev.patch (ditto)

samba (2:4.22.0+dfsg-3) unstable; urgency=medium

  * widelinks-nofollow.patch (https://bugzilla.samba.org/show_bug.cgi?id=15841)
    (Closes: #1101581)

samba (2:4.22.0+dfsg-2) unstable; urgency=medium

  * smbd-fix-handling-of-directory-leases-and-oplock-lev.patch
    (Closes: #1100604)

samba (2:4.22.0+dfsg-1) unstable; urgency=medium

  * new upstream release
  * samba-libs: provide libndr5 too (with a compat symlink)
  * add libsamba-security-private.so link for freeipa testsuite
    (Closes: #1099340)
  * d/samba-vfs-ceph.install: install also ceph_new vfs module
    (Closes: #1098670)
  * d/*.install: s@/*/@/${DEB_HOST_MULTIARCH}/@
  * d/source/lintian-overrides: add dh-exec-useless-usage *DEB_HOST_MULTIARCH*

samba (2:4.22.0~rc1+dfsg-1) experimental; urgency=medium

  * d/control: remove vorlon@ from Uploaders.
    Thank you, dear friend, for all the work you've done. RIP!
  * new upstream release candidate
    Closes: #1084559 (crypt module removal in python 3.13)
  * remove patches which has been applied upstream
  * fix-nfs-service-name-to-nfs-kernel-server.patch:
    refresh, remove now-unneeded hunk
  * revert-ldb-use-hexchars_upper-from-replace.h.patch
    to avoid linking libldb2 with libreplace
  * replace-xpg-strerror.patch
    to avoid linking other libs with libreplace
  * d/rules: fixup component versions
  * libtalloc, libtevent, libtdb, libldb: symbols: add new versions
  * libldb2.symbols: add new version
  * samba-libs: libndr.so soname bump to 6, add new symbols
  * samba-libs: add libutil-crypt-private-samba.so.0

 -- Andreas Hasenack <andreas@xxxxxxxxxxxxx>  Wed, 18 Jun 2025 17:29:20
-0300

** Changed in: samba (Ubuntu Questing)
       Status: Fix Committed => Fix Released

** Bug watch added: Samba Bugzilla #15707
   https://bugzilla.samba.org/show_bug.cgi?id=15707

** Bug watch added: Samba Bugzilla #15727
   https://bugzilla.samba.org/show_bug.cgi?id=15727

** Bug watch added: Samba Bugzilla #15819
   https://bugzilla.samba.org/show_bug.cgi?id=15819

** Bug watch added: Samba Bugzilla #15851
   https://bugzilla.samba.org/show_bug.cgi?id=15851

** Bug watch added: Samba Bugzilla #15858
   https://bugzilla.samba.org/show_bug.cgi?id=15858

** Bug watch added: Samba Bugzilla #15861
   https://bugzilla.samba.org/show_bug.cgi?id=15861

** Bug watch added: Samba Bugzilla #15767
   https://bugzilla.samba.org/show_bug.cgi?id=15767

** Bug watch added: Samba Bugzilla #15774
   https://bugzilla.samba.org/show_bug.cgi?id=15774

** Bug watch added: Samba Bugzilla #15791
   https://bugzilla.samba.org/show_bug.cgi?id=15791

** Bug watch added: Samba Bugzilla #15810
   https://bugzilla.samba.org/show_bug.cgi?id=15810

** Bug watch added: Samba Bugzilla #15818
   https://bugzilla.samba.org/show_bug.cgi?id=15818

** Bug watch added: Samba Bugzilla #15822
   https://bugzilla.samba.org/show_bug.cgi?id=15822

** Bug watch added: Samba Bugzilla #15823
   https://bugzilla.samba.org/show_bug.cgi?id=15823

** Bug watch added: Samba Bugzilla #15829
   https://bugzilla.samba.org/show_bug.cgi?id=15829

** Bug watch added: Samba Bugzilla #15834
   https://bugzilla.samba.org/show_bug.cgi?id=15834

** Bug watch added: Samba Bugzilla #15836
   https://bugzilla.samba.org/show_bug.cgi?id=15836

** Bug watch added: Samba Bugzilla #15839
   https://bugzilla.samba.org/show_bug.cgi?id=15839

** Bug watch added: Samba Bugzilla #15841
   https://bugzilla.samba.org/show_bug.cgi?id=15841

** Bug watch added: Samba Bugzilla #15845
   https://bugzilla.samba.org/show_bug.cgi?id=15845

** Bug watch added: Samba Bugzilla #15849
   https://bugzilla.samba.org/show_bug.cgi?id=15849

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2025-0620

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to samba in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/2108981

Title:
  samba segfaults when renaming a file with open RHW lease

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/2108981/+subscriptions



References