samba (2:4.15.13+dfsg-0ubuntu1.13) jammy-security; urgency=medium

  * SECURITY UPDATE: unexpected / directory permissions change
    - debian/patches/CVE-2026-15779.patch: pam_winbind: only chown the home
      directory if it was created in nsswitch/pam_winbind.c.
    - CVE-2026-15779
  * SECURITY UPDATE: July 2026 security updates
    - debian/patches/security-202607-*.patch
    - CVE-2026-6949  - TSIG packet with name compression can crash DNS.
    - CVE-2026-58216 - An authenticated user could possibly crash a KDC
                       process.
    - CVE-2026-58218 - DNS signing DoS via TKEY name cache exhaustion.
    - CVE-2026-58221 - Samba AD authenticated LDAP access domain takeover.
    - CVE-2026-58222 - Samba AD LDAP Compare filter injection and trusted-
                       request confusion disclose protected attributes.
    - CVE-2026-58224 - The CTDB protocol has bounds checking issues.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 24 Jul 2026 11:59:35 -0400

samba (2:4.15.13+dfsg-0ubuntu1.12) jammy-security; urgency=medium

  * SECURITY UPDATE: May 2026 security updates
    - debian/patches/security-202605-*.patch
    - CVE-2026-2340 - WORM vfs module does not block overwrites
    - CVE-2026-3012 - auto-enrolment GPO installing CA certificate over
                      http without verification
    - CVE-2026-3238 - Denial of service against AD DC WINS server
    - CVE-2026-4408 - Unauthenticated Remote Code Execution in Samba
                      DCE/RPC SAMR server
    - CVE-2026-4480 - Unauthenticated Remote Code Execution in Samba
                      printing subsystem
    - debian/libwbclient0.symbols: updated with new symbols.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 21 May 2026 13:08:17 -0400

samba (2:4.15.13+dfsg-0ubuntu1.10) jammy-security; urgency=medium

  * SECURITY UPDATE: uninitialized memory disclosure via vfs_streams_xattr
    - debian/patches/CVE-2025-9640-1.patch: add torture test for inserting
      hole in stream in source3/selftest/tests.py, source4/torture/*.
    - debian/patches/CVE-2025-9640-2.patch: fix unitialized write in
      source3/modules/vfs_streams_xattr.c.
    - CVE-2025-9640
  * SECURITY UPDATE: command injection via WINS server hook script
    - debian/patches/CVE-2025-10230-1.patch: check that wins hook sanitizes
      names in python/samba/tests/usage.py, selftest/*, source4/torture/*,
      testprogs/blackbox/wins_hook_test.
    - debian/patches/CVE-2025-10230-2.patch: restrict names fed to shell in
      source4/nbt_server/wins/wins_hook.c.
    - CVE-2025-10230

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 09 Oct 2025 09:51:42 -0400

samba (2:4.15.13+dfsg-0ubuntu1.9) jammy; urgency=medium

  * Fix %m macro expansion (LP: #2123902):
    - d/p/s3-libsmb-dsgetdcname-do-not-assume-local-system-uses-ipv4.patch:
      return the first IPv4 and the first IPv6 address found for each DC. This
      patch was missing from the backported set of the previous upload
    - d/t/smbclient-macro-expansion: add test to check %m macro expansion

 -- Andreas Hasenack <andreas@canonical.com>  Thu, 18 Sep 2025 18:08:53 -0300

samba (2:4.15.13+dfsg-0ubuntu1.8) jammy; urgency=medium

  * Fix config file macro expansion (LP: #2120811):
    - no change rebuild actually fixed it in all tests (ppa and local)
    - d/t/{control,smbclient-macro-expansion}: new DEP8 test for the issue

 -- Andreas Hasenack <andreas@canonical.com>  Sat, 30 Aug 2025 14:01:16 -0300

samba (2:4.15.13+dfsg-0ubuntu1.7) jammy; urgency=medium

  * Upcoming changes to Windows Server enforce security checks even on
    schannel secured NETLOGON connections causing winbind's netlogon dc
    discovery calls to fail. (LP: #2116098):
    - d/p/s3-winbindd-use-better-debug-messages-than-talloc_st.patch: use
      better debug messages than 'talloc_strdup failed'
    - d/p/s3-winbindd-avoid-using-any-netlogon-call-to-get-a-d.patch: avoid
      using any netlogon call to get a dc name
    - d/p/s3-winbindd-Fix-internal-winbind-dsgetdcname-calls-w.patch: Fix
      internal winbind dsgetdcname calls w.r.t. domain name
    - d/p/s3-libsmb-let-discover_dc_netbios-return-DOMAIN_CONT.patch: let
      discover_dc_netbios() return DOMAIN_CONTROLLER_NOT_FOUND
    - d/p/s3-libsmb-allow-store_cldap_reply-to-work-with-a-ipv.patch: allow
      store_cldap_reply() to work with a ipv6 response
    - d/p/s3-libsmb-dsgetdcname-use-NETLOGON_NT_VERSION_AVOID_.patch: use
      NETLOGON_NT_VERSION_AVOID_NT4EMUL

 -- Andreas Hasenack <andreas@canonical.com>  Mon, 21 Jul 2025 17:31:31 -0300

samba (2:4.15.13+dfsg-0ubuntu1.6) jammy; urgency=medium

  * d/p/lp2046994-spotlight-doesnt-work-with-latest-macos-ventura.patch: fix
    spotlight search function on macos ventura (LP: #2046994).

 -- Mitchell Dzurick <mitchell.dzurick@canonical.com>  Fri, 05 Jan 2024 14:23:01 -0700

samba (2:4.15.13+dfsg-0ubuntu1.5) jammy-security; urgency=medium

  * SECURITY UPDATE: SMB clients can truncate files with read-only
    permissions
    - debian/patches/CVE-2023-4091-*.patch
    - CVE-2023-4091
  * SECURITY UPDATE: Samba AD DC password exposure to privileged users and
    RODCs
    - debian/patches/CVE-2023-4154-*.patch
    - CVE-2023-4154
  * SECURITY UPDATE: rpcecho development server allows Denial of Service
    via sleep() call on AD DC
    - debian/patches/CVE-2023-42669.patch
    - CVE-2023-42669

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 04 Oct 2023 08:38:27 -0400

samba (2:4.15.13+dfsg-0ubuntu1.4) jammy; urgency=medium

  * d/p/issue-when-updating-old-passwd-containing-regex-metachars.patch:
    Add changes to fix uncaught exception when updating old password
    containing regex metacharacters by simplifying samba-tool password
    redaction (LP: #2002949).

 -- Michal Maloszewski <michal.maloszewski@canonical.com>  Fri, 18 Aug 2023 15:53:14 +0200

samba (2:4.15.13+dfsg-0ubuntu1.3) jammy; urgency=medium

  * d/p/secure-channel-faulty-kb5028166.patch: fix domain membership
    after Windows KB5028166 update (LP: #2027716)
  * Cherry pick samba AD DC provisioning DEP8 test from later Ubuntu
    releases (LP: #1977746, LP: #2011745):
    - d/t/control, d/t/util, d/t/samba-ad-dc-provisioning-internal-dns:
      samba AD DC provisioning and domain join tests with internal DNS
      + d/t/control: adjust package dependencies
      + d/t/samba-ad-dc-provisioning-internal-dns: handle the case where
        libnss-winbind does not automatically add winbind to
        /etc/nsswitch.conf (that is done only in Lunar and later)
      + d/t/samba-ad-dc-provisioning-internal-dns: use case insensitive
        match when inspecting kerberos tickets, as the hostname may be
        capitalized

 -- Andreas Hasenack <andreas@canonical.com>  Sun, 23 Jul 2023 17:09:59 -0300

# For older changelog entries, run 'apt-get changelog samba-common'
