- Update from version 4.22.0 to 4.22.2
- Update of rootfiles not required. Confirmed on all three architectures
- CVE fix in 4.22.2
- Changelog
4.22.2
* BUG 15707: (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick up
group membership changes when re-authenticating an expired SMB
session.
* BUG 15861: Profile sync fails due to Directory Leases.
* BUG 15727: net ad join fails with "Failed to join domain: failed to create
kerberos keytab".
* BUG 15851: dcerpcd not able to bind to listening port.
* BUG 15819: vfs_ceph_snapshots fails to list snapshots for entries at any
level beyond share root.
* BUG 15858: CTDB does not put nodes running NFS into grace on graceful
shutdown.
4.22.1
* BUG 15774: Running "gpo manage motd set" twice fails with backtrace.
* BUG 15829: samba-tool gpo backup creates entity backups it can't read.
* BUG 15839: gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
prepended 0's.
* BUG 15767: Deadlock between two smbd processes.
* BUG 15823: Subnet based interfaces definition not listening on all covered
IP addresses.
* BUG 15836: PANIC: assert failed at source3/smbd/smb2_oplock.c(156):
sconn->oplocks.exclusive_open>=0.
* BUG 15727: net ad join fails with "Failed to join domain: failed to create
kerberos keytab".
* BUG 15774: Running "gpo manage motd set" twice fails with backtrace.
* BUG 15822: Enable support for cephfs case insensitive behavior.
* BUG 15791: Remove of file or directory not possible with vfs_acl_tdb.
* BUG 15841: Wide link issue in samba 4.22.
* BUG 15767: Deadlock between two smbd processes.
* BUG 15845: NT_STATUS_INVALID_PARAMETER: Can't create folders on share of an
exfat file system.
* BUG 15849: Lease code is not endian-safe.
* BUG 15818: vfs_ceph_new module does not work with other modules for
snapshot management.
* BUG 15834: vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
SMB_VFS_FCHMOD and SMB_VFS_FNTIMES.
* BUG 15810: Add async io API from libcephfs to ceph_new VFS module.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>