From 99183a71e8da1e4645293b4e94cd80e1b8c68fc3 Mon Sep 17 00:00:00 2001
From: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue, 10 Jun 2025 11:44:57 +0200
Subject: [PATCH] samba: Update to version 4.22.2

- Update from version 4.22.0 to 4.22.2
- Update of rootfiles not required. Confirmed on all three architectures
- CVE fix in 4.22.2
- Changelog
    4.22.2
	   * BUG 15707: (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick up
	     group membership changes when re-authenticating an expired SMB
	     session.
	   * BUG 15861: Profile sync fails due to Directory Leases.
	   * BUG 15727: net ad join fails with "Failed to join domain: failed to create
	     kerberos keytab".
	   * BUG 15851: dcerpcd not able to bind to listening port.
	   * BUG 15819: vfs_ceph_snapshots fails to list snapshots for entries at any
	     level beyond share root.
	   * BUG 15858: CTDB does not put nodes running NFS into grace on graceful
	     shutdown.
    4.22.1
	   * BUG 15774: Running "gpo manage motd set" twice fails with backtrace.
	   * BUG 15829: samba-tool gpo backup creates entity backups it can't read.
	   * BUG 15839: gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
	     prepended 0's.
	   * BUG 15767: Deadlock between two smbd processes.
	   * BUG 15823: Subnet based interfaces definition not listening on all covered
	     IP addresses.
	   * BUG 15836: PANIC: assert failed at source3/smbd/smb2_oplock.c(156):
	     sconn->oplocks.exclusive_open>=0.
	   * BUG 15727: net ad join fails with "Failed to join domain: failed to create
	     kerberos keytab".
	   * BUG 15774: Running "gpo manage motd set" twice fails with backtrace.
	   * BUG 15822: Enable support for cephfs case insensitive behavior.
	   * BUG 15791: Remove of file or directory not possible with vfs_acl_tdb.
	   * BUG 15841: Wide link issue in samba 4.22.
	   * BUG 15767: Deadlock between two smbd processes.
	   * BUG 15845: NT_STATUS_INVALID_PARAMETER: Can't create folders on share of an
	     exfat file system.
	   * BUG 15849: Lease code is not endian-safe.
	   * BUG 15818: vfs_ceph_new module does not work with other modules for
	     snapshot management.
	   * BUG 15834: vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
	     SMB_VFS_FCHMOD and SMB_VFS_FNTIMES.
	   * BUG 15810: Add async io API from libcephfs to ceph_new VFS module.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 lfs/samba | 40 ++++++++++++++++++++--------------------
 1 file changed, 20 insertions(+), 20 deletions(-)

diff --git a/lfs/samba b/lfs/samba
index 5101244b3..42ce431bf 100644
--- a/lfs/samba
+++ b/lfs/samba
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 4.22.0
+VER        = 4.22.2
 SUMMARY    = A SMB/CIFS File, Print, and Authentication Server
 
 THISAPP    = samba-$(VER)
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = samba
-PAK_VER    = 112
+PAK_VER    = 113
 
 DEPS       = avahi libtalloc perl-Parse-Yapp wsdd
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 27997ad025cbdc246c906bb05bf1c67749decc8e760c68cd4837b5121295613824b11f0eea91de6e7cb551ccc5193d189d5742dc7096305565ca8794baa7b585
+$(DL_FILE)_BLAKE2 = 33c173a855f2a573e93891345727a48d13ac042d35fc2d568472a52dcd06b365d986a947271d21fa6dfb73588068958daab0751b95b54fdf7b15421fdbdfc78c
 
 install : $(TARGET)
 
@@ -81,23 +81,23 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && ./configure \
-		--prefix=/usr \
-		--libdir=/usr/lib/ \
-		--sysconfdir=/var/ipfire \
-		--localstatedir=/var \
-		--without-ad-dc \
-		--with-cachedir=/var/lib/samba \
-		--with-lockdir=/var/lib/samba \
-		--with-piddir=/var/run \
-		--with-ads \
-		--with-acl-support \
-		--with-sendfile-support \
-		--with-winbind \
-		--enable-avahi \
-		--disable-cups \
-		--enable-fhs \
-		--with-syslog \
-		--without-smb1-server
+				--prefix=/usr \
+				--libdir=/usr/lib/ \
+				--sysconfdir=/var/ipfire \
+				--localstatedir=/var \
+				--without-ad-dc \
+				--with-cachedir=/var/lib/samba \
+				--with-lockdir=/var/lib/samba \
+				--with-piddir=/var/run \
+				--with-ads \
+				--with-acl-support \
+				--with-sendfile-support \
+				--with-winbind \
+				--enable-avahi \
+				--disable-cups \
+				--enable-fhs \
+				--with-syslog \
+				--without-smb1-server
 	cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE)
 	cd $(DIR_APP) && make install
 
-- 
2.47.3