<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en" style='--code-editor-font: var(--default-mono-font, "GitLab Mono"), JetBrains Mono, Menlo, DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;'>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: .875rem;
}
body {
-webkit-text-shadow: hsla(0,0%,100%,.01) 0 0 1px;
}
body {
font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: hsla(0,0%,100%,.01) 0 0 1px; font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";'>
<div class="content">
<h3 style="margin-top: 20px; margin-bottom: 10px;">
Michael Tokarev pushed to branch upstream_4.25 at <a href="https://salsa.debian.org/samba-team/samba">Debian Samba Team / samba</a>
</h3>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
Commits:
</h4>
<ul>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/2e6742ac09fcca3643900e61aa316f8220b25e71">2e6742ac</a></strong>
<div>
<span> by Björn Jacke </span> <i> at 2026-09-24T23:54:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>VERSION: Bump version up to Samba 4.25.1...
and re-enable GIT_SNAPSHOT.
Signed-off-by: Bjoern Jacke <bjacke@samba.org>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/8d705becfe69643e2e11c3252b309500b8a74607">8d705bec</a></strong>
<div>
<span> by Anoop C S </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3/g_lock: Create the stack frame before the fast path
The fast path calls talloc_tos() before a stack frame exists when
invoked by callers such as the smbconf Python bindings. Allocate the
frame before this path and route exits through a common label.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16258
Signed-off-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit fdf6726c1c6f7274675f070c0d0761ea5101fd4b)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/c50254799a47ee436a85cdd945c4b0376ba545da">c5025479</a></strong>
<div>
<span> by Anoop C S </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3/smbconf: Avoid leaking a stack frame for a NULL share name
Allocate the stack frame after the NULL servicename check so the
early return in smbconf_reg_create_share() does not leak it.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16258
Signed-off-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Wed Sep 30 21:26:41 UTC 2026 on atb-devel-224
(cherry picked from commit c670e4fce53c04d3d41a47af403e771f34250fe1)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/961fb52db168d450c27bdb5221accbf148410c76">961fb52d</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-daemon: Modernise a DEBUG
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 792942b7e9cfb51dac3ec1c406f40570098d429c)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/0bc5af0d97ae85d6d052fa936bee791ddb6d55ac">0bc5af0d</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-server: Apply some README.Coding, improve comments
Some comments in the same function aren't changed now because they
will be changed in a subsequent commit when the behaviour changes..
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 6420aba887c09590bbd46706b0a8ebdd4b848a96)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/0a8cb0610e77ab4a6efa43d4bdba108382bd033c">0a8cb061</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-daemon: Fix conditions for choosing persistent traverse node
The local node doesn't have to be in the VNN map, since it might have
the lmaster capability disabled. It just needs to be active.
Otherwise, still prefer the first node in the VNN map. Be defensive
about selecting it even though the VNN map should never be empty.
Fall back to selecting the first active node (which won't have been
found in the VNN map if it has the lmaster capability disabled).
If there is no active node then fail.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 65d55e410bc217e8ba02c7194a53412366dc8443)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/ad586f29a99842dbce58f624fb02b0cd5158fce3">ad586f29</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-daemon: Persistent transactions go to all active nodes
The VNN map only contains active nodes with the lmaster capability.
However, transactions on persistent databases should involve all
active nodes. So, don't use the VNN map, use the nodes list instead.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit a8b99d264b87d96fe4af377ac127e64920d9ad1f)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/0d2d87bd37141757ff88597290808afc9354831a">0d2d87bd</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-tests: Add a persistent transaction test
Test that a persistent transaction also writes to nodes with the
lmaster capability disabled.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit f2fba08c1d7fc616ded2690b10ebefe86a17a5c0)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/9a5bb7591cf9b7f4fca131e6cc5832deef9d95b1">9a5bb759</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-daemon: Push record should go to all active nodes
The VNN map only contains active nodes with the lmaster capability.
However, push record operations should involve all active nodes. So,
don't use the VNN map, use the nodes list instead.
This is a separate commit because it does not need to be backported to
versions before 4.25.0.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 7e1bc53dd9e7f4677a0b0a758d80d1780a18362d)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/71c5ee6ca11d8f1d6003a456cb1d453445650a33">71c5ee6c</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb: Apply some README.Coding and other cosmetic changes
Mostly, switch multi-line function calls and declarations to one item
per line. Also, a couple of minor whitespace changes. These changes
will make a subsequent change more readable.
Include tdb.h in a header file where it is missing. This is cosmetic
because the build currently works (probably because all of the
includers include tdb.h first). However, the recent addition of a use
of TDB_DATA in this file causes an angry red underline in my editor.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit ac2bf232aca9966c551bb02f6c8120b62b938ccd)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/a2793a573628a8129dd791e56e9924545eeb8e03">a2793a57</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-client: Drop unset status output parameter
This is used but not set. Just rely on ret, which isn't quite right
yet... but we'll get there.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 9fb6267aaed48f7400d1c14c721b53572662e85e)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/d455e858b1a98619238f0bccd34bd9fab44f1fd8">d455e858</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-protocol: Properly process push record reply result
Push record now waits for a reply from all other nodes. Recognise
this and use the result.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit a34ecddd44080144d11af68eff62fc2b14a0e725)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/97e568beeaa638303bb6a3c0f57888d53bf073d5">97e568be</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-client: Send push record control to specified node
This used to be broadcast but is now sent to the local node. Do
that... or send to another node as specified on the command-line.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 508b04c3dae960e59593dcc56517eb5d3b9172d8)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/1aa831d9c2a39ebb5bbdef7c3283d35e1e2d0e51">1aa831d9</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-client: Simplify synchronous push record API
Have it take struct push_record_data like the underlying
ctdb_req_control_push_record() function. No need to reorganise
data (or malloc()/free()!).
Have ctdb.c:control_push_record_data() fill in this struct directly.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit b124f9dc29b297756438520cb06c505a78bdb926)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/9dc132430650bc3a75bb79d216bc52eb06c0af33">9dc13243</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-tools: Set the generation in push record data
The generation is not currently set in this code path so is always
wrong, causing daemon-side failures in
ctdb_control_push_record_store():
ctdb_control_push_record_store: Rejecting outdated push-record
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 7c976de907a7871992bd26dc212b2112ce2c8745)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/2d26150c8fa07f8ba5ea60adf5905d322399e5eb">2d26150c</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-tools: Only the RSN on the local node should be incremented
The comment several lines above explains why this is important for
vacuuming.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 87c7f950c1cb5c1c40917089c338ae2b3634d1a1)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/ac9bf9c62cfaf75833cd64ab059bec861ea926ea">ac9bf9c6</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-tests: Reformat with "shfmt -w -i 0 -fn"
Best reviewed with "git show -w" or similar.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 4421df999e474a77d84b1162443cab6778ac5986)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/d0a4ec0caebabdc80f73bd0bc0f81dd2b7ff491b">d0a4ec0c</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-tests: Change some test function names
Some of these will be used for more than vacuuming, so rename to avoid
confusion.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit acae3df63ca495d871bf6a1a252c125c87a494f1)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/d58bdb549ca6fa8ce5820dd43742ac714aabd4a6">d58bdb54</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-tests: Generalise some test functions
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 5bf2f9e7d6d087467ab8025dea6b72334a375400)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/98ac072bb32be3366620857726232e6d0de66578">98ac072b</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-tests: Add a ctdb pushrecord test
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Sep 30 15:56:30 UTC 2026 on atb-devel-224
(cherry picked from commit 22daa1d18f9e6c24ae7773106bf19520b126b097)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/3ea71d017c4bba6a444845b0cbc96b2666d42116">3ea71d01</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-02T18:33:16+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-tests: Fix ctdb pushrecord test
If the record is being pushed to the lmaster node then the RSNs will
be 1 less than in the other cases. This is because the empty record
constructed on the lmaster is not migrated.
https://bugzilla.samba.org/show_bug.cgi?id=16254
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Martin Schwenke <martins@samba.org>
Autobuild-Date(master): Thu Oct 1 10:30:41 UTC 2026 on atb-devel-224
(cherry picked from commit 9e6767eddc3f36eda34dcec118810f633c6066f8)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/11f95d3fc34a494e0c0d8cb5a70db6af6929cd2b">11f95d3f</a></strong>
<div>
<span> by Daeho Ro </span> <i> at 2026-10-02T18:33:17+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>lib: Fix the BSD_STYLE_STATVFS build
bsd_init_statvfs() is fed a struct statfs by bsd_statvfs() and
bsd_fstatvfs() and reads statfs-only fields (f_iosize, f_mntonname,
f_flags), but was declared to take a struct statvfs. This broke the build
on macOS and the BSDs since 24ca9a756701 ("smbd: Factor out initializing
vfs_statvfs_struct from system info").
Moving the file to lib/util in 2a6a5cf40d08 ("lib: Move statvfs.[ch] to
lib/util") also replaced includes.h with replace.h, which no longer
declares DEBUG() used by darwin_fs_capabilities().
Found building 4.25.0 on macOS 26.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16263
Signed-off-by: Daeho Ro <email@daeho.ro>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 40e665097d48f1359aed1b7fd76b0ddabf76ae4e)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/bac3bd8709d6df5c39f0342b3aa990b110a69173">bac3bd87</a></strong>
<div>
<span> by Daeho Ro </span> <i> at 2026-10-02T18:33:17+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s4:libcli: Link LP_RESOLVE against resolv
resolve/dns_ex.c calls res_search(), which lives in libresolv on
platforms where it is not part of libc, e.g. macOS where it is
res_9_search(). LP_RESOLVE used to get resolv through addns, but
bffb51f09ab3 ("addns: Move DNS hand-marshalling smbtorture4") dropped it
from addns' public_deps, so linking libcli-ldap fails there with an
undefined _res_9_search.
Depend on resolv directly where it is used. On glibc >= 2.34 res_search()
is in libc, which is why this was not noticed on Linux.
Found building 4.25.0 on macOS 26.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16263
Signed-off-by: Daeho Ro <email@daeho.ro>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Sun Sep 27 11:08:58 UTC 2026 on atb-devel-224
(cherry picked from commit fdb87d1c67476dd6540a29ce8e75463824e1da72)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/ad2e3a5f2bddf7916014d18cd4825dc058da2af1">ad2e3a5f</a></strong>
<div>
<span> by Shweta Sodani </span> <i> at 2026-10-02T19:37:43+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>lib/util: backend file level log is not respected to "logging" option.
With the help of "logging" option, we can set the each logging backend
with different level, this is working fine for all backend logging
except file level logging. This change is respecting the file level
logging as well.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15857
Signed-off-by: Shweta Sodani <ssodani@redhat.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Thu Oct 1 22:32:48 UTC 2026 on atb-devel-224
(cherry picked from commit 019e7e304e4d9cb053341ebec9e801b852164481)
Autobuild-User(v4-25-test): Björn Jacke <bjacke@samba.org>
Autobuild-Date(v4-25-test): Fri Oct 2 19:37:43 UTC 2026 on atb-devel-224
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/6e3e8b3846eb147c5120924427701beb8db0fb7b">6e3e8b38</a></strong>
<div>
<span> by Volker Lendecke </span> <i> at 2026-10-09T22:46:12+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>selftest: Add regression test for rename ReplaceIfExists case-only collision
Add samba.tests.libsmb-basic.LibsmbTestCase.test_rename_replace_case,
which renames a temporary file over an existing target differing only
in case with ReplaceIfExists set. The existing target must be replaced,
not left in place alongside a second, duplicate directory entry.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16261
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Anoop C S <anoopcs@samba.org>
(cherry picked from commit a798b16fc76b968d8af64409e6365791bbd62419)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/d6140ca82637062a0820dc80483020af7cd863f3">d6140ca8</a></strong>
<div>
<span> by Volker Lendecke </span> <i> at 2026-10-09T22:46:12+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Fix rename with ReplaceIfExists to a target differing only in case
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16261
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Tue Sep 29 19:34:05 UTC 2026 on atb-devel-224
(cherry picked from commit 15f64c46c935b428d1827a170ee4082694464c19)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/932ccc9d72051d4bcc1fa15e636a4821a140961e">932ccc9d</a></strong>
<div>
<span> by Anoop C S </span> <i> at 2026-10-09T22:46:12+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>buildtools: Restrict dynamic_lookup to macOS
The linker flag probe added by 9938c9a6f7b succeeds on Linux, but
GNU ld.bfd interprets `-undefined,dynamic_lookup` as an undefined
reference to a symbol named "dynamic_lookup". This breaks i686
builds when linking shared libraries that allow undefined symbols.
. . .
[2483/3877] Compiling bin/default/librpc/gen_ndr/py_lsa.c
/usr/bin/ld.bfd: /builddir/build/BUILD/samba-4.25.0-build/samba-4.25.0/
bin/default/source3/libsamba-cluster-support-private-samba.so:
undefined reference to `dynamic_lookup'
collect2: error: ld returned 1 exit status
. . .
Only probe and add this macOS specific flag on macOS; Linux
already permits unresolved symbols in these shared libraries
when `-no-undefined` is removed.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16265
Signed-off-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Anoop C S <anoopcs@samba.org>
Autobuild-Date(master): Wed Sep 30 14:38:17 UTC 2026 on atb-devel-224
(cherry picked from commit 7399c227bfb5e6e68030f8c694a9761c0c9d6d76)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/978b9a51e97585793179b2ee54a7c9c00ae9a5e5">978b9a51</a></strong>
<div>
<span> by Björn Baumbach </span> <i> at 2026-10-09T23:52:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-scripts: Extract real interface name in ip_prefix_iface()
For interfaces that have a link, e.g. VLANs, macvlan or veth devices
in containers, "ip -brief addr show" prints the interface name as
"<iface>@<link>", for example "eth1@if23". This is not the real
interface name, so releasing or moving a public IP fails when the
interface has to be looked up.
10.interface: Cannot find device "eth1@if23"
10.interface: Failed to del 192.168.0.123/24 on dev eth1@if23
The previous implementation of ip_maskbits_iface() stripped the
"@<link>" suffix, so do this again. Has been changed by commit
386d8881740 ("ctdb-scripts: Add function ip_prefix_iface()").
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16274
Signed-off-by: Björn Baumbach <bb@sernet.de>
Reviewed-by: Martin Schwenke <martin@meltin.net>
Autobuild-User(master): Björn Baumbach <bb@sernet.de>
Autobuild-Date(master): Fri Oct 9 15:23:15 UTC 2026 on atb-devel-224
(cherry picked from commit a860511ec49de09c7a69b13b070bf9335c33b23f)
Autobuild-User(v4-25-test): Björn Jacke <bjacke@samba.org>
Autobuild-Date(v4-25-test): Fri Oct 9 23:52:02 UTC 2026 on atb-devel-224
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/8177022c4c0a27642946d02568b783007a904ae4">8177022c</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-12T19:46:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-recoverd: Avoid recovery race on lost cluster lock
The following was seen while running
ctdb/tests/INTEGRATION/simple/cluster.015.reclock_remove_lock.sh:
726102 node.0 ctdbd[2655369]: ctdb_mutex_fcntl_helper: lock lost - lock file "tests/var/INTEGRATION/simple/shared/.ctdb/cluster.lock" open failed (ret=2)
726937 node.0 ctdb-recoverd[2655437]: Cluster lock helper terminated
726971 node.0 ctdb-recoverd[2655437]: Start election
727053 node.0 ctdbd[2655369]: Recovery mode set to ACTIVE
727071 node.1 ctdbd[2655392]: Recovery mode set to ACTIVE
727071 node.2 ctdbd[2655407]: Recovery mode set to ACTIVE
727161 node.0 ctdb-recoverd[2655437]: Attempting to take cluster lock (! /m/martins/aMASTER/b1443461/ctdb/ctdb/bin/ctdb_mutex_fcntl_helper tests/var/INTEGRATION/simple/shared/.ctdb/cluster.lock 5)
727198 node.1 ctdb-recoverd[2655480]: Attempting to take cluster lock (! /m/martins/aMASTER/b1443461/ctdb/ctdb/bin/ctdb_mutex_fcntl_helper tests/var/INTEGRATION/simple/shared/.ctdb/cluster.lock 5)
727212 node.2 ctdb-recoverd[2655503]: Attempting to take cluster lock (! /m/martins/aMASTER/b1443461/ctdb/ctdb/bin/ctdb_mutex_fcntl_helper tests/var/INTEGRATION/simple/shared/.ctdb/cluster.lock 5)
727885 node.0 ctdb-recoverd[2655437]: Received leader broadcast, leader=0
731562 node.0 ctdb-recoverd[2655437]: Unable to take cluster lock - contention
731579 node.2 ctdb-recoverd[2655503]: Unable to take cluster lock - contention
731587 node.1 ctdb-recoverd[2655480]: Cluster lock taken successfully
731602 node.1 ctdb-recoverd[2655480]: Took cluster lock, leader=1
731976 node.0 ctdb-recoverd[2655437]: Node:0 was in recovery mode. Start recovery process
732006 node.0 ctdb-recoverd[2655437]: Node:1 was in recovery mode. Start recovery process
732022 node.0 ctdb-recoverd[2655437]: Node:2 was in recovery mode. Start recovery process
732029 node.0 ctdb-recoverd[2655437]: do_recovery: Starting do_recovery
732035 node.1 ctdb-recoverd[2655480]: Node:1 was in recovery mode. Start recovery process
732050 node.1 ctdb-recoverd[2655480]: Node:0 was in recovery mode. Start recovery process
732059 node.1 ctdb-recoverd[2655480]: Node:2 was in recovery mode. Start recovery process
732062 node.0 ctdb-recoverd[2655437]: Cluster lock not held - abort recovery, ban node
732063 node.1 ctdb-recoverd[2655480]: do_recovery: Starting do_recovery
732067 node.0 ctdb-recoverd[2655437]: Banning node 0 for 300 seconds
732082 node.0 ctdbd[2655369]: SET BAN STATE
732090 node.0 ctdbd[2655369]: Banning this node for 300 seconds
732094 node.0 ctdbd[2655369]: Making node INACTIVE
732096 node.1 ctdb-recoverd[2655480]: do_recovery: Recovery initiated due to problem with node 0
Note that the date/time has been trimmed to just show microseconds for
readability.
The problem here is that the node that lost the cluster lock still
has itself recorded as leader. By the time it attempts to run
recovery, it hasn't received a leader broadcast from the new leader
so it passes all the checks allowing it to run recovery, except for
the cluster lock one.
Clearing the leader on this node will avoid the problem because
do_recovery() will notice it is no longer the leader and will abort
recovery.
Improve the associated message in do_recovery() to avoid printing the
confusing value of CTDB_UNKNOWN_PNN when this occurs.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16273
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Autobuild-User(master): Anoop C S <anoopcs@samba.org>
Autobuild-Date(master): Fri Oct 9 18:47:25 UTC 2026 on atb-devel-224
(cherry picked from commit a01ade983b71640332798a97e7d6bcaa454b78ca)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/b7590c3cc849d14295e4dbd986870c5fd2b0b15a">b7590c3c</a></strong>
<div>
<span> by Volker Lendecke </span> <i> at 2026-10-12T19:46:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: The fix for Bug 16200 causes a locking corruption bug
smbd caches share_mode_data and reuses it as long as the
unique_content_epoch of the locking.tdb record is unchanged.
Right now a fresh smbd hands out the same epochs as the smbd that
created a record before. Make c2's smbd cache the share_mode_data of a
record created by c1, remove the record and let a third connection
recreate it with a different share mode. c2 then uses its cached
share_mode_data and misses the sharing violation.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16200
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit f92b40e9ce29c70b970d932b962d25ccfe2d2cc3)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/b0ddaf0acc7bb6b911d43fec5c8e348c7dd1cd82">b0ddaf0a</a></strong>
<div>
<span> by Volker Lendecke </span> <i> at 2026-10-12T20:49:58+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>lib: seed generate_unique_u64() per process again
Since commit 89968416949 ("lib/util: make generate_unique_u64() more
robust") the first call in a process sets next_value to veto_value and
increments it before the veto check. So the random nonce is never
generated, and every process continues counting from the value it was
passed. Processes that start from the same value, for example the
unique_content_epoch of the same locking.tdb record, hand out the same
"unique" values. New g_lock records get unique_lock_epoch 1 and
unique_data_epoch 2 in every fresh process.
share_mode_memcache_fetch() relies on unique_content_epoch being unique
across processes to detect stale cached share_mode_data, g_lock relies
on unique_data_epoch to detect data changes for watchers. With
colliding epochs an smbd can use outdated share_mode_data or miss a
change of g_lock data.
Start every process at a random value as documented in samba_util.h.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16200
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Fri Oct 9 09:42:26 UTC 2026 on atb-devel-224
(cherry picked from commit 67eeb79811e57038a38d7272ee98064938b27b06)
Autobuild-User(v4-25-test): Björn Jacke <bjacke@samba.org>
Autobuild-Date(v4-25-test): Mon Oct 12 20:49:58 UTC 2026 on atb-devel-224
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/6b46f7d52943090f3aa8b274d68dcf47103f992a">6b46f7d5</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Fix a comment typo
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 9a6eb2d26fdfd16728116837d10517a8e0e3060e)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/302a7edae8040bf765bcd61649dd600de5b54845">302a7eda</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Modernise some DEBUGs
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 51fe0eb702c545d89e672642c82857ddf69eddbf)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/3a45524f21b60892bd95a6ada43d419f3edb9409">3a45524f</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Update a stale DEBUG message
The called function was updated to open_socket_in_protocol() in commit
6bbcf1114c1b0382f167cc9baf25900809bf60c5. Update the debug message to
match.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit f3c50e7561de9cb95b34f844ea23602d29043c63)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/f1adcdab75ea4664a1dc72b70331ac4ef7cee1ec">f1adcdab</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Rename variable "matched" to "is_dynamic"
This variable is about to be used further from where it is set, so
give it a name that makes its meaning clearer to the reader.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit b700437c10f9734b184b66f41755727d195ce437)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/d07449c9b24cedc401b123a2cbea893f1b843459">d07449c9</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Reduce noise for address changes on non-dynamic interfaces
We see messages like this at NOTICE level:
[root@testn1 ~]# [2026/09/17 16:33:02.166491, 3] ../../source3/smbd/server.c:2267(smbd_addr_changed)
smbd_addr_changed: smbd: No interface present for if_index 2 with dynamic option
These are for (unknown) addresses we probably aren't interested in.
The message could be made more useful for debugging by including the
address and whether it is a DEL/ADD.
So, move this to DEBUG level, putting a DBG_DEBUG() into each of the
relevant DEL/ADD cases so the extra details can be logged. To make
this sane, produce the address string earlier, requiring variables to
be moved to the outer scope.
Now, the DEBUG level messages look like:
[2026/09/17 22:06:09.643377, 10, pid=453297, effective(0, 0), real(0, 0)] ../../source3/smbd/server.c:2272(smbd_addr_changed)
smbd_addr_changed: smbd: kernel (AF_NETLINK) dropped ip 192.168.121.111 on if_index 2 (not dynamic)
[2026/09/17 22:06:13.281803, 10, pid=453297, effective(0, 0), real(0, 0)] ../../source3/smbd/server.c:2291(smbd_addr_changed)
smbd_addr_changed: smbd: kernel (AF_NETLINK) added ip 192.168.121.111 on if_index 2 (not dynamic)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit bd63602ebc7ca25fb48a4cfb9ebe3f3554cd7230)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/fe799e15c4fc1fed66e1353b29cd297a803b0dff">fe799e15</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Make smbd_open_one_socket() return errno on failure
Callers can then do finer grained error handling.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit a4dc320c004bfe6394a65c598a06759b72cf3fd7)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/3849e35fb9c98989ffe60287a1fdb3a4b7eeccec">3849e35f</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Have smbd_open_one_socket() only ignore bind error on request
Currently, all callers still ignore the error.
smbd_open_one_socket() used to ignore all errors on bind(2). The
behaviour was changed long ago but was quickly restored by commit
3ee1acdc8eea0a84131066eaca927dc2ffa238bb. The reason is unclear, so
try to maintain the current behaviour for original callers. Perhaps
this has something to do with avoiding noise because bind(2) fails on
IPv6 addresses before Duplicate Address Detection (DAD) completes.
That seems unlikely because there was no dynamic interface address
handling.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit b62ef3401d3f557a224f9caaf9e307e18ebba3fd)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/b5eeb11b26f7a4f28c73fe6d8e39ddc9c712123e">b5eeb11b</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Have smbd_open_socket_for_ip() return an int
This can allow special error handling via a negative return.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit c69a1d21b3682727c54f560dbdb689907d143d15)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/6538a30b3e0b196cc6c38137edc97e1bba822c7f">6538a30b</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Have smbd_open_socket_for_ip() ignore bind errors on request
When not ignoring errors, return on the first failure.
Currently, all callers still ignore the error.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 2a4e95ccee8d11240d6c2594fef861e611ea07e2)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/77e52f52005f2ff44ba8e969f42258eaa2fb355f">77e52f52</a></strong>
<div>
<span> by Martin Schwenke </span> <i> at 2026-10-14T20:57:18+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: Add retry for dynamic interface IPv4 address handling
Work around a bug where notification of an address being added appears
to be received before an IPv4 address is actually assigned by the
kernel.
Errors from bind(2) are not longer ignored for dynamic interface
address addition.
The behaviour for IPv4 and IPv6 is quite different:
* For IPv4, EADDRNOTAVAIL triggers a retry, with a limit of 10
attempts.
The first attempt is delayed by 20µs to try to avoid the race
completely. This is small because the window appears to be small
when the race is observed: a successful bind(2) followed a
notification by ~16µs, while an unsuccessful bind(2) followed a
notification by ~9µs. Adding 20µs to the natural delay should
hopefully avoid the race in most circumstances.
Retries are delayed by 1ms (1000µs).
* For IPv6, EADDRNOTAVAIL is expected before IPv6 Duplicate Address
Detection (DAD) completes, so turn down the debug level for this
failure. An additional notification is sent when DAD completes so
bind(2) should always succeed from that notification.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16235
Signed-off-by: Martin Schwenke <mschwenke@ddn.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Wed Oct 7 12:26:40 UTC 2026 on atb-devel-224
(cherry picked from commit 1d2ffe9968913612afa8338f99a0b4accd5a4bcb)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/c09543f7501159ae1dc6e18a10ae2d95e014b8a8">c09543f7</a></strong>
<div>
<span> by Priyanka Soni </span> <i> at 2026-10-14T22:02:24+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>lib/util: accept fractional sizes in conv_str_size_error()
Sizes like "2.2T" failed to parse, so "fruit:time machine max size"
was silently ignored when given a fractional value.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15324
Signed-off-by: Priyanka Soni <priysoni@redhat.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Sun Oct 11 16:06:58 UTC 2026 on atb-devel-224
(cherry picked from commit c617f334fb974e157d2a450b24cfcdd43f935b7b)
Autobuild-User(v4-25-test): Björn Jacke <bjacke@samba.org>
Autobuild-Date(v4-25-test): Wed Oct 14 22:02:24 UTC 2026 on atb-devel-224
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/cdff986c8ea6287d5d89b0e50f9bdb87d7205dd4">cdff986c</a></strong>
<div>
<span> by Anoop C S </span> <i> at 2026-10-23T13:21:13+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:tests: Add acl_xattr listxattr regression test
Exercise empty and nonempty attribute lists using vfstest with
acl_xattr over xattr_tdb.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16287
Pair-Programmed-With: Volker Lendecke <vl@samba.org>
Signed-off-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit ef92707ad7de631572d325213a03f9f6128d53a4)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/7ae230c49eded16ccfe680a7d849d30d6bb597a2">7ae230c4</a></strong>
<div>
<span> by Anoop C S </span> <i> at 2026-10-23T13:21:13+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>vfs_acl_xattr: Handle listxattr size queries
Size-only queries do not populate listbuf. Return the backend
size before scanning the buffer to avoid a NULL dereference.
The unfiltered size is a safe upper bound for the subsequent
filtered list.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16287
Signed-off-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Thu Oct 22 16:57:45 UTC 2026 on atb-devel-224
(cherry picked from commit eb679b76beaad9e31fd1c0a07aee890f3948abe9)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/f8cc668c6e36ed493e725da3738a028b0c102d5b">f8cc668c</a></strong>
<div>
<span> by Anoop C S </span> <i> at 2026-10-23T13:21:13+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CVE-2026-109411: s4:torture/smb2: Test case-insensitive open access check
Add a regression test which verifies that a second user is denied an
open of another user's restricted file when it is addressed using a
different case, for both read and write access. This exercises the
case-insensitive open path on case-preserving backends.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16276
Signed-off-by: Anoop C S <anoopcs@samba.org>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/97f307607f9151202d29ab62e402498b8deac3fd">97f30760</a></strong>
<div>
<span> by Vinit Agnihotri </span> <i> at 2026-10-23T14:38:23+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CVE-2026-109411: vfs_ceph_rgw: Open the name resolved by the VFS layer in openat
openat() built the object path from fsp->fsp_name->base_name, ignoring
the case-corrected smb_fname passed in by the caller. A differently
cased open thus retried the wrong name, failed, and fell through to the
create path, skipping the access check on the existing object and
letting a user read or overwrite another user's file.
Build the path from dirfsp and smb_fname instead, so the resolved name
is honoured and the proper access check runs.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16276
Reported-by: hataehoon
Pair-Programmed-With: Anoop C S <anoopcs@samba.org>
Signed-off-by: Vinit Agnihotri <vagnihot@redhat.com>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Autobuild-User(v4-25-test): Björn Jacke <bjacke@samba.org>
Autobuild-Date(v4-25-test): Fri Oct 23 14:38:23 UTC 2026 on atb-devel-224
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/5a8f01a665446515175301c96998b65ef1fc717c">5a8f01a6</a></strong>
<div>
<span> by Björn Jacke </span> <i> at 2026-10-23T17:26:48+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>WHATSNEW: Add release notes for Samba 4.25.1.
Signed-off-by: Bjoern Jacke <bjacke@samba.org>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/02e8e3f93f4af787bcb3389cbff9e22e74567eb2">02e8e3f9</a></strong>
<div>
<span> by Björn Jacke </span> <i> at 2026-10-23T17:27:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>VERSION: Disable GIT_SNAPSHOT for the 4.25.1 release.
Signed-off-by: Bjoern Jacke <bjacke@samba.org>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/553f88eaa23f9605d865d8e0817f746d914e61cd">553f88ea</a></strong>
<div>
<span> by Michael Tokarev </span> <i> at 2026-10-23T18:53:57+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>New upstream version 4.25.1+dfsg</pre>
</li>
</ul>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
45 changed files:
</h4>
<ul>
<li class="file-stats">
<a href="#b33892fbddeffc3368077b4904ad0b3d562a7312">
VERSION
</a>
</li>
<li class="file-stats">
<a href="#3277e12b5a9f9ff632d229e2629d34ad21dd93fc">
WHATSNEW.txt
</a>
</li>
<li class="file-stats">
<a href="#717e4435bfe6c4ce86a7ac15a5461119235be37b">
buildtools/wafsamba/samba_autoconf.py
</a>
</li>
<li class="file-stats">
<a href="#6ae2280e34c36be5089ca24d74e193f732deeeff">
ctdb/.gitignore
</a>
</li>
<li class="file-stats">
<a href="#6926dbdd3a1273502076cc983be8020f278a4382">
ctdb/client/client_control_sync.c
</a>
</li>
<li class="file-stats">
<a href="#37c8ab367a9886a555f2f23d00b646908705ef6f">
ctdb/client/client_sync.h
</a>
</li>
<li class="file-stats">
<a href="#f06e39f35b56593113c7976865b04888f1b9176c">
ctdb/config/functions
</a>
</li>
<li class="file-stats">
<a href="#7c0540b5f80f133970dc20e66f2eb370042a9de9">
ctdb/protocol/protocol_api.h
</a>
</li>
<li class="file-stats">
<a href="#54adf9696b7d7f672d9f8d4496c63a112647125b">
ctdb/protocol/protocol_client.c
</a>
</li>
<li class="file-stats">
<a href="#0a068be5646d4d57e6701c449bd4a36d2d57b2fd">
ctdb/server/ctdb_daemon.c
</a>
</li>
<li class="file-stats">
<a href="#d056e21e759ed265effccd6df1e7979f7588f879">
ctdb/server/ctdb_persistent.c
</a>
</li>
<li class="file-stats">
<a href="#83364e6cb4542630ffc8a02500ad781175c71225">
ctdb/server/ctdb_recoverd.c
</a>
</li>
<li class="file-stats">
<a href="#fe2d0b266a3aed212a7e2eba4ccd74f2d2ff68b4">
ctdb/server/ctdb_traverse.c
</a>
</li>
<li class="file-stats">
<a href="#9e763c2c036b10fdccc3bdb4ca36bc6f83ecea95">
<span class="new-file">
+
ctdb/tests/INTEGRATION/database/push_record.0001.lmaster_disabled.sh
</span>
</a>
</li>
<li class="file-stats">
<a href="#d61bd03728f7a2b0af065dde662f8c7914ca97ec">
ctdb/tests/INTEGRATION/database/scripts/local.bash
</a>
</li>
<li class="file-stats">
<a href="#0b22fa902e1b2b3c5ba7e6eba63b8bd108a39d7f">
<span class="new-file">
+
ctdb/tests/INTEGRATION/database/transaction.005.ptrans_lmaster.sh
</span>
</a>
</li>
<li class="file-stats">
<a href="#a759318ae5729cd417465a57230dcbd9a62ff034">
ctdb/tests/INTEGRATION/database/vacuum.001.fast.sh
</a>
</li>
<li class="file-stats">
<a href="#b10d1ce76c3d3f6f4335daeff387f10561615f72">
ctdb/tests/INTEGRATION/database/vacuum.002.full.sh
</a>
</li>
<li class="file-stats">
<a href="#4ec2b1ec43a67f37a1cb1e260a1b8027f2f7d9b2">
ctdb/tests/INTEGRATION/database/vacuum.003.recreate.sh
</a>
</li>
<li class="file-stats">
<a href="#468381fc2932b80f38b36b9c5ed4322fe9137214">
ctdb/tests/INTEGRATION/database/vacuum.030.locked.sh
</a>
</li>
<li class="file-stats">
<a href="#dd3cdf97195c443d7f3398756fa7edc79ffa2fba">
ctdb/tests/INTEGRATION/database/vacuum.031.locked.sh
</a>
</li>
<li class="file-stats">
<a href="#1698c5577c5c52db6ff5b9b9b245e08cd12ca841">
ctdb/tests/INTEGRATION/database/vacuum.032.locked.sh
</a>
</li>
<li class="file-stats">
<a href="#2cbc34ddf7b6b8e08873a030ee92d72e1ce81e77">
ctdb/tests/INTEGRATION/database/vacuum.033.locked.sh
</a>
</li>
<li class="file-stats">
<a href="#3d2d718bceaf2b49f205c78c5707a93ef4a2a48d">
ctdb/tests/INTEGRATION/database/vacuum.034.locked.sh
</a>
</li>
<li class="file-stats">
<a href="#49d7fc3943759d21eb9c6ea0f32d2d09cb8e05ed">
<span class="new-file">
+
ctdb/tests/UNIT/eventscripts/10.interface.releaseip.003.sh
</span>
</a>
</li>
<li class="file-stats">
<a href="#925dfaa8a8070aa2451e2927f420b479ac528a63">
<span class="new-file">
+
ctdb/tests/UNIT/eventscripts/10.interface.updateip.002.sh
</span>
</a>
</li>
<li class="file-stats">
<a href="#d22ea001d014af6f2de46f59a3d3efb608e4990f">
ctdb/tests/UNIT/eventscripts/stubs/ip
</a>
</li>
<li class="file-stats">
<a href="#29c0a4d2763d9c397e532aba82a1773f72696216">
ctdb/tools/ctdb.c
</a>
</li>
<li class="file-stats">
<a href="#972b2440aaea1c1a9d8979f24fcdd80959b7e63e">
docs-xml/manpages/vfs_fruit.8.xml
</a>
</li>
<li class="file-stats">
<a href="#94de78728a7e30beb06828a0ed0c676b10d657fa">
lib/util/debug.c
</a>
</li>
<li class="file-stats">
<a href="#edfd1803e5e79a533be54bba1dfc13e9ff6aa65e">
lib/util/genrand_util.c
</a>
</li>
<li class="file-stats">
<a href="#2e37f589c095ac350db2100d2a7762784e6268f5">
lib/util/statvfs.c
</a>
</li>
<li class="file-stats">
<a href="#f537035bab205b049e02f08bcabbb66c9ad80a54">
lib/util/tests/str.c
</a>
</li>
<li class="file-stats">
<a href="#920f977b858bb58715332f2592336aeff6b91622">
lib/util/util_str.c
</a>
</li>
<li class="file-stats">
<a href="#70cb337529a1ac4e24ea69724d4f71018bde7358">
python/samba/tests/libsmb-basic.py
</a>
</li>
<li class="file-stats">
<a href="#47197e968c7d5c42c6289b20480caa1ac37ceb11">
source3/lib/g_lock.c
</a>
</li>
<li class="file-stats">
<a href="#fc8fd6fede86d700aa1e2f062dfb33a06ff20160">
source3/lib/smbconf/smbconf_reg.c
</a>
</li>
<li class="file-stats">
<a href="#1b198dd4a45018003be02f2478d85534b1feb815">
source3/modules/vfs_acl_xattr.c
</a>
</li>
<li class="file-stats">
<a href="#3f50e9292a05668de9f1d2d6cd75855fd70ee008">
source3/modules/vfs_ceph_rgw.c
</a>
</li>
<li class="file-stats">
<a href="#e114dd8b6f53005632d841073009dd59a3310104">
<span class="new-file">
+
source3/script/tests/vfstest-acl-xattr/run.sh
</span>
</a>
</li>
<li class="file-stats">
<a href="#75bc75497231bbcc74880ae0917386d44729c127">
source3/selftest/tests.py
</a>
</li>
<li class="file-stats">
<a href="#d06549ceebd5a9c816d70914d5f41fdbea905f82">
source3/smbd/server.c
</a>
</li>
<li class="file-stats">
<a href="#ca9c4077621dd2b56e68c2e9a4b2125f514a1b78">
source3/smbd/smb2_reply.c
</a>
</li>
<li class="file-stats">
<a href="#4bcf80d0af0a33aeab098cac130597495f5b1e5f">
source4/libcli/wscript_build
</a>
</li>
<li class="file-stats">
<a href="#ca118fb592a2ea7425017664b04048b6cf1bf8f8">
source4/torture/smb2/create.c
</a>
</li>
</ul>
<h5 style="margin-top: 10px; margin-bottom: 10px; font-size: .875rem;">
The diff was not included because it is too large.
</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #626168;">
—
<br>
<a href="https://salsa.debian.org/samba-team/samba/-/compare/861ba660904e275e5394c9538f35036973b0ae87...553f88eaa23f9605d865d8e0817f746d914e61cd">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://salsa.debian.org">salsa.debian.org</a>. <a href="https://salsa.debian.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://salsa.debian.org/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>
<span style="color: transparent; font-size: 0; display: none; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0;">
Notification message regarding https://salsa.debian.org/samba-team/samba/-/compare/861ba660904e275e5394c9538f35036973b0ae87...553f88eaa23f9605d865d8e0817f746d914e61cd at 1792771225
</span>
</p>
</div>
</body>
</html>