[Pkg-samba-maint] samba and ldb updates for bullseye-security

[Salvatore Bonaccorso]

Hi Michael,

On Thu, Aug 04, 2022 at 02:04:07PM +0300, Michael Tokarev wrote:
> 03.08.2022 12:54, Salvatore Bonaccorso wrote:
> ...
> > If you have not encountered any issues in meanwhile so far, please go
> 
> my testing shows the result is okay so far, there's no issues.
> I haven't done "production testing" (ie, using this package in
> our production environment) because our servers are running 4.16.
> 
> > ahead with the upload to security-master (please for safety wait for
> > the accepted mail for the ldb upload first before uploading samba as
> > well).
> 
> Just did that.  It took a bit more than I thought because I had other
> urgent issues yesterday to deal with. Now waiting for the "accepted"
> email for ldb.
> 
> > I have a slight worry the version changes could be a problem but we
> > have to see.
> 
> Why this worries you? It is kind of fun situation really, since
> the package "thinks" it has different version number. But this
> version does not actually exists, since upstream does not support
> 4.13 anymore so no official source tarballs are created.
> Overall it just works :)

So wanted to go ahead with the DSA release but did some additional
testing and it seems we have a problem:

samba-dsdb-modules for instance has Depends on 

libldb2 (<< 2:2.2.5~), libldb2 (>> 2:2.2.4~)

and in fact now we cannot install:

root at samba:~# apt-get -V  --purge dist-upgrade
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
The following packages will be REMOVED:
   samba-dsdb-modules* (2:4.13.13+dfsg-1~deb11u4)
The following packages will be upgraded:
   libldb2 (2:2.2.3-2~deb11u1 => 2:2.2.3-2~deb11u2)
   libwbclient0 (2:4.13.13+dfsg-1~deb11u4 => 2:4.13.13+dfsg-1~deb11u5)
   python3-ldb (2:2.2.3-2~deb11u1 => 2:2.2.3-2~deb11u2)
   python3-samba (2:4.13.13+dfsg-1~deb11u4 => 2:4.13.13+dfsg-1~deb11u5)
   samba (2:4.13.13+dfsg-1~deb11u4 => 2:4.13.13+dfsg-1~deb11u5)
   samba-common (2:4.13.13+dfsg-1~deb11u4 => 2:4.13.13+dfsg-1~deb11u5)
   samba-common-bin (2:4.13.13+dfsg-1~deb11u4 => 2:4.13.13+dfsg-1~deb11u5)
   samba-libs (2:4.13.13+dfsg-1~deb11u4 => 2:4.13.13+dfsg-1~deb11u5)
   samba-vfs-modules (2:4.13.13+dfsg-1~deb11u4 => 2:4.13.13+dfsg-1~deb11u5)
9 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B/11.5 MB of archives.
After this operation, 1,595 kB disk space will be freed.
Do you want to continue? [Y/n] n
Abort.
root at samba:~# apt-get -s install samba-dsdb-modules
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 samba-dsdb-modules : Depends: libldb2 (> 2:2.2.4~) but 2:2.2.3-2~deb11u2 is to be installed
E: Unable to correct problems, you have held broken packages.
root at samba:~#

Regards,
Salvatore