Fixes bsc1249058, bsc1254665, bsc1234210, bsc1254926

Signed-off-by: Noel Power <noel.power@suse.com>

_service

@@ -2,7 +2,7 @@
         <service name="tar_scm" mode="manual">
                 <param name="url">https://gitlab.suse.de/samba/suse-samba.git/</param>
                 <param name="scm">git</param>
-                <param name="revision">factory-4-22-stable</param>
+                <param name="revision">SLFO-1.2</param>
                 <param name="versionformat">@PARENT_TAG@+git.@TAG_OFFSET@.%h</param>
                 <param name="versionrewrite-pattern">samba-(.*)</param>
                 <param name="versionrewrite-replacement">\1</param>

samba-4.22.3+git.403.4e078bdb832.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ddac7f7f2d0876491b1861b2e6c0e7a76206fee58c0b83a120677abde5e7ac96
-size 45062825

samba.changes

@@ -1,3 +1,106 @@
+-------------------------------------------------------------------
+Wed Jan  7 10:47:56 UTC 2026 - Samuel Cabrero <scabrero@suse.de>
+
+- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
+  (bso#15790); (bsc#1249058).
+
+-------------------------------------------------------------------
+Thu Dec 18 11:00:46 UTC 2025 - Noel Power <nopower@suse.com>
+
+- Adjust README.SUSE to reflect the new preferred location for
+  '[printers]' share; (bsc#1254665).
+
+-------------------------------------------------------------------
+Fri Dec 17 09:32:26 UTC 2025 - Noel Power <nopower@suse.com>
+
+-  Fix Samba printers reporting invalid sid during print jobs;
+  (bsc#1234210); (bsc#1254926); (bso#15792).
+
+-------------------------------------------------------------------
+Fri Oct 31 09:44:48 UTC 2025 - Noel Power <noel.power@suse.com>
+
+- Update [printers] location to /var/samba/spool; (bsc#1249179).
+
+-------------------------------------------------------------------
+Tue Oct 21 10:46:14 UTC 2025 - Noel Power <nopower@suse.com>
+
+- Update to 4.22.6
+  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
+  * Samba 4.22 breaks Time Machine; (bso#15926).
+  * Spotlight search restriction for shares incomplete and
+    default search searches in too many attributes; (bso#15927).
+  * rpcd_mdssvc may crash because name mangling is not
+    initialized; (bso#15931).
+  * Only increment lease epoch if a lease was granted;
+    (bso#15933).
+  * samba-4.21 fails to join AD when multiple DCs are returned;
+    (bso#15905).
+  * 'net ads group' failed to list domain groups; (bso#15900).
+  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
+    for fsync_send; (bso#15919).
+  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
+    (bso#15921).
+
+-------------------------------------------------------------------
+Wed Oct 15 12:55:57 UTC 2025 - Noel Power <noel.power@suse.com>
+
+- Update to 4.22.5
+  * CVE-2025-10230: Command injection via WINS server hook
+    script (bso#15903); (bsc#1251280).
+  * CVE-2025-9640: uninitialized memory disclosure via
+    vfs_streams_xattr; (bso#15885); (bsc#1251279).
+
+-------------------------------------------------------------------
+Wed Oct  1 13:38:09 UTC 2025 - Samuel Cabrero <scabrero@suse.de>
+
+- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
+  to a recommends. They are only required if utilizing certificate
+  auto enrollment (bsc#1249087).
+
+-------------------------------------------------------------------
+Thu Sep 25 08:56:20 UTC 2025 - Noel Power <noel.power@suse.com>
+
+- Disable timeouts for smb.service so that possibly slow running
+  ExecStartPre script 'update-samba-security-profile' doesn't
+  cause service start to fail due to timeouts;(bsc#1249181).
+
+-------------------------------------------------------------------
+Thu Sep 25 08:55:56 UTC 2025 - Noel Power <noel.power@suse.com>
+
+- Ensure semanage is pulled in as a requirement when samba in
+  installed when selinux security access mechanism that is used;
+  (bsc#1249180).
+
+-------------------------------------------------------------------
+Thu Sep 25 08:55:22 UTC 2025 - Noel Power <noel.power@suse.com>
+
+- don't attempt to label paths that don't exist, also remove
+  unecessary evaluation of semange & restorecon cmds;(bsc#1249179).
+
+-------------------------------------------------------------------
+Thu Sep 25 08:51:52 UTC 2025 - Noel Power <noel.power@suse.com>
+
+- Update to 4.22.4
+  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
+    SysvolReady=0; (bso#14981).
+  * getpwuid does not shift to new DC when current DC is down;
+    (bso#15844).
+  * Windows security hardening locks out schannel'ed netlogon dc
+    calls like netr_DsRGetDCName-; (bso#15876).
+  * Unresponsive second DC can cause idmapping failure when using
+    idmap_ad-; (bso#15881).
+  * kinit command is failing with Missing cache Error;
+    (bso#15840).
+  * Figuring out the DC name from IP address fails and breaks
+    fork_domain_child(); (bso#15891).
+  * vfs_streams_depot fstatat broken; (bso#15816).
+  * Delayed leader broadcast can block ctdb forever; (bso#15892).
+  * Apparently there is a conflict between shadow_copy2 module
+    and virusfilter (action quarantine); (bso#15663).
+  * Fix handling of empty GPO link; (bso#15877).
+  * SMB ACL inheritance doesn't work for files created;
+    (bso#15880).
+
 -------------------------------------------------------------------
 Fri Jul 25 15:41:26 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 

samba.spec

@@ -168,7 +168,7 @@ BuildRequires:  liburing-devel
 %endif
 BuildRequires:  sysuser-tools
 
-Version:        4.22.3+git.403.4e078bdb832
+Version:        4.22.6+git.456.11475143caf
 Release:        0
 URL:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}
@@ -188,6 +188,7 @@ Requires:       %{fillup_prereq}
 Requires:       samba-client >= %{version}
 Requires:       samba-dcerpc = %{version}
 Requires:       sysuser-shadow
+Requires:       (/usr/sbin/semanage if selinux-policy)
 Provides:       group(ntadmin)
 
 %{?systemd_ordering}
@@ -419,11 +420,11 @@ that use SMB, RPC and other Samba provided protocols in Python3 programs.
 Summary:        Samba Group Policy
 License:        GPL-3.0-or-later
 Group:          Productivity/Networking/Samba
-Requires:       cepces
-Requires:       certmonger
 Requires:       samba-ldb-ldap = %{version}
 Requires:       samba-python3 = %{version}
-Requires:       sscep
+Recommends:     cepces
+Recommends:     certmonger
+Recommends:     sscep
 
 %description gpupdate
 The samba-gpupdate package provides the samba-gpupdate tool for applying
@@ -1297,6 +1298,8 @@ exit 0
 %attr(0700,root,root) %dir %{LOCKDIR}/private/msg.sock
 %attr(0750,root,root) %dir %{LOGDIR}
 %ghost %dir %{PIDDIR}
+%ghost %dir %{_var}/samba
+%ghost %dir %{_var}/samba/spool
 %dir %{_tmpfilesdir}
 %{_tmpfilesdir}/samba.conf
 %if %{with_mscat}