Regenerate samba based on latest git.suse.de factory-4.23-stable branch

Removes again the ngtcp2 bundling shouldn't be necessary

ngtcp2 & required nghttp3 now have slfo-main branches (and associated pulls requests)

see https://src.suse.de/pool/nghttp3/pulls/1 https://src.suse.de/pool/ngtcp2/pulls/1

_service

@@ -2,7 +2,7 @@
         <service name="tar_scm" mode="manual">
                 <param name="url">https://gitlab.suse.de/samba/suse-samba.git/</param>
                 <param name="scm">git</param>
-                <param name="revision">SLFO-1.2</param>
+                <param name="revision">factory-4-23-stable</param>
                 <param name="versionformat">@PARENT_TAG@+git.@TAG_OFFSET@.%h</param>
                 <param name="versionrewrite-pattern">samba-(.*)</param>
                 <param name="versionrewrite-replacement">\1</param>

samba.changes

@@ -1,37 +1,3 @@
--------------------------------------------------------------------
-Wed Jan 21 17:19:15 UTC 2026 - Noel Power <nopower@suse.com>
-
-- Fix mistake in README.SUSE /var/spool/samba => /var/samba/spool
-  (bsc#1254665).
-
--------------------------------------------------------------------
-Mon Jan 19 09:29:04 UTC 2026 - Noel Power <noel.power@suse.com>
-
-- Update to 4.22.7
-  * Samba 4.22 breaks Time Machine; (bso#15926).
-  * Searching for numbers doesn't work with Spotlight;
-    (bso#15930).
-  * mdssvc doesn't support $time.iso dates before 1970;
-    (bso#15947).
-  * Fix winbind cache consistency; (bso#15963).
-  * vfs_recycle does not update mtime; (bso#15940).
-  * Assert failed: (dirfd != -1) || (smb_fname->base_name[0] ==
-    '/') in vfswrap_openat; (bso#15897).
-  * ctdb can crash with inconsistent cluster lock configuration;
-    (bso#15950).
-  * samba-bgqd: rework man page; (bso#15809).
-  * samba-bgqd can't find [printers] share; (bso#15936); (bsc#1254586).
-  * Winbind can hang forever in gssapi if there are network
-    issues; (bso#15955).
-  * libldb requires linking libreplace on Linux; (bso#15961).
-  * Crash in ctdbd on failed updateip; (bso#15935).
-
--------------------------------------------------------------------
-Wed Jan  7 10:47:56 UTC 2026 - Samuel Cabrero <scabrero@suse.de>
-
-- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
-  (bso#15790); (bsc#1249058).
-
 -------------------------------------------------------------------
 Thu Dec 18 11:00:46 UTC 2025 - Noel Power <nopower@suse.com>
 
@@ -44,6 +10,82 @@ Fri Dec 17 09:32:26 UTC 2025 - Noel Power <nopower@suse.com>
 -  Fix Samba printers reporting invalid sid during print jobs;
   (bsc#1234210); (bsc#1254926); (bso#15792).
 
+-------------------------------------------------------------------
+Fri Dec 12 15:42:05 UTC 2025 - Noel Power <nopower@suse.com>
+
+- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
+  (bso#15790); (bsc#1249058).
+
+-------------------------------------------------------------------
+Tue Dec  9 11:18:45 UTC 2025 - Noel Power <nopower@suse.com>
+
+- Update to 4.23.4
+  * Samba 4.22 breaks Time Machine; (bso#15926).
+  * mdssvc doesn't support $time.iso dates before 1970;
+    (bso#15947).
+  * Fix winbind cache consistency; (bso#15963).
+  * Assert failed: (dirfd != -1) || (smb_fname->base_name[0] ==
+    '/') in vfswrap_openat; (bso#15897).
+  * ctdb can crash with inconsistent cluster lock configuration;
+    (bso#15950).
+  * samba-bgqd: rework man page; (bso#15809).
+  * samba-bgqd can't find [printers] share; (bso#15936).
+  * Winbind can hang forever in gssapi if there are network
+    issues; (bso#15955).
+  * libldb requires linking libreplace on Linux; (bso#15961).
+
+- Update to 4.23.3
+  * Spotlight search restriction for shares incomplete and
+    default search searches in too many attributes; (bso#15927).
+  * Searching for numbers doesn't work with Spotlight;
+    (bso#15930).
+  * rpcd_mdssvc may crash because name mangling is not
+    initialized; (bso#15931).
+  * Only increment lease epoch if a lease was granted;
+    (bso#15933).
+  * vfs_recycle does not update mtime; (bso#15940).
+  * samba-log-parser fails with UnicodeDecodeError: 'utf-8' codec
+    can't decode byte; (bso#15943).
+  * Crash in ctdbd on failed updateip; (bso#15935).
+
+- Update to 4.23.2
+  * CVE-2025-10230: Command injection via WINS server hook
+    script (bso#15903); (bsc#1251280).
+  * CVE-2025-9640: uninitialized memory disclosure via
+    vfs_streams_xattr; (bso#15885); (bsc#1251279).
+
+- Update to 4.23.1
+  * Incomplete bind configuration causes DLZ plugin to crash;
+    (bso#15920).
+  * winbind can crash at startup; (bso#15914).
+  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
+    for fsync_send; (bso#15919).
+  * CTDB does not support PCP 7.0.0; (bso#15904).
+  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
+    (bso#15921).
+
+- Update to 4.23.0
+  * samba.tests.safe_tarfile fails on Python 3.13 with additional
+    security fixes for tarfile support; (bso#15911).
+  * samba-4.21 fails to join AD when multiple DCs are returned;
+    (bso#15905).
+  * Uninitialized read leads to hanging rpcd_spoolss;
+    (bso#15908).
+  * Stack buffer overflow in samba3.smb2.dirlease.fileserver;
+    (bso#15907).
+  * Regression in gssproxy support in 4.23.rc1+; (bso#15902).
+  * 'net ads group' failed to list domain groups; (bso#15900).
+  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
+  * Self-signed certificates don't have X509v3 Subject
+    Alternative Name for DNS; (bso#15899).
+  * Improve handling of principals and realms in client tools;
+    (bso#15893).
+  * libquic build fixes; (bso#15896).
+  * getpwuid does not shift to new DC when current DC is down;
+    (bso#15844).
+  * Windows security hardening locks out schannel'ed netlogon dc
+    calls like netr_DsRGetDCName; (bso#15876).
+
 -------------------------------------------------------------------
 Fri Oct 31 09:44:48 UTC 2025 - Noel Power <noel.power@suse.com>
 

samba.spec

@@ -39,8 +39,8 @@
 %endif
 
 %define talloc_version 2.4.3
-%define tevent_version 0.16.2
-%define tdb_version    1.4.13
+%define tevent_version 0.17.1
+%define tdb_version    1.4.14
 
 # This table represents the possible combinations of build macros.
 # They are defined only if not already defined in the build service
@@ -137,6 +137,7 @@ BuildRequires:  libcephfs-devel
 BuildRequires:  librados-devel
 %endif
 BuildRequires:  libgnutls-devel >= 3.4.7
+BuildRequires:  libngtcp2_crypto_gnutls-devel >= 1.12.0
 %if %{with_dc}
 BuildRequires:  pkgconfig(gpgme)
 BuildRequires:  libjansson-devel
@@ -168,7 +169,7 @@ BuildRequires:  liburing-devel
 %endif
 BuildRequires:  sysuser-tools
 
-Version:        4.22.7+git.460.b680c782b85
+Version:        4.23.4+git.450.b6cb3398cd0
 Release:        0
 URL:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}
@@ -255,6 +256,8 @@ Samba as part of SUSE Linux Enterprise or openSUSE products, links to
 binary packages of the most current Samba version, and a bug reporting
 how to.
 
+%lang_package -n samba-client
+
 %package devel
 Summary:        Development files shared by Samba subpackages
 License:        GPL-3.0-or-later
@@ -485,6 +488,8 @@ Requires(postun):/sbin/ldconfig
 %description winbind-libs
 This package contains the libraries required by the Winbind daemon.
 
+%lang_package -n samba-winbind-libs
+
 %package dcerpc
 Summary:	Samba dcerpc service binaries
 License:        GPL-3.0-or-later
@@ -680,7 +685,7 @@ fi
 export CFLAGS="%{optflags} -D_GNU_SOURCE -D_LARGEFILE64_SOURCE -DIDMAP_RID_SUPPORT_TRUSTED_DOMAINS -I/usr/include/tirpc"
 export LDFLAGS="-ltirpc"
 
-bundled_libraries="NONE"
+bundled_libraries=",libquic"
 %if ! 0%{?with_mscat}
 bundled_libraries+=",libtasn1"
 %endif
@@ -702,6 +707,7 @@ CONFIGURE_OPTIONS="\
 	--enable-debug \
 	--with-profiling-data \
 	--private-libraries=${private_libraries} \
+	--pythonarchdir=%{python3_sitearch}
 %if !%{with_lmdb}
 	--without-ldb-lmdb \
 %endif
@@ -802,6 +808,9 @@ rm \
 	%{buildroot}/%{_unitdir}/samba-ad-dc.service
 %endif
 
+%find_lang pam_winbind
+%find_lang net
+
 # CTDB
 install -m 0644 packaging/SuSE/config/sysconfig.ctdb %{buildroot}/%{_fillupdir}
 ln -s service %{buildroot}/%{_sbindir}/rcctdb
@@ -1206,6 +1215,10 @@ exit 0
 %{_fillupdir}/sysconfig.samba
 %{_sysusersdir}/samba.conf
 
+
+%files client-lang -f net.lang
+%defattr(-,root,root)
+
 %files client
 %defattr(-,root,root)
 %dir %{CONFIGDIR}
@@ -1522,7 +1535,8 @@ exit 0
 %{_libdir}/samba/libsamba3-util-private-samba.so
 %{_libdir}/samba/libsamba-modules-private-samba.so
 %{_libdir}/samba/libsamdb-common-private-samba.so
-%{_libdir}/samba/libsmb-transport-private-samba.so
+%{_libdir}/samba/libsamba-security-trusts-private-samba.so
+%{_libdir}/samba/libquic-private-samba.so
 %{_libdir}/samba/libsmbclient-raw-private-samba.so
 %{_libdir}/samba/libsmbd-base-private-samba.so
 %{_libdir}/samba/libsmbd-shim-private-samba.so
@@ -1542,6 +1556,7 @@ exit 0
 %{_libdir}/samba/libmscat-private-samba.so
 %endif
 %if %{with_dc}
+%{_libdir}/samba/service/ft_scanner.so
 %{_libdir}/samba/libdfs-server-ad-private-samba.so
 %endif
 %dir %{_libdir}/samba/pdb
@@ -1618,6 +1633,9 @@ exit 0
 %{_mandir}/man1/ndrdump.1.*
 %{_mandir}/man1/mdsearch.1.*
 
+%files winbind-libs-lang -f pam_winbind.lang
+%defattr(-,root,root)
+
 %files winbind-libs
 %defattr(-,root,root)
 %{_pam_moduledir}/pam_winbind.so
@@ -1919,6 +1937,9 @@ exit 0
 %{_libdir}/samba/ldb/ldap.so
 %{_libdir}/samba/ldb/ildap.so
 %{_libdir}/samba/ldb/ldbsamba_extensions.so
+%if %{with_dc}
+%{_libdir}/samba/ldb/trust_notify.so
+%endif
 
 %if %{with_dc}
 %files ad-dc-libs