samba (2:4.13.14+dfsg-1) [PTS] [DDPO]

COMMITS: VCS has seen 6 commits since the debian/2%4.13.14+dfsg-1 tag

Git: https://salsa.debian.org/samba-team/samba.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Browser: https://salsa.debian.org/samba-team/samba
Last scan: 2022-01-19 00:54:21+00
Next scan: 2022-01-27 17:12:00+00
Merge requests: 4
CI pipeline status: failed

Debian changelog in Git:

samba (2:4.13.14+dfsg-1) unstable; urgency=high

  * New upstream security release in order to address the following defects:
    - CVE-2016-2124: don't fallback to non spnego authentication if we require
      kerberos
    - MS CVE-2020-17049 in Samba: 'Bronze bit' S4U2Proxy Constrained Delegation
      bypass
    - CVE-2020-25717: A user on the domain can become root on domain members
    - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other
      servers
      + Bump build-depends ldb >= 2.2.3
    - CVE-2020-25719: AD DC Username based races when no PAC is given
    - CVE-2020-25721: Kerberos acceptors need easy access to stable AD
      identifiers (eg objectSid)
    - CVE-2020-25722: AD DC UPN vs samAccountName not checked (top-level bug
      for AD DC validation issues)
    - CVE-2021-3738: crash in dsdb stack
    - CVE-2021-23192: dcerpc requests don't check all fragments against the
      first auth_state
      + Update d/samba-libs.install for libdcerpc-pkt-auth.so.0
  * Add patch to fix "allow trusted domains"
  * Bump ldb build-depends to 2.2.3
  * Update d/samba-libs.install

 -- Mathieu Parent <sathieu@debian.org>  Tue, 09 Nov 2021 20:53:03 +0100

This branch is 6 commits ahead of tag debian/2%4.13.14+dfsg-1

Git log:

commit 6f32806da3c9fecdb7f49152396ca13a85d7eb25
Author: Mathieu Parent <math.parent@gmail.com>
Date:   Tue Dec 14 21:15:28 2021 +0100

    Update standards version to 4.5.1, no changes needed.
    
    Changes-By: lintian-brush
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit 0b6b9705b3779edc43bce809b198fa25cab3eb98
Author: Mathieu Parent <math.parent@gmail.com>
Date:   Tue Dec 14 21:15:21 2021 +0100

    Use secure URI in Homepage field.
    
    Changes-By: lintian-brush
    Fixes: lintian: homepage-field-uses-insecure-uri
    See-also: https://lintian.debian.org/tags/homepage-field-uses-insecure-uri.html

commit cb4e07f64a5cc7ba2acb7792342129e8d468906f
Author: Mathieu Parent <math.parent@gmail.com>
Date:   Tue Dec 14 21:10:52 2021 +0100

    Update watch file format version to 4.
    
    Changes-By: lintian-brush
    Fixes: lintian: older-debian-watch-file-standard
    See-also: https://lintian.debian.org/tags/older-debian-watch-file-standard.html

commit 0e3010009d8e2e09d65f5a058701629aa6319e31
Author: Mathieu Parent <math.parent@gmail.com>
Date:   Tue Dec 14 21:09:43 2021 +0100

    Set upstream metadata fields: Repository.
    
    Changes-By: lintian-brush
    Fixes: lintian: upstream-metadata-file-is-missing
    See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html

commit c6cf09fa4ffcdd49ba2e306ca62b922593fa5bbb
Author: Mathieu Parent <math.parent@gmail.com>
Date:   Tue Dec 14 21:09:36 2021 +0100

    Remove 1 obsolete maintscript entry.
    
    Changes-By: lintian-brush

commit a4994245ccbfc4fbf8fb3fdcb0e90f60d1b25653
Author: Mathieu Parent <math.parent@gmail.com>
Date:   Tue Dec 14 10:29:45 2021 +0100

    Remove -Wl,--as-needed in LDFLAGS