import samba-4.14.5-2.el8

.gitignore

@@ -1,2 +1,2 @@
-SOURCES/gpgkey-52FBC0B86D954B0843324CDC6F33915B6568B7EA.gpg
+SOURCES/samba-4.14.5.tar.xz
-SOURCES/samba-4.13.3.tar.xz
+SOURCES/samba-pubkey_AA99442FB680B620.gpg

.samba.metadata

@@ -1,2 +1,2 @@
-6bf33724c18b74427453f0e3fc0180f84ff60818 SOURCES/gpgkey-52FBC0B86D954B0843324CDC6F33915B6568B7EA.gpg
+46925b3ed9f63b1b936f2271253fdccccbf1575f SOURCES/samba-4.14.5.tar.xz
-6a4902df7eddc338c29a0ddf9e6086afdc73bd56 SOURCES/samba-4.13.3.tar.xz
+971f563c447eda8d144d6c9e743cd0f0488c0d9e SOURCES/samba-pubkey_AA99442FB680B620.gpg

SOURCES/CVE-2021-20254-samba-4.13.patch

@@ -1,235 +0,0 @@
-From c5f31dbc3b8b86335769b9c84a0d09765cc33259 Mon Sep 17 00:00:00 2001
-From: Volker Lendecke <vl@samba.org>
-Date: Sat, 20 Feb 2021 15:50:12 +0100
-Subject: [PATCH] CVE-2021-20254 passdb: Simplify sids_to_unixids()
-
-Best reviewed with "git show -b", there's a "continue" statement that
-changes subsequent indentation.
-
-Decouple lookup status of ids from ID_TYPE_NOT_SPECIFIED
-
-Bug: https://bugzilla.samba.org/show_bug.cgi?id=14571
-
-Signed-off-by: Volker Lendecke <vl@samba.org>
-Reviewed-by: Jeremy Allison <jra@samba.org>
-
-(backported from patch from master)
-[backport by npower@samba.org as master commit
- 493f5d6b078e0b0f80d1ef25043e2834cb4fcb87 and
- 58e9b62222ad62c81cdf11d704859a227cb2902b creates conflicts
- due to rename of WBC_ID_TYPE_* -> ID_TYPE_*]
----
- source3/passdb/lookup_sid.c | 123 +++++++++++++++++++++++++++++-------
- 1 file changed, 101 insertions(+), 22 deletions(-)
-
-diff --git a/source3/passdb/lookup_sid.c b/source3/passdb/lookup_sid.c
-index 82c47b3145b..4b3aa7e435d 100644
---- a/source3/passdb/lookup_sid.c
-+++ b/source3/passdb/lookup_sid.c
-@@ -29,6 +29,7 @@
- #include "../libcli/security/security.h"
- #include "lib/winbind_util.h"
- #include "../librpc/gen_ndr/idmap.h"
-+#include "lib/util/bitmap.h"
- 
- static bool lookup_unix_user_name(const char *name, struct dom_sid *sid)
- {
-@@ -1247,7 +1248,9 @@ bool sids_to_unixids(const struct dom_sid *sids, uint32_t num_sids,
- {
- 	struct wbcDomainSid *wbc_sids = NULL;
- 	struct wbcUnixId *wbc_ids = NULL;
-+	struct bitmap *found = NULL;
- 	uint32_t i, num_not_cached;
-+	uint32_t wbc_ids_size = 0;
- 	wbcErr err;
- 	bool ret = false;
- 
-@@ -1255,6 +1258,20 @@ bool sids_to_unixids(const struct dom_sid *sids, uint32_t num_sids,
- 	if (wbc_sids == NULL) {
- 		return false;
- 	}
-+	found = bitmap_talloc(wbc_sids, num_sids);
-+	if (found == NULL) {
-+		goto fail;
-+	}
-+
-+	/*
-+	 * We go through the requested SID array three times.
-+	 * First time to look for global_sid_Unix_Users
-+	 * and global_sid_Unix_Groups SIDS, and to look
-+	 * for mappings cached in the idmap_cache.
-+	 *
-+	 * Use bitmap_set() to mark an ids[] array entry as
-+	 * being mapped.
-+	 */
- 
- 	num_not_cached = 0;
- 
-@@ -1266,17 +1283,20 @@ bool sids_to_unixids(const struct dom_sid *sids, uint32_t num_sids,
- 				       &sids[i], &rid)) {
- 			ids[i].type = ID_TYPE_UID;
- 			ids[i].id = rid;
-+			bitmap_set(found, i);
- 			continue;
- 		}
- 		if (sid_peek_check_rid(&global_sid_Unix_Groups,
- 				       &sids[i], &rid)) {
- 			ids[i].type = ID_TYPE_GID;
- 			ids[i].id = rid;
-+			bitmap_set(found, i);
- 			continue;
- 		}
- 		if (idmap_cache_find_sid2unixid(&sids[i], &ids[i], &expired)
- 		    && !expired)
- 		{
-+			bitmap_set(found, i);
- 			continue;
- 		}
- 		ids[i].type = ID_TYPE_NOT_SPECIFIED;
-@@ -1287,62 +1307,121 @@ bool sids_to_unixids(const struct dom_sid *sids, uint32_t num_sids,
- 	if (num_not_cached == 0) {
- 		goto done;
- 	}
--	wbc_ids = talloc_array(talloc_tos(), struct wbcUnixId, num_not_cached);
-+
-+	/*
-+	 * For the ones that we couldn't map in the loop above, query winbindd
-+	 * via wbcSidsToUnixIds().
-+	 */
-+
-+	wbc_ids_size = num_not_cached;
-+	wbc_ids = talloc_array(talloc_tos(), struct wbcUnixId, wbc_ids_size);
- 	if (wbc_ids == NULL) {
- 		goto fail;
- 	}
--	for (i=0; i<num_not_cached; i++) {
-+	for (i=0; i<wbc_ids_size; i++) {
- 		wbc_ids[i].type = WBC_ID_TYPE_NOT_SPECIFIED;
-+		wbc_ids[i].id.gid = (uint32_t)-1;
- 	}
--	err = wbcSidsToUnixIds(wbc_sids, num_not_cached, wbc_ids);
-+	err = wbcSidsToUnixIds(wbc_sids, wbc_ids_size, wbc_ids);
- 	if (!WBC_ERROR_IS_OK(err)) {
- 		DEBUG(10, ("wbcSidsToUnixIds returned %s\n",
- 			   wbcErrorString(err)));
- 	}
- 
-+	/*
-+	 * Second time through the SID array, replace
-+	 * the ids[] entries that wbcSidsToUnixIds() was able to
-+	 * map.
-+	 *
-+	 * Use bitmap_set() to mark an ids[] array entry as
-+	 * being mapped.
-+	 */
-+
- 	num_not_cached = 0;
- 
- 	for (i=0; i<num_sids; i++) {
--		if (ids[i].type == ID_TYPE_NOT_SPECIFIED) {
--			switch (wbc_ids[num_not_cached].type) {
--			case WBC_ID_TYPE_UID:
--				ids[i].type = ID_TYPE_UID;
--				ids[i].id = wbc_ids[num_not_cached].id.uid;
--				break;
--			case WBC_ID_TYPE_GID:
--				ids[i].type = ID_TYPE_GID;
--				ids[i].id = wbc_ids[num_not_cached].id.gid;
--				break;
--			default:
--				/* The types match, and wbcUnixId -> id is a union anyway */
--				ids[i].type = (enum id_type)wbc_ids[num_not_cached].type;
--				ids[i].id = wbc_ids[num_not_cached].id.gid;
--				break;
--			}
--			num_not_cached += 1;
-+		if (bitmap_query(found, i)) {
-+			continue;
- 		}
-+
-+		SMB_ASSERT(num_not_cached < wbc_ids_size);
-+
-+		switch (wbc_ids[num_not_cached].type) {
-+		case WBC_ID_TYPE_UID:
-+			ids[i].type = ID_TYPE_UID;
-+			ids[i].id = wbc_ids[num_not_cached].id.uid;
-+			bitmap_set(found, i);
-+			break;
-+		case WBC_ID_TYPE_GID:
-+			ids[i].type = ID_TYPE_GID;
-+			ids[i].id = wbc_ids[num_not_cached].id.gid;
-+			bitmap_set(found, i);
-+			break;
-+		case WBC_ID_TYPE_BOTH:
-+			ids[i].type = ID_TYPE_BOTH;
-+			ids[i].id = wbc_ids[num_not_cached].id.uid;
-+			bitmap_set(found, i);
-+			break;
-+		case WBC_ID_TYPE_NOT_SPECIFIED:
-+			/*
-+			 * wbcSidsToUnixIds() wasn't able to map this
-+			 * so we still need to check legacy_sid_to_XXX()
-+			 * below. Don't mark the bitmap entry
-+			 * as being found so the final loop knows
-+			 * to try and map this entry.
-+			 */
-+			ids[i].type = ID_TYPE_NOT_SPECIFIED;
-+			ids[i].id = (uint32_t)-1;
-+			break;
-+		default:
-+			/*
-+			 * A successful return from wbcSidsToUnixIds()
-+			 * cannot return anything other than the values
-+			 * checked for above. Ensure this is so.
-+			 */
-+			smb_panic(__location__);
-+			break;
-+		}
-+		num_not_cached += 1;
- 	}
- 
-+	/*
-+	 * Third and final time through the SID array,
-+	 * try legacy_sid_to_gid()/legacy_sid_to_uid()
-+	 * for entries we haven't already been able to
-+	 * map.
-+	 *
-+	 * Use bitmap_set() to mark an ids[] array entry as
-+	 * being mapped.
-+	 */
-+
- 	for (i=0; i<num_sids; i++) {
--		if (ids[i].type != ID_TYPE_NOT_SPECIFIED) {
-+		if (bitmap_query(found, i)) {
- 			continue;
- 		}
- 		if (legacy_sid_to_gid(&sids[i], &ids[i].id)) {
- 			ids[i].type = ID_TYPE_GID;
-+			bitmap_set(found, i);
- 			continue;
- 		}
- 		if (legacy_sid_to_uid(&sids[i], &ids[i].id)) {
- 			ids[i].type = ID_TYPE_UID;
-+			bitmap_set(found, i);
- 			continue;
- 		}
- 	}
- done:
-+	/*
-+	 * Pass through the return array for consistency.
-+	 * Any ids[].id mapped to (uint32_t)-1 must be returned
-+	 * as ID_TYPE_NOT_SPECIFIED.
-+	 */
- 	for (i=0; i<num_sids; i++) {
- 		switch(ids[i].type) {
- 		case WBC_ID_TYPE_GID:
- 		case WBC_ID_TYPE_UID:
- 		case WBC_ID_TYPE_BOTH:
--			if (ids[i].id == -1) {
-+			if (ids[i].id == (uint32_t)-1) {
- 				ids[i].type = ID_TYPE_NOT_SPECIFIED;
- 			}
- 			break;
--- 
-2.25.1
-

SOURCES/samba-4.13.3.tar.asc

@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iHMEABECADMWIQRS+8C4bZVLCEMyTNxvM5FbZWi36gUCX9hrxBUcc2FtYmEtYnVn
-c0BzYW1iYS5vcmcACgkQbzORW2Vot+rknACeNaNLylUGp3BdSHXLNdjG4PeCjLwA
-nA8WUntBNLH1pDewFd9PGRvKTv8W
-=Kn7L
------END PGP SIGNATURE-----

SOURCES/samba-4.14-raise-dfs-enoent-debug-level.patch

@@ -0,0 +1,49 @@
+From 4b192aaf503ea7f5eba27b6e43edcfe54ac6c5a6 Mon Sep 17 00:00:00 2001
+From: Andreas Schneider <asn@samba.org>
+Date: Wed, 26 May 2021 15:04:08 +0200
+Subject: [PATCH] s3:modules: Reduce debug level if file doesn't exists on dfs
+ share
+
+There is software out there trying to open desktop.ini in every
+directory. Avoid spamming the logs with error messages.
+
+Signed-off-by: Andreas Schneider <asn@samba.org>
+Reviewed-by: Jeremy Allison <jra@samba.org>
+
+Autobuild-User(master): Jeremy Allison <jra@samba.org>
+Autobuild-Date(master): Fri Jun 18 18:14:11 UTC 2021 on sn-devel-184
+
+(cherry picked from commit 4079efae76718a84a4cf24b6613cdc53cdb2dd39)
+---
+ source3/modules/vfs_default.c | 15 +++++++++++----
+ 1 file changed, 11 insertions(+), 4 deletions(-)
+
+diff --git a/source3/modules/vfs_default.c b/source3/modules/vfs_default.c
+index 8d592bbad64..ea036b24ddf 100644
+--- a/source3/modules/vfs_default.c
++++ b/source3/modules/vfs_default.c
+@@ -476,10 +476,17 @@ static NTSTATUS vfswrap_read_dfs_pathat(struct vfs_handle_struct *handle,
+ 			status = NT_STATUS_OBJECT_TYPE_MISMATCH;
+ 		} else {
+ 			status = map_nt_error_from_unix(errno);
+-			DBG_ERR("Error reading "
+-				"msdfs link %s: %s\n",
+-				smb_fname->base_name,
+-				strerror(errno));
++			if (errno == ENOENT) {
++				DBG_NOTICE("Error reading "
++					 "msdfs link %s: %s\n",
++					 smb_fname->base_name,
++					 strerror(errno));
++			} else {
++				DBG_ERR("Error reading "
++					"msdfs link %s: %s\n",
++					smb_fname->base_name,
++					strerror(errno));
++			}
+ 		}
+                 goto err;
+         }
+-- 
+2.31.1
+

SOURCES/samba-4.14.5.tar.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=i6jp
+-----END PGP SIGNATURE-----

SPECS/samba.spec

@@ -58,6 +58,11 @@
 %endif
 
 # Build vfs_gluster module by default on 64bit Fedora
+%global is_rhgs 0
+%if "%{dist}" == ".el8rhgs" || "%{dist}" == ".el9rhgs"
+%global is_rhgs 1
+%endif
+
 %if 0%{?fedora}
 
 %ifarch aarch64 ppc64le s390x x86_64
@@ -69,18 +74,25 @@
 
 #else rhel
 %else
-# Enable on rhel x86_64
+
+%if 0%{?is_rhgs}
+# Enable on rhgs x86_64
 %ifarch x86_64
 %bcond_without vfs_glusterfs
 %else
 %bcond_with vfs_glusterfs
 #endifarch
 %endif
+%else
+%bcond_with vfs_glusterfs
+#endif is_rhgs
+%endif
+
 #endif fedora
 %endif
 
 # Build vfs_io_uring module by default on 64bit Fedora
-%if 0%{?fedora}
+%if 0%{?fedora} || 0%{?rhel} >= 8
 
 %ifarch aarch64 ppc64le s390x x86_64
 %bcond_without vfs_io_uring
@@ -91,24 +103,24 @@
 
 %else
 %bcond_with vfs_io_uring
-#endif fedora
+#endif fedora || rhel >= 8
 %endif
 
 %define samba_requires_eq()  %(LC_ALL="C" echo '%*' | xargs -r rpm -q --qf 'Requires: %%{name} = %%{epoch}:%%{version}\\n' | sed -e 's/ (none):/ /' -e 's/ 0:/ /' | grep -v "is not")
 
-%global main_release 5
+%global baserelease 2
 
-%global samba_version 4.13.3
+%global samba_version 4.14.5
-%global talloc_version 2.3.1
+%global talloc_version 2.3.2
 %global tdb_version 1.4.3
 %global tevent_version 0.10.2
-%global ldb_version 2.2.0
+%global ldb_version 2.3.0
 # This should be rc1 or nil
 %global pre_release %nil
 
-%global samba_release %{main_release}%{?dist}
+%global samba_release %{baserelease}
 %if "x%{?pre_release}" != "x"
-%global samba_release 0.%{main_release}.%{pre_release}%{?dist}
+%global samba_release 0.%{baserelease}.%{pre_release}
 %endif
 
 # This is a network daemon, do a hardened build
@@ -133,7 +145,7 @@
 
 Name:           samba
 Version:        %{samba_version}
-Release:        %{samba_release}
+Release:        %{samba_release}%{?dist}
 
 %if 0%{?rhel}
 Epoch:          0
@@ -154,7 +166,7 @@ URL:            https://www.samba.org
 # This is a xz recompressed file of https://ftp.samba.org/pub/samba/samba-%%{version}%%{pre_release}.tar.gz
 Source0:        https://ftp.samba.org/pub/samba/samba-%{version}%{pre_release}.tar.gz#/samba-%{version}%{pre_release}.tar.xz
 Source1:        https://ftp.samba.org/pub/samba/samba-%{version}%{pre_release}.tar.asc
-Source2:        gpgkey-52FBC0B86D954B0843324CDC6F33915B6568B7EA.gpg
+Source2:        samba-pubkey_AA99442FB680B620.gpg
 
 # Red Hat specific replacement-files
 Source10:       samba.logrotate
@@ -165,12 +177,7 @@ Source14:       samba.pamd
 
 Source201:      README.downgrade
 
-# Backport bug fixes to https://gitlab.com/samba-redhat/samba/-/tree/v4-13-redhat
+Patch0:         samba-4.14-raise-dfs-enoent-debug-level.patch
-# This will give us CI and makes it easy to generate patchsets.
-#
-# Generate the patchset using: git format-patch -l1 --stdout -N > samba-4.13-redhat.patch
-Patch0:        samba-4.13-redhat.patch
-Patch1:        CVE-2021-20254-samba-4.13.patch
 
 Requires(pre): /usr/sbin/groupadd
 Requires(post): systemd
@@ -208,6 +215,9 @@ Obsoletes: samba-swat < %{samba_depver}
 Provides: samba4-swat = %{samba_depver}
 Obsoletes: samba4-swat < %{samba_depver}
 
+Provides: bundled(libreplace)
+
+BuildRequires: make
 BuildRequires: gcc
 BuildRequires: avahi-devel
 BuildRequires: bison
@@ -229,7 +239,6 @@ BuildRequires: libattr-devel
 BuildRequires: libcap-devel
 BuildRequires: libicu-devel
 BuildRequires: libcmocka-devel
-BuildRequires: libnsl2-devel
 BuildRequires: libtirpc-devel
 BuildRequires: libuuid-devel
 BuildRequires: libxslt
@@ -247,6 +256,7 @@ BuildRequires: perl(Archive::Tar)
 BuildRequires: perl(Test::More)
 BuildRequires: popt-devel
 BuildRequires: python3-devel
+BuildRequires: python3-dns
 BuildRequires: python3-setuptools
 BuildRequires: quota-devel
 BuildRequires: readline-devel
@@ -279,6 +289,7 @@ BuildRequires: liburing-devel >= 0.4
 # Add python3-iso8601 to avoid that the
 # version in Samba is being packaged
 BuildRequires: python3-iso8601
+BuildRequires: python3-pyasn1
 
 BuildRequires: bind
 BuildRequires: krb5-server >= %{required_mit_krb5}
@@ -301,6 +312,7 @@ BuildRequires: libtdb-devel >= %{tdb_version}
 BuildRequires: python3-tdb >= %{tdb_version}
 
 BuildRequires: libldb-devel >= %{ldb_version}
+BuildRequires: python3-ldb >= %{ldb_version}
 BuildRequires: python3-ldb-devel >= %{ldb_version}
 %else
 BuildRequires: lmdb-devel
@@ -313,6 +325,7 @@ BuildRequires: krb5-server >= %{required_mit_krb5}
 BuildRequires: ldb-tools
 BuildRequires: python3-gpg
 BuildRequires: python3-markdown
+BuildRequires: python3-setproctitle
 BuildRequires: tdb-tools
 %endif
 
@@ -345,6 +358,8 @@ Obsoletes: samba4-client < %{samba_depver}
 Requires(post): %{_sbindir}/update-alternatives
 Requires(postun): %{_sbindir}/update-alternatives
 
+Provides: bundled(libreplace)
+
 %description client
 The %{name}-client package provides some SMB/CIFS clients to complement
 the built-in SMB/CIFS filesystem in Linux. These clients allow access
@@ -376,12 +391,6 @@ Recommends:     logrotate
 Provides: samba4-common = %{samba_depver}
 Obsoletes: samba4-common < %{samba_depver}
 
-%if %{with dc} || %{with testsuite}
-Obsoletes: samba-dc < %{samba_depver}
-Obsoletes: samba-dc-libs < %{samba_depver}
-Obsoletes: samba-dc-bind-dlz < %{samba_depver}
-%endif
-
 %description common
 samba-common provides files necessary for both the server and client
 packages of Samba.
@@ -396,6 +405,31 @@ Requires: %{name}-client-libs = %{samba_depver}
 Requires: libwbclient = %{samba_depver}
 %endif
 
+Provides: bundled(libreplace)
+
+%if %{without dc} && %{without testsuite}
+Obsoletes: samba-dc < %{samba_depver}
+Obsoletes: samba-dc-libs < %{samba_depver}
+Obsoletes: samba-dc-bind-dlz < %{samba_depver}
+%endif
+
+# ctdb-tests package has been dropped if we do not build the testsuite
+%if %{with clustering}
+%if %{without testsuite}
+Obsoletes: ctdb-tests < %{samba_depver}
+Obsoletes: ctdb-tests-debuginfo < %{samba_depver}
+# endif without testsuite
+%endif
+# endif with clustering
+%endif
+
+# If only build glusterfs for RHGS and Fedora, so obsolete it on other version
+# of the distro
+%if %{without vfs_glusterfs}
+Obsoletes: samba-vfs-glusterfs < %{samba_depver}
+# endif without vfs_glusterfs
+%endif
+
 %description common-libs
 The samba-common-libs package contains internal libraries needed by the
 SMB/CIFS clients.
@@ -410,6 +444,8 @@ Requires: samba-libs = %{samba_depver}
 Requires: libwbclient = %{samba_depver}
 %endif
 
+Provides: bundled(libreplace)
+
 %description common-tools
 The samba-common-tools package contains tools for Samba servers and
 SMB/CIFS clients.
@@ -423,15 +459,18 @@ Requires: %{name}-libs = %{samba_depver}
 Requires: %{name}-dc-provision = %{samba_depver}
 Requires: %{name}-dc-libs = %{samba_depver}
 Requires: %{name}-winbind = %{samba_depver}
+
 %if %{with libwbclient}
 Requires(post): libwbclient = %{samba_depver}
 Requires: libwbclient = %{samba_depver}
 %endif
+
 # samba-tool needs tdbbackup
 Requires: tdb-tools
 # samba-tool needs mdb_copy
 Requires: lmdb
 Requires: ldb-tools
+Requires: python3-setproctitle
 # Force using libldb version to be the same as build version
 # Otherwise LDB modules will not be loaded and samba-tool will fail
 # See bug 1507420
@@ -444,6 +483,8 @@ Requires: krb5-server >= %{required_mit_krb5}
 Provides: samba4-dc = %{samba_depver}
 Obsoletes: samba4-dc < %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description dc
 The samba-dc package provides AD Domain Controller functionality
 
@@ -464,6 +505,8 @@ Requires: %{name}-libs = %{samba_depver}
 Provides: samba4-dc-libs = %{samba_depver}
 Obsoletes: samba4-dc-libs < %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description dc-libs
 The %{name}-dc-libs package contains the libraries needed by the DC to
 link against the SMB, RPC and other protocols.
@@ -476,6 +519,8 @@ Requires: %{name}-dc-libs = %{samba_depver}
 Requires: %{name}-dc = %{samba_depver}
 Requires: bind
 
+Provides: bundled(libreplace)
+
 %description dc-bind-dlz
 The %{name}-dc-bind-dlz package contains the libraries for bind to manage all
 name server related details of Samba AD.
@@ -503,11 +548,27 @@ Summary: Samba VFS module for Ceph distributed storage system
 Requires: %{name} = %{samba_depver}
 Requires: %{name}-libs = %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description vfs-cephfs
 Samba VFS module for Ceph distributed storage system integration.
 #endif with vfs_cephfs
 %endif
 
+### IOURING
+%if %{with vfs_io_uring}
+%package vfs-iouring
+Summary: Samba VFS module for io_uring
+Requires: %{name} = %{samba_depver}
+Requires: %{name}-libs = %{samba_depver}
+
+Provides: bundled(libreplace)
+
+%description vfs-iouring
+Samba VFS module for io_uring instance integration.
+#endif with vfs_io_uring
+%endif
+
 ### GLUSTER
 %if %{with vfs_glusterfs}
 %package vfs-glusterfs
@@ -525,6 +586,8 @@ Requires: libwbclient = %{samba_depver}
 Obsoletes: samba-glusterfs < %{samba_depver}
 Provides: samba-glusterfs = %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description vfs-glusterfs
 Samba VFS module for GlusterFS integration.
 %endif
@@ -556,6 +619,8 @@ Requires: libwbclient = %{samba_depver}
 Provides: samba4-libs = %{samba_depver}
 Obsoletes: samba4-libs < %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description libs
 The %{name}-libs package contains the libraries needed by programs that link
 against the SMB, RPC and other protocols provided by the Samba suite.
@@ -628,6 +693,8 @@ Requires: libsmbclient = %{samba_depver}
 Requires: libwbclient = %{samba_depver}
 %endif
 
+Provides: bundled(libreplace)
+
 %description -n python3-%{name}
 The python3-%{name} package contains the Python 3 libraries needed by programs
 that use SMB, RPC and other Samba provided protocols in Python 3 programs.
@@ -702,6 +769,8 @@ Requires: perl(Archive::Tar)
 Provides: samba4-test = %{samba_depver}
 Obsoletes: samba4-test < %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description test
 %{name}-test provides testing tools for both the server and client
 packages of Samba.
@@ -719,6 +788,8 @@ Requires: libwbclient = %{samba_depver}
 Provides: %{name}-test-devel = %{samba_depver}
 Obsoletes: %{name}-test-devel < %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description test-libs
 %{name}-test-libs provides libraries required by the testing tools.
 
@@ -732,6 +803,7 @@ Requires: %{name}-common-tools = %{samba_depver}
 Requires: %{name}-client-libs = %{samba_depver}
 Requires: %{name}-libs = %{samba_depver}
 Requires: %{name}-winbind-modules = %{samba_depver}
+
 %if %{with libwbclient}
 Requires(post): libwbclient = %{samba_depver}
 Requires: libwbclient = %{samba_depver}
@@ -743,6 +815,8 @@ Obsoletes: samba4-winbind < %{samba_depver}
 # Old NetworkManager expects the dispatcher scripts in a different place
 Conflicts: NetworkManager < 1.20
 
+Provides: bundled(libreplace)
+
 %description winbind
 The samba-winbind package provides the winbind NSS library, and some client
 tools.  Winbind enables Linux to be a full member in Windows domains and to use
@@ -763,6 +837,8 @@ Requires: libwbclient = %{samba_depver}
 Provides: samba4-winbind-clients = %{samba_depver}
 Obsoletes: samba4-winbind-clients < %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description winbind-clients
 The samba-winbind-clients package provides the wbinfo and ntlm_auth
 tool.
@@ -790,6 +866,8 @@ Requires(post): %{_sbindir}/update-alternatives
 Requires(postun): %{_sbindir}/update-alternatives
 Requires(preun): %{_sbindir}/update-alternatives
 
+Provides: bundled(libreplace)
+
 %description winbind-krb5-locator
 The winbind krb5 locator is a plugin for the system kerberos library to allow
 the local kerberos library to use the same KDC as samba and winbind use
@@ -804,6 +882,8 @@ Requires: libwbclient = %{samba_depver}
 %endif
 Requires: pam
 
+Provides: bundled(libreplace)
+
 %description winbind-modules
 The samba-winbind-modules package provides the NSS library and a PAM module
 necessary to communicate to the Winbind Daemon
@@ -815,6 +895,8 @@ Summary: Samba Winexe Windows Binary
 License: GPLv3
 Requires: %{name}-client-libs = %{samba_depver}
 
+Provides: bundled(libreplace)
+
 %description winexe
 Winexe is a Remote Windows®-command executor
 %endif
@@ -848,12 +930,15 @@ Requires(post): systemd-units
 Requires(preun): systemd-units
 Requires(postun): systemd-units
 
+Provides: bundled(libreplace)
+
 %description -n ctdb
 CTDB is a cluster implementation of the TDB database used by Samba and other
 projects to store temporary data. If an application is already using TDB for
 temporary data it is very easy to convert that application to be cluster aware
 and use CTDB instead.
 
+%if %{with testsuite}
 ### CTDB-TEST
 %package -n ctdb-tests
 Summary: CTDB clustered database test suite
@@ -873,6 +958,9 @@ CTDB is a cluster implementation of the TDB database used by Samba and other
 projects to store temporary data. If an application is already using TDB for
 temporary data it is very easy to convert that application to be cluster aware
 and use CTDB instead.
+
+#endif with testsuite
+%endif
 #endif with clustering
 %endif
 
@@ -978,11 +1066,11 @@ export LDFLAGS="%{__global_ldflags} -fuse-ld=gold"
 pushd pidl
 %__perl Makefile.PL PREFIX=%{_prefix}
 
-%{__make} %{?_smp_mflags}
+%make_build
 popd
 
 %install
-%{__make} DESTDIR=%{?buildroot} install
+%make_install
 
 install -d -m 0755 %{buildroot}/usr/{sbin,bin}
 install -d -m 0755 %{buildroot}%{_libdir}/security
@@ -994,7 +1082,6 @@ install -d -m 0755 %{buildroot}/var/lib/samba/scripts
 install -d -m 0755 %{buildroot}/var/lib/samba/sysvol
 install -d -m 0755 %{buildroot}/var/lib/samba/winbindd_privileged
 install -d -m 0755 %{buildroot}/var/log/samba/old
-install -d -m 0755 %{buildroot}/var/spool/samba
 install -d -m 0755 %{buildroot}/run/samba
 install -d -m 0755 %{buildroot}/run/winbindd
 install -d -m 0755 %{buildroot}/%{_libdir}/samba
@@ -1147,6 +1234,16 @@ rm -f %{buildroot}%{_mandir}/man8/vfs_ceph_snapshots.8*
 # the ldconfig-created links be recorded in the RPM.
 /sbin/ldconfig -N -n %{buildroot}%{_libdir}
 
+%if %{without dc} && %{without testsuite}
+for f in samba/libsamba-net-samba4.so \
+         samba/libsamba-python-samba4.so \
+         libsamba-policy.so* \
+         pkgconfig/samba-policy.pc ; do
+    rm -f %{buildroot}%{_libdir}/$f
+done
+#endif without dc
+%endif
+
 %if %{with testsuite}
 rm -f %{buildroot}%{_mandir}/man8/vfs_nfs4acl_xattr.8*
 #endif with testsuite
@@ -1392,9 +1489,6 @@ fi
 %{_libdir}/samba/vfs/full_audit.so
 %{_libdir}/samba/vfs/gpfs.so
 %{_libdir}/samba/vfs/glusterfs_fuse.so
-%if %{with vfs_io_uring}
-%{_libdir}/samba/vfs/io_uring.so
-%endif
 %{_libdir}/samba/vfs/linux_xfs_sgid.so
 %{_libdir}/samba/vfs/media_harmony.so
 %{_libdir}/samba/vfs/offline.so
@@ -1426,7 +1520,6 @@ fi
 
 %{_unitdir}/nmb.service
 %{_unitdir}/smb.service
-%attr(1777,root,root) %dir /var/spool/samba
 %dir %{_sysconfdir}/openldap/schema
 %config %{_sysconfdir}/openldap/schema/samba.schema
 %config(noreplace) %{_sysconfdir}/pam.d/samba
@@ -1453,9 +1546,6 @@ fi
 %{_mandir}/man8/vfs_full_audit.8*
 %{_mandir}/man8/vfs_gpfs.8*
 %{_mandir}/man8/vfs_glusterfs_fuse.8*
-%if %{with vfs_io_uring}
-%{_mandir}/man8/vfs_io_uring.8*
-%endif
 %{_mandir}/man8/vfs_linux_xfs_sgid.8*
 %{_mandir}/man8/vfs_media_harmony.8*
 %{_mandir}/man8/vfs_offline.8*
@@ -1485,7 +1575,7 @@ fi
 %{_bindir}/cifsdd
 %{_bindir}/dbwrap_tool
 %{_bindir}/dumpmscat
-%{_bindir}/findsmb
+%exclude %{_bindir}/findsmb
 %{_bindir}/mvxattr
 %{_bindir}/mdfind
 %{_bindir}/nmblookup
@@ -1514,7 +1604,7 @@ fi
 %{_mandir}/man1/regpatch.1*
 %{_mandir}/man1/regshell.1*
 %{_mandir}/man1/regtree.1*
-%{_mandir}/man1/findsmb.1*
+%exclude %{_mandir}/man1/findsmb.1*
 %{_mandir}/man1/log2pcap.1*
 %{_mandir}/man1/mdfind.1*
 %{_mandir}/man1/mvxattr.1*
@@ -1645,7 +1735,6 @@ fi
 %{_libdir}/samba/libsmb-transport-samba4.so
 %{_libdir}/samba/libsmbclient-raw-samba4.so
 %{_libdir}/samba/libsmbd-base-samba4.so
-%{_libdir}/samba/libsmbd-conn-samba4.so
 %{_libdir}/samba/libsmbd-shim-samba4.so
 %{_libdir}/samba/libsmbldaphelper-samba4.so
 %{_libdir}/samba/libsys-rw-samba4.so
@@ -1954,7 +2043,6 @@ fi
 %{_includedir}/samba-4.0/util/idtree.h
 %{_includedir}/samba-4.0/util/idtree_random.h
 %{_includedir}/samba-4.0/util/signal.h
-%{_includedir}/samba-4.0/util/string_wrappers.h
 %{_includedir}/samba-4.0/util/substitute.h
 %{_includedir}/samba-4.0/util/tevent_ntstatus.h
 %{_includedir}/samba-4.0/util/tevent_unix.h
@@ -2017,6 +2105,13 @@ fi
 %{_mandir}/man8/vfs_ceph_snapshots.8*
 %endif
 
+### VFS-IOURING
+%if %{with vfs_io_uring}
+%files vfs-iouring
+%{_libdir}/samba/vfs/io_uring.so
+%{_mandir}/man8/vfs_io_uring.8*
+%endif
+
 ### VFS-GLUSTERFS
 %if %{with vfs_glusterfs}
 %files vfs-glusterfs
@@ -2124,7 +2219,6 @@ fi
 %{python3_sitearch}/samba/__pycache__/auth_util.*.pyc
 %{python3_sitearch}/samba/__pycache__/colour.*.pyc
 %{python3_sitearch}/samba/__pycache__/common.*.pyc
-%{python3_sitearch}/samba/__pycache__/compat.*.pyc
 %{python3_sitearch}/samba/__pycache__/dbchecker.*.pyc
 %{python3_sitearch}/samba/__pycache__/descriptor.*.pyc
 %{python3_sitearch}/samba/__pycache__/dnsresolver.*.pyc
@@ -2132,8 +2226,11 @@ fi
 %{python3_sitearch}/samba/__pycache__/getopt.*.pyc
 %{python3_sitearch}/samba/__pycache__/gpclass.*.pyc
 %{python3_sitearch}/samba/__pycache__/gp_ext_loader.*.pyc
+%{python3_sitearch}/samba/__pycache__/gp_msgs_ext.*.pyc
 %{python3_sitearch}/samba/__pycache__/gp_scripts_ext.*.pyc
 %{python3_sitearch}/samba/__pycache__/gp_sec_ext.*.pyc
+%{python3_sitearch}/samba/__pycache__/gp_smb_conf_ext.*.pyc
+%{python3_sitearch}/samba/__pycache__/gp_sudoers_ext.*.pyc
 %{python3_sitearch}/samba/__pycache__/graph.*.pyc
 %{python3_sitearch}/samba/__pycache__/hostconfig.*.pyc
 %{python3_sitearch}/samba/__pycache__/idmap.*.pyc
@@ -2151,6 +2248,7 @@ fi
 %{python3_sitearch}/samba/__pycache__/trust_utils.*.pyc
 %{python3_sitearch}/samba/__pycache__/upgrade.*.pyc
 %{python3_sitearch}/samba/__pycache__/upgradehelpers.*.pyc
+%{python3_sitearch}/samba/__pycache__/vgp_sudoers_ext.*.pyc
 %{python3_sitearch}/samba/__pycache__/xattr.*.pyc
 %{python3_sitearch}/samba/_glue.*.so
 %{python3_sitearch}/samba/_ldb.*.so
@@ -2159,7 +2257,6 @@ fi
 %{python3_sitearch}/samba/dbchecker.py
 %{python3_sitearch}/samba/colour.py
 %{python3_sitearch}/samba/common.py
-%{python3_sitearch}/samba/compat.py
 %{python3_sitearch}/samba/credentials.*.so
 %{python3_sitearch}/samba/crypto.*.so
 %dir %{python3_sitearch}/samba/dcerpc
@@ -2232,6 +2329,9 @@ fi
 %{python3_sitearch}/samba/emulate/traffic.py
 %{python3_sitearch}/samba/emulate/traffic_packets.py
 %{python3_sitearch}/samba/gp_ext_loader.py
+%{python3_sitearch}/samba/gp_msgs_ext.py
+%{python3_sitearch}/samba/gp_smb_conf_ext.py
+%{python3_sitearch}/samba/gp_sudoers_ext.py
 %dir %{python3_sitearch}/samba/gp_parse
 %{python3_sitearch}/samba/gp_parse/__init__.py
 %dir %{python3_sitearch}/samba/gp_parse/__pycache__
@@ -2320,7 +2420,9 @@ fi
 %{python3_sitearch}/samba/samba3/__init__.py
 %dir %{python3_sitearch}/samba/samba3/__pycache__
 %{python3_sitearch}/samba/samba3/__pycache__/__init__.*.pyc
-%{python3_sitearch}/samba/samba3/libsmb_samba_internal.*.so
+%{python3_sitearch}/samba/samba3/__pycache__/libsmb_samba_internal.*.pyc
+%{python3_sitearch}/samba/samba3/libsmb_samba_cwrapper.cpython*.so
+%{python3_sitearch}/samba/samba3/libsmb_samba_internal.py
 %{python3_sitearch}/samba/samba3/mdscli.*.so
 %{python3_sitearch}/samba/samba3/param.*.so
 %{python3_sitearch}/samba/samba3/passdb.*.so
@@ -2335,13 +2437,10 @@ fi
 %{python3_sitearch}/samba/subunit/__pycache__/run.*.pyc
 %{python3_sitearch}/samba/subunit/run.py
 %{python3_sitearch}/samba/tdb_util.py
-%dir %{python3_sitearch}/samba/third_party
-%{python3_sitearch}/samba/third_party/__init__.py
-%dir %{python3_sitearch}/samba/third_party/__pycache__
-%{python3_sitearch}/samba/third_party/__pycache__/__init__.*.pyc
 %{python3_sitearch}/samba/trust_utils.py
 %{python3_sitearch}/samba/upgrade.py
 %{python3_sitearch}/samba/upgradehelpers.py
+%{python3_sitearch}/samba/vgp_sudoers_ext.py
 %{python3_sitearch}/samba/werror.*.so
 %{python3_sitearch}/samba/xattr.py
 %{python3_sitearch}/samba/xattr_native.*.so
@@ -2368,8 +2467,8 @@ fi
 %endif
 
 %files -n python3-%{name}-devel
-%{_libdir}/libsamba-policy.cpython*.so
+%{_libdir}/libsamba-policy.*.so
-%{_libdir}/pkgconfig/samba-policy.cpython*.pc
+%{_libdir}/pkgconfig/samba-policy.*.pc
 
 %if %{with dc} || %{with testsuite}
 %files -n python3-%{name}-dc
@@ -2453,6 +2552,7 @@ fi
 %{python3_sitearch}/samba/tests/__pycache__/complex_expressions.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/core.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/credentials.*.pyc
+%{python3_sitearch}/samba/tests/__pycache__/cred_opt.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/dckeytab.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/dns.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/dns_base.*.pyc
@@ -2526,6 +2626,7 @@ fi
 %{python3_sitearch}/samba/tests/__pycache__/security.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/segfault.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/smb.*.pyc
+%{python3_sitearch}/samba/tests/__pycache__/smb-notify.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/smbd_base.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/smbd_fuzztest.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/source.*.pyc
@@ -2562,6 +2663,8 @@ fi
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/samba_dnsupdate.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls_basic.*.pyc
+%{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls_dfs_propagate_inherit.*.pyc
+%{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls_propagate_inhertance.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcontrol.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcontrol_process.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/traffic_learner.*.pyc
@@ -2576,6 +2679,8 @@ fi
 %{python3_sitearch}/samba/tests/blackbox/samba_dnsupdate.py
 %{python3_sitearch}/samba/tests/blackbox/smbcacls.py
 %{python3_sitearch}/samba/tests/blackbox/smbcacls_basic.py
+%{python3_sitearch}/samba/tests/blackbox/smbcacls_dfs_propagate_inherit.py
+%{python3_sitearch}/samba/tests/blackbox/smbcacls_propagate_inhertance.py
 %{python3_sitearch}/samba/tests/blackbox/smbcontrol.py
 %{python3_sitearch}/samba/tests/blackbox/smbcontrol_process.py
 %{python3_sitearch}/samba/tests/blackbox/traffic_learner.py
@@ -2585,6 +2690,7 @@ fi
 %{python3_sitearch}/samba/tests/complex_expressions.py
 %{python3_sitearch}/samba/tests/core.py
 %{python3_sitearch}/samba/tests/credentials.py
+%{python3_sitearch}/samba/tests/cred_opt.py
 %dir %{python3_sitearch}/samba/tests/dcerpc
 %{python3_sitearch}/samba/tests/dcerpc/__init__.py
 %dir %{python3_sitearch}/samba/tests/dcerpc/__pycache__
@@ -2676,14 +2782,26 @@ fi
 %{python3_sitearch}/samba/tests/kcc/ldif_import_export.py
 %dir %{python3_sitearch}/samba/tests/krb5
 %dir %{python3_sitearch}/samba/tests/krb5/__pycache__
+%{python3_sitearch}/samba/tests/krb5/__pycache__/as_canonicalization_tests.*.pyc
+%{python3_sitearch}/samba/tests/krb5/__pycache__/compatability_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/kcrypto.*.pyc
+%{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_base_test.*.pyc
+%{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_tests.*.pyc
+%{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_tgs_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/raw_testcase.*.pyc
+%{python3_sitearch}/samba/tests/krb5/__pycache__/rfc4120_constants.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/rfc4120_pyasn1.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/simple_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/s4u_tests.*.pyc
 %{python3_sitearch}/samba/tests/krb5/__pycache__/xrealm_tests.*.pyc
+%{python3_sitearch}/samba/tests/krb5/as_canonicalization_tests.py
+%{python3_sitearch}/samba/tests/krb5/compatability_tests.py
 %{python3_sitearch}/samba/tests/krb5/kcrypto.py
+%{python3_sitearch}/samba/tests/krb5/kdc_base_test.py
+%{python3_sitearch}/samba/tests/krb5/kdc_tests.py
+%{python3_sitearch}/samba/tests/krb5/kdc_tgs_tests.py
 %{python3_sitearch}/samba/tests/krb5/raw_testcase.py
+%{python3_sitearch}/samba/tests/krb5/rfc4120_constants.py
 %{python3_sitearch}/samba/tests/krb5/rfc4120_pyasn1.py
 %{python3_sitearch}/samba/tests/krb5/simple_tests.py
 %{python3_sitearch}/samba/tests/krb5/s4u_tests.py
@@ -2809,6 +2927,7 @@ fi
 %{python3_sitearch}/samba/tests/security.py
 %{python3_sitearch}/samba/tests/segfault.py
 %{python3_sitearch}/samba/tests/smb.py
+%{python3_sitearch}/samba/tests/smb-notify.py
 %{python3_sitearch}/samba/tests/smbd_base.py
 %{python3_sitearch}/samba/tests/smbd_fuzztest.py
 %{python3_sitearch}/samba/tests/source.py
@@ -2877,6 +2996,8 @@ fi
 %ghost %{_libdir}/krb5/plugins/libkrb5/winbind_krb5_locator.so
 %dir %{_libdir}/samba/krb5
 %{_libdir}/samba/krb5/winbind_krb5_locator.so
+# correct rpm package?
+%{_libdir}/samba/krb5/async_dns_krb5_locator.so
 %{_mandir}/man8/winbind_krb5_locator.8*
 
 ### WINBIND-MODULES
@@ -2928,11 +3049,10 @@ fi
 %{_sbindir}/ctdbd
 %{_sbindir}/ctdbd_wrapper
 %{_bindir}/ctdb
-%{_bindir}/ctdb_local_daemons
-%{_bindir}/ping_pong
-%{_bindir}/ltdbtool
 %{_bindir}/ctdb_diagnostics
+%{_bindir}/ltdbtool
 %{_bindir}/onnode
+%{_bindir}/ping_pong
 
 %dir %{_libexecdir}/ctdb
 %{_libexecdir}/ctdb/ctdb-config
@@ -2993,8 +3113,10 @@ fi
 %{_datadir}/ctdb/events/legacy/70.iscsi.script
 %{_datadir}/ctdb/events/legacy/91.lvs.script
 
+%if %{with testsuite}
 %files -n ctdb-tests
 %doc ctdb/tests/README
+%{_bindir}/ctdb_local_daemons
 %{_bindir}/ctdb_run_tests
 %{_bindir}/ctdb_run_cluster_tests
 
@@ -3132,7 +3254,6 @@ fi
 %{_datadir}/ctdb/tests/INTEGRATION/simple/basics.005.process_exists.sh
 %{_datadir}/ctdb/tests/INTEGRATION/simple/basics.010.statistics.sh
 %{_datadir}/ctdb/tests/INTEGRATION/simple/basics.011.statistics_reset.sh
-%{_datadir}/ctdb/tests/INTEGRATION/simple/cluster.001.isnotrecmaster.sh
 %{_datadir}/ctdb/tests/INTEGRATION/simple/cluster.002.recmaster_yield.sh
 %{_datadir}/ctdb/tests/INTEGRATION/simple/cluster.010.getrelock.sh
 %{_datadir}/ctdb/tests/INTEGRATION/simple/cluster.012.reclock_command.sh
@@ -3773,6 +3894,8 @@ fi
 %{_datadir}/ctdb/tests/UNIT/tool/README
 %dir %{_datadir}/ctdb/tests/UNIT/tool/scripts
 %{_datadir}/ctdb/tests/UNIT/tool/scripts/local.sh
+#endif with selftest
+%endif
 
 #endif with clustering
 %endif
@@ -3785,13 +3908,30 @@ fi
 %endif
 
 %changelog
-* Thu Sep 23 2021 Pavel Filipenský <pfilipen@redhat.com> - 4.13.3-5
+* Tue Jul 13 2021 Andreas Schneider <asn@redhat.com> -  4.14.4-2
-- resolves: #2003507 - Fix CVE-2021-20254
+- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0
 
-* Thu Jun 10 2021 Andreas Schneider <asn@redhat.com> - 4.13.3-4
+* Thu Jun 24 2021 Andreas Schneider <asn@redhat.com> - 4.14.4-1
-- resolves: #1964314 - Fix ldconfig warning about libsmbldap.so.2
+- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
-- resolves: #1964398 - Fix smbd trying to delete files with wrong permissions
+- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message
-- resolves: #1969831 - Fix memory leak in RPC server
+
+* Thu Jun 10 2021 Andreas Schneider <asn@redhat.com> - 4.14.4-0
+- related: rhbz#1944657 - Update to version 4.14.5
+- resolves: rhbz#1969787 - Fix memory leak in RPC server
+- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
+- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
+- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
+- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags
+
+* Wed May 12 2021 Andreas Schneider <asn@redhat.com> - 4.14.4-4
+- related: rhbz#1944657 - Fix possible upgrade issues
+
+* Tue May 11 2021 Andreas Schneider <asn@redhat.com> - 4.14.4-2
+- resolves: rhbz#1944657 - Update to version 4.14.4
+- resolves: rhbz#1949445 - Fix CVE-2021-20254
+- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
+- resolves: rhbz#1908506 - Fix creating the gencache user directory
+- resolves: rhbz#1901029 - Build the vfs_io_uring module
 
 * Thu Feb 04 2021 Andreas Schneider <asn@redhat.com> - 4.13.3-3
 - resolves: #1924615 - Fix a memcache bug when cache is full