This bug was fixed in the package samba - 2:4.24.4+dfsg-1ubuntu1
---------------
samba (2:4.24.4+dfsg-1ubuntu1) stonking; urgency=medium
* Merge with Debian unstable (LP: #2153251). Remaining changes:
- Ubuntu i386 binary compatibility:
+ d/control: enable the liburing vfs module, except on i386 where
liburing is not available
+ python3-samba depends on python3-cryptography, which Ubuntu doesn't
build on i386 (LP #2099895):
- d/control: don't recommend python3-samba on i386
- d/rules: don't build python3-samba on ubuntu i386
- d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
samba AD DC provisioning and domain join tests with internal DNS
(LP #1977746, LP #2011745)
- d/control: have the (now transitional) samba-vfs-modules package
depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
module
- d/control: samba-vfs-modules should only depend on the new
samba-vfs-ceph and samba-vfs-glusterfs packages on the
architectures where those two packages are built (LP #2076682)
- d/p/fix-motd-gpo-list-empty.patch: fix crash when listing an empty MOTD
GPO
- d/t/samba-ad-dc-provisioning-internal-dns: add MOTD GPO test
- d/control, d/samba-libs.install: remove the pkg.samba.builtin-ngtcp2
build profile and the build dependency on libngtcp2 because it's in
universe, and switch to the builtin version shipped with samba.
- d/t/control: certain tests don't work on i386 in Ubuntu
* Dropped:
- d/control: drop lib{nss-pam}-winbind Recommends from bin:samba-ad-dc, as
these are not necessary nor recommended for an Active Directory server
(LP #2144939)
[In 2:4.23.6+dfsg-2]
- SECURITY UPDATE: May 2026 security updates
+ debian/patches/security-202605-*.patch
+ CVE-2026-1933 - Missing access checks on reparse point operations
+ CVE-2026-2340 - WORM vfs module does not block overwrites
+ CVE-2026-3012 - auto-enrolment GPO installing CA certificate over
http without verification
+ CVE-2026-3238 - Denial of service against AD DC WINS server
+ CVE-2026-4408 - Unauthenticated Remote Code Execution in Samba
DCE/RPC SAMR server
+ CVE-2026-4480 - Unauthenticated Remote Code Execution in Samba
printing subsystem
[Fixed upstream in 4.24.4]
- d/control: make samba-vfs-modules-extra a transitional package.
The glusterfs vfs module (the only vfs module shipped in it
previously) is now in bin:samba-vfs-glusterfs. Can be dropped
after 26.04.
[Not needed anymore in 26.10+]
- d/control: samba-vfs-modules i386 adjustments:
+ samba-vfs-modules-extra was not built before for 32bit architectures,
adjust Architectures line
+ samba-vfs-modules: this one was build for 32bit architectures before,
so we need the conditional Depends for ceph
[Not needed anymore in 26.10+]
* Added:
- d/t/samba-ad-dc-provisioning-internal-dns: force a known short
hostname to avoid netbios length limitations (LP: #2160627)
samba (2:4.24.4+dfsg-1) unstable; urgency=medium
[ Pino Toscano ]
* heimdal-errno-include.patch
fix build on Hurd using fix from upstream heimdal
[ Michael Tokarev ]
* update to the new upstream stable/bugfix release:
- https://bugzilla.samba.org/show_bug.cgi?id=14638:
restrict anonymous = 2 breaks RODC functionality
- https://bugzilla.samba.org/show_bug.cgi?id=16006:
warning: assignment discards 'const' qualifier from pointer target type
[-Wdiscarded-qualifiers]
- https://bugzilla.samba.org/show_bug.cgi?id=16067:
Require NTLMv2 session security on Windows makes trusts to Samba unusable
- https://bugzilla.samba.org/show_bug.cgi?id=16092:
Compilers may ignore overflow checks - Fix tautological-compare warnings
- https://bugzilla.samba.org/show_bug.cgi?id=16095:
Use-after-free in handling acls with claims and conditions
- https://bugzilla.samba.org/show_bug.cgi?id=16149:
domain\user not split when provided as username
in smbc_set_credentials_with_fallback()
- https://bugzilla.samba.org/show_bug.cgi?id=16151:
winbindd stuck in init_dc_connection_rpc() returning
NT_STATUS_TRUSTED_DOMAIN_FAILURE
samba (2:4.24.3+dfsg-1) unstable; urgency=medium
* This is a security release in order to address the following
defects:
CVE-2026-1933: Missing access checks on reparse point operations
On a share marked "read only = yes" and on file handles opened R/O users
can set or delete the reparse point xattrs on files that the user has
write-access in the file system for.
https://www.samba.org/samba/security/CVE-2026-1933.html
CVE-2026-2340: WORM vfs module does not block overwrites
The WORM (Write-Once, Read Many) vfs module is supposed to lock write
access to shared files, so they cannot be altered after initial writes.
It was allowing files to be overwritten by renaming a newly created file
over a protected file.
https://www.samba.org/samba/security/CVE-2026-2340.html
CVE-2026-3012: auto-enrolment GPO installing CA certificate over http
without verification
To bootstrap a certificate chain a domain member must fetch a certificate
without TLS. It was trusting HTTP for this when a more secure encrypted
LDAP channel was also available.
https://www.samba.org/samba/security/CVE-2026-3012.html
CVE-2026-3238: Denial of service against AD DC WINS server
The WINS server component of the Active Directory Domain controller code
in Samba is vulnerable to a NULL pointer dereference and crash caused by
an unauthenticated UDP packet.
https://www.samba.org/samba/security/CVE-2026-3238.html
CVE-2026-4408: Unauthenticated Remote Code Execution in Samba DCE/RPC
SAMR server
Samba file servers and classic (non-AD) domain controllers with
samba-dcerpcd started as a system service and with a "check password
script" that has the %u substitution character are vulnerable to a
remote code execution.
https://www.samba.org/samba/security/CVE-2026-4408.html
CVE-2026-4480: Unauthenticated Remote Code Execution in Samba
printing subsystem
Samba print servers with a "print command" that has the %J substitution
character are vulnerable to a Remote Code Execution.
https://www.samba.org/samba/security/CVE-2026-4480.html
samba (2:4.24.2+dfsg-1) unstable; urgency=medium
* new upstream point release
samba (2:4.24.1+dfsg-1) unstable; urgency=medium
* new upstream point release
* promote to unstable
samba (2:4.24.0+dfsg-1) experimental; urgency=medium
* new upstream release
* use-explicit_bzero-to-zero-memory.diff: update
to replace memset_explicit()
* replace-progname.diff: refresh, shorten context
* libtalloc, libtdb: bump versions, add new symbols
* d/not-installed: add libcmocka-private-samba.so.0
* d/not-installed: remove old entries
samba (2:4.23.6+dfsg-2) unstable; urgency=medium
* samba-bgqd.service: ship a unit file, but not auto-enable it
* d/rules: do not enable nmbd by default
* d/control: drop libnss-winbind & libpam-winbind from
samba-ad-dc:Recommends (Closes: #1130068)
-- Andreas Hasenack <[email protected]> Wed, 15 Jul 2026
17:12:19 -0300
** Changed in: samba (Ubuntu)
Status: Fix Committed => Fix Released
** Bug watch added: Samba Bugzilla #14638
https://bugzilla.samba.org/show_bug.cgi?id=14638
** Bug watch added: Samba Bugzilla #16006
https://bugzilla.samba.org/show_bug.cgi?id=16006
** Bug watch added: Samba Bugzilla #16067
https://bugzilla.samba.org/show_bug.cgi?id=16067
** Bug watch added: Samba Bugzilla #16092
https://bugzilla.samba.org/show_bug.cgi?id=16092
** Bug watch added: Samba Bugzilla #16095
https://bugzilla.samba.org/show_bug.cgi?id=16095
** Bug watch added: Samba Bugzilla #16149
https://bugzilla.samba.org/show_bug.cgi?id=16149
** Bug watch added: Samba Bugzilla #16151
https://bugzilla.samba.org/show_bug.cgi?id=16151
** CVE added: https://cve.org/CVERecord?id=CVE-2026-1933
** CVE added: https://cve.org/CVERecord?id=CVE-2026-2340
** CVE added: https://cve.org/CVERecord?id=CVE-2026-3012
** CVE added: https://cve.org/CVERecord?id=CVE-2026-3238
** CVE added: https://cve.org/CVERecord?id=CVE-2026-4408
** CVE added: https://cve.org/CVERecord?id=CVE-2026-4480
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2153251
Title:
Merge samba from Debian for stonking cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/2153251/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
