The branch, master has been updated via d42b09c NEWS[4.21.7]: Samba 4.22.3 and 4.21.7 Available for Download from ec77184 docs: remove links ti old and crufted translations
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master - Log ----------------------------------------------------------------- commit d42b09cfcc134c457566c964967fe18435ff4f2a Author: Jule Anger <jan...@samba.org> Date: Mon Jul 7 18:11:45 2025 +0200 NEWS[4.21.7]: Samba 4.22.3 and 4.21.7 Available for Download Signed-off-by: Jule Anger <jan...@samba.org> ----------------------------------------------------------------------- Summary of changes: history/header_history.html | 2 + history/samba-4.21.7.html | 81 +++++++++++++++++++++++ history/samba-4.22.3.html | 84 ++++++++++++++++++++++++ posted_news/20250707-161349.4.21.7.body.html | 21 ++++++ posted_news/20250707-161349.4.21.7.headline.html | 3 + 5 files changed, 191 insertions(+) create mode 100644 history/samba-4.21.7.html create mode 100644 history/samba-4.22.3.html create mode 100644 posted_news/20250707-161349.4.21.7.body.html create mode 100644 posted_news/20250707-161349.4.21.7.headline.html Changeset truncated at 500 lines: diff --git a/history/header_history.html b/history/header_history.html index 9f73997..85ce85a 100755 --- a/history/header_history.html +++ b/history/header_history.html @@ -9,9 +9,11 @@ <li><a href="/samba/history/">Release Notes</a> <li class="navSub"> <ul> + <li><a href="samba-4.22.3.html">samba-4.22.3</a></li> <li><a href="samba-4.22.2.html">samba-4.22.2</a></li> <li><a href="samba-4.22.1.html">samba-4.22.1</a></li> <li><a href="samba-4.22.0.html">samba-4.22.0</a></li> + <li><a href="samba-4.21.7.html">samba-4.21.7</a></li> <li><a href="samba-4.21.6.html">samba-4.21.6</a></li> <li><a href="samba-4.21.5.html">samba-4.21.5</a></li> <li><a href="samba-4.21.4.html">samba-4.21.4</a></li> diff --git a/history/samba-4.21.7.html b/history/samba-4.21.7.html new file mode 100644 index 0000000..6f1a119 --- /dev/null +++ b/history/samba-4.21.7.html @@ -0,0 +1,81 @@ +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> +<html xmlns="http://www.w3.org/1999/xhtml"> +<head> +<title>Samba 4.21.7 - Release Notes</title> +</head> +<body> +<H2>Samba 4.21.7 Available for Download</H2> +<p> +<a href="https://download.samba.org/pub/samba/stable/samba-4.21.7.tar.gz">Samba 4.21.7 (gzipped)</a><br> +<a href="https://download.samba.org/pub/samba/stable/samba-4.21.7.tar.asc">Signature</a> +</p> +<p> +<a href="https://download.samba.org/pub/samba/patches/samba-4.21.6-4.21.7.diffs.gz">Patch (gzipped) against Samba 4.21.6</a><br> +<a href="https://download.samba.org/pub/samba/patches/samba-4.21.6-4.21.7.diffs.asc">Signature</a> +</p> +<p> +<pre> + ============================== + Release Notes for Samba 4.21.7 + July 07, 2025 + ============================== + + +This is the latest stable release of the Samba 4.21 release series. + + +Important Change in Upcoming Microsoft Update +--------------------------------------------- + +On 8th of July, Microsoft will release an important security update for +Active Directory Domain Controllers for Windows Server versions prior to +2025. + +This update includes a change to the Microsoft RPC Netlogon protocol, +which improves security by tightening access checks for a set of RPC +requests. Samba running as domain members in these environments will be +impacted by this change if a specific configuration is used, see below +for which configuration is affected. + +Windows Server version 2025 is already equipped with these specific +security hardenings, and Microsoft is now planning to deploy them to all +supported Windows Server versions down to Windows Server 2008. + + +Who is affected? + +Samba installations acting as member servers in Windows AD domains will +be affected if they are configured to use the 'ad' idmapping backend. +Samba servers not using this configuration will not be affected by the +change â at least to our current knowledge and understanding of the +change â and no further action is required. + +Current versions of Samba with the affected configuration will no longer +function correctly once the Microsoft update has been applied. Users +will not be able to connect to the SMB service provided by Samba for any +domain configured to use the 'ad' idmapping backend. + +See https://bugzilla.samba.org/show_bug.cgi?id=15876. + +Changes since 4.21.6 +-------------------- + +o Günther Deschner <g...@samba.org> + * BUG 15876: Windows security hardening locks out schannel'ed netlogon dc + calls like netr_DsRGetDCName. + +o Stefan Metzmacher <me...@samba.org> + * BUG 15680: Trust domains are not created. + * BUG 15876: Windows security hardening locks out schannel'ed netlogon dc + calls like netr_DsRGetDCName. + +o Andreas Schneider <a...@samba.org> + * BUG 15680: Trust domains are not created. + * BUG 15869: Startup messages of rpc deamons fills /var/log/messages. + + +</pre> +</p> +</body> +</html> diff --git a/history/samba-4.22.3.html b/history/samba-4.22.3.html new file mode 100644 index 0000000..bcc96a6 --- /dev/null +++ b/history/samba-4.22.3.html @@ -0,0 +1,84 @@ +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> +<html xmlns="http://www.w3.org/1999/xhtml"> +<head> +<title>Samba 4.22.3 - Release Notes</title> +</head> +<body> +<H2>Samba 4.22.3 Available for Download</H2> +<p> +<a href="https://download.samba.org/pub/samba/stable/samba-4.22.3.tar.gz">Samba 4.22.3 (gzipped)</a><br> +<a href="https://download.samba.org/pub/samba/stable/samba-4.22.3.tar.asc">Signature</a> +</p> +<p> +<a href="https://download.samba.org/pub/samba/patches/samba-4.22.2-4.22.3.diffs.gz">Patch (gzipped) against Samba 4.22.2</a><br> +<a href="https://download.samba.org/pub/samba/patches/samba-4.22.2-4.22.3.diffs.asc">Signature</a> +</p> +<p> +<pre> + ============================== + Release Notes for Samba 4.22.3 + July 07, 2025 + ============================== + + +This is the latest stable release of the Samba 4.22 release series. + + +Important Change in Upcoming Microsoft Update +--------------------------------------------- + +On 8th of July, Microsoft will release an important security update for +Active Directory Domain Controllers for Windows Server versions prior to +2025. + +This update includes a change to the Microsoft RPC Netlogon protocol, +which improves security by tightening access checks for a set of RPC +requests. Samba running as domain members in these environments will be +impacted by this change if a specific configuration is used, see below +for which configuration is affected. + +Windows Server version 2025 is already equipped with these specific +security hardenings, and Microsoft is now planning to deploy them to all +supported Windows Server versions down to Windows Server 2008. + + +Who is affected? + +Samba installations acting as member servers in Windows AD domains will +be affected if they are configured to use the 'ad' idmapping backend. +Samba servers not using this configuration will not be affected by the +change â at least to our current knowledge and understanding of the +change â and no further action is required. + +Current versions of Samba with the affected configuration will no longer +function correctly once the Microsoft update has been applied. Users +will not be able to connect to the SMB service provided by Samba for any +domain configured to use the 'ad' idmapping backend. + +See https://bugzilla.samba.org/show_bug.cgi?id=15876. + + +Changes since 4.22.2 +-------------------- + +o Douglas Bagnall <douglas.bagn...@catalyst.net.nz> + * BUG 15854: samba-tool cannot add user to group whose name is exactly 16 + characters long. + +o Günther Deschner <g...@samba.org> + * BUG 15876: Windows security hardening locks out schannel'ed netlogon dc + calls like netr_DsRGetDCName. + +o Stefan Metzmacher <me...@samba.org> + * BUG 15876: Windows security hardening locks out schannel'ed netlogon dc + calls like netr_DsRGetDCName. + +o Andreas Schneider <a...@samba.org> + * BUG 15869: Startup messages of rpc deamons fills /var/log/messages. + + +</pre> +</p> +</body> +</html> diff --git a/posted_news/20250707-161349.4.21.7.body.html b/posted_news/20250707-161349.4.21.7.body.html new file mode 100644 index 0000000..d15d7ca --- /dev/null +++ b/posted_news/20250707-161349.4.21.7.body.html @@ -0,0 +1,21 @@ +<!-- BEGIN: posted_news/20250707-161349.4.21.7.body.html --> +<h5><a name="4.21.7">07 July 2025</a></h5> +<p class=headline>Samba 4.22.3 and 4.21.7 Available for Download</p> +<p> +These are the latest stable releases of the Samba 4.22 and the Samba 4.21 +release series. +</p> +<p> +The uncompressed tarball has been signed using GnuPG (ID AA99442FB680B620). +</p> +<p> +The 4.22.3 source code can be <a href="https://download.samba.org/pub/samba/stable/samba-4.22.3.tar.gz">downloaded now</a>. +A <a href="https://download.samba.org/pub/samba/patches/samba-4.22.2-4.22.3.diffs.gz">patch against Samba 4.22.2</a> is also available. +See <a href="https://www.samba.org/samba/history/samba-4.22.3.html">the release notes for more info</a>. +</p> +<p> +The 4.21.7 source code can be <a href="https://download.samba.org/pub/samba/stable/samba-4.21.7.tar.gz">downloaded now</a>. +A <a href="https://download.samba.org/pub/samba/patches/samba-4.21.6-4.21.7.diffs.gz">patch against Samba 4.21.6</a> is also available. +See <a href="https://www.samba.org/samba/history/samba-4.21.7.html">the release notes for more info</a>. +</p> +<!-- END: posted_news/20250707-161349.4.21.7.body.html --> diff --git a/posted_news/20250707-161349.4.21.7.headline.html b/posted_news/20250707-161349.4.21.7.headline.html new file mode 100644 index 0000000..8aa3cac --- /dev/null +++ b/posted_news/20250707-161349.4.21.7.headline.html @@ -0,0 +1,3 @@ +<!-- BEGIN: posted_news/20250707-161349.4.21.7.headline.html --> +<li> 07 July 2025 <a href="#4.21.7">Samba 4.22.3 and 4.21.7 Available for Download</a></li> +<!-- END: posted_news/20250707-161349.4.21.7.headline.html --> -- Samba Website Repository