This bug was fixed in the package samba - 2:4.24.4+dfsg-1ubuntu1
---
samba (2:4.24.4+dfsg-1ubuntu1) stonking; urgency=medium
* Merge with Debian unstable (LP: #2153251). Remaining changes:
- Ubuntu i386 binary compatibility:
+ d/control: enable the liburing vfs module, except on i386 where
liburing is not available
+ python3-samba depends on python3-cryptography, which Ubuntu doesn't
build on i386 (LP #2099895):
- d/control: don't recommend python3-samba on i386
- d/rules: don't build python3-samba on ubuntu i386
- d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
samba AD DC provisioning and domain join tests with internal DNS
(LP #1977746, LP #2011745)
- d/control: have the (now transitional) samba-vfs-modules package
depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
module
- d/control: samba-vfs-modules should only depend on the new
samba-vfs-ceph and samba-vfs-glusterfs packages on the
architectures where those two packages are built (LP #2076682)
- d/p/fix-motd-gpo-list-empty.patch: fix crash when listing an empty MOTD
GPO
- d/t/samba-ad-dc-provisioning-internal-dns: add MOTD GPO test
- d/control, d/samba-libs.install: remove the pkg.samba.builtin-ngtcp2
build profile and the build dependency on libngtcp2 because it's in
universe, and switch to the builtin version shipped with samba.
- d/t/control: certain tests don't work on i386 in Ubuntu
* Dropped:
- d/control: drop lib{nss-pam}-winbind Recommends from bin:samba-ad-dc, as
these are not necessary nor recommended for an Active Directory server
(LP #2144939)
[In 2:4.23.6+dfsg-2]
- SECURITY UPDATE: May 2026 security updates
+ debian/patches/security-202605-*.patch
+ CVE-2026-1933 - Missing access checks on reparse point operations
+ CVE-2026-2340 - WORM vfs module does not block overwrites
+ CVE-2026-3012 - auto-enrolment GPO installing CA certificate over
http without verification
+ CVE-2026-3238 - Denial of service against AD DC WINS server
+ CVE-2026-4408 - Unauthenticated Remote Code Execution in Samba
DCE/RPC SAMR server
+ CVE-2026-4480 - Unauthenticated Remote Code Execution in Samba
printing subsystem
[Fixed upstream in 4.24.4]
- d/control: make samba-vfs-modules-extra a transitional package.
The glusterfs vfs module (the only vfs module shipped in it
previously) is now in bin:samba-vfs-glusterfs. Can be dropped
after 26.04.
[Not needed anymore in 26.10+]
- d/control: samba-vfs-modules i386 adjustments:
+ samba-vfs-modules-extra was not built before for 32bit architectures,
adjust Architectures line
+ samba-vfs-modules: this one was build for 32bit architectures before,
so we need the conditional Depends for ceph
[Not needed anymore in 26.10+]
* Added:
- d/t/samba-ad-dc-provisioning-internal-dns: force a known short
hostname to avoid netbios length limitations (LP: #2160627)
samba (2:4.24.4+dfsg-1) unstable; urgency=medium
[ Pino Toscano ]
* heimdal-errno-include.patch
fix build on Hurd using fix from upstream heimdal
[ Michael Tokarev ]
* update to the new upstream stable/bugfix release:
- https://bugzilla.samba.org/show_bug.cgi?id=14638:
restrict anonymous = 2 breaks RODC functionality
- https://bugzilla.samba.org/show_bug.cgi?id=16006:
warning: assignment discards 'const' qualifier from pointer target type
[-Wdiscarded-qualifiers]
- https://bugzilla.samba.org/show_bug.cgi?id=16067:
Require NTLMv2 session security on Windows makes trusts to Samba unusable
- https://bugzilla.samba.org/show_bug.cgi?id=16092:
Compilers may ignore overflow checks - Fix tautological-compare warnings
- https://bugzilla.samba.org/show_bug.cgi?id=16095:
Use-after-free in handling acls with claims and conditions
- https://bugzilla.samba.org/show_bug.cgi?id=16149:
domain\user not split when provided as username
in smbc_set_credentials_with_fallback()
- https://bugzilla.samba.org/show_bug.cgi?id=16151:
winbindd stuck in init_dc_connection_rpc() returning
NT_STATUS_TRUSTED_DOMAIN_FAILURE
samba (2:4.24.3+dfsg-1) unstable; urgency=medium
* This is a security release in order to address the following
defects:
CVE-2026-1933: Missing access checks on reparse point operations
On a share marked "read only = yes" and on file handles opened R/O users
can set or delete the reparse point xattrs on files that the user has
write-access in the file system for.
https://www.samba.org/samba/security/CVE-2026-1933.html
CVE-2026-2340: WORM vfs module does not block overwrites
The WORM (Write-Once, Read Many) vfs module is supposed to lock write
access to shared
