SAMBA+ 4.25.1 has been released by SerNet and is now available for SUSE and Red Hat platforms, Debian GNU/Linux, Ubuntu, and AIX. It is the latest stable release of the Samba 4.25 series.
Samba 4.25.1 fixes CVE-2026-109411, an access control bypass in the vfs_ceph_rgw module caused by case-insensitive open handling. The module was introduced with Samba 4.25.0, so only installations running that version with vfs_ceph_rgw enabled are affected. If you run vfs_ceph_rgw, update as soon as possible.
Beyond that, this release addresses several issues reported since Samba 4.25.0, including CTDB cluster handling, dynamic interfaces in smbd, case-only renames, and a crash in vfs_acl_xattr. All fixes are documented in the official release notes:
As usual, the new packages are included in existing SAMBA+ subscriptions and can be obtained via the SAMBA+ shops:
If you have questions, need help with an upgrade, or would like a quote, contact the SAMBA+ team at SerNet.
