Blog

SAMBA+ 4.14.2, 4.13.7 and 4.12.14 Security Releases have just been released. The Samba packages for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu are available now.

The following defects have been addressed:

• CVE-2020-27840: Heap corruption via crafted DN strings.
• CVE-2021-20277: Out of bounds read in AD DC LDAP server.

This is the first stable release of the SAMBA+ 4.14 release series. Please read the 4.14.2 release notes carefully before upgrading.

Samba 4.13.7 release notes and 4.12.14 release notes are also available.

Samba 4.13 has been turned into the maintenance mode, Samba 4.12 into the security fixes only mode (there will be a last bugfix release tomorrow) and Samba 4.11 is not supported any longer. For more details, please see Samba Release Planning.

SAMBA+ packages are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.

As part of sambaXP 2021 an SMB Interoperability Lab (IO Lab) will take place online from Wednesday to Friday (May 5th 3:00 pm to 7th 9:00 pm). During the lab participants work together and test, identify and fix bugs in a collaborative setting. This IO Lab is sponsored and featured by Microsoft.

The virtual sambaXP 2021 itself is set for May 4 to 6. Tickets are available on the conference website https://sambaxp.org, participation in sambaXP as well as the IO Lab is free of charge. The call for papers is also still open.

The purpose of this IO Lab is for vendors to bring their implementations of SMB3 to test, identify, and fix bugs in a collaborative setting with the goal of providing a forum in which companies can develop interoperable products. The 2021 SMB3 IO Lab will be held online using a virtual private network, creating a collaborative framework for testing.  The participants of the IO Lab work together to define the testing process, assuring that objectives are accomplished.

The IO Lab offers access to:

• The latest Windows client and server software from Microsoft, including test suites that help verify interoperability on various features of SMB protocols
• Technical support from SMB engineers to look at traces and help with diagnosing problems
• IO Lab participants are covered by a non-disclosure agreement and access is restricted to registrants only

Please register if you are interested in attending and see the agenda for upcoming new details during the next weeks.

Note from the Organizer

If you are reluctant to participate because you feel that your SMB implementation is "not ready", you should still participate! The SMB Interoperability Lab is also a development opportunity, not just a testing opportunity. Implementations still in development are encouraged to participate.  It's a great opportunity to get help and learn from the experts!

SAMBA+ 4.12.12 has just been released by SerNet. Packages for various SUSE and Red Hat platforms as well as for Debian GNU/Linux, Ubuntu are available now.

For details, please see the release notes for Samba 4.12.12.

SAMBA+ packages and all later versions are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.

In his sambaXP 2020 talk Douglas Bagnall (Catalyst) illustrates the improvements for Samba achieved by the transition to Python 3.  Bagnall is located in Wellington / New Zealand and member of the international Samba team.

Abstract

Samba, particularly the AD part, is riddled with Python. The transition from Python 2 to Python 3 was painful. Now that is over and we have the sudden benefit from a decade of language and library development. Some of the changes are actually quite useful, including an improved debugging infrastructure and built-in asynchronous concepts.

About the "sambaXP 2020 Retrospective"

In this series we will present recordings of the sambaXP 2020 in the coming month. The 19th edition of the international conference on the open source software Samba took place from 26 - 28 May 2020 for the first time exclusively in digital form. Due to the changed event format and the use of an online conference platform, organizer SerNet is able to offer all talks as videos for viewing (link).

SAMBA+ 4.13.5 has just been released by SerNet. Packages for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu are available now.

For details, please see the Samba 4.13.5 release notes.

SAMBA+ packages and all later versions are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.