Blog

SAMBA+ 4.14.4, 4.13.8 and 4.12.15 have just been released by SerNet. The Samba software packages for various SUSE and Red Hat platforms as well as for Debian GNU/Linux, Ubuntu and AIX. are available now. Please note, that these are important security releases. Affected systems should be updated as soon as possible.

The packages address the following issue:

• CVE-2021-20254: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token

For details, please see the release notes for Samba 4.14.4, Samba 4.13.8 and/or Samba 4.12.15.

SAMBA+ packages are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.

SAMBA+ now has its own YouTube channel. To kick things off, we offer two playlists: 

• sambaXP 2020: All presentations of our first digital sambaXP can be watched here. 
• Talks by SerNet colleagues: Numerous talks at various events have been recorded over the years. We have compiled them here. 

Videos of sambaXP 2021 will also be published by the Orga Committee on the new YouTube channel. In addition, more content on Samba and SAMBA+ is being planned. More recordings of past sambaXPs will also find their way to YouTube. Until then, all materials up to the first sambaXP in 2002 are accessible in our archive. 

SAMBA+ 4.14.3 has just been released by SerNet. Packages for various SUSE and Red Hat platforms as well as for Debian GNU/Linux, Ubuntu are available now.

For details, please see the Samba 4.14.3 release notes.

SAMBA+ packages and all later versions are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.

In his sambaXP 2020 talk, Mairo Rufus presented his results from Googles Summer of code 2019. Mentored by Samba team member Aurélien Aptel, Rufus worked on improving smbcmp. He received his Master in Computer Science last year at Polytechnic Yaounde, Cameroon.

Abstract

Smbcmp is a cli tool for making diffs between two pcap files containing SMB packets and rendering them using curses. For the first part of the project we had to make better diffs by using the pdml output of Tshark and for the second part we added a GUI and ported smbcmp to Windows.

Slides

About the "sambaXP 2020 Retrospective"

In this series we will present recordings of the sambaXP 2020 in the coming month. The 19th edition of the international conference on the open source software Samba took place from 26 - 28 May 2020 for the first time exclusively in digital form. Due to the changed event format and the use of an online conference platform, organizer SerNet is able to offer all talks as videos for viewing (link).

SAMBA+ 4.14.2, 4.13.7 and 4.12.14 Security Releases have just been released. The Samba packages for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu are available now.

The following defects have been addressed:

• CVE-2020-27840: Heap corruption via crafted DN strings.
• CVE-2021-20277: Out of bounds read in AD DC LDAP server.

This is the first stable release of the SAMBA+ 4.14 release series. Please read the 4.14.2 release notes carefully before upgrading.

Samba 4.13.7 release notes and 4.12.14 release notes are also available.

Samba 4.13 has been turned into the maintenance mode, Samba 4.12 into the security fixes only mode (there will be a last bugfix release tomorrow) and Samba 4.11 is not supported any longer. For more details, please see Samba Release Planning.

SAMBA+ packages are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.