Blog

SAMBA+ 4.8.4, 4.7.9 and 4.6.16 packages have just been released. These are important security releases, please update affected systems as soon as possible. The packages are available for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu.

The packages address the following issues:

  • CVE-2018-1139 (Weak authentication protocol allowed.)
  • CVE-2018-10858 (Insufficient input validation on client directory listing in libsmbclient.)
  • CVE-2018-10918 (Denial of Service Attack on AD DC DRSUAPI server.)
  • CVE-2018-10919 (Confidential attribute disclosure from the AD LDAP server.)

Samba 4.8.4 addresses all CVEs listed above, Samba 4.7.9 all except CVE 2018-1140 and 4.6.16 only CVE-2018-10858 and CVE-2018-10919.

For more information about the security issues, please visit:

These packages are included in a SAMBA+ subscription which can be purchased at the SAMBA+ Shop, detailed information and prices are listed there. The subscriptions are managed at our platform OPOSSO. Users can activate their subscriptions here and manage access credentials.


sambaXP 2018 – sponsored by Google, Microsoft and RedHat – brought together the international Samba team again. People from all around the globe gathered in Goettingen and talked shop about current samba topics for several days. The annual success is an incentive for organiser SerNet to create another great SAMBA eXPerience in 2019. Therefore we are pleased to announce the date for sambaXP 2019 already: The conference will take place June 4-6, 2019 at Hotel Freizeit In in Goettingen.

The Call for Papers for sambaXP 2019 has started as well. Talks should be submitted until February 28, 2019. The program committee will decide shortly after that and notifications of acceptance will be send out until March 8, 2019. SerNet and the Samba team are looking forward to submissions about SAMBA and the broader challenges of data management. Technical talks, user reports and presentations about future projects are welcome. The conference language is English, although proposals (in English) for talks in other languages will be considered gladly. Paper registration and paper submission can be done online only via the registration form on https://sambaxp.org.

As for the sambaXP 2018: Slides and audio recordings are online now. All of them can be downloaded individually or as a package from the conference page https://sambaxp.org


SerNet releases SAMBA+ 4.8.3 packages. These packages are available for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu.

The new 4.8.3 packages address a lot of issues, which are listed in the Samba release history.

These packages are included in a SAMBA+ subscription which can be purchased at the SAMBA+ Shop, detailed information and prices are listed there. The subscriptions are managed at our platform OPOSSO. Users can activate their subscriptions here and manage access credentials.


SerNet releases SAMBA+ 4.7.8 and a new set of the 4.8.2 packages. These packages are available for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu.

The new 4.7.8 packages address a lot of issues, which are listed in the Samba release history.

Additionally the following issues are addressed by the new 4.7.8 and 4.8.2-11 packages:

  • Bug 11573 heimdal: lib/krb5: do not fail on /etc/krb5.conf parse errors
  • New samba-tool user setprimarygroup command
  • New samba-tool user getgroups command

These packages are included in a SAMBA+ subscription which can be purchased at the SAMBA+ Shop, detailed information and prices are listed there. The subscriptions are managed at our platform OPOSSO. Users can activate their subscriptions here and manage access credentials.


How ownCloud and SerNet worked together to improve the SMB protocol, is described in a new blog post from ownCloud. Read about it in the article "Windows Network Drive integration benefits from Samba contributions".

The text emphasizes, how Open Source Collaboration can prove to be an important and stimulatory factor for projects. In this case, ownCloud engineers worked together with longtime Samba expert Volker Lendecke at SerNet. This resulted in notifications for smb-client implemented in the SMB2 and SMB3 protocol, subsequently boosting performance and bringing more reliability to the windows network drive integration. So – to quote ownCloud: "the professionals at SerNet have your back".


Newsletter

SerNet's Samba newsletter informs you about all important developments and events with its main focus on new packages.

+ subscribe to Newsletter

SAMBA+ Shop

Buy and manage software subscriptions. SAMBA+ subscriptions are available for one, two and three years at the SAMBA+ shop.

+ visit the shop

Deutsche Sprachelangue francaisEnglish language