similar to: [Announce] Samba 4.20.1 Available for Download

Release Announcements --------------------- This is the latest stable release of the Samba 4.19 release series. Changes since 4.19.6 -------------------- o? Douglas Bagnall <douglas.bagnall at catalyst.net.nz> ?? * BUG 15569: ldb qsort might r/w out of bounds with an intransitive compare ???? function (ldb 2.8.1 is already released). ?? * BUG 15625: Many qsort() comparison functions

Release Announcements --------------------- This is the latest stable release of the Samba 4.19 release series. Changes since 4.19.6 -------------------- o? Douglas Bagnall <douglas.bagnall at catalyst.net.nz> ?? * BUG 15569: ldb qsort might r/w out of bounds with an intransitive compare ???? function (ldb 2.8.1 is already released). ?? * BUG 15625: Many qsort() comparison functions

Release Announcements ===================== This is the fourth release candidate of Samba 4.21.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.21 will be the next version of the Samba suite. UPGRADING ========= Hardening of "valid

Release Announcements ===================== This is the fourth release candidate of Samba 4.21.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.21 will be the next version of the Samba suite. UPGRADING ========= Hardening of "valid

Release Announcements --------------------- This is the latest stable release of the Samba 4.20 release series. Changes since 4.20.4 -------------------- o? Ralph Boehme <slow at samba.org> ?? * BUG 15695: "inherit permissions = yes" triggers assert() in vfs_default ???? when creating a stream. o? David Disseldorp <ddiss at samba.org> ?? * BUG 15699: Incorrect

Release Announcements --------------------- This is the latest stable release of the Samba 4.20 release series. Changes since 4.20.4 -------------------- o? Ralph Boehme <slow at samba.org> ?? * BUG 15695: "inherit permissions = yes" triggers assert() in vfs_default ???? when creating a stream. o? David Disseldorp <ddiss at samba.org> ?? * BUG 15699: Incorrect

Release Announcements --------------------- This is the first stable release of the Samba 4.21 release series. Please read the release notes carefully before upgrading. Hardening of "valid users", "invalid users", "read list" and "write list" ========================================================================= In previous versions of Samba, if a

Release Announcements --------------------- This is the first stable release of the Samba 4.21 release series. Please read the release notes carefully before upgrading. Hardening of "valid users", "invalid users", "read list" and "write list" ========================================================================= In previous versions of Samba, if a

Release Announcements --------------------- This is the latest stable release of the Samba 4.18 release series. Changes since 4.18.5 -------------------- o? Jeremy Allison <jra at samba.org> ?? * BUG 15420: reply_sesssetup_and_X() can dereference uninitialized tmp ???? pointer. ?? * BUG 15430: Missing return in reply_exit_done(). o? Andrew Bartlett <abartlet at samba.org> ?? *

Release Announcements --------------------- This is the latest stable release of the Samba 4.18 release series. Changes since 4.18.5 -------------------- o? Jeremy Allison <jra at samba.org> ?? * BUG 15420: reply_sesssetup_and_X() can dereference uninitialized tmp ???? pointer. ?? * BUG 15430: Missing return in reply_exit_done(). o? Andrew Bartlett <abartlet at samba.org> ?? *

Release Announcements --------------------- This is the latest stable release of the Samba 4.20 release series. LDAP TLS/SASL channel binding support ------------------------------------- The ldap server supports SASL binds with kerberos or NTLMSSP over TLS connections now (either ldaps or starttls). Setups where 'ldap server require strong auth = allow_sasl_over_tls' was required

Release Announcements --------------------- This is the latest stable release of the Samba 4.20 release series. LDAP TLS/SASL channel binding support ------------------------------------- The ldap server supports SASL binds with kerberos or NTLMSSP over TLS connections now (either ldaps or starttls). Setups where 'ldap server require strong auth = allow_sasl_over_tls' was required

Release Announcements --------------------- This is the latest stable release of the Samba 4.19 release series. Changes since 4.19.7 -------------------- o? Douglas Bagnall <douglas.bagnall at catalyst.net.nz> ?? * BUG 15671: Invalid client warning about command line passwords. ?? * BUG 15672: Version string is truncated in manpages. ?? * BUG 15673: --version-* options are still not

Release Announcements --------------------- This is the latest stable release of the Samba 4.19 release series. Changes since 4.19.7 -------------------- o? Douglas Bagnall <douglas.bagnall at catalyst.net.nz> ?? * BUG 15671: Invalid client warning about command line passwords. ?? * BUG 15672: Version string is truncated in manpages. ?? * BUG 15673: --version-* options are still not

Release Announcements ===================== This is the third release candidate of Samba 4.21.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.21 will be the next version of the Samba suite. UPGRADING ========= Hardening of "valid

Release Announcements ===================== This is the third release candidate of Samba 4.21.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.21 will be the next version of the Samba suite. UPGRADING ========= Hardening of "valid

Release Announcements --------------------- This is the latest stable release of the Samba 4.19 release series. It contains the security-relevant bug CVE-2018-14628: ??? Wrong ntSecurityDescriptor values for "CN=Deleted Objects" ??? allow read of object tombstones over LDAP ??? (Administrator action required!) ??? https://www.samba.org/samba/security/CVE-2018-14628.html

Release Announcements --------------------- This is the latest stable release of the Samba 4.19 release series. It contains the security-relevant bug CVE-2018-14628: ??? Wrong ntSecurityDescriptor values for "CN=Deleted Objects" ??? allow read of object tombstones over LDAP ??? (Administrator action required!) ??? https://www.samba.org/samba/security/CVE-2018-14628.html

On Mon, 2023-11-27 at 13:27 +0100, Jule Anger via samba wrote: > Release Announcements > --------------------- > > This is the latest stable release of the Samba 4.19 release series. > It contains the security-relevant bug CVE-2018-14628: > > ???? Wrong ntSecurityDescriptor values for "CN=Deleted Objects" > ???? allow read of object tombstones over LDAP >

Hi, on a customer system samba/winbindd is used for windows and unix authentication. I just tuned searches of the ldap backend to speedup by factor 20-200 and slapd now doesn't seem to be the bottleneck anymore. Don't know how well the windows authentication now works, since this is presently done by the heartbeat failover server. However, simply starting 'mc' as root makes