20 September 2017

Samba 4.6.8, 4.5.14 and 4.4.16 Security Releases Available

This is a security release in order to address the following defects:

• CVE-2017-12150 (SMB1/2/3 connections may not require signing where they should)
• CVE-2017-12151 (SMB3 connections don't keep encryption across DFS redirects)
• CVE-2017-12163 (CVE-2017-12163 (Server memory information leak over SMB1)

The uncompressed tarballs have been signed using GnuPG (ID 6F33915B6568B7EA).
The 4.6.8 source code can be downloaded now. A patch against Samba 4.6.7 is also available. See the 4.6.8 release notes for more info.
The 4.5.14 source code can be downloaded now. A patch against Samba 4.5.13 is also available. See the 4.5.14 release notes for more info.
The 4.4.16 source code can be downloaded now. A patch against Samba 4.4.15 is also available. See the 4.4.16 release notes for more info.