08 April 2019

Samba 4.10.2, 4.9.6 and 4.8.11 Security Releases Available

These are security releases in order to address CVE-2019-3870 (World writable files in Samba AD DC private/ dir) and CVE-2019-3880 (Save registry file outside share as unprivileged user).

The uncompressed tarballs have been signed using GnuPG (ID 6F33915B6568B7EA). The 4.10.2 source code can be downloaded now. A patch against Samba 4.10.1 is also available. See the release notes for more info. The 4.9.6 source code can be downloaded now. A patch against Samba 4.9.5 is also available. See the release notes for more info. The 4.8.11 source code can be downloaded now. A patch against Samba 4.8.10 is also available. See the release notes for more info.