Software Update: Samba 4.14.3

Samba runs on Unix, BSD and Linux servers, and is an open source implementation of the smb/cifsnetwork protocol. Also, Samba can provide file and print services to Windows clients, and is able to domain controller within Active Directory to function. Extensive documentation, including practical how-tos for a slightly older version, can be found on this page are being found. The developers have released version 4.14.3 with the following changes:

Release Notes for Samba 4.14.3 – Changes since 4.14.2

• BUG 14671: s3:modules:vfs_virusfilter: Recent New_VFS changes break vfs_virusfilter_openat.
• BUG 14586: build: Notice if flex is missing at configure time.
• BUG 14672: Fix smbd panic when two clients open same file.
• BUG 14675: Fix memory leak in the RPC server.
• BUG 14679: s3: smbd: fix deferred renames.
• BUG 14675: s3-iremotewinspool: Set the per-request memory context.
• BUG 14675: Fix memory leak in the RPC server.
• BUG 11899: third_party: Update socket_wrapper to version 1.3.2.
• BUG 14640: third_party: Update socket_wrapper to version 1.3.3.
• BUG 14665: samba-gpupdate: Test that sysvol paths download in case-insensitive way.
• BUG 14662: smbd: Ensure errno is preserved across fsp destructor.
• BUG 14663: idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict.
• BUG 14288: build: Only add -Wl,–as-needed when supported.

Release Notes for Samba 4.14.2

This is a follow-up release to depend on the correct ldb version. This is only needed when building against a system ldb library.

This is a security release in order to address the following defects:

• CVE-2020-27840: Heap corruption via crafted DN strings.
• CVE-2021-20277: Read out of bounds in AD DC LDAP server.

Release Notes for Samba 4.14.1

This is a security release in order to address the following defects:

• CVE-2020-27840: Heap corruption via crafted DN strings.
• CVE-2021-20277: Read out of bounds in AD DC LDAP server.