Software update: Samba 4.11.2 / 4.10.10 / 4.9.15

Samba runs on Unix, BSD and Linux servers, and is an open source implementation of the SMB / CIFS – network protocol . Since version 3, Samba can offer file and print services to Windows clients, and it is able to act as a domain controller . Extensive documentation, including practical how-to’s for a slightly older version, can be found on this page . The developers have prepared versions 4.11.2, 4.10.10 and 4.9.15, with the following announcement:

Samba 4.11.2, 4.10.10 and 4.9.15 Security Releases Available

These are security releases in order to address CVE-2019-10218 (Client code can return filenames containing path separators). CVE-2019-14833 (Samba AD DC check password script does not receive the full password). CVE-2019-14847 (User with “get changes” permission can crash AD DC LDAP server via dirsync).

The uncompressed tarballs have been signed using GnuPG (ID 6F33915B6568B7EA).

See the 4.11.2 release notes for more info.
See the 4.10.10 release notes for more info.
See the 4.9.15 release notes for more info.