Release Planning for Samba 4.17: Difference between revisions

From SambaWiki
(Release Samba v4.17.6)
(Release Samba v4.17.8)
(One intermediate revision by the same user not shown)
Line 4: Line 4:
* [https://bugzilla.samba.org/buglist.cgi?bug_severity=regression&query_format=advanced&target_milestone=4.17 All 4.17 regression bugs]
* [https://bugzilla.samba.org/buglist.cgi?bug_severity=regression&query_format=advanced&target_milestone=4.17 All 4.17 regression bugs]
* [https://bugzilla.samba.org/buglist.cgi?bug_severity=regression&bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&bug_status=VERIFIED&query_format=advanced&target_milestone=4.17 Unresolved 4.17 regression bugs]
* [https://bugzilla.samba.org/buglist.cgi?bug_severity=regression&bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&bug_status=VERIFIED&query_format=advanced&target_milestone=4.17 Unresolved 4.17 regression bugs]

== Samba 4.17.9 ==

<small>('''Updated 11-May-2023''')</small>

* Thursday, July 13 2023 - Planned release date for '''Samba 4.17.9'''.

== Samba 4.17.8 ==

<small>('''Updated 11-May-2023''')</small>

* Thursday, May 11 2023 - '''Samba 4.17.8''' has been released.
[https://www.samba.org/samba/history/samba-4.17.8.html Release Notes Samba 4.17.8]


== Samba 4.17.7 ==
== Samba 4.17.7 ==


<small>('''Updated 9-March-2023''')</small>
<small>('''Updated 2023-March-29''')</small>


* Wednesday, March 29 2023 - [https://download.samba.org/pub/samba/stable/samba-4.17.7.tar.gz Samba 4.17.7] has been released as a '''Security Release''' to address the following defects:
* Thursday, May 11 2023 - Planned release date for '''Samba 4.17.7'''.
** [https://www.samba.org/samba/security/CVE-2023-0225.html CVE-2023-0225] (An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.)
** [https://www.samba.org/samba/security/CVE-2023-0922.html CVE-2023-0922] (The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.)
** [https://www.samba.org/samba/security/CVE-2023-0614.html CVE-2023-0614] (The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure via LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC. Installations with such secrets in their Samba AD should assume they have been obtained and need replacing.)
[https://www.samba.org/samba/history/samba-4.17.7.html Release Notes Samba 4.17.7]


== Samba 4.17.6 ==
== Samba 4.17.6 ==

Revision as of 07:14, 11 May 2023

Samba 4.17 is in the Maintenance Mode.

Release blocking bugs

Samba 4.17.9

(Updated 11-May-2023)

  • Thursday, July 13 2023 - Planned release date for Samba 4.17.9.

Samba 4.17.8

(Updated 11-May-2023)

  • Thursday, May 11 2023 - Samba 4.17.8 has been released.
 Release Notes Samba 4.17.8

Samba 4.17.7

(Updated 2023-March-29)

  • Wednesday, March 29 2023 - Samba 4.17.7 has been released as a Security Release to address the following defects:
    • CVE-2023-0225 (An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.)
    • CVE-2023-0922 (The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.)
    • CVE-2023-0614 (The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure via LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC. Installations with such secrets in their Samba AD should assume they have been obtained and need replacing.)
 Release Notes Samba 4.17.7

Samba 4.17.6

(Updated 9-March-2023)

  • Thursday, March 9 2023 - Samba 4.17.6 has been released.
 Release Notes Samba 4.17.6

Samba 4.17.5

(Updated 26-January-2023)

  • Thursday, January 26 - Samba 4.17.5 has been released.
 Release Notes Samba 4.17.5

Samba 4.17.4

(Updated 15-December-2022)

  • Thursday, December 15 2022 - Samba 4.17.4 has been released as a Security Release to address the following defects:
    • CVE-2022-37966 (This is the Samba CVE for the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022)
    • CVE-2022-37967 (This is the Samba CVE for the Windows Kerberos Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022)
    • CVE-2022-38023 (The "RC4" protection of the NetLogon Secure channel uses the same algorithms as rc4-hmac cryptography in Kerberos, and so must also be assumed to be weak)
 Release Notes Samba 4.17.4

Samba 4.17.3

(Updated 15-November-2022)

  • Tuesday, November 15 2022 - Samba 4.17.3 has been released as a Security Release to address the following defects:
    • CVE-2022-42898 (Samba's Kerberos libraries and AD DC failed to guard against integer overflows when parsing a PAC on a 32-bit system, which allowed an attacker with a forged PAC to corrupt the heap)
 Release Notes Samba 4.17.3

Samba 4.17.2

(Updated 25-October-2022)

  • Tuesday, October 25 2022 - Samba 4.17.2 has been released as a Security Release to address the following defects:
    • CVE-2022-3437 (There is a limited write heap buffer overflow in the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba))
    • CVE-2022-3592 (A malicious client can use a symlink to escape the exported directory)
 Release Notes Samba 4.17.2

Samba 4.17.1

(Updated 19-October-2022)

  • Wednesday, October 19 2022 - Samba 4.17.1 has been released.
 Release Notes Samba 4.17.1

Samba 4.17.0

(Updated 13-September-2022)

  • Tuesday, September 13 2022 - Samba 4.17.0 has been released.
 Release Notes Samba 4.17.0

Samba 4.17.0rc5

(Updated 06-September-2022)

  • Tuesday, September 6 2022 - Samba 4.17.0rc5 has been released.
 Release Notes Samba 4.17.0rc5

Samba 4.17.0rc4

(Updated 30-August-2022)

  • Tuesday, August 30 2022 - Samba 4.17.0rc4 has been released.
 Release Notes Samba 4.17.0rc4

Samba 4.17.0rc3

(Updated 23-August-2022)

  • Tuesday, August 23 2022 - Samba 4.17.0rc3 has been released.
 Release Notes Samba 4.17.0rc3

Samba 4.17.0rc2

(Updated 16-August-2022)

  • Tuesday, August 16 2022 - Samba 4.17.0rc2 has been released.
 Release Notes Samba 4.17.0rc2

Samba 4.17.0rc1

(Updated 8-August-2022)

  • Monday, August 8 2022 - Samba 4.17.0rc1 has been released.
 Release Notes Samba 4.17.0rc1