Please report all security defects to security@samba.org rather than on public mailing lists or in bugzilla.