[Pkg-samba-maint] samba_4.24.3+dfsg-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 26 May 2026 15:46:55 +0300
Source: samba
Architecture: source
Version: 2:4.24.3+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>
Changed-By: Michael Tokarev <mjt at tls.msk.ru>
Changes:
 samba (2:4.24.3+dfsg-1) unstable; urgency=medium
 .
   * This is a security release in order to address the following defects:
 .
     CVE-2026-1933: Missing access checks on reparse point operations
 .
       On a share marked "read only = yes" and on file handles opened R/O users
       can set or delete the reparse point xattrs on files that the user has
       write-access in the file system for.
 .
       https://www.samba.org/samba/security/CVE-2026-1933.html
 .
     CVE-2026-2340: WORM vfs module does not block overwrites
 .
       The WORM (Write-Once, Read Many) vfs module is supposed to lock write
       access to shared files, so they cannot be altered after initial writes.
       It was allowing files to be overwritten by renaming a newly created file
       over a protected file.
 .
       https://www.samba.org/samba/security/CVE-2026-2340.html
 .
     CVE-2026-3012: auto-enrolment GPO installing CA certificate over http
       without verification
 .
       To bootstrap a certificate chain a domain member must fetch a certificate
       without TLS. It was trusting HTTP for this when a more secure encrypted
       LDAP channel was also available.
 .
       https://www.samba.org/samba/security/CVE-2026-3012.html
 .
     CVE-2026-3238: Denial of service against AD DC WINS server
 .
       The WINS server component of the Active Directory Domain controller code
       in Samba is vulnerable to a NULL pointer dereference and crash caused by
       an unauthenticated UDP packet.
 .
       https://www.samba.org/samba/security/CVE-2026-3238.html
 .
     CVE-2026-4408: Unauthenticated Remote Code Execution in Samba DCE/RPC
       SAMR server
 .
       Samba file servers and classic (non-AD) domain controllers with
       samba-dcerpcd started as a system service and with a "check password
       script" that has the %u substitution character are vulnerable to a
       remote code execution.
 .
       https://www.samba.org/samba/security/CVE-2026-4408.html
 .
     CVE-2026-4480: Unauthenticated Remote Code Execution in Samba
       printing subsystem
 .
       Samba print servers with a "print command" that has the %J substitution
       character are vulnerable to a Remote Code Execution.
 .
       https://www.samba.org/samba/security/CVE-2026-4480.html
Checksums-Sha1:
 6e411db48ea515937c4159054a682e88da40455e 6088 samba_4.24.3+dfsg-1.dsc
 9afa6c300553aa57cb17a8c7d529ba00791be8e8 25797720 samba_4.24.3+dfsg.orig.tar.xz
 3ff54076df1cc0ac428e02e60b7f78f4ccdbfde0 191168 samba_4.24.3+dfsg-1.debian.tar.xz
 bbf1536af6ada3b9a4b0e87bfa637517855c18bd 6098 samba_4.24.3+dfsg-1_source.buildinfo
Checksums-Sha256:
 090d08a39ded5c2ea07346862c0a6b19cf5f87819f3a4eb38086b3f327d0f06d 6088 samba_4.24.3+dfsg-1.dsc
 bf6e87d4e61271c2cd19a5803a029232efb83c1088f46d211f7ae318ee0683a0 25797720 samba_4.24.3+dfsg.orig.tar.xz
 5338c8ed35b50ee84d13d1efc6729cdbc7e1565d8bdfe6a4dcf815f625f66877 191168 samba_4.24.3+dfsg-1.debian.tar.xz
 ae57cc6f46e2c726d2f6cec40b550abb076224bd3ddce8abe08b2216be7c4d3f 6098 samba_4.24.3+dfsg-1_source.buildinfo
Files:
 0fce5400824bbf64639f0ecefed57e53 6088 net optional samba_4.24.3+dfsg-1.dsc
 24056a5bdb4a12b22a6632d8bf183766 25797720 net optional samba_4.24.3+dfsg.orig.tar.xz
 f314fa421f7025a17c5654a8705c643d 191168 net optional samba_4.24.3+dfsg-1.debian.tar.xz
 ca1af0575d426cc61e4f24486edf9aa8 6098 net optional samba_4.24.3+dfsg-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=qqhH
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20260526/2269c8e1/attachment.sig>