14 DAY TRIAL // Samba 4.0.11, an app that seamlessly integrates Linux/Unix servers and desktops into Active Directory environments using the winbind daemon, is now available for download and testing.
According to the developers, this latest version is a very small entry and more of a maintenance release for this particular branch, designed to fix a couple of security problems.
“This is a security release in order to address CVE-2013-4475 (ACLs are not checked on opening an alternate data stream on a file or directory) and CVE-2013-4476 (Private key in key.pem world readable),” reads the changelog.
It seems that Samba versions 3.2.0 and above were not checking the underlying file or directory ACL when opening an alternate data stream. This problem has been corrected.
Download Samba 4.0.11 for Linux Download Samba 4.0.11 for Mac