Samba 4.23.11 Available for Download

Samba 4.23.11 (gzipped)
Signature

Patch (gzipped) against Samba 4.23.10
Signature

                   ===============================
                   Release Notes for Samba 4.23.11
                           August 03, 2026
                   ===============================


This is the latest stable release of the Samba 4.23 release series.


Changes since 4.23.10
---------------------


o  Ralph Boehme <slow@samba.org>
   * BUG 16065: Memory leak in DRS when replication fails

o  Matthias Grandl <matthias.grandl@croit.io>
   * BUG 16176: vfs_ceph_snapshots: smbd panics on snapshot access for a share
     mounted at the CephFS root ("/")

o  Volker Lendecke <vl@samba.org>
   * BUG 16191: race condition in pthreadpool when forking

o  Stefan Metzmacher <metze@samba.org>
   * BUG 14638: restrict anonymous = 2 breaks RODC functionality
   * BUG 16006: warning: assignment discards 'const' qualifier from pointer
     target type [-Wdiscarded-qualifiers] and C26 fixes
   * BUG 16065: Memory leak in DRS when replication fails
   * BUG 16067: Require NTLMv2 session security on Windows makes trusts to Samba
     unusable
   * BUG 16093: temporary read of unrelated or non-existing memory in s3 dfs
     server
   * BUG 16094: source4/dsdb/samdb/cracknames.c doesn't use
     ldb_binary_encode_string() consistently
   * BUG 16151: winbindd stuck in init_dc_connection_rpc() returning
     NT_STATUS_TRUSTED_DOMAIN_FAILURE
   * BUG 16153: dsgetdcname() may not detect an active directory domain if the
     netbios domain name is given and nmbd nor the nbt service is
     available

o  Anoop C S <anoopcs@samba.org>
   * BUG 16186: vfs_ceph_new: smbd crashes when mixing proxy and non-proxy
     CephFS shares

o  Andreas Schneider <asn@samba.org>
   * BUG 16006: warning: assignment discards 'const' qualifier from pointer
     target type [-Wdiscarded-qualifiers] and C26 fixes
   * BUG 16149: domain\user not split when provided as username in
     smbc_set_credentials_with_fallback()

o  Martin Schwenke <mschwenke@ddn.com>
   * BUG 15994: CTDB doesn't send tickle ACKs when taking over a released IP
   * BUG 16152: CTDB can run nested elections, in rare circumstances