Samba 4.8.10 Available for Download

Samba 4.8.10 (gzipped)

Patch (gzipped) against Samba 4.8.9

                   Release Notes for Samba 4.8.10
                           April 4, 2019

This is the latest stable release of the Samba 4.8 release series.
Please note that this will very likely be the last bugfix release of the
Samba 4.8 release series. There will be security releases beyond this point

Changes since 4.8.9:

o  Jeremy Allison <>
   * BUG 13690: smbd: uid: Don't crash if 'force group' is added to an existing
     share connection.
   * BUG 13770: s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
   * BUG 13803: SMB1 POSIX mkdir does case insensitive name lookup.

o  Tim Beale <>
   * ldb: Bump ldb version to 1.3.7.
   * BUG 13686: 'samba-tool user syscpasswords' fails on a domain with many DCs.
   * BUG 13762: Performance regression in LDB one-level searches.
o  Ralph Boehme <>
   * BUG 13776: tldap: Avoid use after free errors.
   * BUG 13802: Fix idmap xid2sid cache churn.
   * BUG 13812: access_check_max_allowed() doesn't process "Owner Rights" ACEs.

o  Günther Deschner <>
   * BUG 13746: s3-smbd: use fruit:model string for mDNS registration.

o  David Disseldorp <>
   * BUG 13766: Printcap still processed with "load printers" disabled.
   * BUG 13807: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate
     and fallocate.

o  Joe Guo <>
   * BUG 13728: netcmd/user: python[3]-gpgme unsupported and replaced by

o  Amitay Isaacs <>
   * BUG 13520: Fix portability issues on freebsd.

o  Björn Jacke <>
   * BUG 13759: sambaundoguididx: Use the right escaped oder unescaped sam ldb

o  Volker Lendecke <>
   * BUG 13786: messages_dgm: Properly handle receiver re-initialization.
   * BUG 13813: Fix idmap cache pollution with S-1-22- IDs on winbind hickup.

o  Gary Lockyer <>
   * BUG 13773: CVE-2019-3824 ldb: Release ldb 1.3.8, ldb: Out of bound read in

o  Marcos Mello <>
   * BUG 11568: Send status to systemd on daemon start.

o  Stefan Metzmacher <>
   * BUG 13816: dbcheck in the middle of the tombstone garbage collection causes
     replication failures.
   * BUG 13818: An out of scope usage of a stack variable may cause corruption
     in EnumPrinter*.

o  Noel Power <>
   * python/samba: Extra ndr_unpack needs bytes function.

o  Jiří Šašek <>
   * BUG 13704: notifyd: Fix SIGBUS on sparc.

o  Christof Schmitt <>
   * BUG 13787: waf: Check for libnscd.
   * BUG 13813: lib/winbind_util: Add winbind_xid_to_sid for --without-winbind.
   * passdb: Update ABI to 0.27.2.

o  Andreas Schneider <>
   * BUG 13770: s3:vfs: Correctly check if OFD locks should be enabled or not.
   * BUG 13823: lib:util: Move debug message for mkdir failing to log level 1.
   * BUG 13832: Fix printing via smbspool backend with kerberos auth.
   * BUG 13847: s4:librpc: Fix installation of Samba.
   * BUG 13848: s3:lib: Fix the debug message for adding cache entries.
   * BUG 13853: s3:waf: Fix the detection of makdev() macro on Linux.

o  Zhu Shangzhong <>
   * BUG 13839: ctdb: Initialize addr struct to zero before reparsing as IPV4.