Download Samba 3.0.25

Yesterday an update of Samba was released in the form of version 3.0.25. This program runs on Unix-, BSD- and Linux-based servers and is able to provide file and/or printer services to Windows clients via the so-called Common Internet File System protocol, or CIFS. Extensive documentation, including practical so-called HowTo’s can be found on this page are being found. A lot of work has gone into version 3.0.25 and it contains more than the usual bug fixes. The full release notes are here Here are the most important changes:

Major features included in the 3.0.25 code base include:

• Significant improvements in the winbind off-line logon support.
• Support for secure DDNS updates as part of the ‘net ads join’ process.
• Rewritten IdMap interface which allows for TTL based caching and per domain backends.
• New plug-in interface for the “winbind nss info” parameter.
• New file change notify subsystem which is able to make use of inotify on Linux.
• Support for passing Windows security descriptors to a VFS plug-in allowing for multiple Unix ACL implements to running side by side on the Same server.
• Improved compatibility with Windows Vista clients including improved read performance with Linux servers.
• Man pages for IdMap and VFS plugins.

Security Fixes included in the Samba 3.0.25 release are:

• CVE-2007-2444 (Samba 3.0.23d – 3.0.25pre2): Local SID/Name translation bug can result in user privilege elevation.
• CVE-2007-2446 (Samba 3.0.0 – 3.0.25rc3): Multiple heap overflows allow remote code execution.
• CVE-2007-2447 (Samba 3.0.0 – 3.0.25rc3): Unescaped user input parameters are passed as arguments to /bin/sh allowing for remote command execution.

[break]