samba-4.25.1 (Security update)

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

Changes since 4.25.0

• BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open (CVE-2026-109411)

• BUG 16274: CTDB: Cannot find device "<iface>@<link>": need to extract real interface names

• BUG 16200: generate_unique_u64() may not protect against veto_value
• BUG 16261: Rename with ReplaceIfExists to a target differing only in case creates a duplicate instead of replacing (regression in bb130f32)

• BUG 16263: Samba 4.25.0 fails to build on macOS

• BUG 16258: Python smbconf transaction_start() lacks a talloc stack frame with CTDB
• BUG 16265: Linux i686 build fails on dynamic_lookup
• BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open (CVE-2026-109411)
• BUG 16287: vfs_acl_xattr crashes on zero-sized flistxattr queries

• BUG 16235: Dynamic interface support in smbd is racy
• BUG 16254: CTDB database operations can be run against incorrect nodes
• BUG 16273: A node can be banned because it tries to run recovery after losing the cluster lock

• BUG 15857: All backend log should honor global log level "log level = "

• BUG 15324: fruit:time machine max size can only be set to an integer and is ignored if user sets a float

[Bruce Dubbs]

Updated at commit 3016ac062f. Leaving open for SA.

[Bruce Dubbs]

Advisory sa-13.1-090 has been issued.