Re: [List] Samba versions in ports and updating to newer version

On 29/07/2026 18:57, [email protected] wrote:
> Hi
> I am currently using samba419 from packages but when I ran pkg upgrade I got a message I should go to a newer version.
> If I run pkg search I get the following versions, all with the same description:
>
> $ pkg search samba4
> samba416-4.16.11_12            Free SMB/CIFS and AD/DC server and client for Unix
> samba419-4.19.9_13             Free SMB/CIFS and AD/DC server and client for Unix
> samba420-4.20.8_2              Free SMB/CIFS and AD/DC server and client for Unix
> samba422-4.22.10_1             Free SMB/CIFS and AD/DC server and client for Unix
> samba423-4.23.8_1              Free SMB/CIFS and AD/DC server and client for Unix
>
> In /usr/ports/UPDATING I see no relevant remarks about samba.
> Can I just do pkg remove samba419 followed by pkg install samba423 ?
> Or are there issues to expect ? And where can I find documentation of those issues ?
>
> Cheers,
> 	Paul

Background info on Samba right now that might be relevant here...

https://www.samba.org/samba/security/CVE-2026-6949.html
https://www.samba.org/samba/security/CVE-2026-58216.html
https://www.samba.org/samba/security/CVE-2026-58221.html
https://www.samba.org/samba/security/CVE-2026-58222.html
https://www.samba.org/samba/security/CVE-2026-58224.html

At least two of these look to be potentially very serious (as a minimum 
they can crash Samba on demand). Of the packages you mentioned above, 
only 4.22.10 is the on fixed list. 4.23 needs to be .11+ and 4.24 (not 
listed) needs to be .5+

Shout out to Nicola Mingotti for bringing this to my attention.

Regards, Frank.