Samba 4.24.8 was released on October 12 and includes ten bug fixes primarily focusing on security hardening, clustering, and protocol correctness. A significant change is the requirement for SMB3 Session Setup responses to always be signed, enhancing security against relay attacks. None of the fixes in this release carry a CVE, distinguishing it from previous patches that addressed disclosed vulnerabilities. Users of Samba 4.24 are encouraged to apply this patch while it remains under support, as the 4.25 feature branch is now available

Samba 4.24.8 Releases Ten Bug Fixes, Including SMB3 Signing Patch

Samba 4.24.8 shipped on October 12 as the latest bug-fix patch in the still-supported 4.24 stable series. The ten fixes span security hardening, clustering, and protocol correctness, with the standout change requiring SMB3 Session Setup responses to always be signed. Notably, none of these issues carry a CVE, setting this release apart from the CVE-laden May 2026 security patch. Samba users who haven't yet moved to the 4.25 feature branch should still apply 4.24.8 while it remains under support.

Samba 4.24.8 Releases Ten Bug Fixes, Including SMB3 Signing Patch @ Linux Compatible