Samba releases 4.24.8 update with SMB3 signing security fix

The Samba Team has released Samba 4.24.8, a bug-fix update for the still-supported 4.24 stable series. The release includes ten fixes addressing security hardening, high-availability clustering, and protocol correctness.

A primary security enhancement involves SMB3 Session Setup responses, which are now required to be always signed. This change serves as a defense against relay attacks by ensuring responses remain signed even in edge cases, such as guest or anonymous sessions.

Other notable fixes include resolving issues with case-sensitive filename handling, winbind process crashes, Kerberos encryption settings, and CTDB cluster database operations. Unlike previous security patches, these updates do not carry CVE identifiers, as they address internal bug reports rather than disclosed exploits.