Samba 4.0.24 Available for Download

                   ==============================
                   Release Notes for Samba 4.0.24
                          January 15, 2015
                   ==============================


This is a security release in order to address CVE-2014-8143 (Elevation
of privilege to Active Directory Domain Controller).

o  CVE-2014-8143:
   Samba's AD DC allows the administrator to delegate
   creation of user or computer accounts to specific users or groups.

   However, all released versions of Samba's AD DC did not implement the
   additional required check on the UF_SERVER_TRUST_ACCOUNT bit in the
   userAccountControl attributes.


Changes since 4.0.23:
---------------------

o   Andrew Bartlett <abartlet@samba.org>
    * BUG 10993: CVE-2014-8143: dsdb-samldb: Check for extended access
      rights before we allow changes to userAccountControl.