Severe bug announcement: Badlock is coming
On April 12th, 2016 SerNet, the Samba Team and Microsoft will disclose a severe bug that affects almost all versions of Microsoft Windows and Samba. The bug is called "Badlock". Due to the fundamental functions that are affected by the bug there will be no detailed information prior to the release of fixes by Microsoft and the Samba Team. More information will be available at http://badlock.org – the page will receive updates regularly. SysAdmins should mark the release date already.
Badlock has been discovered, analyzed and fixed by Stefan Metzmacher, a renowned member of the international Samba core developer team. He notified Microsoft about his findings and a consecutive strong collaboration lead to fixes for both platforms. Patches are currently reviewed and prepared for release, including SerNet's special SAMBA+ offering (see http://samba.plus). Please check http://badlock.org during the next weeks for information on which versions will get patches.
SerNet, the Samba Team and Microsoft agreed on the joint release date April 12th, 2016. The Badlock bug will entail exploits soon after being exposed. The coordinated efforts are meant to ensure a reasonable time to get the maximum number of systems repaired in short time.