Netatalk 4.4.3 is available!
The Netatalk team is proud to announce the latest version in the Netatalk 4.4 release series.
In addition to the following security fixes, this release contains a handful of UAM and container hardening improvements.
CVE-2026-44047, CVE-2026-44048, CVE-2026-44049, CVE-2026-44050, CVE-2026-44051, CVE-2026-44052, CVE-2026-44054, CVE-2026-44055, CVE-2026-44057, CVE-2026-44060, CVE-2026-44062, CVE-2026-44064, CVE-2026-44066, CVE-2026-44068, CVE-2026-44076, CVE-2026-45354, CVE-2026-45355, CVE-2026-45356, CVE-2026-45698, CVE-2026-45699
Note that there are another outstanding 18 CVEs that are not fixed in this release, because the Netatalk team deemed them to be of lower severity. These will be addressed in a future feature release.
All users of previous Netatalk versions are encouraged to upgrade to 4.4.3.
This is a source-only release. To build:
# Extract the source
tar -xf netatalk-4.4.3.tar.xz
cd netatalk-4.4.3
# Configure and build
meson setup build
meson compile -C build
# Install
sudo meson install -C build
What’s Changed
- [4.4] libatalk: fix OOB access when “end_of_list_marker” is passed as logtype by @rdmark in #2904
- [4.4] libatalk: map logtype identifiers correctly with the enum by @rdmark in #2903
- [4.4] docker: load RandNum UAM only when password init succeeds by @rdmark in #2922
- [4.4] docker: bump production container alpine base image from 3.23.2 to 3.23.4 by @rdmark in #2920
- [4.4] docker: harden RandNum UAM in production container by @rdmark in #2965
- [4.4] uams: harden RandNum key file read bounds and integrity by @rdmark in #2964
- [4.4] docs: clarify the security sensitive nature of two older features by @rdmark in #2972
- [4.4] ci: build astyle from scratch for code formatting job by @rdmark in #2977
- [4.4] uams: warn when Randnum afppasswd key file is missing by @rdmark in #2973
- [4.4] docker: introduce AFP_UAMS option for fine grained control of UAMs by @rdmark in #2975
- release v4.4.3 by @rdmark in #2989
Full Changelog: https://github.com/Netatalk/netatalk/compare/netatalk-4-4-2…netatalk-4-4-3
Downloads
- netatalk-4.4.3.tar.xz (1.1 MB)
- netatalk-4.4.3.tar.xz.asc (0.0 MB)
- netatalk-4.4.3.tar.xz.sha256sum (0.0 MB)
- netatalk-4.4.3.tar.xz.sha512sum (0.0 MB)
- netatalk-4.4.3.wbm.gz (0.1 MB)
Footnotes
Release published on 2026-05-13
Generated from GitHub Release Notes
