There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "libwbclient-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-libs": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "registry-tools": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-common-bin": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libwbclient0-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-dsdb-modules-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libpam-winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libnss-winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-vfs-modules": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "python-samba-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-common-bin-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-testsuite": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "smbclient-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libsmbclient": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libwbclient0": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libsmbclient-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "python-samba": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-dsdb-modules": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "registry-tools-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-vfs-modules-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "ctdb": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libnss-winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libsmbclient-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-libs-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-testsuite-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-common": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libpam-winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "smbclient": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "samba-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "libparse-pidl-perl": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15", "ctdb-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "libwbclient-dev": "2:4.11.5+dfsg-1ubuntu1", "samba-libs": "2:4.11.5+dfsg-1ubuntu1", "registry-tools": "2:4.11.5+dfsg-1ubuntu1", "samba-common-bin": "2:4.11.5+dfsg-1ubuntu1", "libwbclient0-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "samba-dsdb-modules-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "libpam-winbind-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "libnss-winbind-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "python3-samba-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "winbind": "2:4.11.5+dfsg-1ubuntu1", "samba-vfs-modules": "2:4.11.5+dfsg-1ubuntu1", "samba-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "samba-common-bin-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "samba-testsuite": "2:4.11.5+dfsg-1ubuntu1", "smbclient-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "libsmbclient": "2:4.11.5+dfsg-1ubuntu1", "samba": "2:4.11.5+dfsg-1ubuntu1", "libsmbclient-dev": "2:4.11.5+dfsg-1ubuntu1", "libwbclient0": "2:4.11.5+dfsg-1ubuntu1", "samba-dsdb-modules": "2:4.11.5+dfsg-1ubuntu1", "python3-samba": "2:4.11.5+dfsg-1ubuntu1", "samba-vfs-modules-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "registry-tools-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "ctdb": "2:4.11.5+dfsg-1ubuntu1", "libnss-winbind": "2:4.11.5+dfsg-1ubuntu1", "libsmbclient-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "samba-libs-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "winbind-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "samba-testsuite-dbgsym": "2:4.11.5+dfsg-1ubuntu1", "samba-common": "2:4.11.5+dfsg-1ubuntu1", "libpam-winbind": "2:4.11.5+dfsg-1ubuntu1", "smbclient": "2:4.11.5+dfsg-1ubuntu1", "samba-dev": "2:4.11.5+dfsg-1ubuntu1", "ctdb-dbgsym": "2:4.11.5+dfsg-1ubuntu1" } ] }