TI-2026-28984 CVE-2026-40170
ngtcp2 has a qlog transport parameter serialization stack buffer overflow
Priority HIGH 72
ngtcp2 is a C implementation of the IETF QUIC protocol.
RHSA-2026:22963
samba security update
Released 2026-06-03 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) samba-client-4.23.5-109.el10_2, samba-gpupdate-4.23.5-109.el10_2, samba-krb5-printing-4.23.5-109.el10_2 +4
- Red Hat Enterprise Linux BaseOS (v. 10) ldb-tools-4.23.5-109.el10_2, libldb-4.23.5-109.el10_2, libnetapi-4.23.5-109.el10_2 +18
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libldb-devel-4.23.5-109.el10_2, libnetapi-devel-4.23.5-109.el10_2, libsmbclient-devel-4.23.5-109.el10_2 +6
Fixes 6 records
TI-2026-03891 CVE-2026-4480 · GHSA-hwwh-4hhw-h9jf
Samba: samba: remote code execution in printing subsystem via unescaped job description
Priority MEDIUM 58
A flaw was found in the Samba printing subsystem.
TI-2026-03832 CVE-2026-4408 · GHSA-jg8v-92xc-cx65
Samba: remote code execution in samr
Priority MEDIUM 48
A flaw was found in Samba.
TI-2026-02601 CVE-2026-3012 · GHSA-59rx-q76w-hqrw
Samba: group policy certificate enrollment uses http:// without validation
Priority LOW 36
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.
TI-2026-01597 CVE-2026-1933 · GHSA-c866-5hw6-cqf9
Samba: missing access check on reparse point operations
Priority LOW 33
A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.
TI-2026-01978 CVE-2026-2340 · GHSA-m6w2-p258-gxqp
Samba: vfs_worm does not block directory modification
Priority LOW 31
A flaw was found in Samba’s vfs_worm module.