Red Hat Security Advisory

RHSA-2026:25049

samba security update

Released 2026-06-10 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) samba-client-4.23.5-10.el9_8, samba-gpupdate-4.23.5-10.el9_8, samba-krb5-printing-4.23.5-10.el9_8 +4
Red Hat Enterprise Linux BaseOS (v. 9) ldb-tools-4.23.5-10.el9_8, libldb-4.23.5-10.el9_8, libnetapi-4.23.5-10.el9_8 +18
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libldb-devel-4.23.5-10.el9_8, libnetapi-devel-4.23.5-10.el9_8, libsmbclient-devel-4.23.5-10.el9_8 +6
Red Hat Enterprise Linux Resilient Storage (v. 9) ctdb-4.23.5-10.el9_8

Fixes 6 records

TI-2026-28984 CVE-2026-40170

ngtcp2 has a qlog transport parameter serialization stack buffer overflow

HIGH 72

ngtcp2 is a C implementation of the IETF QUIC protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00776 Published 2026-04-16 Fixed in 1.22.1 CWE-121

TI-2026-03891 CVE-2026-4480 · GHSA-hwwh-4hhw-h9jf

Samba: samba: remote code execution in printing subsystem via unescaped job description

MEDIUM 58

A flaw was found in the Samba printing subsystem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1393 Published 2026-05-26 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +9 CWE-78

TI-2026-03832 CVE-2026-4408 · GHSA-jg8v-92xc-cx65

Samba: remote code execution in samr

MEDIUM 48

A flaw was found in Samba.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02501 Published 2026-05-28 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +19 CWE-78

TI-2026-02601 CVE-2026-3012 · GHSA-59rx-q76w-hqrw

Samba: group policy certificate enrollment uses http:// without validation

LOW 36

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.

CVSS 3.1HIGH 8.0 Adjacent network No auth No interaction EPSS 0.00261 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-345

TI-2026-01597 CVE-2026-1933 · GHSA-c866-5hw6-cqf9

Samba: missing access check on reparse point operations

LOW 33

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00862 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +18 CWE-284

TI-2026-01978 CVE-2026-2340 · GHSA-m6w2-p258-gxqp

Samba: vfs_worm does not block directory modification

LOW 31

A flaw was found in Samba’s vfs_worm module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00947 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280