Red Hat Security AdvisoryRHSA-2026:25979
samba security update
Released 2026-06-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.6) libldb-devel-4.21.3-14.el9_6.1, libnetapi-devel-4.21.3-14.el9_6.1, libsmbclient-devel-4.21.3-14.el9_6.1 +6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) samba-client-4.21.3-14.el9_6.1, samba-gpupdate-4.21.3-14.el9_6.1, samba-krb5-printing-4.21.3-14.el9_6.1 +4
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) ldb-tools-4.21.3-14.el9_6.1, libldb-4.21.3-14.el9_6.1, libnetapi-4.21.3-14.el9_6.1 +18
- Red Hat Enterprise Linux Resilient Storage EUS (v.9.6) ctdb-4.21.3-14.el9_6.1
Fixes 5 records
Priority MEDIUM 58
A flaw was found in the Samba printing subsystem.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1393 · Published 2026-05-26 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +9 CWE-78
Priority MEDIUM 48
A flaw was found in Samba.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02501 · Published 2026-05-28 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +19 CWE-78
Priority LOW 36
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · No interaction · EPSS 0.00261 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-345
Priority LOW 33
A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00862 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +18 CWE-284
Priority LOW 31
A flaw was found in Samba’s vfs_worm module.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00947 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280