Red Hat Security AdvisoryRHSA-2026:28053
samba security update
Released 2026-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.4) samba-client-4.19.4-105.el9_4.4, samba-krb5-printing-4.19.4-105.el9_4.4, samba-vfs-iouring-4.19.4-105.el9_4.4 +3
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) libnetapi-4.19.4-105.el9_4.4, libsmbclient-4.19.4-105.el9_4.4, libwbclient-4.19.4-105.el9_4.4 +15
- Red Hat Enterprise Linux Resilient Storage E4S (v.9.4) ctdb-4.19.4-105.el9_4.4
Fixes 5 records
Priority MEDIUM 58
A flaw was found in the Samba printing subsystem.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1393 · Published 2026-05-26 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +9 CWE-78
Priority MEDIUM 48
A flaw was found in Samba.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02501 · Published 2026-05-28 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +19 CWE-78
Priority LOW 36
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · No interaction · EPSS 0.00261 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-345
Priority LOW 33
A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00862 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +18 CWE-284
Priority LOW 31
A flaw was found in Samba’s vfs_worm module.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00947 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280