[CLSA-2026:1781258405] Fix CVE(s): CVE-2026-4408
Type:
security
Severity:
Critical
Release date:
2026-06-12 10:00:22 UTC
Description:
* SECURITY UPDATE: remote command execution via unescaped %u in the "check password script" (samr password validation) - debian/patches/CVE-2026-4408.patch: reject invalid/dangerous account names, mask and single-quote the username before %u substitution, export SAMBA_CPS_ACCOUNT_NAME, and restrict _samr_ValidatePassword to DCs - CVE-2026-4408
CVEs fixed:
Updated packages:
  • ctdb_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:0e311aea7265f8628fcdf27d33f2d202a130e1b1
  • libnss-winbind_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:dc3d131534f5c7e4ee1bc6cd3ebf37cce3e03c7a
  • libpam-winbind_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:2f51b031356da998d999ffc2b7205ce5da37bf80
  • libparse-pidl-perl_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:4909dc404d4da6fa1c68db9c6d1b3373b73daacc
  • libsmbclient_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:bcbe911a827654aabbde04e41e036a6e17e0c475
  • libsmbclient-dev_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:0e7acdb346ed5e794eb9fe73c32b03778654cb0e
  • libwbclient-dev_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:3d636173fff52fd3750a043313eb8b6b3787315e
  • libwbclient0_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:71c055170e5ff0bc6dcfe41f5eac46eb1935cede
  • python-samba_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:8233690202c195ba6c758f53f9ef668ecb559698
  • registry-tools_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:0e27938c6a09bb0383effce4ebd2e6e5fa1d28a6
  • samba_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:aefcf42e9c3ce238903f5cd3da202626cc4a0d02
  • samba-common_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_all.deb
    sha:050074f2559a5ed8e659c4dd7aeb0dec1465fb7b
  • samba-common-bin_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:e5d489d9f242a853ca1f2134560b53b0615b3d5a
  • samba-dev_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:91733c1917cc612676b5eb1443cde46b11556601
  • samba-dsdb-modules_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:1501e46d9084b18639a2411f582eb4b4dece1c10
  • samba-libs_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:e668f85e511a1914e044d0164c89ef90df55443f
  • samba-testsuite_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:560c2fe4da40c149eab3aabe1f48673c5dba038b
  • samba-vfs-modules_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:f9163d74a225970ff4815e45ccf34efd5cc09a0d
  • smbclient_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:b7e2f7084438374f40a7c673c4c561aa9e4b6408
  • winbind_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els7_amd64.deb
    sha:e51069163e659362a7a9236dd5854ca9757cfb65
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.