[CLSA-2026:1781101271] samba: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-06-10 14:21:28 UTC
Description:
- CVE-2026-3012: do not trust CA certificates fetched over HTTP in the certificate auto-enrollment GP extension; use only LDAP-derived certificates and skip CAs with no cACertificate attribute - CVE-2026-4408: escape shell metacharacters in the client-controlled username before substituting it into the "check password script" via %u, preventing remote command injection
CVEs fixed:
Updated packages:
  • ctdb-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:8aed4acd756f93280dc468c6366b1f3e12b5886173f6b29d1e04bfcaa0eba84e
  • libnetapi-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:c875c4039418e9e677fc90c0231cb4548d9b2fb109e7f4d80df7a89bc8bb3f85
  • libnetapi-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:f76be4e079156246ef92bfff173ae1dd988fd64849f061fc3f629859769a7e3e
  • libnetapi-devel-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:d6839e528cd0956c866143ed9c48550f9d23bc02d985e36fedf1c511aba0ff08
  • libnetapi-devel-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:9a1e4ddaa6ff520513d0d4ceebb1e6c3ce500d6b5ef5434e33d3981e1aaee935
  • libsmbclient-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:980476dd49c4df62f52cee1af1819b4608895a7dfe0e33a38c6ab6a338f62c96
  • libsmbclient-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:12bbe54e9783f7bb4e4719e95d2bd1dff2e2f786cb471d150629beb6f32894bd
  • libsmbclient-devel-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:9152de23f4cb5150ac29ba8f80aeb5a546154bc0419a69639c727af871792759
  • libsmbclient-devel-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:4e94760019eb0296daa69eb0cf95755f83d0fe47c84504e1fde6d01bc0b3b6b5
  • libwbclient-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:6caeeb8bb579ad3a049b3506c0133ec1ea2b75236cf1c9de52bfeb2a1fc2947b
  • libwbclient-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:f88ca1ce82098029a74b26bc9a010a628f5224f762de77e888e4a642d4881435
  • libwbclient-devel-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:95989734a0ff8e6db42fc7e32c5bee783cf9cb89c7f26b09e4fa8c78675f3af2
  • libwbclient-devel-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:6dea1253550308a3ad9624ccad5d3905b41fa42789d8b369b8d940ab5ce4e30b
  • python3-samba-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:95fe172bade663e93743a29927d6653b5d3421577c81ab6151ade3036811ec9a
  • python3-samba-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:f13469efac25beda24435d87bbd9fe3e5a58ad3631b15f25000212a97507e53a
  • python3-samba-dc-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:bdbaeb0652cb4367c090fab9d539769377aed4bb1bf87c911ff274a6ef8e37f6
  • python3-samba-devel-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:be338bf0b6a829614f41be9ef513467b855fad6518a82ebc0da5424d0a33e743
  • python3-samba-devel-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:8267bb19ee7b6c0e10943eac6896dc8c2b2fdc55e9586337135e23dc09d06276
  • python3-samba-test-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:c186ac43a2da1db05ee14c5b996ea315e219de7fa46c34b67527add364b04ed2
  • samba-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:d6d5b02029b3906036c293b6df444dabc2097edb50b31e069d586c2d89805404
  • samba-client-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:b7dd228864b118e3e2f24910ef520b9f866417fd3218c71eb79c64edacbfc5ec
  • samba-client-libs-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:cabe71ae139b045039e7f601cdaae1f2d2415d417936f55a1525091b7a75fabd
  • samba-client-libs-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:74862deeaa962330d8adbf36e51d37db7f6660389b8dfe55d3d51506e32a64cd
  • samba-common-4.19.4-4.el8.tuxcare.els2.noarch.rpm
    sha:d65d62eda990d8146a2fd95508fa8b72caa598c8055d880d9b166b75d3fa7a2a
  • samba-common-libs-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:428c2fbaac5621251735e0f0540d27420a1837c0ebb53c6ccc3e2745f94f46f4
  • samba-common-libs-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:8fe033422f499aa7f6bd976f778358e738b19a19d71070f859c5a2137a804f39
  • samba-common-tools-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:3d4c72a5f67219ef2f399a796679bef9b209989f25704c474e957fe938d601c7
  • samba-dc-libs-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:b60892541201299775959d5cebaf0226a9d70f6c2db909f1d5c97ed8b5dcb7d1
  • samba-dc-libs-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:0ea2eb60a9860ff22a0d31a47eac3a2b60e76f52ca9900bc3cde28632416f936
  • samba-dcerpc-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:09def8f19a2c6c17c9f743f814e6d0fb12cf708b37e4b67ebf751d8531ba3fe7
  • samba-devel-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:49512b8b0b4cd4bdef402eeb62cf6f3f7f897475fe7b8b2902ff75adc979bcd8
  • samba-devel-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:7f74b7f094b0fda6e6ed0b19c46015fc4bc6432bfb290ef4e62ad773c641abb8
  • samba-krb5-printing-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:a8360a6a0a4afb34c311b1416c1254e4c7c1df93017600ff958c8479387e4e0e
  • samba-ldb-ldap-modules-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:7a79041196c95bb520fccdbdfcd9004a6f09baaa30a0ff453c51118641486325
  • samba-libs-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:e9b3cd1776c2dc7921b7928128c4b6bcb9161a6291b69685f26c12d8ff7d6d8c
  • samba-libs-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:500fb2df35da2401c8bf61b4d2cb33e165c3ed97cb83f6ab4fb5c00bff5eba81
  • samba-pidl-4.19.4-4.el8.tuxcare.els2.noarch.rpm
    sha:e94920bd38169fc0af8294a2c5565f2cf1dd6383ef81e632e241b0b83f6390f4
  • samba-test-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:5f30de60a09bf26aa85339781cbadae3040484a42f194f909781f1360bddc989
  • samba-test-libs-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:3b619469f22135e99cc9bcf539e8f79434164ffeeaef81151ff9c31494cba77d
  • samba-tools-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:2971ef1a57c405b686d98f97bcdfe881b8b43bcb9dbd461e0a3dfdb6fc929adf
  • samba-usershares-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:8495b13ac58aea24ff6aa4d1b21c5b307af2691ebbda8c5cbad7f741ec927f9b
  • samba-vfs-iouring-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:135c23e7f4e4eb6b839a54a342d19eecade019a6f010c560f4af19f4c143c243
  • samba-winbind-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:eec05296f1434c1fc9658a703d304240d8da182f7200054fe190762b0fc3adcc
  • samba-winbind-clients-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:91c3870991a4f3cce8d63601915295e3cdd56dc16900e41fa535f0aa1e8e86b5
  • samba-winbind-krb5-locator-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:b0c6ada3e7c97cc4fe1a492141b3ebd3f59ec5b6235c58c32834d861fa38b454
  • samba-winbind-modules-4.19.4-4.el8.tuxcare.els2.i686.rpm
    sha:c3e5c112a0b409d5831b0ff791cc85fe1cf6a2b9075ada98214236c90fd96b1d
  • samba-winbind-modules-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:842e01572a3694e13980894d8ea488d472af789bca16c553c0c9132de6ce71c2
  • samba-winexe-4.19.4-4.el8.tuxcare.els2.x86_64.rpm
    sha:80d5d0b4ac0021823e30c1267fa2b0cb3031066030c0d710073f6973982d5c4e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.