RLSA-2026:22963

Synopsis

Critical: samba security update

Description

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: Missing access check on reparse point operations (CVE-2026-1933)

* samba: vfs_worm does not block directory modification (CVE-2026-2340)

* samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

* samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

* ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)

* samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2447318 2452232 2459061 2447317 2479762 2447319

CVEs

CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-40170 CVE-2026-4408 CVE-2026-4480

Affected packages

Rocky Linux 10 x86_64 - BaseOS

samba-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm ldb-tools-0:4.23.5-109.el10_2.x86_64.rpm python3-ldb-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm libldb-0:4.23.5-109.el10_2.x86_64.rpm libwbclient-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm libldb-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-dc-libs-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm ldb-tools-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-libs-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm python3-samba-dc-0:4.23.5-109.el10_2.x86_64.rpm libsmbclient-0:4.23.5-109.el10_2.x86_64.rpm samba-debugsource-0:4.23.5-109.el10_2.x86_64.rpm libsmbclient-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm python3-samba-0:4.23.5-109.el10_2.x86_64.rpm samba-usershares-0:4.23.5-109.el10_2.noarch.rpm python3-samba-dc-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-winbind-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-dcerpc-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-common-libs-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-common-libs-0:4.23.5-109.el10_2.x86_64.rpm samba-dcerpc-0:4.23.5-109.el10_2.x86_64.rpm samba-0:4.23.5-109.el10_2.src.rpm samba-ldb-ldap-modules-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-client-libs-0:4.23.5-109.el10_2.x86_64.rpm samba-common-tools-0:4.23.5-109.el10_2.x86_64.rpm samba-libs-0:4.23.5-109.el10_2.x86_64.rpm python3-samba-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-client-libs-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-winbind-0:4.23.5-109.el10_2.x86_64.rpm python3-ldb-0:4.23.5-109.el10_2.x86_64.rpm samba-dc-libs-0:4.23.5-109.el10_2.x86_64.rpm samba-tools-0:4.23.5-109.el10_2.x86_64.rpm samba-0:4.23.5-109.el10_2.x86_64.rpm samba-winbind-modules-0:4.23.5-109.el10_2.x86_64.rpm samba-common-0:4.23.5-109.el10_2.noarch.rpm libnetapi-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm libnetapi-0:4.23.5-109.el10_2.x86_64.rpm samba-winbind-modules-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm libwbclient-0:4.23.5-109.el10_2.x86_64.rpm samba-common-tools-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-ldb-ldap-modules-0:4.23.5-109.el10_2.x86_64.rpm

Rocky Linux 10 s390x - AppStream

samba-krb5-printing-0:4.23.5-109.el10_2.s390x.rpm samba-vfs-iouring-0:4.23.5-109.el10_2.s390x.rpm samba-winbind-krb5-locator-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-vfs-iouring-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-gpupdate-0:4.23.5-109.el10_2.noarch.rpm samba-client-0:4.23.5-109.el10_2.s390x.rpm samba-winbind-clients-0:4.23.5-109.el10_2.s390x.rpm samba-client-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-winbind-krb5-locator-0:4.23.5-109.el10_2.s390x.rpm samba-krb5-printing-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-winbind-clients-debuginfo-0:4.23.5-109.el10_2.s390x.rpm

Rocky Linux 10 s390x - BaseOS

samba-dcerpc-debuginfo-0:4.23.5-109.el10_2.s390x.rpm python3-ldb-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-libs-debuginfo-0:4.23.5-109.el10_2.s390x.rpm python3-samba-0:4.23.5-109.el10_2.s390x.rpm samba-debugsource-0:4.23.5-109.el10_2.s390x.rpm samba-winbind-modules-0:4.23.5-109.el10_2.s390x.rpm libwbclient-0:4.23.5-109.el10_2.s390x.rpm libwbclient-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-tools-0:4.23.5-109.el10_2.s390x.rpm samba-common-tools-0:4.23.5-109.el10_2.s390x.rpm python3-samba-debuginfo-0:4.23.5-109.el10_2.s390x.rpm libsmbclient-0:4.23.5-109.el10_2.s390x.rpm python3-samba-dc-debuginfo-0:4.23.5-109.el10_2.s390x.rpm libldb-0:4.23.5-109.el10_2.s390x.rpm samba-usershares-0:4.23.5-109.el10_2.noarch.rpm libnetapi-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-common-tools-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-common-libs-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-winbind-modules-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-winbind-0:4.23.5-109.el10_2.s390x.rpm samba-common-libs-0:4.23.5-109.el10_2.s390x.rpm samba-0:4.23.5-109.el10_2.src.rpm ldb-tools-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-dcerpc-0:4.23.5-109.el10_2.s390x.rpm samba-ldb-ldap-modules-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-client-libs-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-0:4.23.5-109.el10_2.s390x.rpm samba-dc-libs-0:4.23.5-109.el10_2.s390x.rpm samba-libs-0:4.23.5-109.el10_2.s390x.rpm ldb-tools-0:4.23.5-109.el10_2.s390x.rpm samba-dc-libs-debuginfo-0:4.23.5-109.el10_2.s390x.rpm libldb-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-client-libs-0:4.23.5-109.el10_2.s390x.rpm python3-samba-dc-0:4.23.5-109.el10_2.s390x.rpm libnetapi-0:4.23.5-109.el10_2.s390x.rpm samba-common-0:4.23.5-109.el10_2.noarch.rpm samba-ldb-ldap-modules-0:4.23.5-109.el10_2.s390x.rpm samba-debuginfo-0:4.23.5-109.el10_2.s390x.rpm libsmbclient-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-winbind-debuginfo-0:4.23.5-109.el10_2.s390x.rpm python3-ldb-0:4.23.5-109.el10_2.s390x.rpm

Rocky Linux 10 aarch64 - BaseOS

samba-tools-0:4.23.5-109.el10_2.aarch64.rpm samba-ldb-ldap-modules-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm python3-samba-dc-0:4.23.5-109.el10_2.aarch64.rpm libsmbclient-0:4.23.5-109.el10_2.aarch64.rpm libldb-0:4.23.5-109.el10_2.aarch64.rpm samba-winbind-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-common-tools-0:4.23.5-109.el10_2.aarch64.rpm samba-debugsource-0:4.23.5-109.el10_2.aarch64.rpm python3-ldb-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm python3-samba-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm python3-samba-dc-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-dcerpc-0:4.23.5-109.el10_2.aarch64.rpm samba-common-tools-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-winbind-modules-0:4.23.5-109.el10_2.aarch64.rpm samba-dc-libs-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-usershares-0:4.23.5-109.el10_2.noarch.rpm samba-winbind-0:4.23.5-109.el10_2.aarch64.rpm libnetapi-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-dcerpc-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm libwbclient-0:4.23.5-109.el10_2.aarch64.rpm samba-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm libldb-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm libsmbclient-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-ldb-ldap-modules-0:4.23.5-109.el10_2.aarch64.rpm samba-0:4.23.5-109.el10_2.src.rpm samba-client-libs-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-libs-0:4.23.5-109.el10_2.aarch64.rpm samba-0:4.23.5-109.el10_2.aarch64.rpm samba-dc-libs-0:4.23.5-109.el10_2.aarch64.rpm ldb-tools-0:4.23.5-109.el10_2.aarch64.rpm libwbclient-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm libnetapi-0:4.23.5-109.el10_2.aarch64.rpm samba-client-libs-0:4.23.5-109.el10_2.aarch64.rpm samba-libs-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm python3-samba-0:4.23.5-109.el10_2.aarch64.rpm python3-ldb-0:4.23.5-109.el10_2.aarch64.rpm samba-winbind-modules-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-common-0:4.23.5-109.el10_2.noarch.rpm samba-common-libs-0:4.23.5-109.el10_2.aarch64.rpm ldb-tools-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-common-libs-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm

Rocky Linux 10 x86_64 - AppStream

samba-winbind-krb5-locator-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-client-0:4.23.5-109.el10_2.x86_64.rpm samba-vfs-iouring-0:4.23.5-109.el10_2.x86_64.rpm samba-krb5-printing-0:4.23.5-109.el10_2.x86_64.rpm samba-winbind-clients-0:4.23.5-109.el10_2.x86_64.rpm samba-winbind-krb5-locator-0:4.23.5-109.el10_2.x86_64.rpm samba-gpupdate-0:4.23.5-109.el10_2.noarch.rpm samba-winexe-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-winexe-0:4.23.5-109.el10_2.x86_64.rpm samba-winbind-clients-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-krb5-printing-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-vfs-iouring-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-client-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm

Rocky Linux 10 aarch64 - CRB

python3-samba-test-0:4.23.5-109.el10_2.aarch64.rpm libwbclient-devel-0:4.23.5-109.el10_2.aarch64.rpm samba-pidl-0:4.23.5-109.el10_2.noarch.rpm samba-test-0:4.23.5-109.el10_2.aarch64.rpm samba-test-libs-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm libsmbclient-devel-0:4.23.5-109.el10_2.aarch64.rpm samba-devel-0:4.23.5-109.el10_2.aarch64.rpm libldb-devel-0:4.23.5-109.el10_2.aarch64.rpm samba-test-libs-0:4.23.5-109.el10_2.aarch64.rpm samba-test-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm libnetapi-devel-0:4.23.5-109.el10_2.aarch64.rpm

Rocky Linux 10 aarch64 - AppStream

samba-winbind-krb5-locator-0:4.23.5-109.el10_2.aarch64.rpm samba-vfs-iouring-0:4.23.5-109.el10_2.aarch64.rpm samba-client-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-gpupdate-0:4.23.5-109.el10_2.noarch.rpm samba-vfs-iouring-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-client-0:4.23.5-109.el10_2.aarch64.rpm samba-winbind-clients-0:4.23.5-109.el10_2.aarch64.rpm samba-winbind-clients-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-winbind-krb5-locator-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-krb5-printing-debuginfo-0:4.23.5-109.el10_2.aarch64.rpm samba-krb5-printing-0:4.23.5-109.el10_2.aarch64.rpm

Rocky Linux 10 ppc64le - BaseOS

ldb-tools-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-ldb-ldap-modules-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm libldb-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-winbind-modules-0:4.23.5-109.el10_2.ppc64le.rpm samba-libs-0:4.23.5-109.el10_2.ppc64le.rpm ldb-tools-0:4.23.5-109.el10_2.ppc64le.rpm samba-winbind-0:4.23.5-109.el10_2.ppc64le.rpm libsmbclient-0:4.23.5-109.el10_2.ppc64le.rpm samba-ldb-ldap-modules-0:4.23.5-109.el10_2.ppc64le.rpm samba-common-libs-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm libnetapi-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-client-libs-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm python3-ldb-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-winbind-modules-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-common-tools-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-usershares-0:4.23.5-109.el10_2.noarch.rpm samba-debugsource-0:4.23.5-109.el10_2.ppc64le.rpm samba-0:4.23.5-109.el10_2.ppc64le.rpm samba-winbind-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-dcerpc-0:4.23.5-109.el10_2.ppc64le.rpm samba-dc-libs-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm libwbclient-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm python3-ldb-0:4.23.5-109.el10_2.ppc64le.rpm samba-0:4.23.5-109.el10_2.src.rpm samba-common-tools-0:4.23.5-109.el10_2.ppc64le.rpm samba-client-libs-0:4.23.5-109.el10_2.ppc64le.rpm samba-libs-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-dc-libs-0:4.23.5-109.el10_2.ppc64le.rpm samba-tools-0:4.23.5-109.el10_2.ppc64le.rpm libwbclient-0:4.23.5-109.el10_2.ppc64le.rpm python3-samba-0:4.23.5-109.el10_2.ppc64le.rpm libnetapi-0:4.23.5-109.el10_2.ppc64le.rpm samba-common-libs-0:4.23.5-109.el10_2.ppc64le.rpm libldb-0:4.23.5-109.el10_2.ppc64le.rpm samba-common-0:4.23.5-109.el10_2.noarch.rpm python3-samba-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm python3-samba-dc-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-dcerpc-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm libsmbclient-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm python3-samba-dc-0:4.23.5-109.el10_2.ppc64le.rpm

Rocky Linux 10 ppc64le - AppStream

samba-vfs-iouring-0:4.23.5-109.el10_2.ppc64le.rpm samba-winbind-clients-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-winbind-clients-0:4.23.5-109.el10_2.ppc64le.rpm samba-client-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-gpupdate-0:4.23.5-109.el10_2.noarch.rpm samba-client-0:4.23.5-109.el10_2.ppc64le.rpm samba-vfs-iouring-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-krb5-printing-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-winbind-krb5-locator-0:4.23.5-109.el10_2.ppc64le.rpm samba-winbind-krb5-locator-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-krb5-printing-0:4.23.5-109.el10_2.ppc64le.rpm

Rocky Linux 10 ppc64le - CRB

libldb-devel-0:4.23.5-109.el10_2.ppc64le.rpm libnetapi-devel-0:4.23.5-109.el10_2.ppc64le.rpm samba-devel-0:4.23.5-109.el10_2.ppc64le.rpm samba-pidl-0:4.23.5-109.el10_2.noarch.rpm samba-test-0:4.23.5-109.el10_2.ppc64le.rpm libsmbclient-devel-0:4.23.5-109.el10_2.ppc64le.rpm python3-samba-test-0:4.23.5-109.el10_2.ppc64le.rpm samba-test-libs-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm samba-test-libs-0:4.23.5-109.el10_2.ppc64le.rpm samba-test-debuginfo-0:4.23.5-109.el10_2.ppc64le.rpm libwbclient-devel-0:4.23.5-109.el10_2.ppc64le.rpm

Rocky Linux 10 s390x - CRB

libwbclient-devel-0:4.23.5-109.el10_2.s390x.rpm samba-pidl-0:4.23.5-109.el10_2.noarch.rpm libldb-devel-0:4.23.5-109.el10_2.s390x.rpm samba-test-libs-debuginfo-0:4.23.5-109.el10_2.s390x.rpm samba-devel-0:4.23.5-109.el10_2.s390x.rpm samba-test-libs-0:4.23.5-109.el10_2.s390x.rpm libsmbclient-devel-0:4.23.5-109.el10_2.s390x.rpm samba-test-0:4.23.5-109.el10_2.s390x.rpm samba-test-debuginfo-0:4.23.5-109.el10_2.s390x.rpm libnetapi-devel-0:4.23.5-109.el10_2.s390x.rpm python3-samba-test-0:4.23.5-109.el10_2.s390x.rpm

Rocky Linux 10 x86_64 - CRB

libnetapi-devel-0:4.23.5-109.el10_2.x86_64.rpm samba-pidl-0:4.23.5-109.el10_2.noarch.rpm libldb-devel-0:4.23.5-109.el10_2.x86_64.rpm libsmbclient-devel-0:4.23.5-109.el10_2.x86_64.rpm samba-test-libs-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm libwbclient-devel-0:4.23.5-109.el10_2.x86_64.rpm samba-devel-0:4.23.5-109.el10_2.x86_64.rpm python3-samba-test-0:4.23.5-109.el10_2.x86_64.rpm samba-test-0:4.23.5-109.el10_2.x86_64.rpm samba-test-debuginfo-0:4.23.5-109.el10_2.x86_64.rpm samba-test-libs-0:4.23.5-109.el10_2.x86_64.rpm

Rocky Linux 10 riscv64 - CRB

samba-pidl-0:4.23.5-109.el10_2.noarch.rpm

Rocky Linux 10 riscv64 - AppStream

samba-gpupdate-0:4.23.5-109.el10_2.noarch.rpm

Rocky Linux 10 riscv64 - BaseOS

samba-usershares-0:4.23.5-109.el10_2.noarch.rpm samba-0:4.23.5-109.el10_2.src.rpm samba-common-0:4.23.5-109.el10_2.noarch.rpm