Red Hat Product Errata RHSA-2026:28055 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28055 - Security Advisory Overview Updated Packages Synopsis Important: samba security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for samba is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): samba: Missing access check on reparse point operations (CVE-2026-1933) samba: vfs_worm does not block directory modification (CVE-2026-2340) samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012) samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) samba: Remote Code Execution in SAMR (CVE-2026-4408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2447317 - CVE-2026-1933 samba: Missing access check on reparse point operations BZ - 2447318 - CVE-2026-2340 samba: vfs_worm does not block directory modification BZ - 2447319 - CVE-2026-3012 samba: group policy certificate enrollment uses http:// without validation BZ - 2452232 - CVE-2026-4480 samba: Samba: Remote Code Execution in printing subsystem via unescaped job description BZ - 2479762 - CVE-2026-4408 samba: Remote Code Execution in SAMR CVEs CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4408 CVE-2026-4480 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM samba-4.21.3-114.el10_0.1.src.rpm SHA-256: 47879f65da98887e3187549d52adaefc83869d146da8b4de41c98d0e522a755d x86_64 ctdb-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 4baf5eabc4c540d177f977152753bd99fe67a5c479b9879770b394d37a9b84bb ctdb-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 4baf5eabc4c540d177f977152753bd99fe67a5c479b9879770b394d37a9b84bb ldb-tools-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: a547dddf6e9c4414f3f260749acbee87d5d9c776fbf8a6b0682290295fa0817f ldb-tools-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 951d03f16903fbfabe821f2211d3a99253e5f1d02ee9411c88dd99584a9e67bb ldb-tools-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 951d03f16903fbfabe821f2211d3a99253e5f1d02ee9411c88dd99584a9e67bb libldb-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: ff1c3e5fdaaa822465599d5feca1c746ba3b5c99458757289f86bed6fdee409d libldb-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: a8f17314984e20c76c1921f2e2ff22fdd9f91d0e2fc1c7ead1b971838b0f8006 libldb-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: a8f17314984e20c76c1921f2e2ff22fdd9f91d0e2fc1c7ead1b971838b0f8006 libnetapi-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: fbb4af78af99e843dabf59a96f961a8e4f8cac693fc602d2a4bcd9f46521c2fc libnetapi-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: f02f0e33ee416452c0c1891c8343fdf57e1ead282a7907766d4f17405c8b9418 libnetapi-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: f02f0e33ee416452c0c1891c8343fdf57e1ead282a7907766d4f17405c8b9418 libsmbclient-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: ce3535d520388d74c0c8b0a686d93f75d967ceff805f2377457105591fb1ae19 libsmbclient-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: b492a477007a83af1262b2ac7139ae3a58d1555e4385ae699d1bcb1695366fb1 libsmbclient-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: b492a477007a83af1262b2ac7139ae3a58d1555e4385ae699d1bcb1695366fb1 libwbclient-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 92e7b990299a96f9e65949a6b223e4d30ee612a2c8f92b4ce67a2a055091efd1 libwbclient-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: a1e8178a3492b52525d84e19a57d8e70c6c518b8b33fc14917e1c0ec59542d2e libwbclient-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: a1e8178a3492b52525d84e19a57d8e70c6c518b8b33fc14917e1c0ec59542d2e python3-ldb-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: e135ff955ab0037ebd02141fc31ebfe31bed5e957e5f24e2e626ef932c540198 python3-ldb-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 0321db43a5096fde7252035c5a5f197385f48fbbf873a707985a90a616a4455d python3-ldb-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 0321db43a5096fde7252035c5a5f197385f48fbbf873a707985a90a616a4455d python3-samba-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 1286031896a4ca4702437908275d8e6a0bb72926736900775c6883573433c46e python3-samba-dc-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 3d59f778c456b3afe5e0486a6ed73083613c50537c850289cefdb3416258fa72 python3-samba-dc-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 639cb943883edcccfe9b1b1fbf0d56a8347c58f0cdd39db89916e27c892788f5 python3-samba-dc-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 639cb943883edcccfe9b1b1fbf0d56a8347c58f0cdd39db89916e27c892788f5 python3-samba-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 6eae75da0b593c0ed90ce58c791702b9a7bf17eb1bb973289ba8e1777312abcd python3-samba-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 6eae75da0b593c0ed90ce58c791702b9a7bf17eb1bb973289ba8e1777312abcd samba-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 761db8c8f6f61ab2b129cbc190417109a1890e6ae62c325cc2cf46845b46b974 samba-client-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 1e1de790dc44c1faf24ccd202f4bd733b91008b4652653a049440a8636409188 samba-client-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: ae58a3ce81f5ca724c319b675e4e1ce44e806903cd99f7d9522a7941857a9e1a samba-client-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: ae58a3ce81f5ca724c319b675e4e1ce44e806903cd99f7d9522a7941857a9e1a samba-client-libs-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 32ace461f627268b105d5c02e7310b213562a25273a49108d19d1fbf8ce4e599 samba-client-libs-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 182ee500a0ce6027a0345ea38a7406be2c3461ec82c31d6831c52641489e3bcc samba-client-libs-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 182ee500a0ce6027a0345ea38a7406be2c3461ec82c31d6831c52641489e3bcc samba-common-4.21.3-114.el10_0.1.noarch.rpm SHA-256: a945fdff0d4d4ef74f2eb588a11cfe07b808f4900901c946d3ce30339811f255 samba-common-libs-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 08390605b8ee1e6f9cabc1467d05ed83b83f59f4658cb462661586bcc632b67c samba-common-libs-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 08f7666b654858033b5ade418b55b3c4a1f40f9554be81bfe99ef847812ac806 samba-common-libs-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 08f7666b654858033b5ade418b55b3c4a1f40f9554be81bfe99ef847812ac806 samba-common-tools-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 4382ff546c216593a2943a69760703ea846ccd08f464f37d1e45ef5bf158a39b samba-common-tools-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 526df1857944437c73e905eb9d7d5e00ff7ebe0fd86bf9e8d2752083b04c7c29 samba-common-tools-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 526df1857944437c73e905eb9d7d5e00ff7ebe0fd86bf9e8d2752083b04c7c29 samba-dc-libs-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 610efe723e632aeab471e1f5d8adc1e778a3a28da7f12cfb24d60f52fccd23ed samba-dc-libs-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 43a046d6319142883bcde943469f5c1b1bd6e2c63395616fe3ca7c5be4227b67 samba-dc-libs-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 43a046d6319142883bcde943469f5c1b1bd6e2c63395616fe3ca7c5be4227b67 samba-dcerpc-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 0ea707b09f6acc1831d1bdfc17dd7dac37b5db0d6bcd136158fb7fc7dece5237 samba-dcerpc-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: fb8ff8c6556b6a185a2b09128b78f755543e44e147e158d3f53f62c29ad9bb10 samba-dcerpc-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: fb8ff8c6556b6a185a2b09128b78f755543e44e147e158d3f53f62c29ad9bb10 samba-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 84e60297fe1d6fd223b81b49110755c0c7447b81ce8485a943bc811829140a17 samba-debuginfo-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 84e60297fe1d6fd223b81b49110755c0c7447b81ce8485a943bc811829140a17 samba-debugsource-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 6aee944eff8128eba67aa944627d431fbcd1e608fa4c4e6129f30621a0c5e199 samba-debugsource-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 6aee944eff8128eba67aa944627d431fbcd1e608fa4c4e6129f30621a0c5e199 samba-gpupdate-4.21.3-114.el10_0.1.x86_64.rpm SHA-256: 29e2c24b9e9cbdc0152a1f951c4eaf97ee8e9c3de486e5e84c906c1f5f4b0735 samba-krb5-printing-4.21.3-114.el10_0.1.x86_64.rpm SH