CVE-2026-2340
Samba: vfs_worm does not block directory modification
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
6.5
Samba: vfs_worm does not block directory modification
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
- Record
CVE-2026-2340- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-280
- Updated
- 2026-11-05
EUVDEUVD-2026-32312
6.5
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
- Record
EUVD-2026-32312- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-05
GitHub AdvisoriesGHSA-m6w2-p258-gxqp
6.5
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read...
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
- Record
GHSA-m6w2-p258-gxqp- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-280
- Updated
- 2026-11-02
NVD
6.5
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
- Record
CVE-2026-2340- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-280
- Updated
- 2026-11-06
OSVALPINE-CVE-2026-2340
6.5
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
- Record
ALPINE-CVE-2026-2340- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-07
OSVDEBIAN-CVE-2026-2340
6.5
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
- Record
DEBIAN-CVE-2026-2340- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-07
Show 31 moreShow less
OSVRHSA-2026:22644
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:22644- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:22963
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:22963- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:25049
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:25049- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:25979
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:25979- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:28053
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:28053- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:28054
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:28054- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:28055
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:28055- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:28056
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:28056- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:28057
9.0
Red Hat Security Advisory: samba security update
- Record
RHSA-2026:28057- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:22963
9.0
Critical: samba security update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es):
-
samba: Missing access check on reparse point operations (CVE-2026-1933)
-
samba: vfs_worm does not block directory modification (CVE-2026-2340)
-
samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
-
samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
-
ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
-
samba: Remote Code Execution in SAMR (CVE-2026-4408)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:22963- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:25049
9.0
Critical: samba security update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es):
-
samba: Missing access check on reparse point operations (CVE-2026-1933)
-
samba: vfs_worm does not block directory modification (CVE-2026-2340)
-
samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
-
samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
-
ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
-
samba: Remote Code Execution in SAMR (CVE-2026-4408)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:25049- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-2340
6.5
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
- Record
UBUNTU-CVE-2026-2340- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVALSA-2026:22644 No score
Important: samba security update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es):
- samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
- samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
- samba: Remote Code Execution in SAMR (CVE-2026-4408)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:22644- Updated
- 2026-11-02
OSVALSA-2026:22963 No score
Critical: samba security update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es):
- samba: Missing access check on reparse point operations (CVE-2026-1933)
- samba: vfs_worm does not block directory modification (CVE-2026-2340)
- samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
- samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
- ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
- samba: Remote Code Execution in SAMR (CVE-2026-4408)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:22963- Updated
- 2026-11-02
OSVALSA-2026:25049 No score
Critical: samba security update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es):
- samba: Missing access check on reparse point operations (CVE-2026-1933)
- samba: vfs_worm does not block directory modification (CVE-2026-2340)
- samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
- samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
- ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
- samba: Remote Code Execution in SAMR (CVE-2026-4408)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:25049- Updated
- 2026-11-02
OSVAZL-89145 No score
CVE-2026-2340 affecting package samba 4.18.3-2
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
- Record
AZL-89145- Updated
- 2026-11-05
OSVCLSA-2026-1780403538 No score
samba: Fix of CVE-2026-2340
- Fix CVE-2026-2340: prevent overwrite of a WORM-protected file via rename by checking the destination WORM status in vfs_worm_renameat().
- Record
CLSA-2026-1780403538- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10884-1 No score
ctdb-4.23.8+git.477.f78166bceed-1.1 on GA media
These are all security issues fixed in the ctdb-4.23.8+git.477.f78166bceed-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10884-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20905-1 No score
Security update for samba
This update for samba fixes the following issues
Security issues:
- CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Changes for samba:
- network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755).
- Samba service start times out (SElinux relabel takes too long) (bsc#1259050).
- samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058).
- VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667).
- Updated to 4.22.9
- Record
openSUSE-SU-2026:20905-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21540-1 No score
Security update for samba
This update for samba fixes the following issues:
Update to 4.22.11.
Security issues fixed:
- CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the
user.SmbReparsexattr (bsc#1261188). - CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
- CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
- CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
- CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
- CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
- CVE-2026-15779:
pam_winbindmodule withmkhomedirset allowschownof critical system paths without validation (bsc#1271469). - CVE-2026-58216: 6-byte heap OOB read in packet parser of the
kpasswdservice (bsc#1271674). - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Other updates and bugfixes:
samba-tool: do not complain of no subcommand with-V(bsc#1273189, bso#15770).- Add
python3-cryptographyandpython3-requestsrequirements forsamba-python3.
- Record
openSUSE-SU-2026:21540-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2071-1 No score
Security update for samba
This update for samba fixes the following issues
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
- Record
SUSE-SU-2026:2071-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2072-1 No score
Security update for samba
This update for samba fixes the following issues
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
- Record
SUSE-SU-2026:2072-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2073-1 No score
Security update for samba
This update for samba fixes the following issues
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
- Record
SUSE-SU-2026:2073-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2074-1 No score
Security update for samba
This update for samba fixes the following issues
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
- Record
SUSE-SU-2026:2074-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2076-1 No score
Security update for samba
This update for samba fixes the following issues
Security issues:
- CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Non security issue:
- network:samba:STABLE/samba: 'use-kerberos=desired' broken / Dolphin requires login for Samba shares (bsc#1255755).
- Generated dynamic profile based on path to special 'printers' share. (bsc#1259441).
- Fix regression 'use-kerberos=desired' broken doesn't even try to authenticate with kerberos and instead fallsback to NTLM (bsc#1255755).
- Fix memory leak using cups parsed options and filename allocated when processing end of printing job (bsc#1257200).
- Fix manpage for 'net offlinejoin requestodj'.
- Fix 'ctdbd socket' documentation in manpage for smb.conf
- Fix rpc workers with long living clients from growing server memory keytab and increasing memory used by workers (bsc#1257200).
- Record
SUSE-SU-2026:2076-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2108-1 No score
Security update for samba
This update for samba fixes the following issues
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Non security issues:
- Fix pthreadpool_tevent race conditions accessing both pthreadpool_tevent.jobs list and pthreadpool_tevent.glue_list (bsc#1252963)
- Record
SUSE-SU-2026:2108-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22045-1 No score
Security update for samba
This update for samba fixes the following issues
Security issues:
- CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Changes for samba:
- network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755).
- Samba service start times out (SElinux relabel takes too long) (bsc#1259050).
- samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058).
- VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667).
- Updated to 4.22.9
- Record
SUSE-SU-2026:22045-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22080-1 No score
Security update for samba
This update for samba fixes the following issues
Security issues:
- CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Changes for samba:
- network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755).
- Samba service start times out (SElinux relabel takes too long) (bsc#1259050).
- samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058).
- VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667).
- Updated to 4.22.9
- Record
SUSE-SU-2026:22080-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23003-1 No score
Security update for samba
This update for samba fixes the following issues:
Update to 4.22.11.
Security issues fixed:
- CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the
user.SmbReparsexattr (bsc#1261188). - CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
- CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
- CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
- CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
- CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
- CVE-2026-15779:
pam_winbindmodule withmkhomedirset allowschownof critical system paths without validation (bsc#1271469). - CVE-2026-58216: 6-byte heap OOB read in packet parser of the
kpasswdservice (bsc#1271674). - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Other updates and bugfixes:
samba-tool: do not complain of no subcommand with-V(bsc#1273189, bso#15770).- Add
python3-cryptographyandpython3-requestsrequirements forsamba-python3.
- Record
SUSE-SU-2026:23003-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23129-1 No score
Security update for samba
This update for samba fixes the following issues:
Update to 4.22.11.
Security issues fixed:
- CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the
user.SmbReparsexattr (bsc#1261188). - CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
- CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
- CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
- CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
- CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
- CVE-2026-15779:
pam_winbindmodule withmkhomedirset allowschownof critical system paths without validation (bsc#1271469). - CVE-2026-58216: 6-byte heap OOB read in packet parser of the
kpasswdservice (bsc#1271674). - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Other updates and bugfixes:
samba-tool: do not complain of no subcommand with-V(bsc#1273189, bso#15770).- Add
python3-cryptographyandpython3-requestsrequirements forsamba-python3.
- Record
SUSE-SU-2026:23129-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23152-1 No score
Security update for samba
This update for samba fixes the following issues:
Update to 4.22.11.
Security issues fixed:
- CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the
user.SmbReparsexattr (bsc#1261188). - CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
- CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
- CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
- CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
- CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
- CVE-2026-15779:
pam_winbindmodule withmkhomedirset allowschownof critical system paths without validation (bsc#1271469). - CVE-2026-58216: 6-byte heap OOB read in packet parser of the
kpasswdservice (bsc#1271674). - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Other updates and bugfixes:
samba-tool: do not complain of no subcommand with-V(bsc#1273189, bso#15770).- Add
python3-cryptographyandpython3-requestsrequirements forsamba-python3.
- Record
SUSE-SU-2026:23152-1- Updated
- 2026-11-02
Affected products
- samba
- red hat enterprise linux 10
- red hat enterprise linux 10.0 extended update support
- red hat enterprise linux 6
- red hat enterprise linux 7
- red hat enterprise linux 8
- red hat enterprise linux 8.6 advanced mission critical update support
- red hat enterprise linux 8.6 extended update support long-life add-on
- red hat enterprise linux 8.8 telecommunications update service
- red hat enterprise linux 8.8 update services for sap solutions
- red hat enterprise linux 9
- red hat enterprise linux 9.2 update services for sap solutions
Show 12 moreShow less
- red hat enterprise linux 9.4 update services for sap solutions
- red hat enterprise linux 9.6 extended update support
- red hat openshift container platform 4.12
- red hat openshift container platform 4.13
- red hat openshift container platform 4.14
- red hat openshift container platform 4.15
- red hat openshift container platform 4.16
- red hat openshift container platform 4.17
- red hat openshift container platform 4.18
- red hat openshift container platform 4.19
- redhat enterprise linux
- redhat openshift container platform
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaAlpine:v3.23 |
4.20.0 up to 4.22.10-r0 | 4.22.10-r0 |
sambaAlpine:v3.24 |
4.20.0 up to 4.23.8-r0 | 4.23.8-r0 |
ctdbAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
libnetapiAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
libnetapi-develAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
libsmbclientAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
libsmbclient-develAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
libwbclientAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
libwbclient-develAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
python3-sambaAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python3-samba-dcAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
python3-samba-develAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
python3-samba-testAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
sambaAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-clientAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-client-libsAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-commonAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-common-libsAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-common-toolsAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-dc-libsAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-dcerpcAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-develAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-krb5-printingAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-ldb-ldap-modulesAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-libsAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-pidlAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-testAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-test-libsAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-toolsAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-usersharesAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-vfs-iouringAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-winbindAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-winbind-clientsAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-winbind-krb5-locatorAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-winbind-modulesAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
samba-winexeAlmaLinux:8 From an advisory covering 5 CVEs |
before 4.19.4-16.el8_10 | 4.19.4-16.el8_10 |
ldb-toolsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
libldbAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
libldb-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
libnetapiAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
libnetapi-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
libsmbclientAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
libsmbclient-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
libwbclientAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
libwbclient-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
python3-ldbAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
python3-sambaAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
python3-samba-dcAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
python3-samba-testAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
sambaAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-clientAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-client-libsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-commonAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-common-libsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-common-toolsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-dc-libsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-dcerpcAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-gpupdateAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-krb5-printingAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-ldb-ldap-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-libsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-pidlAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-testAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-test-libsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-toolsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-usersharesAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-vfs-iouringAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-winbindAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-winbind-clientsAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-winbind-krb5-locatorAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-winbind-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
samba-winexeAlmaLinux:10 From an advisory covering 6 CVEs |
before 4.23.5-109.el10_2 | 4.23.5-109.el10_2 |
ldb-toolsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
libldbAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
libldb-develAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
libnetapiAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
libnetapi-develAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
libsmbclientAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
libsmbclient-develAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
libwbclientAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
libwbclient-develAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
python3-ldbAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
python3-sambaAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
python3-samba-dcAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
python3-samba-testAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
sambaAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-clientAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-client-libsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-commonAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-common-libsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-common-toolsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-dc-libsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-dcerpcAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-develAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-gpupdateAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-krb5-printingAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-ldb-ldap-modulesAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-libsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-pidlAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-testAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-test-libsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-toolsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-usersharesAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-vfs-iouringAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-winbindAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-winbind-clientsAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-winbind-krb5-locatorAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-winbind-modulesAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
samba-winexeAlmaLinux:9 From an advisory covering 6 CVEs |
before 4.23.5-10.el9_8 | 4.23.5-10.el9_8 |
sambaAzure Linux:3 |
through 4.18.3-2 | None known |
ctdbTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
ldb-toolsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
libldbTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
libldb-develTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
libnetapiTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
libnetapi-develTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
libsmbclientTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
libsmbclient-develTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
libwbclientTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
libwbclient-develTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
python3-ldbTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
python3-sambaTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
python3-samba-dcTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
python3-samba-testTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
sambaTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-clientTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-client-libsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-commonTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-common-libsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-common-toolsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-dc-libsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-dcerpcTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-develTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-gpupdateTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-krb5-printingTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-ldb-ldap-modulesTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-libsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-pidlTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-testTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-test-libsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-toolsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-usersharesTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-vfs-iouringTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-winbindTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-winbind-clientsTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-winbind-krb5-locatorTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-winbind-modulesTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
samba-winexeTuxCare:AlmaLinux:9.6 |
before 4.21.3-14.el9_6.tuxcare.els2 | 4.21.3-14.el9_6.tuxcare.els2 |
sambaDebian:12 |
before 2:4.17.12+dfsg-0+deb12u4, plus listed versions 2:4.17.10+dfsg-0+deb12u12:4.17.10+dfsg-0+deb12u1~bpo11+12:4.17.11+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u1~bpo11+1 Show 8 moreShow less2:4.17.12+dfsg-0+deb12u22:4.17.12+dfsg-0+deb12u32:4.17.8+dfsg-22:4.17.8+dfsg-2.12:4.17.9+dfsg-0+deb12u12:4.17.9+dfsg-0+deb12u22:4.17.9+dfsg-0+deb12u32:4.17.9+dfsg-0+deb12u3~bpo11+1 |
2:4.17.12+dfsg-0+deb12u4 |
sambaDebian:13 |
before 2:4.22.8+dfsg-0+deb13u2, plus listed versions 2:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.22.6+dfsg-0+deb13u12:4.22.6+dfsg-0+deb13u1~bpo12+12:4.22.8+dfsg-0+deb13u1 |
2:4.22.8+dfsg-0+deb13u2 |
sambaDebian:14 |
before 2:4.24.3+dfsg-1, plus listed versions 2:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.23.0+dfsg-1 Show 25 moreShow less2:4.23.0+dfsg-22:4.23.0+dfsg-32:4.23.0~rc1+dfsg-12:4.23.0~rc2+dfsg-12:4.23.0~rc3+dfsg-12:4.23.1+dfsg-12:4.23.2+dfsg-12:4.23.3+dfsg-12:4.23.3+dfsg-1~bpo13+12:4.23.4+dfsg-12:4.23.4+dfsg-1~bpo13+12:4.23.5+dfsg-12:4.23.5+dfsg-1~bpo13+12:4.23.6+dfsg-12:4.23.6+dfsg-22:4.23.6+dfsg-2~bpo13+12:4.24.0+dfsg-12:4.24.0~rc1+dfsg-12:4.24.0~rc1+dfsg-22:4.24.0~rc1+dfsg-32:4.24.0~rc2+dfsg-12:4.24.1+dfsg-12:4.24.2+dfsg-12:4.24.2+dfsg-1~bpo13+12:4.24.3+dfsg-1~bpo13+1 |
2:4.24.3+dfsg-1 |
ctdb-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libnetapi-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libsmbclient-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libwbclient-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-dc-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-client-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-client-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-common-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-common-tools-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-dc-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-dcerpc-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-krb5-printing-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-ldb-ldap-modules-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-test-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-test-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-vfs-iouringRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-vfs-iouring-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-clients-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-krb5-locator-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-modules-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winexe-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
ctdbRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
ctdb-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libnetapiRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libnetapi-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libsmbclientRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libsmbclient-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libwbclientRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libwbclient-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-sambaRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-dcRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-dc-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-testRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
sambaRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-clientRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-client-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-client-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-client-libs-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-commonRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-common-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-common-libs-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-common-toolsRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-common-tools-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-dc-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-dc-libs-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-dcerpcRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-dcerpc-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-debugsourceRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-krb5-printingRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-krb5-printing-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-ldb-ldap-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-ldb-ldap-modules-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-libs-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-pidlRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-testRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-test-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-test-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-test-libs-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-toolsRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-usersharesRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-vfs-iouring-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbindRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-clientsRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-clients-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-krb5-locator-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-modules-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winexeRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winexe-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
ctdb-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libnetapi-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libnetapi-develRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libsmbclient-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libsmbclient-develRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libwbclient-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
libwbclient-develRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-dc-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
python3-samba-develRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-client-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-client-libs-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-common-libs-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-common-tools-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-dc-libs-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-dcerpc-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-develRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-krb5-printing-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-ldb-ldap-modules-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-libs-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-test-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-test-libs-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-vfs-iouring-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-clients-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-krb5-locator-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winbind-modules-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
samba-winexe-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 5 CVEs |
before 0:4.19.4-16.el8_10 | 0:4.19.4-16.el8_10 |
ctdb-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
ldb-tools-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
libldb-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
libnetapi-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
libsmbclient-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
libwbclient-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
python3-ldb-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
python3-samba-dc-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
python3-samba-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-clientRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-client-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-client-libs-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-common-libs-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-common-tools-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-dc-libs-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-dcerpc-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-debugsourceRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-gpupdateRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-krb5-printingRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-krb5-printing-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-ldb-ldap-modules-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-libs-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
samba-test-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
sambaRocky Linux:10 From an advisory covering 6 CVEs |
before 0:4.23.5-109.el10_2 | 0:4.23.5-109.el10_2 |
sambaRocky Linux:9 From an advisory covering 6 CVEs |
before 0:4.23.5-10.el9_8 | 0:4.23.5-10.el9_8 |
sambaSUSE:Linux Micro 6.2 From an advisory covering 6 CVEs |
before 4.22.9+git.506.22c03ce0781-160000.1.1 | 4.22.9+git.506.22c03ce0781-160000.1.1 |
sambaSUSE:Linux Enterprise Server 16.0 From an advisory covering 6 CVEs |
before 4.22.9+git.506.22c03ce0781-160000.1.1 | 4.22.9+git.506.22c03ce0781-160000.1.1 |
sambaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 6 CVEs |
before 4.22.9+git.506.22c03ce0781-160000.1.1 | 4.22.9+git.506.22c03ce0781-160000.1.1 |
sambaSUSE:Linux Micro 6.2 From an advisory covering 13 CVEs |
before 4.22.11+git.552.66cfeb7de0a-160000.1.1 | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
sambaSUSE:Linux Enterprise Server 16.0 From an advisory covering 13 CVEs |
before 4.22.11+git.552.66cfeb7de0a-160000.1.1 | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
sambaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 13 CVEs |
before 4.22.11+git.552.66cfeb7de0a-160000.1.1 | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
sambaUbuntu:22.04:LTS |
before 2:4.15.13+dfsg-0ubuntu1.12, plus listed versions 2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1 Show 17 moreShow less2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu12:4.15.13+dfsg-0ubuntu1.12:4.15.13+dfsg-0ubuntu1.22:4.15.13+dfsg-0ubuntu1.32:4.15.13+dfsg-0ubuntu1.42:4.15.13+dfsg-0ubuntu1.52:4.15.13+dfsg-0ubuntu1.62:4.15.13+dfsg-0ubuntu1.72:4.15.13+dfsg-0ubuntu1.82:4.15.13+dfsg-0ubuntu1.92:4.15.13+dfsg-0ubuntu1.10 |
2:4.15.13+dfsg-0ubuntu1.12 |
sambaUbuntu:24.04:LTS |
before 2:4.19.5+dfsg-4ubuntu9.6, plus listed versions 2:4.18.6+dfsg-1ubuntu22:4.18.6+dfsg-1ubuntu2.12:4.18.6+dfsg-1ubuntu2.22:4.19.4+dfsg-3ubuntu12:4.19.5+dfsg-1ubuntu1 Show 6 moreShow less2:4.19.5+dfsg-4ubuntu72:4.19.5+dfsg-4ubuntu82:4.19.5+dfsg-4ubuntu92:4.19.5+dfsg-4ubuntu9.22:4.19.5+dfsg-4ubuntu9.32:4.19.5+dfsg-4ubuntu9.4 |
2:4.19.5+dfsg-4ubuntu9.6 |
sambaUbuntu:25.10 |
before 2:4.22.3+dfsg-4ubuntu2.4, plus listed versions 2:4.21.4+dfsg-1ubuntu32:4.21.4+dfsg-1ubuntu42:4.21.4+dfsg-1ubuntu52:4.22.2+dfsg-1ubuntu12:4.22.3+dfsg-4ubuntu12:4.22.3+dfsg-4ubuntu22:4.22.3+dfsg-4ubuntu2.12:4.22.3+dfsg-4ubuntu2.2 |
2:4.22.3+dfsg-4ubuntu2.4 |
sambaUbuntu:26.04:LTS |
before 2:4.23.6+dfsg-1ubuntu2.1, plus listed versions 2:4.22.3+dfsg-4ubuntu22:4.22.3+dfsg-4ubuntu2.12:4.22.3+dfsg-4ubuntu32:4.22.3+dfsg-4ubuntu42:4.23.4+dfsg-1ubuntu12:4.23.5+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu12:4.23.6+dfsg-1ubuntu2 |
2:4.23.6+dfsg-1ubuntu2.1 |
sambaopenSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 4.23.8+git.477.f78166bceed-1.1 | 4.23.8+git.477.f78166bceed-1.1 |
sambaopenSUSE:Leap 16.0 From an advisory covering 6 CVEs |
before 4.22.9+git.506.22c03ce0781-160000.1.1 | 4.22.9+git.506.22c03ce0781-160000.1.1 |
sambaopenSUSE:Leap 16.0 From an advisory covering 13 CVEs |
before 4.22.11+git.552.66cfeb7de0a-160000.1.1 | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| references | NVD | |
| affected | CVE List, EUVD, NVD | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-2340 is a medium vulnerability (CVSS 6.5) in Samba, published May 26, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. Fixed in samba 4.22.10-r0.
References
access.redhat.com/errata/RHSA-2026:22644
access.redhat.com/errata/RHSA-2026:22963
access.redhat.com/errata/RHSA-2026:25049
access.redhat.com/errata/RHSA-2026:25979
access.redhat.com/errata/RHSA-2026:28053
access.redhat.com/errata/RHSA-2026:28054
Show 124 moreShow less
access.redhat.com/errata/RHSA-2026:28055
access.redhat.com/errata/RHSA-2026:28056
access.redhat.com/errata/RHSA-2026:28057
access.redhat.com/errata/RHSA-2026:29863
access.redhat.com/errata/RHSA-2026:56786
access.redhat.com/errata/RHSA-2026:56853
access.redhat.com/errata/RHSA-2026:56911
access.redhat.com/errata/RHSA-2026:57483
access.redhat.com/errata/RHSA-2026:59831
access.redhat.com/errata/RHSA-2026:60019
access.redhat.com/errata/RHSA-2026:62409
access.redhat.com/errata/RHSA-2026:62549
access.redhat.com/errata/RHSA-2026:65839
access.redhat.com/errata/RHSA-2026:65851
access.redhat.com/errata/RHSA-2026:65907
access.redhat.com/errata/RHSA-2026:67857
access.redhat.com/errata/RHSA-2026:70586
access.redhat.com/errata/RHSA-2026:77320
access.redhat.com/security/cve/CVE-2026-2340
bugzilla.redhat.com/show_bug.cgi?id=2447318
bugzilla.samba.org/show_bug.cgi?id=15997
nvd.nist.gov/vuln/detail/CVE-2026-2340
github.com/advisories/GHSA-m6w2-p258-gxqp
security.alpinelinux.org/vuln/CVE-2026-2340
access.redhat.com/security/cve/CVE-2026-3012
access.redhat.com/security/cve/CVE-2026-4408
access.redhat.com/security/cve/CVE-2026-4480
bugzilla.redhat.com/2447319
bugzilla.redhat.com/2452232
bugzilla.redhat.com/2479762
errata.almalinux.org/8/ALSA-2026-22644.html
redhat.com/security/data/cve/CVE-2026-1933.html
redhat.com/security/data/cve/CVE-2026-2340.html
access.redhat.com/security/cve/CVE-2026-1933
access.redhat.com/security/cve/CVE-2026-40170
bugzilla.redhat.com/2447317
bugzilla.redhat.com/2447318
bugzilla.redhat.com/2459061
errata.almalinux.org/10/ALSA-2026-22963.html
errata.almalinux.org/9/ALSA-2026-25049.html
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1780403538.html
security-tracker.debian.org/tracker/CVE-2026-2340
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2447319
bugzilla.redhat.com/show_bug.cgi?id=2452232
bugzilla.redhat.com/show_bug.cgi?id=2479762
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22644.json
bugzilla.redhat.com/show_bug.cgi?id=2447317
cve.org/CVERecord?id=CVE-2026-1933
nvd.nist.gov/vuln/detail/CVE-2026-1933
bugzilla.samba.org/show_bug.cgi?id=15992
cve.org/CVERecord?id=CVE-2026-2340
cve.org/CVERecord?id=CVE-2026-3012
nvd.nist.gov/vuln/detail/CVE-2026-3012
bugzilla.samba.org/show_bug.cgi?id=16003
cve.org/CVERecord?id=CVE-2026-4408
nvd.nist.gov/vuln/detail/CVE-2026-4408
bugzilla.samba.org/show_bug.cgi?id=16034
cve.org/CVERecord?id=CVE-2026-4480
nvd.nist.gov/vuln/detail/CVE-2026-4480
bugzilla.samba.org/show_bug.cgi?id=16033
bugzilla.redhat.com/show_bug.cgi?id=2459061
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22963.json
cve.org/CVERecord?id=CVE-2026-40170
nvd.nist.gov/vuln/detail/CVE-2026-40170
github.com/ngtcp2/ngtcp2/commit/708a7640c1f48fb8ffb540c4b8ea5b4c1dfb8ee5
github.com/ngtcp2/ngtcp2/security/advisories/GHSA-f523-465f-8c8f
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25049.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25979.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28053.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28054.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28055.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28056.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28057.json
errata.rockylinux.org/RLSA-2026:22963
errata.rockylinux.org/RLSA-2026:25049
suse.com/support/update/announcement/2026/suse-su-20262071-1
bugzilla.suse.com/1252963
bugzilla.suse.com/1261158
bugzilla.suse.com/1261160
bugzilla.suse.com/1261161
bugzilla.suse.com/1261163
suse.com/security/cve/CVE-2026-2340
suse.com/security/cve/CVE-2026-3238
suse.com/security/cve/CVE-2026-4408
suse.com/security/cve/CVE-2026-4480
suse.com/support/update/announcement/2026/suse-su-20262072-1
bugzilla.suse.com/1261159
suse.com/security/cve/CVE-2026-3012
suse.com/support/update/announcement/2026/suse-su-20262073-1
suse.com/support/update/announcement/2026/suse-su-20262074-1
suse.com/support/update/announcement/2026/suse-su-20262076-1
bugzilla.suse.com/1255755
bugzilla.suse.com/1257200
bugzilla.suse.com/1259441
bugzilla.suse.com/1261188
suse.com/security/cve/CVE-2026-1933
suse.com/support/update/announcement/2026/suse-su-20262108-1
suse.com/support/update/announcement/2026/suse-su-202622045-1
bugzilla.suse.com/1249058
bugzilla.suse.com/1259050
bugzilla.suse.com/1259667
suse.com/support/update/announcement/2026/suse-su-202622080-1
suse.com/support/update/announcement/2026/suse-su-202623003-1
bugzilla.suse.com/1271469
bugzilla.suse.com/1271672
bugzilla.suse.com/1271673
bugzilla.suse.com/1271674
bugzilla.suse.com/1271675
bugzilla.suse.com/1271676
bugzilla.suse.com/1271677
bugzilla.suse.com/1273189
suse.com/security/cve/CVE-2026-15779
suse.com/security/cve/CVE-2026-58216
suse.com/security/cve/CVE-2026-58218
suse.com/security/cve/CVE-2026-58221
suse.com/security/cve/CVE-2026-58222
suse.com/security/cve/CVE-2026-58224
suse.com/security/cve/CVE-2026-6949
suse.com/support/update/announcement/2026/suse-su-202623129-1
suse.com/support/update/announcement/2026/suse-su-202623152-1
ubuntu.com/security/CVE-2026-2340
ubuntu.com/security/notices/USN-8306-1
suse.com/security/cve/CVE-2026-40170
Left out here: 888 package rows. The JSON record has them.