Summary
[4.19.4-16.0.1]
- s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
- s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
- Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755]
[4.19.4-16]
- resolves: RHEL-156322 - Fix CVE-2026-3012
- resolves: RHEL-161647 - Fix CVE-2026-4480
- resolves: RHEL-177933 - Fix CVE-2026-4408
- resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE
Fixed packages 35
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | ctdb | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | libnetapi | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | libnetapi-devel | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | libsmbclient | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | libsmbclient-devel | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | libwbclient | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | libwbclient-devel | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | python3-samba | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | python3-samba-dc | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | python3-samba-devel | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | python3-samba-test | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-client | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-client-libs | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-common | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-common-libs | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-common-tools | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-dc-libs | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-dcerpc | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-devel | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-krb5-printing | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-ldb-ldap-modules | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-libs | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-pidl | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-test | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-test-libs | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-tools | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-usershares | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-vfs-glusterfs | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-vfs-iouring | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-winbind | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-winbind-clients | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-winbind-krb5-locator | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-winbind-modules | 0:4.19.4-16.0.1.el8_10 |
| Oracle Linux · 8 | samba-winexe | 0:4.19.4-16.0.1.el8_10 |
Vulnerabilities 3
-
Critical 9.0
Samba: remote code execution in samr
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controll…
-
Critical 9.0
Samba: samba: remote code execution in printing subsystem via unescaped job description
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacke…
-
High 8.0
Samba: group policy certificate enrollment uses http:// without validation
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verifi…