Summary
[4.10.16-25.0.11]
- Fix CVE-2026-4408 and CVE-2026-4480 [Orabug: 39599120]
[4.10.16-25.0.9]
- s3:winbindd: avoid using any netlogon call to get a dc name [Orabug: 38560263]
- winbindd: use find_domain_from_name_noinit() in find_dns_domain_name() [Orabug: 38560263]
[4.10.16-25.0.7]
- Fixed winbind dsgetdcname calls w.r.t. domain name [Orabug: 38330450]
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ctdb | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | ctdb-tests | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | libsmbclient | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | libsmbclient-devel | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | libwbclient | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | libwbclient-devel | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-client | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-client-libs | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-common | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-common-libs | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-common-tools | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-dc | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-dc-libs | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-devel | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-krb5-printing | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-libs | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-pidl | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-python | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-python-test | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-test | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-test-libs | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-vfs-glusterfs | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-winbind | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-winbind-clients | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-winbind-krb5-locator | 0:4.10.16-25.0.11.el7_9 |
| Oracle Linux · 7 | samba-winbind-modules | 0:4.10.16-25.0.11.el7_9 |
Vulnerabilities 2
-
Critical 9.0
Samba: remote code execution in samr
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controll…
-
Critical 9.0
Samba: samba: remote code execution in printing subsystem via unescaped job description
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacke…