Red Hat Product Errata RHSA-2026:28057 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28057 - Security Advisory Overview Updated Packages Synopsis Important: samba security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for samba is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): samba: Missing access check on reparse point operations (CVE-2026-1933) samba: vfs_worm does not block directory modification (CVE-2026-2340) samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012) samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) samba: Remote Code Execution in SAMR (CVE-2026-4408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2447317 - CVE-2026-1933 samba: Missing access check on reparse point operations BZ - 2447318 - CVE-2026-2340 samba: vfs_worm does not block directory modification BZ - 2447319 - CVE-2026-3012 samba: group policy certificate enrollment uses http:// without validation BZ - 2452232 - CVE-2026-4480 samba: Samba: Remote Code Execution in printing subsystem via unescaped job description BZ - 2479762 - CVE-2026-4408 samba: Remote Code Execution in SAMR CVEs CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4408 CVE-2026-4480 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 SRPM samba-4.15.5-16.el8_6.1.src.rpm SHA-256: f7aab02666b13e311aaf00f488b383f06234ecfe7f0d7f0dcad450d1e2ac5491 x86_64 ctdb-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 3d779e48032d2bf3c453399bfe87d731c5353441ae8a4e2ef4b0351ed32716d9 ctdb-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: 590d5ac7d8b12b99b1841ba1ccac958d34f1f3c81aecc848ab8e65b6c6bb7010 ctdb-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 93ce3813005e7514f0bd540c3c4918313e1e66655244d7282c8f7e0aa74eb596 ctdb-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 93ce3813005e7514f0bd540c3c4918313e1e66655244d7282c8f7e0aa74eb596 libsmbclient-4.15.5-16.el8_6.1.i686.rpm SHA-256: 636f7f174c32524ce90ab533273fc1ade1df0c24e6839d82c618afdcb6fa0677 libsmbclient-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 063706a9a3dd72355b60754d32d5bf0155950da8bf429a50a2dbeea25dc64ce7 libsmbclient-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: 620f4cefc994835d1790bd3a5a1c7d630e5bf53194824de10c45325de6d84f96 libsmbclient-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 3a5c8969126e3227a78a5c561b5742d6d80f44b734369f74893f72094f338bdc libsmbclient-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 3a5c8969126e3227a78a5c561b5742d6d80f44b734369f74893f72094f338bdc libwbclient-4.15.5-16.el8_6.1.i686.rpm SHA-256: 3ac0c286892be5f0c229e0d84351a355ea65142cc37697c06cadc36e5a39802f libwbclient-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 37eae79c6edba13d2e84c78cc27e1919fa3f60aaa7faaa185cd2fb19eed9590a libwbclient-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: bff85bf97f450de9548c93f772b838d1a7ff49a1318ef8992b52342dc45b829b libwbclient-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 7b3cf65727c7f61d642d5109e361fe91398a3e9206aae6a3a15dcfc594e81c41 libwbclient-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 7b3cf65727c7f61d642d5109e361fe91398a3e9206aae6a3a15dcfc594e81c41 python3-samba-4.15.5-16.el8_6.1.i686.rpm SHA-256: c3bbdc3cb32cea42b1f1c0554be5fe0c774ff3463aed5458b4942190d0c53f79 python3-samba-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 7a6ac2d1755e8309d03bdb53969ada5ef9e61ddeb9b0359beaa5aac210e7a7ce python3-samba-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: 137a436ed20d7f4e8f97174e609a68fbe296c184b98edd6ef1dcf93fd0701dea python3-samba-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 85874d38f70a19ec3b10a1eee47d4aa42ee909d8b6ebb90d166bc1119c06954d python3-samba-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 85874d38f70a19ec3b10a1eee47d4aa42ee909d8b6ebb90d166bc1119c06954d python3-samba-test-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 0ff186ec388893dbe80bb7ad537a4a0cfc086a4ee99e7fdd3289e8350c1c0bc7 samba-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: d03df22d50cae52a2bbd9e7d15482d7dfff673458be18a5b20b4e58144fbc62d samba-client-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 26f6871cacda0c3a5922da2f4eb59fc0d6f27d104fb8a5fd33e33c162346b1e9 samba-client-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: a5901f0f417352b7f5cd2f9aeba1ac99abcf2818ea69feab7a000effbdc2752c samba-client-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: d9737e0f9f83f7f1e01c18cae0439bfa2b42c2e82aa4e95ff2267554ad61366a samba-client-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: d9737e0f9f83f7f1e01c18cae0439bfa2b42c2e82aa4e95ff2267554ad61366a samba-client-libs-4.15.5-16.el8_6.1.i686.rpm SHA-256: f55de98c31debbade7b17c3962f48398936c9283054833945f985eaf172f7084 samba-client-libs-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 9f5ef2afe780846b9ed2a401b6c11361f8ac3452f9bfab43e30d0fcdaf9c2163 samba-client-libs-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: fdbff8e491e95d4c8a638e25e6ba09d00e3d6cc5ca79dab787eabf95011f81ad samba-client-libs-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 6cb085b99be1a30baede94f33472a5b282357bcf90b3f3ee8925450ca3f1ed6c samba-client-libs-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 6cb085b99be1a30baede94f33472a5b282357bcf90b3f3ee8925450ca3f1ed6c samba-common-4.15.5-16.el8_6.1.noarch.rpm SHA-256: 69c3e77c3655db5a36ee5e45e01a2e3591c3f486eb9fe92f2c9c8a988dedec03 samba-common-libs-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 5b36821372f25d2e49a24964ea227226893088afd901064340333da0dc15eac0 samba-common-libs-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: f9a2a2a731e55202fbf5e5662960b13717bf45e1ef79549670dccf7b82160350 samba-common-libs-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 450377af029116d0b42c9a4da53d9893bbb59a81797e3c00ffe595eea15f17ad samba-common-libs-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 450377af029116d0b42c9a4da53d9893bbb59a81797e3c00ffe595eea15f17ad samba-common-tools-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 6f52eebd8a1e403dad7b068a180b720d78448ea7910322d259c2eb7c4c64f3a5 samba-common-tools-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: e9523b2339affe34f9f3c97e0a800b25328632f152a41e4c7e5fe6ca4eb0af4d samba-common-tools-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 429ed2dd252f058bda6c5b15553875b4a40615a24a5ab3dfd645d8b4cbc243a1 samba-common-tools-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 429ed2dd252f058bda6c5b15553875b4a40615a24a5ab3dfd645d8b4cbc243a1 samba-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: d2644864d1f87d4feefb935981c427f24dc0030057599eea9f1808463796dc8f samba-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 33cd9f24c7e74e4b24ab00543215808bff2b033b4b80dbb58653b9ed0a20a1a6 samba-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 33cd9f24c7e74e4b24ab00543215808bff2b033b4b80dbb58653b9ed0a20a1a6 samba-debugsource-4.15.5-16.el8_6.1.i686.rpm SHA-256: 27dd3da16263f8adce75642b767b818c3639bfabc5e0a7e8f5ec512418115957 samba-debugsource-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 1daa895f3099e737cba27eebb6274a5f474c646fbb5f0a741eff8dd2b30b5090 samba-debugsource-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 1daa895f3099e737cba27eebb6274a5f474c646fbb5f0a741eff8dd2b30b5090 samba-krb5-printing-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 0828a4c673f6285b8876092d877ef5a6217a41c046d05639f689884f4b309dae samba-krb5-printing-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: 6a90a62336c56697c7fc9be3853ff3f2fd773ef03af5f1e3350710e8b01f01e9 samba-krb5-printing-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 8cfcb73446bb2b7a4cadee37dc2ea281c25e0874a37ec6d4abfaca09a0310655 samba-krb5-printing-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 8cfcb73446bb2b7a4cadee37dc2ea281c25e0874a37ec6d4abfaca09a0310655 samba-libs-4.15.5-16.el8_6.1.i686.rpm SHA-256: 0b7dcf02e7393caca59e4e9f4d00d5584fd8b962ecb83f320f61d030302da426 samba-libs-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 32edcbc106bb690342113c712394b5aada097e8c6e69b0be1cb955fb4f7bb7a2 samba-libs-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: 201b795f0146b9148b2ca5480b09636bfa1d95d7cf944c068ee4ed1cc73e9779 samba-libs-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 6c664ca125bf11f3943075fa1d45d207fc570c748586bcde4db9a33381839312 samba-libs-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 6c664ca125bf11f3943075fa1d45d207fc570c748586bcde4db9a33381839312 samba-pidl-4.15.5-16.el8_6.1.noarch.rpm SHA-256: d796678fef8f70159e4626b283c9ffd908883b123382cc5e7cc5ef60c5571ec6 samba-test-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 75418c9b712fea2a681eda0b07ae95891a1ee0f2baa3b0febe8b01b63c1bee8f samba-test-debuginfo-4.15.5-16.el8_6.1.i686.rpm SHA-256: f026a83bc81dff51d954f1917d0f4aeeaa3653a441d0c7a7bc4ecfa9e1520e0b samba-test-debuginfo-4.15.5-16.el8_6.1.x86_64.rpm SHA-256: 6c79934e399e4c8ebd6fb205759be7845ebd716bc439db190b1cfd70a5959c85 samba-test-debuginfo-4.15.5-16.el8_6.1.x8