[CLSA-2026:1781627407] samba: Fix of CVE-2026-4408
Type:
security
Severity:
Critical
Release date:
2026-06-22 14:45:51 UTC
Description:
- CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict _samr_ValidatePassword to DCs
CVEs fixed:
Updated packages:
  • libsmbclient-3.6.23-53.el6_10.tuxcare.els7.i686.rpm
    sha:c973afb5752488f3fdf0d80978e2dda8485153ea7ef7a31281f246d15d766d01
  • libsmbclient-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:dddc3ae2917ce9a255f1665c3b62ed2b8a57eaaf5a3427ea144ce57716853309
  • libsmbclient-devel-3.6.23-53.el6_10.tuxcare.els7.i686.rpm
    sha:006545e39c85282b5b113f5a57552f90df78586b14f516b382c877b97447afe9
  • libsmbclient-devel-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:0bb7efef3da6f227cc2f2f1251ebdd2d2fc234976de64b5c5cc9918c3897788b
  • samba-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:449064fdfdbd7c0a5a0029bb2f1cf20a76923ae2c09fee153c6400456586f1f4
  • samba-client-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:ad285a1c2ef031b4d3a68bde2a36378c45fd96bf19239badd321a07127a55585
  • samba-common-3.6.23-53.el6_10.tuxcare.els7.i686.rpm
    sha:a6b21812c54120d0be917dc41fb0d8e238ec46a6ec0d8ae9ebe7cd657496247a
  • samba-common-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:9d3a0cf887830a38c2d14865ad2db528f1d7d3d8a09857d6eb73763f8b4608de
  • samba-doc-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:e184f906b03d222d570e595bb85a783bfe0ee3c8606279c91fe62fd912d9caa0
  • samba-domainjoin-gui-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:b05054bcfd985ff7c75686ffc9ec8110388b18e28f0d939948eff114511bd9cc
  • samba-glusterfs-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:37e14804717feee9b71f5b95be494260d410d27d1431181db4436acf455bceb8
  • samba-swat-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:df5c1609685a654bb0b2d9b4423f4550fd2474e0ca08a613614bacfb90756528
  • samba-winbind-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:db2261e25818d26aed201e7e09f8dccf612c91fcdec36c3db504c7fbb7dcf880
  • samba-winbind-clients-3.6.23-53.el6_10.tuxcare.els7.i686.rpm
    sha:8ef75d22941df20359d3d75a528badd532ceaf8f248ccb4763268a0d2e97791e
  • samba-winbind-clients-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:1549a26447fdf042189ab48d2a6330eff5be5eb31fa74a95c6df923906973eef
  • samba-winbind-devel-3.6.23-53.el6_10.tuxcare.els7.i686.rpm
    sha:a98b937c1adeceffd25c7c63358259db44b5f29e10e0d356dc99eb698d059410
  • samba-winbind-devel-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:58ff221c6365dfc475c7ce9b09b6d84b98f3faf6d3f14c7225edab2b2c6cc0b9
  • samba-winbind-krb5-locator-3.6.23-53.el6_10.tuxcare.els7.x86_64.rpm
    sha:f4ade03ae91aba3d9db0641088ac6c1cd0b92478cf3af271b7219ce0280fa99c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.