Comments
gd
karma
LGTM
karma
LGTM
karma
LGTM
karma
LGTM
BZ#2514054 CVE-2026-19550 freeipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [fedora-all]
BZ#2520169 CVE-2026-73196 freeipa: FreeIPA: Authenticated DoS in `otptoken-add` via unbounded OTP key decoding/re-encoding [fedora-all]
BZ#2520170 CVE-2026-11861 freeipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [fedora-all]
BZ#2520171 CVE-2026-73197 freeipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [fedora-all]
BZ#2520172 CVE-2026-73198 freeipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [fedora-all]
BZ#2520174 CVE-2026-73199 freeipa: FreeIPA: NULL Pointer Dereference in `ipa-enrollment` Extended Operation (`JOIN_OID`) via Missing Request Value [fedora-all]
BZ#2520175 CVE-2026-13097 freeipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [fedora-all]
This update has been unpushed.
JFYI: A new upstream release is about to published that resolves that general issue. Thanks again for your feedback!
karma
BZ#2260895 samba-4.20.0rc1 is available
BZ#2260898 libldb-2.9.0 is available
BZ#2260954 libtalloc-2.4.2 is available
BZ#2260955 libtdb-1.4.10 is available
BZ#2260956 libtevent-0.16.1 is available
Test Case desktop network smb
karma
BZ#2256326 Samba-winbind recommends "group(wbpriv)" but nothing provides it
BZ#2257287 samba-4.19.4 is available
Test Case desktop network smb
karma
LGTM
BZ#2254142 Review Request: nodejs-pnpm - Fast, disk space efficient package manager for NodeJS
Just tested manually again as well on a f39 installation, all seems to work fine there.
karma
LGTM
BZ#2211577 libwbclient 2:4.18.2-0.fc38 cannot be selected above & appears to have created a broken symlink
Test Case desktop network smb
karma
LGTM
BZ#2173619 Add glibc-gconv-extra dependency
Test Case desktop network smb
karma
LGTM
karma
LGTM
karma
LGTM
BZ#2127301 Permission denied calling SMBC_getatr when file not exists
BZ#2133818 rpcclient 4.17.0 unable to resolve server hostname
BZ#2136206 samba-4.17.1 is available
Test Case desktop network smb
karma
LGTM
Test Case desktop network smb
karma
LGTM
karma
LGTM
BZ#2026711 CVE-2020-17049 samba: Kerberos: delegation constrain bypass in S4U2Proxy [fedora-all]
BZ#2108196 CVE-2022-32742 samba: server memory information leak via SMB1
BZ#2111729 CVE-2022-32742 samba: server memory information leak via SMB1 [fedora-all]
BZ#2111731 CVE-2022-32744 samba: AD users can forge password change requests for any user [fedora-all]
BZ#2111732 CVE-2022-32745 samba: AD users can crash the server process with an LDAP add or modify request [fedora-all]
BZ#2111734 CVE-2022-32746 samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request [fedora-all]
BZ#2111735 CVE-2022-32746 libldb: samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request [fedora-all]
Test Case desktop network smb
karma
LGTM
BZ#2026711 CVE-2020-17049 samba: Kerberos: delegation constrain bypass in S4U2Proxy [fedora-all]
BZ#2108196 CVE-2022-32742 samba: server memory information leak via SMB1
BZ#2111490 samba-4.16.4 is available
BZ#2111729 CVE-2022-32742 samba: server memory information leak via SMB1 [fedora-all]
BZ#2111731 CVE-2022-32744 samba: AD users can forge password change requests for any user [fedora-all]
BZ#2111732 CVE-2022-32745 samba: AD users can crash the server process with an LDAP add or modify request [fedora-all]
BZ#2111734 CVE-2022-32746 samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request [fedora-all]
BZ#2111735 CVE-2022-32746 libldb: samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request [fedora-all]
Test Case desktop network smb
LGTM