FEDORA-2026-3be8175017 — security update for freeipa and samba

stable

freeipa-4.13.2-1.fc45 and samba-4.24.5-1.fc45

FEDORA-2026-3be8175017 created by gd a month ago for Fedora 45

Update to Samba 4.24.5 (and rebuild of FreeIPA) Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and CVE-2026-58224

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-3be8175017

This update's test gating status has been changed to 'waiting'.

a month ago

This update's test gating status has been changed to 'passed'.

a month ago

This update has been submitted for stable by bodhi

a month ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

0 days

Dates

submitted

a month ago

in testing

a month ago

in stable

a month ago

approved

a month ago

Builds

freeipa-4.13.2-1.fc45

samba-4.24.5-1.fc45

BZ#2509257 CVE-2026-6949 samba: TSIG packet with crafted name compression can crash DNS server [fedora-all]

BZ#2509266 CVE-2026-58218 samba: DNS signing DoS via TKEY name cache exhaustion [fedora-all]

BZ#2509280 CVE-2026-58221 samba: authenticated LDAP access to internal LDB special DNs permits domain takeover [fedora-all]

BZ#2509502 CVE-2026-58222 samba: Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes [fedora-all]

BZ#2510787 samba-4.24.5 is available

BZ#2510884 CVE-2026-58216 samba: kpasswd service: kpasswd packet that contains malformed ASN.1 might cause the server to access 6 bytes of unallocated memory leading server to crash [fedora-all]

freeipa-4.13.2-1.fc45

samba-4.24.5-1.fc45

Automated Test Results

passed

Test Cases


0	0	Test Case desktop network smb