FEDORA-2026-8e7fa96cf3 — security update for freeipa and samba

stable

freeipa-4.13.2-1.fc43 and samba-4.23.10-1.fc43

FEDORA-2026-8e7fa96cf3 created by gd a week ago for Fedora 43

Update to Samba 4.23.10 (and rebuild of FreeIPA). Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and CVE-2026-58224

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-8e7fa96cf3

This update's test gating status has been changed to 'waiting'.

a week ago

This update has been submitted for testing by bodhi.

a week ago

This update's test gating status has been changed to 'passed'.

a week ago

This update has been pushed to testing.

a week ago

filiperosset commented & provided feedback a week ago

karma

there are no regressions found from my side

derekenz commented & provided feedback a week ago

karma

Works

This update can be pushed to stable now if the maintainer wishes

a week ago

geraldosimiao provided feedback a week ago

karma

This update has been submitted for stable by bodhi.

a week ago

This update has been pushed to stable.

a week ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

a week ago

in testing

a week ago

in stable

a week ago

approved

a week ago

Builds

freeipa-4.13.2-1.fc43

samba-4.23.10-1.fc43

BZ#2509257 CVE-2026-6949 samba: TSIG packet with crafted name compression can crash DNS server [fedora-all]

BZ#2509266 CVE-2026-58218 samba: DNS signing DoS via TKEY name cache exhaustion [fedora-all]

BZ#2509280 CVE-2026-58221 samba: authenticated LDAP access to internal LDB special DNs permits domain takeover [fedora-all]

BZ#2509502 CVE-2026-58222 samba: Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes [fedora-all]

BZ#2510884 CVE-2026-58216 samba: kpasswd service: kpasswd packet that contains malformed ASN.1 might cause the server to access 6 bytes of unallocated memory leading server to crash [fedora-all]

freeipa-4.13.2-1.fc43

samba-4.23.10-1.fc43

Automated Test Results

passed

Test Cases


0	0	Test Case desktop network smb