FEDORA-2026-fcd4630c0d — security update for freeipa and samba

stable

freeipa-4.13.2-1.fc44 and samba-4.24.5-1.fc44

FEDORA-2026-fcd4630c0d created by gd a week ago for Fedora 44

Update to Samba 4.24.5 (and rebuild of FreeIPA) Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and CVE-2026-58224

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-fcd4630c0d

This update's test gating status has been changed to 'waiting'.

a week ago

This update has been submitted for testing by bodhi.

a week ago

This update's test gating status has been changed to 'passed'.

a week ago

imabug provided feedback a week ago

karma

Test Case desktop network smb

This update has been pushed to testing.

a week ago

g6avk commented & provided feedback a week ago

karma

Works for me..

Test Case desktop network smb

This update can be pushed to stable now if the maintainer wishes

a week ago

This update has been submitted for stable by gd.

a week ago

filiperosset commented & provided feedback a week ago

karma

there are no regressions found from my side

besser82 commented & provided feedback a week ago

karma

Works great! LGTM! =)

geraldosimiao provided feedback a week ago

karma

This update has been pushed to stable.

a week ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

a week ago

in testing

a week ago

in stable

a week ago

approved

a week ago

Builds

freeipa-4.13.2-1.fc44

samba-4.24.5-1.fc44

BZ#2509257 CVE-2026-6949 samba: TSIG packet with crafted name compression can crash DNS server [fedora-all]

BZ#2509266 CVE-2026-58218 samba: DNS signing DoS via TKEY name cache exhaustion [fedora-all]

BZ#2509280 CVE-2026-58221 samba: authenticated LDAP access to internal LDB special DNs permits domain takeover [fedora-all]

BZ#2509502 CVE-2026-58222 samba: Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes [fedora-all]

BZ#2510787 samba-4.24.5 is available

BZ#2510884 CVE-2026-58216 samba: kpasswd service: kpasswd packet that contains malformed ASN.1 might cause the server to access 6 bytes of unallocated memory leading server to crash [fedora-all]

freeipa-4.13.2-1.fc44

samba-4.24.5-1.fc44

Automated Test Results

passed

Test Cases


0	2	Test Case desktop network smb