Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
2 clusters · 5 sources · 26 days · First seen · Last updated
Samba software security and stability updates
Overview
Samba has issued several security and stability updates to address various vulnerabilities and protocol issues.
In mid-September, the software released updates to mitigate five vulnerabilities, including two critical flaws with a CVSS score of 9.0. These flaws, identified as CVE-2026-4480 and CVE-2026-4408, allowed for unauthenticated Remote Code Execution (RCE) within the Samba print subsystem and file server. Other identified issues posed risks to file integrity, certificate trust, and service availability.
By mid-October, the Samba Team released version 4.24.8, which focused on security hardening and protocol correctness. A key enhancement in this update was the requirement for SMB3 Session Setup responses to be always signed to defend against relay attacks. This release also addressed several bugs related to Kerberos encryption, high-availability clustering, and filename handling, though these specific fixes did not carry CVE identifiers.
Entities
Timeline
-
[TECHNOLOGY] 2 sourcesSamba releases 4.24.8 update with SMB3 signing security fix
The Samba Team released Samba 4.24.8, featuring ten bug fixes, including a security hardening patch that ensures SMB3 Session Setup responses are always signed to prevent relay attacks.
-
[TECHNOLOGY] 3 sourcesSamba releases updates to fix critical Remote Code Execution vulnerabilities
Samba has issued updates to fix five security vulnerabilities, including two critical Remote Code Execution flaws affecting file servers and domain controllers.
Sources
cybersecurity-news.de · linuxcompatible.org · minutodaseguranca.blog.br · security-insider.de · thinkit.co.jp