Linuxsecurity Critical Samba Security Update for Fedora 44 Addresses Multiple CVEs
Article Content
- •Fedora 44 users must update Samba to version 4.24.3 to patch critical vulnerabilities.
- •CVE-2026-4480 allows remote code execution through an unescaped job description in the printing subsystem.
- •Multiple CVEs were addressed in this update, highlighting significant security risks in Samba.
On May 28, 2026, Fedora released an update to Samba 4.24.3, addressing several critical vulnerabilities including CVE-2026-4480, which allows remote code execution via the printing subsystem. Other vulnerabilities fixed include CVE-2026-2340, CVE-2026-3012, CVE-2026-1933, CVE-2026-4408, and CVE-2026-3238, affecting various functionalities of Samba. The vulnerabilities were published between May 26 and May 28, 2026, with the most severe allowing attackers to execute arbitrary code. Users of Fedora 44 and FreeIPA are advised to update their systems immediately to mitigate these risks. The vulnerabilities were confirmed by multiple bug reports and are considered serious threats to system security. The update can be installed using the 'dnf' update program, with specific commands provided for users.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track Fedora and CVE-2026-1933 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…