Multiple CVEs in Fedora FreeIPA and Samba Require Immediate Attention

Multiple CVEs in Fedora FreeIPA and Samba Require Immediate Attention

First seen 7 Aug 2026, 08:28 UTC •Linuxsecurity •96% similarity •70.5

Article Content

Browse articles
ThreatCluster

Fedora has released security fixes for multiple CVEs affecting FreeIPA and Samba, including CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216, and CVE-2026-58224. These vulnerabilities could lead to denial of service, domain takeover, and unauthorized access to sensitive data. The updates are crucial for systems using FreeIPA integrated with Samba, particularly those in enterprise environments. Users are advised to upgrade to Samba 4.24.5 and FreeIPA 4.13.2 to mitigate risks. The vulnerabilities were published on July 30, 2026, and are now being actively addressed. Administrators should audit Linux privileges to limit potential compromises and escalations. The updates can be installed using the 'dnf' package manager.

Key Points: • Fedora released critical security updates for FreeIPA and Samba addressing multiple CVEs. • Vulnerabilities include risks of denial of service and domain takeover. • Administrators are urged to upgrade to the latest versions to mitigate risks.

ThreatCluster AI How this analysis works

Timeline

2026-07-30
Multiple CVEs published
CVE-2026-58218, CVE-2026-58216, CVE-2026-58222 were published, exposing critical vulnerabilities in Samba.
Linuxsecurity
2026-07-30
CVE-2026-58218 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-30
CVE-2026-58216 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-30
CVE-2026-58222 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-03
FreeIPA 4.13.2 and Samba 4.24.5 updates released
Updates were released to address the vulnerabilities, including critical fixes for Samba.
Linuxsecurity
2026-08-06
Security advisory published
Fedora published an advisory detailing the vulnerabilities and the need for immediate updates.
Linuxsecurity
2026-08-07
Current status update
As of today, users are urged to apply the updates to mitigate the risks associated with the vulnerabilities.
Linuxsecurity

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Active Directory FreeIPA LDAP Linux Samba