Improper Certificate Validation in Samba - CVE-2026-3012

 

Improper Certificate Validation in Samba - CVE-2026-3012

Published: May 27, 2026


Vulnerability identifier: #VU132342
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-3012
CWE-ID: CWE-295
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise certificate trust during auto-enrolment.

The vulnerability exists due to improper certificate validation in auto-enrolment GPO certificate installation when fetching a CA certificate over HTTP without verification. A remote attacker can tamper with the certificate retrieval process to compromise certificate trust during auto-enrolment.

The issue arises because HTTP was trusted for bootstrapping a certificate chain even when a more secure encrypted LDAP channel was available.


Affected software

Samba
Debian Linux
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise High Availability Extension 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Micro
Anolis OS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
Fedora
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
samba-krb5-printing
samba-common-tools
samba-dc
samba-dc-bind-dlz
samba-dc-provision
samba-debuginfo
samba-debugsource
samba-devel
samba-help
samba-common
samba-libs
samba-test
samba-winbind
samba-winbind-clients
samba-winbind-krb5-locator
samba-winbind-modules
samba-pidl
samba-client
python3-samba-test
python3-samba-dc
python3-samba
libwbclient-devel
libwbclient
libsmbclient-devel
libsmbclient
ctdb-tests
ctdb
samba
samba-vfs-glusterfs
freeipa
samba (Ubuntu package)
samba-dc-libs
samba-usershares
samba-client-libs
libsamba-policy-python3-devel
samba-python3-debuginfo
samba-winbind-libs-debuginfo
samba-test-debuginfo
samba-libs-debuginfo
samba-libs-python3
samba-dcerpc
libsamba-policy0-python3-debuginfo
ctdb-pcp-pmda-debuginfo
ctdb-pcp-pmda
samba-gpupdate
samba-winbind-libs-32bit-debuginfo
samba-winbind-libs-64bit
samba-winbind-libs-64bit-debuginfo
samba-client-64bit-debuginfo
samba-libs-64bit
samba-libs-python3-64bit-debuginfo
libsamba-policy0-python3-64bit
samba-winbind-libs-32bit
samba-client-32bit
libsamba-policy0-python3-32bit-debuginfo
samba-client-32bit-debuginfo
samba-client-libs-32bit
libsamba-policy-devel
samba-libs-python3-32bit
samba-libs-32bit-debuginfo
samba-devel-32bit
samba-client-libs-32bit-debuginfo
samba-libs-python3-32bit-debuginfo
libsamba-policy0-python3-32bit
samba-libs-32bit
samba-ceph-debuginfo
samba-ceph
samba-ldb-ldap-debuginfo
samba-tool
libsamba-policy0-python3-64bit-debuginfo
samba-libs-python3-debuginfo
samba-winbind-libs
samba-python3
samba-winbind-debuginfo
libsamba-policy0-python3
samba-ldb-ldap
samba-client-debuginfo
samba-client-libs-debuginfo
ctdb-debuginfo
samba-dcerpc-debuginfo
samba-doc
samba-client-64bit
samba-libs-python3-64bit
samba-client-libs-64bit
samba-devel-64bit
samba-client-libs-64bit-debuginfo
samba-libs-64bit-debuginfo
samba (Debian package)
samba-tools
samba-test-libs
samba-vfs-iouring
libnetapi
libnetapi-devel
python3-samba-devel
samba-common-libs
samba-ldb-ldap-modules
samba-winexe
samba (Red Hat package)
ldb-tools-debuginfo
libldb2-debuginfo
python3-ldb
libldb2
ldb-tools
libldb2-32bit
libldb2-32bit-debuginfo
python3-ldb-debuginfo
libldb-devel
Red Hat OpenShift Container Platform

How to mitigate CVE-2026-3012

Install security update from vendor's website.

Samba - addressed in versions 4.22.10, 4.23.8, 4.24.3
samba-krb5-printing - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-common-tools - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-dc - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-dc-bind-dlz - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-dc-provision - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-debuginfo - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-debugsource - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-devel - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-help - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-common - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-libs - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-test - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-winbind - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-winbind-clients - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-winbind-krb5-locator - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-winbind-modules - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-pidl - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-client - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
python3-samba-test - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
python3-samba-dc - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
python3-samba - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
libwbclient-devel - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
libwbclient - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
libsmbclient-devel - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
libsmbclient - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
ctdb-tests - update to 4.11.12-38
ctdb - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-vfs-glusterfs - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
freeipa - addressed in versions 4.13.1-7.fc43, 4.13.1-12.fc44, 4.13.1-16.fc45
samba (Ubuntu package) - addressed in versions 2:4.15.13+dfsg-0ubuntu1.12, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.23.6+dfsg-1ubuntu2.1
samba-dc-libs - addressed in versions 4.17.5-15, 4.19.3-9
samba-usershares - addressed in versions 4.17.5-15, 4.19.3-9
samba-client-libs - addressed in versions 4.17.5-15, 4.19.3-9
libsamba-policy-python3-devel - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-python3-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-libs-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-test-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs-python3 - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-dcerpc - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-debugsource - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
libsamba-policy0-python3-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
ctdb-pcp-pmda-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-client-libs - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
ctdb-pcp-pmda - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-test - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-gpupdate - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-libs-32bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-libs-64bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-winbind-libs-64bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-client-64bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-64bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-python3-64bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
libsamba-policy0-python3-64bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-winbind-libs-32bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client-32bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
libsamba-policy0-python3-32bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-client-32bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-client-libs-32bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
libsamba-policy-devel - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-python3-32bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-32bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-devel-32bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-client-libs-32bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs-python3-32bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
libsamba-policy0-python3-32bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-32bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-ceph-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-ceph - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-ldb-ldap-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-tool - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
libsamba-policy0-python3-64bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-python3-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-libs - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-python3 - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-devel - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
ctdb - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
libsamba-policy0-python3 - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-ldb-ldap - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client-libs-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
ctdb-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-dcerpc-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-doc - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-client-64bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-python3-64bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-client-libs-64bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-devel-64bit - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-client-libs-64bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba-libs-64bit-debuginfo - addressed in versions 4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1
samba (Debian package) - addressed in versions 2:4.17.12+dfsg-0+deb12u4, 2:4.22.8+dfsg-0+deb13u2
samba-tools - update to 4.19.3-9
samba-test - update to 4.19.4-16
samba-test-libs - update to 4.19.4-16
samba-krb5-printing - update to 4.19.4-16
samba-tools - update to 4.19.4-16
samba-usershares - update to 4.19.4-16
samba-vfs-iouring - update to 4.19.4-16
samba-winbind - update to 4.19.4-16
samba-winbind-clients - update to 4.19.4-16
samba-winbind-krb5-locator - update to 4.19.4-16
samba-winbind-modules - update to 4.19.4-16
python3-samba-test - update to 4.19.4-16
ctdb - update to 4.19.4-16
libnetapi - update to 4.19.4-16
libnetapi-devel - update to 4.19.4-16
libsmbclient - update to 4.19.4-16
libsmbclient-devel - update to 4.19.4-16
libwbclient - update to 4.19.4-16
libwbclient-devel - update to 4.19.4-16
python3-samba - update to 4.19.4-16
python3-samba-dc - update to 4.19.4-16
python3-samba-devel - update to 4.19.4-16
samba-libs - update to 4.19.4-16
samba - update to 4.19.4-16
samba-client - update to 4.19.4-16
samba-client-libs - update to 4.19.4-16
samba-common-libs - update to 4.19.4-16
samba-common-tools - update to 4.19.4-16
samba-dc-libs - update to 4.19.4-16
samba-dcerpc - update to 4.19.4-16
samba-devel - update to 4.19.4-16
samba-ldb-ldap-modules - update to 4.19.4-16
samba-common - update to 4.19.4-16
samba-pidl - update to 4.19.4-16
samba-winexe - update to 4.19.4-16
Red Hat OpenShift Container Platform - update to 4.19.36
samba (Red Hat package) - addressed in versions 4.21.3-14.el9_6.1, 4.23.5-109.el10_2
ldb-tools-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb2-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
python3-ldb - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb2 - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
ldb-tools - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb2-32bit - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb2-32bit-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
python3-ldb-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb-devel - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba - addressed in versions 4.23.8-1.fc43, 4.24.3-1.fc44, 4.24.3-1.fc45

External References

Related Security Bulletins