Security Fix(es):
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service. (CVE-2026-4408)
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system. (CVE-2026-4480)
4.15.3-4.r28.hce24.15.3-4.r28.hce24.15.3-4.r28.hce24.15.3-4.r28.hce24.15.3-4.r28.hce24.15.3-4.r28.hce24.15.3-4.r28.hce24.15.3-4.r28.hce24.15.3-4.r28.hce24.15.3-4.r28.hce2