gpp_maybe
Security update for samba
SUSE-SL-Micro-6.2-1386
This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation (bsc#1271469). - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674). - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675). - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676). - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677). - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
-
Release DateJul 29 2026
-
ReferencesBugzilla: 1271469, 1271672, 1271673, 1271674, 1271675, 1271676, 1271677
CVEs: CVE-2026-6949, CVE-2026-15779, CVE-2026-58216, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58224 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Micro 6.2 ppc64le
-
Packageslibldb2
An LDAP-like embedded databasesamba-client-libs4.22.9+git.538.af6cb4fb2e-160000.1.1 lock rpm
Samba client libraries4.22.9+git.538.af6cb4fb2e-160000.1.1 lock rpm
SUSE Linux Micro 6.2 aarch64
-
Packageslibldb2
An LDAP-like embedded databasesamba-client-libs4.22.9+git.538.af6cb4fb2e-160000.1.1 lock rpm
Samba client libraries4.22.9+git.538.af6cb4fb2e-160000.1.1 lock rpm
SUSE Linux Micro 6.2 s390x
-
Packageslibldb2
An LDAP-like embedded databasesamba-client-libs4.22.9+git.538.af6cb4fb2e-160000.1.1 lock rpm
Samba client libraries4.22.9+git.538.af6cb4fb2e-160000.1.1 lock rpm
SUSE Linux Micro 6.2 x86_64
-
Packageslibldb2
An LDAP-like embedded databasesamba-client-libs4.22.9+git.538.af6cb4fb2e-160000.1.1 lock rpm
Samba client libraries4.22.9+git.538.af6cb4fb2e-160000.1.1 lock rpm