< back to search

gpp_maybe Security update for samba
SUSE-SLE-HA-12-SP5-2026-3367

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation (bsc#1271469). - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674). - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675). - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676). - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677). - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

cloud_download Downloads

SUSE Linux Enterprise High Availability Extension 12.5 s390x
  • Packages
    ctdb
    Clustered TDB
    4.15.13+git.729.a8ce057e8d-3.109.1
    lock rpm
    samba
    A SMB/CIFS File, Print, and Authentication Server
    4.15.13+git.729.a8ce057e8d-3.109.1
    lock src
SUSE Linux Enterprise High Availability Extension 12.5 ppc64le
  • Packages
    ctdb
    Clustered TDB
    4.15.13+git.729.a8ce057e8d-3.109.1
    lock rpm
    samba
    A SMB/CIFS File, Print, and Authentication Server
    4.15.13+git.729.a8ce057e8d-3.109.1
    lock src
SUSE Linux Enterprise Server for SAP Applications 12.5 x86_64
  • Packages
    ctdb
    Clustered TDB
    4.15.13+git.729.a8ce057e8d-3.109.1
    lock rpm
    samba
    A SMB/CIFS File, Print, and Authentication Server
    4.15.13+git.729.a8ce057e8d-3.109.1
    lock src