SUSE-SU-2026:23129-1
Security update for samba
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the `user.SmbReparse` xattr (bsc#1261188). - CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158). - CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159). - CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160). - CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163). - CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161). - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation (bsc#1271469). - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674). - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675). - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676). - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677). - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673). Other updates and bugfixes: - `samba-tool`: do not complain of no subcommand with `-V` (bsc#1273189, bso#15770). - Add `python3-cryptography` and `python3-requests` requirements for `samba-python3`.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 16.0 | ctdb, ctdb-pcp-pmda, ldb-tools y 20 más | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
Mostrar las 23 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 16.0 | ctdb | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | ctdb-pcp-pmda | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | ldb-tools | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | libldb-devel | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | libldb2 | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | python3-ldb | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-ad-dc | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-ad-dc-libs | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-client | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-client-libs | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-dcerpc | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-devel | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-doc | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-dsdb-modules | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-gpupdate | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-ldb-ldap | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-libs | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-libs-python3 | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-python3 | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-tool | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-winbind | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
| SUSE Linux Enterprise 16.0 | samba-winbind-libs | 4.22.11+git.552.66cfeb7de0a-160000.1.1 |
Referencias
- https://bugzilla.suse.com/1261158
- https://bugzilla.suse.com/1261159
- https://bugzilla.suse.com/1261160
- https://bugzilla.suse.com/1261161
- https://bugzilla.suse.com/1261163
- https://bugzilla.suse.com/1261188
- https://bugzilla.suse.com/1271469
- https://bugzilla.suse.com/1271672
Las 30 referencias
- https://bugzilla.suse.com/1271673
- https://bugzilla.suse.com/1271674
- https://bugzilla.suse.com/1271675
- https://bugzilla.suse.com/1271676
- https://bugzilla.suse.com/1271677
- https://bugzilla.suse.com/1273189
- https://lists.suse.com/pipermail/sle-security-updates/2026-August/028317.html
- https://www.suse.com/security/cve/CVE-2026-15779/
- https://www.suse.com/security/cve/CVE-2026-1933/
- https://www.suse.com/security/cve/CVE-2026-2340/
- https://www.suse.com/security/cve/CVE-2026-3012/
- https://www.suse.com/security/cve/CVE-2026-3238/
- https://www.suse.com/security/cve/CVE-2026-4408/
- https://www.suse.com/security/cve/CVE-2026-4480/
- https://www.suse.com/security/cve/CVE-2026-58216/
- https://www.suse.com/security/cve/CVE-2026-58218/
- https://www.suse.com/security/cve/CVE-2026-58221/
- https://www.suse.com/security/cve/CVE-2026-58222/
- https://www.suse.com/security/cve/CVE-2026-58224/
- https://www.suse.com/security/cve/CVE-2026-6949/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-202623129-1/