SUSE-SU-2026:3363-1

Опубликовано: 28 июл. 2026

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues

CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Список пакетов

Container suse/samba-client:latest

libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-server:latest

libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-dcerpc-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-toolbox:latest

libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Image SLES15-SP7-BYOS-EC2

libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

SUSE Linux Enterprise High Availability Extension 15 SP7

ctdb-4.21.10+git.533.31d7e5508d-150700.3.29.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

ldb-tools-4.21.10+git.533.31d7e5508d-150700.3.29.1

libldb-devel-4.21.10+git.533.31d7e5508d-150700.3.29.1

libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

libldb2-32bit-4.21.10+git.533.31d7e5508d-150700.3.29.1

python3-ldb-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-ceph-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-client-libs-32bit-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-dcerpc-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-devel-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-gpupdate-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-ldb-ldap-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-libs-32bit-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-libs-python3-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-python3-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-tool-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-winbind-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-winbind-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

samba-winbind-libs-32bit-4.21.10+git.533.31d7e5508d-150700.3.29.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263363-1/
Link for SUSE-SU-2026:3363-1
https://lists.suse.com/pipermail/sle-security-updates/2026-July/028015.html
E-Mail link for SUSE-SU-2026:3363-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1271469
SUSE Bug 1271469
https://bugzilla.suse.com/1271672
SUSE Bug 1271672
https://bugzilla.suse.com/1271673
SUSE Bug 1271673
https://bugzilla.suse.com/1271674
SUSE Bug 1271674
https://bugzilla.suse.com/1271675
SUSE Bug 1271675
https://bugzilla.suse.com/1271676
SUSE Bug 1271676
https://bugzilla.suse.com/1271677
SUSE Bug 1271677
https://www.suse.com/security/cve/CVE-2026-15779/
SUSE CVE CVE-2026-15779 page
https://www.suse.com/security/cve/CVE-2026-58216/
SUSE CVE CVE-2026-58216 page
https://www.suse.com/security/cve/CVE-2026-58218/
SUSE CVE CVE-2026-58218 page
https://www.suse.com/security/cve/CVE-2026-58221/
SUSE CVE CVE-2026-58221 page
https://www.suse.com/security/cve/CVE-2026-58222/
SUSE CVE CVE-2026-58222 page
https://www.suse.com/security/cve/CVE-2026-58224/
SUSE CVE CVE-2026-58224 page
https://www.suse.com/security/cve/CVE-2026-6949/
SUSE CVE CVE-2026-6949 page

Описание

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Затронутые продукты

Container suse/samba-client:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-server:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15779.html
CVE-2026-15779
https://bugzilla.suse.com/1271469
SUSE Bug 1271469

Описание

unknown

Затронутые продукты

Container suse/samba-client:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-server:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58216.html
CVE-2026-58216
https://bugzilla.suse.com/1271674
SUSE Bug 1271674

Описание

unknown

Затронутые продукты

Container suse/samba-client:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-server:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58218.html
CVE-2026-58218
https://bugzilla.suse.com/1271675
SUSE Bug 1271675

Описание

unknown

Затронутые продукты

Container suse/samba-client:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-server:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58221.html
CVE-2026-58221
https://bugzilla.suse.com/1271676
SUSE Bug 1271676

Описание

unknown

Затронутые продукты

Container suse/samba-client:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-server:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58222.html
CVE-2026-58222
https://bugzilla.suse.com/1271677
SUSE Bug 1271677

Описание

unknown

Затронутые продукты

Container suse/samba-client:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-server:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58224.html
CVE-2026-58224
https://bugzilla.suse.com/1271673
SUSE Bug 1271673

Описание

unknown

Затронутые продукты

Container suse/samba-client:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-client:latest:samba-client-libs-4.21.10+git.533.31d7e5508d-150700.3.29.1

Container suse/samba-server:latest:libldb2-4.21.10+git.533.31d7e5508d-150700.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-6949.html
CVE-2026-6949
https://bugzilla.suse.com/1271672
SUSE Bug 1271672
https://bugzilla.suse.com/1271675
SUSE Bug 1271675

SUSE-SU-2026:3363-1

Описание

Список пакетов

Container suse/samba-client:latest

Container suse/samba-server:latest

Container suse/samba-toolbox:latest

Image SLES15-SP7-BYOS-EC2

SUSE Linux Enterprise High Availability Extension 15 SP7

SUSE Linux Enterprise Module for Basesystem 15 SP7

Ссылки

Уязвимость: CVE-2026-15779

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58216

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58218

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58221

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58222

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58224

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-6949

Описание

Затронутые продукты

Ссылки