SUSE-SU-2026:3367-1

Опубликовано: 28 июл. 2026

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues

CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Список пакетов

SUSE Linux Enterprise High Availability Extension 12 SP5

ctdb-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS

libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

libsamba-policy0-python3-4.15.13+git.729.a8ce057e8d-3.109.1

libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-4.15.13+git.729.a8ce057e8d-3.109.1

samba-client-4.15.13+git.729.a8ce057e8d-3.109.1

samba-client-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-client-libs-4.15.13+git.729.a8ce057e8d-3.109.1

samba-client-libs-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-devel-4.15.13+git.729.a8ce057e8d-3.109.1

samba-devel-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-doc-4.15.13+git.729.a8ce057e8d-3.109.1

samba-ldb-ldap-4.15.13+git.729.a8ce057e8d-3.109.1

samba-libs-4.15.13+git.729.a8ce057e8d-3.109.1

samba-libs-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-libs-python3-4.15.13+git.729.a8ce057e8d-3.109.1

samba-libs-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-python3-4.15.13+git.729.a8ce057e8d-3.109.1

samba-tool-4.15.13+git.729.a8ce057e8d-3.109.1

samba-winbind-4.15.13+git.729.a8ce057e8d-3.109.1

samba-winbind-libs-4.15.13+git.729.a8ce057e8d-3.109.1

samba-winbind-libs-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

libsamba-policy0-python3-4.15.13+git.729.a8ce057e8d-3.109.1

libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-4.15.13+git.729.a8ce057e8d-3.109.1

samba-client-4.15.13+git.729.a8ce057e8d-3.109.1

samba-client-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-client-libs-4.15.13+git.729.a8ce057e8d-3.109.1

samba-client-libs-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-devel-4.15.13+git.729.a8ce057e8d-3.109.1

samba-devel-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-doc-4.15.13+git.729.a8ce057e8d-3.109.1

samba-ldb-ldap-4.15.13+git.729.a8ce057e8d-3.109.1

samba-libs-4.15.13+git.729.a8ce057e8d-3.109.1

samba-libs-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-libs-python3-4.15.13+git.729.a8ce057e8d-3.109.1

samba-libs-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

samba-python3-4.15.13+git.729.a8ce057e8d-3.109.1

samba-tool-4.15.13+git.729.a8ce057e8d-3.109.1

samba-winbind-4.15.13+git.729.a8ce057e8d-3.109.1

samba-winbind-libs-4.15.13+git.729.a8ce057e8d-3.109.1

samba-winbind-libs-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263367-1/
Link for SUSE-SU-2026:3367-1
https://lists.suse.com/pipermail/sle-security-updates/2026-July/028019.html
E-Mail link for SUSE-SU-2026:3367-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1271469
SUSE Bug 1271469
https://bugzilla.suse.com/1271672
SUSE Bug 1271672
https://bugzilla.suse.com/1271673
SUSE Bug 1271673
https://bugzilla.suse.com/1271674
SUSE Bug 1271674
https://bugzilla.suse.com/1271675
SUSE Bug 1271675
https://bugzilla.suse.com/1271676
SUSE Bug 1271676
https://bugzilla.suse.com/1271677
SUSE Bug 1271677
https://www.suse.com/security/cve/CVE-2026-15779/
SUSE CVE CVE-2026-15779 page
https://www.suse.com/security/cve/CVE-2026-58216/
SUSE CVE CVE-2026-58216 page
https://www.suse.com/security/cve/CVE-2026-58218/
SUSE CVE CVE-2026-58218 page
https://www.suse.com/security/cve/CVE-2026-58221/
SUSE CVE CVE-2026-58221 page
https://www.suse.com/security/cve/CVE-2026-58222/
SUSE CVE CVE-2026-58222 page
https://www.suse.com/security/cve/CVE-2026-58224/
SUSE CVE CVE-2026-58224 page
https://www.suse.com/security/cve/CVE-2026-6949/
SUSE CVE CVE-2026-6949 page

Описание

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 12 SP5:ctdb-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15779.html
CVE-2026-15779
https://bugzilla.suse.com/1271469
SUSE Bug 1271469

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 12 SP5:ctdb-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58216.html
CVE-2026-58216
https://bugzilla.suse.com/1271674
SUSE Bug 1271674

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 12 SP5:ctdb-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58218.html
CVE-2026-58218
https://bugzilla.suse.com/1271675
SUSE Bug 1271675

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 12 SP5:ctdb-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58221.html
CVE-2026-58221
https://bugzilla.suse.com/1271676
SUSE Bug 1271676

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 12 SP5:ctdb-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58222.html
CVE-2026-58222
https://bugzilla.suse.com/1271677
SUSE Bug 1271677

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 12 SP5:ctdb-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-58224.html
CVE-2026-58224
https://bugzilla.suse.com/1271673
SUSE Bug 1271673

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 12 SP5:ctdb-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy-python3-devel-4.15.13+git.729.a8ce057e8d-3.109.1

SUSE Linux Enterprise Server 12 SP5-LTSS:libsamba-policy0-python3-32bit-4.15.13+git.729.a8ce057e8d-3.109.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-6949.html
CVE-2026-6949
https://bugzilla.suse.com/1271672
SUSE Bug 1271672
https://bugzilla.suse.com/1271675
SUSE Bug 1271675

SUSE-SU-2026:3367-1

Описание

Список пакетов

SUSE Linux Enterprise High Availability Extension 12 SP5

SUSE Linux Enterprise Server 12 SP5-LTSS

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Ссылки

Уязвимость: CVE-2026-15779

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58216

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58218

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58221

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58222

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-58224

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-6949

Описание

Затронутые продукты

Ссылки