openSUSE Samba Important Multiple Issues Patch 2026-3366

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

This update for samba fixes the following issues

* CVE-2026-6949: TSIG packet with crafted name compression can crash internal

DNS server (bsc#1271672).

* CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of

critical system paths without validation (bsc#1271469).

* CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd`

service (bsc#1271674).

* CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in

a fixed FIFO before authentication completes (bsc#1271675).

* CVE-2026-58221: authenticated LDAP access to internal LDB special DNs

permits domain takeover (bsc#1271676).

* CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion

disclose protected attributes (bsc#1271677).

* CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-3366=1

* SUSE Enterprise Storage 7.1

zypper in -t patch SUSE-Storage-7.1-2026-3366=1

* openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64)

* libsamba-policy0-python3-debuginfo-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-debugsource-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-python3-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-client-libs-debuginfo-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-debuginfo-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-dsdb-modules-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* libsamba-policy-devel-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-ad-dc-libs-debuginfo-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-dsdb-modules-debuginfo-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* ctdb-pcp-pmda-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-libs-python3-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-winbind-libs-4.15.13+git.808.eeca19f5e1-150300.3.106.1

* samba-tool-4.15.13+git.808.eeca19f5e1-150300.3.106.1

*

*

*

*

*

*

*

*

*

*

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.