openSUSE Samba Important Vulnerability Fixes 2026-3364

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

This update for samba fixes the following issues

* CVE-2026-6949: TSIG packet with crafted name compression can crash internal

DNS server (bsc#1271672).

* CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of

critical system paths without validation (bsc#1271469).

* CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd`

service (bsc#1271674).

* CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in

a fixed FIFO before authentication completes (bsc#1271675).

* CVE-2026-58221: authenticated LDAP access to internal LDB special DNs

permits domain takeover (bsc#1271676).

* CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion

disclose protected attributes (bsc#1271677).

* CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise High Availability Extension 15 SP6

zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-3364=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3364=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3364=1

zypper in -t patch SUSE-2026-3364=1

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)

* samba-ldb-ldap-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-devel-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-libs-python3-debuginfo-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-winbind-libs-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-dcerpc-debuginfo-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-client-4.19.8+git.501.67274891bc-150600.3.29.1

* ctdb-pcp-pmda-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-tool-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-debuginfo-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-winbind-libs-debuginfo-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-gpupdate-4.19.8+git.501.67274891bc-150600.3.29.1

* ctdb-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-test-4.19.8+git.501.67274891bc-150600.3.29.1

* libsamba-policy0-python3-4.19.8+git.501.67274891bc-150600.3.29.1

* samba-test-debuginfo-4.19.8+git.501.67274891bc-150600.3.29.1

* libsamba-policy-devel-4.19.8+git.501.67274891bc-150600.3.29.1

*

*

*

*

*

*

*

*

*

*

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.