SUSE-SU-2026:3364-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-byt...

SUSE-SU-2026:3363-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-byt...

USN-8621-1 samba vulnerabilities

It was discovered that Samba's pamwinbind incorrectly handled home directory ownership when mkhomedir was enabled. A local attacker could possibly use this issue to cause a denial of service by triggering a change in ownership of the root directory. CVE-2026-15779 Arjun Basnet, Douglas Bagnall, a...

USN-8621-1: Samba vulnerabilities

It was discovered that Samba's pamwinbind incorrectly handled home directory ownership when mkhomedir was enabled. A local attacker could possibly use this issue to cause a denial of service by triggering a change in ownership of the root directory. CVE-2026-15779 Arjun Basnet, Douglas Bagnall, a...

CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

PT-2026-65630

Name of the Vulnerable Software and Affected Versions Samba Active Directory Domain Controller AD DC affected versions not specified Description An issue combining LDAP filter injection and improper authorization checks exists when processing LDAP Compare requests. The software fails to properly...

PT-2026-65632

Name of the Vulnerable Software and Affected Versions samba affected versions not specified Description A flaw exists where a TSIG Transaction Signature packet containing crafted name compression can cause the DNS server to crash. This occurs during the processing of DNS packets that use specific...

PT-2026-65627

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An out-of-bounds read flaw exists in the Kerberos Key Distribution Center KDC password change kpasswd service. The issue occurs when the server processes a malformed ASN.1-encoded Kerberos...

PT-2026-65629

Name of the Vulnerable Software and Affected Versions samba affected versions not specified Description Authenticated LDAP access to internal LDB special DNs Distinguished Names allows for a complete domain takeover. This occurs when an authenticated user can access specific internal database...

PT-2026-65631

Name of the Vulnerable Software and Affected Versions Samba CTDB affected versions not specified Description Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes t...

PT-2026-65628

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description Samba's internal DNS server contains a flaw where unauthenticated TKEY registration requests are added to the TKEY name cache before they are rejected. A remote, unauthenticated attacker can se...

OPENSUSE-SU-2026:10884-1 ctdb-4.23.8+git.477.f78166bceed-1.1 on GA media

These are all security issues fixed in the ctdb-4.23.8+git.477.f78166bceed-1.1 package on the GA media of openSUSE Tumbleweed...

ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media (moderate)

ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media Announcement ID: openSUSE-SU-2025:15649-1 Rating: moderate Cross-References: CVE-2025-10230 CVE-2025-9640 CVSS scores: CVE-2025-10230 SUSE : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2025-9640 SUSE : 4.3...

OPENSUSE-SU-2025:15649-1 ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media

These are all security issues fixed in the ctdb-4.22.5+git.431.dc5a539f124-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2013-4084

Malware in sbrugna...

EUVD-2012-4234

Malware in sbrugna...

ctdb-4.22.2+git.396.c752843dcf4-1.1 on GA media (moderate)

ctdb-4.22.2+git.396.c752843dcf4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15296-1 Rating: moderate Cross-References: CVE-2025-0620 CVSS scores: CVE-2025-0620 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2025-0620 SUSE : 7.6...

OPENSUSE-SU-2025:15296-1 ctdb-4.22.2+git.396.c752843dcf4-1.1 on GA media

These are all security issues fixed in the ctdb-4.22.2+git.396.c752843dcf4-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2013-4159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to several temp file vulnerabilities in...

OPENSUSE-SU-2024:11807-1 ctdb-4.15.5+git.328.f1f29505d84-1.1 on GA media

These are all security issues fixed in the ctdb-4.15.5+git.328.f1f29505d84-1.1 package on the GA media of openSUSE Tumbleweed...