-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Jul 2026 08:21:38 CEST Source: samba Architecture: source Version: 2:4.13.13+dfsg-1~deb11u8 Distribution: bullseye-security Urgency: high Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Checksums-Sha1: cd615f13d225296b24017ca6616870c0a6c72c4b 4520 samba_4.13.13+dfsg-1~deb11u8.dsc eb322235696de71ccf6d847d21d4277e51ac77dd 11787668 samba_4.13.13+dfsg.orig.tar.xz fc067659a29df06053cf15b751a9ba349cdbb3ad 565468 samba_4.13.13+dfsg-1~deb11u8.debian.tar.xz 46765b07a61e6756e9a70ee0ac4122a6b4dba551 23364 samba_4.13.13+dfsg-1~deb11u8_amd64.buildinfo Checksums-Sha256: 2f4dc0a1445330e66112b19afb31a12d2366108af57a1c1375d8cb6d2645b68d 4520 samba_4.13.13+dfsg-1~deb11u8.dsc c4747c211a2050e583d706cf380d48f5d9c1021536a9229fd6ba69e461545c46 11787668 samba_4.13.13+dfsg.orig.tar.xz 344f75f8f74c48dd6156c867944d32871df729a57cfdd3f4a5288730db852cb9 565468 samba_4.13.13+dfsg-1~deb11u8.debian.tar.xz 5fa99f3dbf687ec673d695dd1350bd74d1597fc0a1d1fb189a3b80f7be211e51 23364 samba_4.13.13+dfsg-1~deb11u8_amd64.buildinfo Changes: samba (2:4.13.13+dfsg-1~deb11u8) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * https://bugzilla.samba.org/show_bug.cgi?id=16018 May-2026 samba security update fixing the following issues: CVE-2026-1933: Missing access check on reparse point operations https://bugzilla.samba.org/show_bug.cgi?id=15992 CVE-2026-2340: vfs_worm does not block directory modification https://bugzilla.samba.org/show_bug.cgi?id=15997 CVE-2026-3012: group policy certificate enrollment uses http:// without validation https://bugzilla.samba.org/show_bug.cgi?id=16003 CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server https://bugzilla.samba.org/show_bug.cgi?id=16012 CVE-2026-4480: Unauthenticated Remote Code Execution using print command https://bugzilla.samba.org/show_bug.cgi?id=16033 CVE-2026-4408: Remote Code Execution in SAMR when check password script contains %u substitution placeholder https://bugzilla.samba.org/show_bug.cgi?id=16034 Files: 09bae1720a598ea6e03c74e1575d75d7 4520 net optional samba_4.13.13+dfsg-1~deb11u8.dsc c272fc38655e965733ba1a9e3aa52019 11787668 net optional samba_4.13.13+dfsg.orig.tar.xz 7aecbd23e6e780fdd1a3094abf6d6b9f 565468 net optional samba_4.13.13+dfsg-1~deb11u8.debian.tar.xz 6d29d934d281ccf0b8a0d49d9033626f 23364 net optional samba_4.13.13+dfsg-1~deb11u8_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmpfEEBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkaL4P/RePc73s5j/RL/yJq5ZbsX8xNzAgTKJbUBHD fpFPIUdzjoSaB/HjB086W6VPUZQqsv+oMgilZ7i9V4XpS0DZwJ/DlJUSS39hTJzh VfoYGstn9rROZ6zqFY705QaJihfjf7fqInrY4XB+F80QV0CsOjvesWVUWK1pOGGt PgBvepk9aYMDq6Yw4e9gzPWMwJ3X7/MYy9yD3xbVQLbkjhkKHwASO4dfhXiT1tZ7 Pqj18KSYxttq4EoCakuCDFNFfUOHKhk7eTULp3M3xOiiD5uruZ+qYD90HIlayD13 xXhru7S0szSzTX9C+XgI8cOpZy+TMcdNdbGH+1p4j03MBJThZFO2zw8utdR8NfeO 3Frk+GLoaDhIpmdrzC8FVOIWjzIQFa0qMG6e089th2/nHOgAJhN1wJ6WKsbHLndO dhGbUTvP02PZxkAm54GFcMEhKsAfuWBzLCqZbttQE6w96IF4XTpA+dfbkbTCMdSL jBqe0ZwhHL/8lHF1p6Dm8MPIFKGfS1xGgg4tdzzp9YabQCYOISZZiLgN49Qyk71l e99LWufU3o+Ggykx4GYmfvNTXezMon4mDrRuB2WXC9qrW41VtBp+dpOV3kwEGzsM 3zMhm8WNtgzyirVGVm7ZQihNRph6ct+RKU9psooK9n39TolpK+TSdmXOCoiZ/cwf NVF8W+1A =ne8B -----END PGP SIGNATURE-----
