-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 24 Jul 2026 16:14:13 +0300
Source: samba
Architecture: source
Version: 2:4.22.10+dfsg-0+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Changes:
samba (2:4.22.10+dfsg-0+deb13u2) trixie-security; urgency=medium
.
* 2026-jul-sec-update-bug-16039-v4-22-combined.patch:
Jul-2026 samba security update addresses the following defects:
.
CVE-2026-6949: https://bugzilla.samba.org/show_bug.cgi?id=16083
TSIG packet with crafted name compression can crash internal DNS server
.
CVE-2026-58224: https://bugzilla.samba.org/show_bug.cgi?id=16085
CTDB: heap OOB read via unchecked packet length fields
.
CVE-2026-58216: https://bugzilla.samba.org/show_bug.cgi?id=16087
kpasswd service: 6-byte heap OOB read in packet parser
.
CVE-2026-58218: https://bugzilla.samba.org/show_bug.cgi?id=16115
DNS TKEY negotiation stores unauthenticated GSS contexts
in a fixed FIFO before authentication completes
.
CVE-2026-58221: https://bugzilla.samba.org/show_bug.cgi?id=16147
authenticated LDAP access to internal LDB special DNs
permits domain takeover
.
CVE-2026-58222: https://bugzilla.samba.org/show_bug.cgi?id=16148
LDAP Compare filter injection and trusted-request
confusion disclose protected attributes
Checksums-Sha1:
e876ea4765016baf162f972286d6d43e9ed1a145 5665 samba_4.22.10+dfsg-0+deb13u2.dsc
997d64904b689e9e3964d95e833b08a8142c7c1c 25648480 samba_4.22.10+dfsg.orig.tar.xz
da29af59791d4102048869e82be6c5503969e296 202944 samba_4.22.10+dfsg-0+deb13u2.debian.tar.xz
b0eff57c8f70b0c88b7b5b145de8b04e75837881 5478 samba_4.22.10+dfsg-0+deb13u2_source.buildinfo
Checksums-Sha256:
f4fe0f8f1e9b29074f081d9e31b3b43da30a0df04070dd7568d507487f4741ed 5665 samba_4.22.10+dfsg-0+deb13u2.dsc
3be9827fbfbb418ea98eb8db2e6b3ededf9ba54fe8c4521ae34a361c0708b005 25648480 samba_4.22.10+dfsg.orig.tar.xz
329ba61988d22d399f5bfcfffcec84e0be3215a0fbf677cdac47ff278fed5ccf 202944 samba_4.22.10+dfsg-0+deb13u2.debian.tar.xz
114911251c0a78d78eb8072bc36b89ea1b4ca145fe3aff7dea3e393e08b311b1 5478 samba_4.22.10+dfsg-0+deb13u2_source.buildinfo
Files:
f2d4ea2e6d101932d96a1cb2ba790d11 5665 net optional samba_4.22.10+dfsg-0+deb13u2.dsc
f72ea9cca2c6a12e0147faf679a3be78 25648480 net optional samba_4.22.10+dfsg.orig.tar.xz
ebd6a884a824d81d594c17ceb57ae7a3 202944 net optional samba_4.22.10+dfsg-0+deb13u2.debian.tar.xz
297f05c827173c929d31c5b27c894f45 5478 net optional samba_4.22.10+dfsg-0+deb13u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEZKoqtTHVaQM2a/75gqpKJDselHgFAmpjbloACgkQgqpKJDse
lHhNYg/9EyVYBM0EpdxL/XMCEZW9bW0N0vNzuaZHpYAc0A/i+orut4ZfWQuE46YY
kdFEERkQ/R6PDQcBVtCxUsLkFo6GcqpTQ3IGoDKt62roPbi7/K7SAuUBcK7DgikM
z3/0cMbcpoIQjyqu3vUp2/EfS5AEImUk1P88aU8XGZjcnt6LmW9SLAqCFb8qddYa
RVamtFs+kXiAV1hkiItZmEFOODZLwXLQ8VsbOKBse0DTa2WcHfBnA9jhZ/HBJ4wz
099cnD/foJS+Z3mE2rz/0If1lsYlmfa+a5XhtZwLcQhKuGC2OT3tvIUwPcI7MgaW
+Yh65uxuOfsvfP3knW9IUjErkxuINn3q6C5zGiDdbmtPuMorDUFGgdju7N0MGkRF
lG9B5xald2fA6jQI5oqjUS9nucX//AQLz8GKFEOCR0oIK0NQqD3CV67YAh0r+Y/5
Mfqinf/Xmyfnq7RhPAWurvbBu+wNpGQJB7qQT4jnwxe2FB8kWB+jHjfMjZW8E5tR
/r2FJbHj2KwhlzNR7hZEkedvz1JvjxbH2iqonc4auuXyUclVNIwBDMsaPkFHatYQ
je9EPpGrsE+5Va/gkQqTTCl5XLHd484ooWd3EluyMhBsDusY63p7MSvX4y6CIfyK
xGrxBuq4D1H+ZUsgEqsvjJjPXiP/t+J3wMczLubNfplmgS/RDq4=
=ESki
-----END PGP SIGNATURE-----
