{"id":"CVE-2026-58224","aliases":["AZL-95888","CLSA-2026-1787133276","CLSA-2026-1788267403","CLSA-2026-1788338370","CLSA-2026-1788338379","CLSA-2026-1789553469","DEBIAN-CVE-2026-58224","EUVD-2026-58669","GHSA-ph76-744q-p8fh","OESA-2026-3295","OESA-2026-3296","OESA-2026-3297","OESA-2026-3366","OESA-2026-3367","SUSE-SU-2026:22977-1","SUSE-SU-2026:23003-1","SUSE-SU-2026:23129-1","SUSE-SU-2026:23152-1","SUSE-SU-2026:3362-1","SUSE-SU-2026:3363-1","SUSE-SU-2026:3364-1","SUSE-SU-2026:3365-1","SUSE-SU-2026:3366-1","SUSE-SU-2026:3367-1","UBUNTU-CVE-2026-58224","openSUSE-SU-2026:11431-1","openSUSE-SU-2026:21475-1","openSUSE-SU-2026:21540-1"],"status":"published","title":"Samba: ctdb fails to do integrity checking of received packets","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00344,"percentile":0.28275,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-353"],"published":"2026-07-28T10:00:00Z","modified":"2026-11-06T10:04:40Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ctdb","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ldb-tools","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libldb","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libldb-devel","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libnetapi","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libnetapi-devel","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsmbclient","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsmbclient-devel","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libwbclient","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libwbclient-devel","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-ldb","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-samba","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-samba-dc","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-samba-test","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-client","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-client-libs","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-common","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-common-libs","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-common-tools","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-dc-libs","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-dcerpc","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-devel","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-gpupdate","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-krb5-printing","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-ldb-ldap-modules","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-libs","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-pidl","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-test","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-test-libs","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-tools","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-usershares","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-vfs-iouring","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winbind","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winbind-clients","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winbind-krb5-locator","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winbind-modules","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winexe","fixed_in":["4.21.3-14.el9_6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ctdb","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ctdb-tests","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libsmbclient","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libsmbclient-devel","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libwbclient","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libwbclient-devel","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-client","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-client-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-common","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-common-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-common-tools","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-dc","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-dc-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-devel","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-krb5-printing","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-pidl","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-python","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-python-test","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-test","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-test-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-vfs-glusterfs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-clients","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-krb5-locator","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-modules","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"ctdb","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"ctdb-tests","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libsmbclient","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libsmbclient-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libwbclient","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libwbclient-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-client","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-client-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-common","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-common-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-common-tools","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-dc","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-dc-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-krb5-printing","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-pidl","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-python","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-python-test","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-test","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-test-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-vfs-glusterfs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-winbind","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-clients","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-krb5-locator","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-modules","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ctdb","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ctdb-tests","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libsmbclient","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libsmbclient-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libwbclient","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libwbclient-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-client","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-client-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-common","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-common-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-common-tools","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-dc","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-dc-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-krb5-printing","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-pidl","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-python","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-python-test","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-test","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-test-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-vfs-glusterfs","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-winbind","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-clients","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-krb5-locator","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-modules","fixed_in":["4.10.16-25.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ctdb","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnss-winbind","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libpam-winbind","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libsmbclient","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libsmbclient-dev","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libwbclient-dev","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libwbclient0","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python-samba","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"registry-tools","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-common","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-common-bin","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-dev","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-dsdb-modules","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-libs","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-testsuite","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-vfs-modules","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"smbclient","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"winbind","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.22.10+dfsg-0+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.24.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu1.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"samba","fixed_in":["2:4.19.5+dfsg-4ubuntu9.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"samba","fixed_in":["2:4.23.6+dfsg-1ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.18.3-2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ldb-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libldb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libnetapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libnetapi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-samba-dc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-samba-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-client-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-dc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-dcerpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-gpupdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-krb5-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-ldb-ldap-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-pidl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-test-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-usershares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-vfs-iouring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winbind-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"samba-winexe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.3-14.el9_6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ctdb-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-client-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-dc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-dc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-krb5-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-pidl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-test-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-vfs-glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"ctdb-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-client-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-dc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-dc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-krb5-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-pidl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-test-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-vfs-glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ctdb-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-client-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-dc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-dc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-krb5-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-pidl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-test-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-vfs-glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnss-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpam-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libsmbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libwbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libwbclient0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"registry-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-common-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-dsdb-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-vfs-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"smbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.17.10+dfsg-0+deb12u1","2:4.17.10+dfsg-0+deb12u1~bpo11+1","2:4.17.11+dfsg-0+deb12u1","2:4.17.12+dfsg-0+deb12u1","2:4.17.12+dfsg-0+deb12u1~bpo11+1","2:4.17.12+dfsg-0+deb12u2","2:4.17.12+dfsg-0+deb12u3","2:4.17.12+dfsg-0+deb12u4","2:4.17.8+dfsg-2","2:4.17.8+dfsg-2.1","2:4.17.9+dfsg-0+deb12u1","2:4.17.9+dfsg-0+deb12u2","2:4.17.9+dfsg-0+deb12u3","2:4.17.9+dfsg-0+deb12u3~bpo11+1","2:4.18.0+dfsg-1~exp1","2:4.18.0~rc1+dfsg-1exp","2:4.18.0~rc2+dfsg-1","2:4.18.0~rc3+dfsg-1","2:4.18.0~rc4+dfsg-1","2:4.18.1+dfsg-1~exp1","2:4.18.2+dfsg-1","2:4.18.3+dfsg-1","2:4.18.3+dfsg-2","2:4.18.3+dfsg-3","2:4.18.4+dfsg-1","2:4.18.4+dfsg-2","2:4.18.4+dfsg-2~bpo12+1","2:4.18.5+dfsg-1","2:4.18.5+dfsg-2","2:4.18.5+dfsg-2~bpo12+1","2:4.18.6+dfsg-1","2:4.18.6+dfsg-1~bpo12+1","2:4.18.8+dfsg-1~bpo12+1","2:4.19.0+dfsg-1","2:4.19.0~rc1+dfsg-1","2:4.19.0~rc1+dfsg-2","2:4.19.0~rc1+dfsg-3","2:4.19.0~rc2+dfsg-1","2:4.19.0~rc4+dfsg-1","2:4.19.0~rc4+dfsg-2","2:4.19.1+dfsg-1","2:4.19.1+dfsg-2","2:4.19.1+dfsg-3","2:4.19.1+dfsg-4","2:4.19.2+dfsg-1","2:4.19.3+dfsg-1","2:4.19.3+dfsg-1~bpo12+1","2:4.19.3+dfsg-2","2:4.19.4+dfsg-1","2:4.19.4+dfsg-2","2:4.19.4+dfsg-2~bpo12+1","2:4.19.4+dfsg-3","2:4.19.4+dfsg-3~bpo12+1","2:4.19.5+dfsg-1","2:4.19.5+dfsg-2","2:4.19.5+dfsg-3","2:4.19.5+dfsg-4","2:4.19.5+dfsg-4~bpo12+1","2:4.19.5+dfsg-5","2:4.19.6+dfsg-1","2:4.19.6+dfsg-2","2:4.19.6+dfsg-3","2:4.19.6+dfsg-3~bpo12+1","2:4.20.0+dfsg-1~exp1","2:4.20.0+dfsg-1~exp2","2:4.20.0~rc1+dfsg-1","2:4.20.0~rc2+dfsg-1","2:4.20.0~rc2+dfsg-2","2:4.20.0~rc2+dfsg-3","2:4.20.1+dfsg-1","2:4.20.1+dfsg-2","2:4.20.1+dfsg-3","2:4.20.1+dfsg-4","2:4.20.1+dfsg-4~bpo12+1","2:4.20.1+dfsg-5","2:4.20.2+dfsg-1","2:4.20.2+dfsg-10","2:4.20.2+dfsg-2","2:4.20.2+dfsg-2~bpo12+1","2:4.20.2+dfsg-2~bpo12+2","2:4.20.2+dfsg-3","2:4.20.2+dfsg-4","2:4.20.2+dfsg-5","2:4.20.2+dfsg-5~bpo12+1","2:4.20.2+dfsg-6","2:4.20.2+dfsg-6~bpo12+1","2:4.20.2+dfsg-7","2:4.20.2+dfsg-8","2:4.20.2+dfsg-9","2:4.20.2+dfsg-9~exp1","2:4.20.2+dfsg-9~exp2","2:4.20.4+dfsg-1~bpo12+1","2:4.20.5+dfsg-1~bpo12+1","2:4.21.0+dfsg-1","2:4.21.0~rc1+dfsg-1","2:4.21.0~rc1+really4.20.2+dfsg-11","2:4.21.0~rc1+really4.20.2+dfsg-11r","2:4.21.0~rc1+really4.20.3+dfsg-1","2:4.21.0~rc1+really4.20.4+dfsg-1","2:4.21.0~rc2+dfsg-1","2:4.21.1+dfsg-1","2:4.21.1+dfsg-1~bpo12+1","2:4.21.1+dfsg-2","2:4.21.1+dfsg-2+hurd.1","2:4.21.1+dfsg-2~bpo12+1","2:4.21.2+dfsg-1","2:4.21.2+dfsg-2","2:4.21.2+dfsg-3","2:4.21.2+dfsg-3~bpo12+1","2:4.21.2+dfsg-4","2:4.21.2+dfsg-4+hurd.1","2:4.21.2+dfsg-4~exp1","2:4.21.3+dfsg-1","2:4.21.3+dfsg-1~bpo12+1","2:4.21.3+dfsg-2","2:4.21.3+dfsg-3","2:4.21.3+dfsg-4","2:4.21.3+dfsg-4~bpo12+1","2:4.21.3+dfsg-5","2:4.21.3+dfsg-5~bpo12+1","2:4.21.3+dfsg-6","2:4.21.3+dfsg-6~bpo12+1","2:4.21.4+dfsg-1","2:4.21.4+dfsg-1~bpo12+1","2:4.21.5+dfsg-1~bpo12+1","2:4.22.0+dfsg-1","2:4.22.0+dfsg-2","2:4.22.0+dfsg-3","2:4.22.0~rc1+dfsg-1","2:4.22.1+dfsg-1","2:4.22.1+dfsg-1~bpo12+1","2:4.22.2+dfsg-1","2:4.22.2+dfsg-1~bpo12+1","2:4.22.3+dfsg-1","2:4.22.3+dfsg-2","2:4.22.3+dfsg-2~bpo12+1","2:4.22.3+dfsg-3","2:4.22.3+dfsg-4","2:4.22.3+dfsg-4~bpo12+1","2:4.22.4+dfsg-1","2:4.22.4+dfsg-1~deb13u1","2:4.22.4+dfsg-1~deb13u1~bpo12+1","2:4.23.0+dfsg-1","2:4.23.0+dfsg-2","2:4.23.0+dfsg-3","2:4.23.0~rc1+dfsg-1","2:4.23.0~rc2+dfsg-1","2:4.23.0~rc3+dfsg-1","2:4.23.1+dfsg-1","2:4.23.2+dfsg-1","2:4.23.3+dfsg-1","2:4.23.3+dfsg-1~bpo13+1","2:4.23.4+dfsg-1","2:4.23.4+dfsg-1~bpo13+1","2:4.23.5+dfsg-1","2:4.23.5+dfsg-1~bpo13+1","2:4.23.6+dfsg-1","2:4.23.6+dfsg-2","2:4.23.6+dfsg-2~bpo13+1","2:4.24.0+dfsg-1","2:4.24.0~rc1+dfsg-1","2:4.24.0~rc1+dfsg-2","2:4.24.0~rc1+dfsg-3","2:4.24.0~rc2+dfsg-1","2:4.24.1+dfsg-1","2:4.24.2+dfsg-1","2:4.24.2+dfsg-1~bpo13+1","2:4.24.3+dfsg-1","2:4.24.3+dfsg-1~bpo13+1","2:4.24.4+dfsg-1","2:4.24.4+dfsg-1~bpo13+1","2:4.24.5+dfsg-1","2:4.24.5+dfsg-1~bpo13+1","2:4.24.6+dfsg-1","2:4.24.7+dfsg-1","2:4.24.7+dfsg-1~bpo13+1","2:4.25.0+dfsg-1","2:4.25.0~rc1+dfsg-1","2:4.25.1+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.22.10+dfsg-0+deb13u2"}]}],"versions":["2:4.22.10+dfsg-0+deb13u1","2:4.22.3+dfsg-4","2:4.22.4+dfsg-1","2:4.22.4+dfsg-1~deb13u1","2:4.22.4+dfsg-1~deb13u1~bpo12+1","2:4.22.6+dfsg-0+deb13u1","2:4.22.6+dfsg-0+deb13u1~bpo12+1","2:4.22.8+dfsg-0+deb13u1","2:4.22.8+dfsg-0+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.24.5+dfsg-1"}]}],"versions":["2:4.22.3+dfsg-4","2:4.22.4+dfsg-1","2:4.22.4+dfsg-1~deb13u1","2:4.22.4+dfsg-1~deb13u1~bpo12+1","2:4.23.0+dfsg-1","2:4.23.0+dfsg-2","2:4.23.0+dfsg-3","2:4.23.0~rc1+dfsg-1","2:4.23.0~rc2+dfsg-1","2:4.23.0~rc3+dfsg-1","2:4.23.1+dfsg-1","2:4.23.2+dfsg-1","2:4.23.3+dfsg-1","2:4.23.3+dfsg-1~bpo13+1","2:4.23.4+dfsg-1","2:4.23.4+dfsg-1~bpo13+1","2:4.23.5+dfsg-1","2:4.23.5+dfsg-1~bpo13+1","2:4.23.6+dfsg-1","2:4.23.6+dfsg-2","2:4.23.6+dfsg-2~bpo13+1","2:4.24.0+dfsg-1","2:4.24.0~rc1+dfsg-1","2:4.24.0~rc1+dfsg-2","2:4.24.0~rc1+dfsg-3","2:4.24.0~rc2+dfsg-1","2:4.24.1+dfsg-1","2:4.24.2+dfsg-1","2:4.24.2+dfsg-1~bpo13+1","2:4.24.3+dfsg-1","2:4.24.3+dfsg-1~bpo13+1","2:4.24.4+dfsg-1","2:4.24.4+dfsg-1~bpo13+1","2:4.24.5+dfsg-1~bpo13+1"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.5-17.oe2203sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.3-10.oe2403sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-39.oe2003sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.3-10.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.3-10.oe2403sp3"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.9+git.538.af6cb4fb2e-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.11+git.552.66cfeb7de0a-160000.1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.11+git.552.66cfeb7de0a-160000.1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.11+git.552.66cfeb7de0a-160000.1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.11+git.552.66cfeb7de0a-160000.1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.11+git.552.66cfeb7de0a-160000.1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.808.eeca19f5e1-150400.3.52.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.808.eeca19f5e1-150400.3.52.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.808.eeca19f5e1-150400.3.52.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.808.eeca19f5e1-150400.3.52.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.808.eeca19f5e1-150400.3.52.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.808.eeca19f5e1-150400.3.52.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.808.eeca19f5e1-150400.3.52.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.10+git.533.31d7e5508d-150700.3.29.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.10+git.533.31d7e5508d-150700.3.29.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.8+git.501.67274891bc-150600.3.29.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.8+git.501.67274891bc-150600.3.29.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.8+git.501.67274891bc-150600.3.29.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.581.f49579c6cd-150500.3.42.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.581.f49579c6cd-150500.3.42.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.581.f49579c6cd-150500.3.42.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.581.f49579c6cd-150500.3.42.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.581.f49579c6cd-150500.3.42.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.581.f49579c6cd-150500.3.42.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.808.eeca19f5e1-150300.3.106.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.729.a8ce057e8d-3.109.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.729.a8ce057e8d-3.109.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.729.a8ce057e8d-3.109.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.1","2:4.15.13+dfsg-0ubuntu0.20.04.2","2:4.15.13+dfsg-0ubuntu0.20.04.3","2:4.15.13+dfsg-0ubuntu0.20.04.4","2:4.15.13+dfsg-0ubuntu0.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.6","2:4.15.13+dfsg-0ubuntu0.20.04.7","2:4.15.13+dfsg-0ubuntu0.20.04.8","2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1","2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1.13"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3","2:4.15.13+dfsg-0ubuntu1","2:4.15.13+dfsg-0ubuntu1.1","2:4.15.13+dfsg-0ubuntu1.2","2:4.15.13+dfsg-0ubuntu1.3","2:4.15.13+dfsg-0ubuntu1.4","2:4.15.13+dfsg-0ubuntu1.5","2:4.15.13+dfsg-0ubuntu1.6","2:4.15.13+dfsg-0ubuntu1.7","2:4.15.13+dfsg-0ubuntu1.8","2:4.15.13+dfsg-0ubuntu1.9","2:4.15.13+dfsg-0ubuntu1.10","2:4.15.13+dfsg-0ubuntu1.12"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.19.5+dfsg-4ubuntu9.7"}]}],"versions":["2:4.18.6+dfsg-1ubuntu2","2:4.18.6+dfsg-1ubuntu2.1","2:4.18.6+dfsg-1ubuntu2.2","2:4.19.4+dfsg-3ubuntu1","2:4.19.5+dfsg-1ubuntu1","2:4.19.5+dfsg-4ubuntu7","2:4.19.5+dfsg-4ubuntu8","2:4.19.5+dfsg-4ubuntu9","2:4.19.5+dfsg-4ubuntu9.2","2:4.19.5+dfsg-4ubuntu9.3","2:4.19.5+dfsg-4ubuntu9.4","2:4.19.5+dfsg-4ubuntu9.6"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.23.6+dfsg-1ubuntu2.2"}]}],"versions":["2:4.22.3+dfsg-4ubuntu2","2:4.22.3+dfsg-4ubuntu2.1","2:4.22.3+dfsg-4ubuntu3","2:4.22.3+dfsg-4ubuntu4","2:4.23.4+dfsg-1ubuntu1","2:4.23.5+dfsg-1ubuntu2","2:4.23.6+dfsg-1ubuntu1","2:4.23.6+dfsg-1ubuntu2","2:4.23.6+dfsg-1ubuntu2.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.24.5+git.481.dba78dbdea-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.9+git.538.af6cb4fb2e-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.11+git.552.66cfeb7de0a-160000.1.1"}]}],"bundled":13}],"products":[{"vendor":"red hat","product":"red hat ceph storage 9.2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 5"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:86618","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-58224","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502720","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=16085","tags":["Issue Tracking","Mitigation","Vendor Advisory","report"]},{"url":"https://www.samba.org/samba/security/CVE-2026-58224-advisory.html","tags":["Mailing List","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58224","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-ph76-744q-p8fh"},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1787133276.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1788267403.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1788338370.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1788338379.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1789553469.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58224.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-58224","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58218","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6949","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3296","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3297","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3366","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3367","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622977-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271469","tags":["report"]},{"url":"https://bugzilla.suse.com/1271672","tags":["report"]},{"url":"https://bugzilla.suse.com/1271673","tags":["report"]},{"url":"https://bugzilla.suse.com/1271674","tags":["report"]},{"url":"https://bugzilla.suse.com/1271675","tags":["report"]},{"url":"https://bugzilla.suse.com/1271676","tags":["report"]},{"url":"https://bugzilla.suse.com/1271677","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6949","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623003-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1261158","tags":["report"]},{"url":"https://bugzilla.suse.com/1261159","tags":["report"]},{"url":"https://bugzilla.suse.com/1261160","tags":["report"]},{"url":"https://bugzilla.suse.com/1261161","tags":["report"]},{"url":"https://bugzilla.suse.com/1261163","tags":["report"]},{"url":"https://bugzilla.suse.com/1261188","tags":["report"]},{"url":"https://bugzilla.suse.com/1273189","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4480","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623129-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623152-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263362-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263363-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263364-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263365-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263366-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263367-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-58224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-58224","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8621-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-58224","title":"Samba: ctdb fails to do integrity checking of received packets","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","status":"published","published":"2026-08-14T14:38:51.439Z","modified":"2026-11-05T22:17:42.15Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-353"],"updated_at":"2026-11-05T23:55:29.66083Z"}],"euvd":[{"id":"EUVD-2026-58669","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","status":"published","published":"2026-08-14T14:38:51Z","modified":"2026-11-05T22:17:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T23:02:19.769742Z"}],"ghsa":[{"id":"GHSA-ph76-744q-p8fh","title":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient...","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","status":"published","published":"2026-08-14T15:32:51Z","modified":"2026-10-21T09:31:31Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T15:14:09.061875Z"}],"nvd":[{"id":"CVE-2026-58224","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","status":"published","published":"2026-08-14T15:17:09.87Z","modified":"2026-11-05T23:16:54.69Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-353"],"updated_at":"2026-11-06T01:57:39.734161Z"}],"osv":[{"id":"CVE-2026-58224","title":"Samba: ctdb fails to do integrity checking of received packets","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","status":"published","published":"2026-08-14T14:38:51.439Z","modified":"2026-11-07T02:30:53.745632498Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-353"],"updated_at":"2026-11-07T03:08:07.940184Z"},{"id":"DEBIAN-CVE-2026-58224","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","status":"published","published":"2026-08-14T15:17:09.87Z","modified":"2026-11-06T10:04:40.894488957Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"OESA-2026-3295","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)","status":"published","published":"2026-08-07T02:44:41Z","modified":"2026-08-07T03:00:55.659600168Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3296","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)","status":"published","published":"2026-08-07T02:44:45Z","modified":"2026-08-07T03:00:56.989975783Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3297","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)","status":"published","published":"2026-08-07T02:44:48Z","modified":"2026-08-07T03:00:55.378988052Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3366","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)","status":"published","published":"2026-08-13T14:01:42Z","modified":"2026-08-16T01:45:19.132851698Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3367","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)","status":"published","published":"2026-08-13T14:01:48Z","modified":"2026-08-16T01:45:18.982561709Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"UBUNTU-CVE-2026-58224","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","status":"published","published":"2026-07-28T10:00:00Z","modified":"2026-08-19T13:32:09.211633695Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:56:41.911783Z"},{"id":"AZL-95888","title":"CVE-2026-58224 affecting package samba 4.18.3-2","description":"A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.","status":"published","published":"2026-08-14T15:17:09Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:26.077208Z"},{"id":"CLSA-2026-1787133276","title":"samba: Fix of CVE-2026-58224","description":"- CVE-2026-58224: add missing integrity checks to CTDB packet parsing:\n  validate field lengths against packet lengths when unmarshalling,\n  handle string NUL-termination edge cases and sanity-check overall\n  packet lengths, preventing denial of service and limited disclosure\n  of adjacent memory","status":"published","published":"2026-08-25T13:11:06Z","modified":"2026-10-26T09:31:26.801257721Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1788267403","title":"samba: Fix of CVE-2026-58224","description":"- CVE-2026-58224: add missing integrity checks to CTDB packet unmarshalling (field lengths vs packet length, string NUL-termination edge cases, array-size sanity) to prevent remote DoS and limited adjacent-memory disclosure over the CTDB private network and event socket","status":"published","published":"2026-09-01T12:56:53Z","modified":"2026-10-26T09:31:56.321180842Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788338370","title":"samba: Fix of CVE-2026-58224","description":"- CVE-2026-58224: add missing integrity checks to CTDB packet unmarshalling (field lengths vs packet length, string NUL-termination edge cases, array-size sanity) to prevent remote DoS and limited adjacent-memory disclosure over the CTDB private network and event socket","status":"published","published":"2026-09-02T08:39:41Z","modified":"2026-10-26T09:31:58.774076325Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788338379","title":"samba: Fix of CVE-2026-58224","description":"- CVE-2026-58224: add missing integrity checks to CTDB packet unmarshalling (field lengths vs packet length, string NUL-termination edge cases, array-size sanity) to prevent remote DoS and limited adjacent-memory disclosure over the CTDB private network and event socket","status":"published","published":"2026-09-03T08:33:24Z","modified":"2026-10-26T09:31:48.754847955Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1789553469","title":"Fix CVE(s): CVE-2026-58224","description":"   * SECURITY UPDATE: denial of service and limited memory disclosure in CTDB\n     via malformed packets on the CTDB private network and event socket\n     - debian/patches/CVE-2026-58224.patch: validate protocol field lengths\n       against the packet length when unmarshalling, bound array element\n       counts by the remaining buffer to avoid out-of-memory allocations,\n       fix string NUL-termination edge cases in ctdb_string_pull() and\n       ctdb_stringn_pull(), and restrict sock_daemon Unix domain sockets to\n       the owning user\n     - CVE-2026-58224","status":"published","published":"2026-09-16T10:11:18Z","modified":"2026-10-26T09:31:53.67853885Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"openSUSE-SU-2026:11431-1","title":"ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-01T00:00:00Z","modified":"2026-08-02T11:45:07.974530291Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21475-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n","status":"published","published":"2026-07-29T05:01:08Z","modified":"2026-07-31T18:24:08.583814466Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21540-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nUpdate to 4.22.11.\n\nSecurity issues fixed:\n\n- CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the\n  `user.SmbReparse` xattr (bsc#1261188).\n- CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with\n  write access (bsc#1261158).\n- CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).\n- CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead\n  to crash via crafted UDP packet (bsc#1261160).\n- CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).\n- CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem\n  (bsc#1261161).\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n\nOther updates and bugfixes:\n\n- `samba-tool`: do not complain of no subcommand with `-V` (bsc#1273189, bso#15770).\n- Add `python3-cryptography` and `python3-requests` requirements for `samba-python3`.\n","status":"published","published":"2026-08-06T09:33:09Z","modified":"2026-08-08T18:23:58.443729944Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22977-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n","status":"published","published":"2026-07-29T04:55:06Z","modified":"2026-08-04T18:23:41.980840616Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23003-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nUpdate to 4.22.11.\n\nSecurity issues fixed:\n\n- CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the\n  `user.SmbReparse` xattr (bsc#1261188).\n- CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with\n  write access (bsc#1261158).\n- CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).\n- CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead\n  to crash via crafted UDP packet (bsc#1261160).\n- CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).\n- CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem\n  (bsc#1261161).\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n\nOther updates and bugfixes:\n\n- `samba-tool`: do not complain of no subcommand with `-V` (bsc#1273189, bso#15770).\n- Add `python3-cryptography` and `python3-requests` requirements for `samba-python3`.\n","status":"published","published":"2026-08-06T09:27:44Z","modified":"2026-08-12T18:23:35.880900792Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23129-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nUpdate to 4.22.11.\n\nSecurity issues fixed:\n\n- CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the\n  `user.SmbReparse` xattr (bsc#1261188).\n- CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with\n  write access (bsc#1261158).\n- CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).\n- CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead\n  to crash via crafted UDP packet (bsc#1261160).\n- CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).\n- CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem\n  (bsc#1261161).\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n\nOther updates and bugfixes:\n\n- `samba-tool`: do not complain of no subcommand with `-V` (bsc#1273189, bso#15770).\n- Add `python3-cryptography` and `python3-requests` requirements for `samba-python3`.\n","status":"published","published":"2026-08-06T09:27:44Z","modified":"2026-08-14T18:23:40.117567547Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23152-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nUpdate to 4.22.11.\n\nSecurity issues fixed:\n\n- CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the\n  `user.SmbReparse` xattr (bsc#1261188).\n- CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with\n  write access (bsc#1261158).\n- CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).\n- CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead\n  to crash via crafted UDP packet (bsc#1261160).\n- CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).\n- CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem\n  (bsc#1261161).\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n\nOther updates and bugfixes:\n\n- `samba-tool`: do not complain of no subcommand with `-V` (bsc#1273189, bso#15770).\n- Add `python3-cryptography` and `python3-requests` requirements for `samba-python3`.\n","status":"published","published":"2026-08-06T09:27:44Z","modified":"2026-08-14T18:23:41.55619733Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3362-1","title":"Security update for samba","description":"This update for samba fixes the following issues\n\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n","status":"published","published":"2026-07-28T12:18:44Z","modified":"2026-07-29T09:00:06.310039327Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3363-1","title":"Security update for samba","description":"This update for samba fixes the following issues\n\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n","status":"published","published":"2026-07-28T12:19:16Z","modified":"2026-07-29T09:00:06.320218046Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3364-1","title":"Security update for samba","description":"This update for samba fixes the following issues\n\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n","status":"published","published":"2026-07-28T12:19:48Z","modified":"2026-07-29T09:00:06.326518457Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3365-1","title":"Security update for samba","description":"This update for samba fixes the following issues\n\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n","status":"published","published":"2026-07-28T12:20:54Z","modified":"2026-07-29T09:00:06.307576071Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3366-1","title":"Security update for samba","description":"This update for samba fixes the following issues\n\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n","status":"published","published":"2026-07-28T12:21:22Z","modified":"2026-07-29T09:00:06.274692544Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3367-1","title":"Security update for samba","description":"This update for samba fixes the following issues\n\n- CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).\n- CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths without validation\n  (bsc#1271469).\n- CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).\n- CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication\n  completes (bsc#1271675).\n- CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).\n- CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes\n  (bsc#1271677).\n- CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).\n","status":"published","published":"2026-07-28T12:22:46Z","modified":"2026-07-29T09:00:06.358253215Z","updated_at":"2026-11-02T15:54:04.987808Z"}]}}