Accepted samba 2:4.22.10+dfsg-0+deb13u2 (source) into proposed-updates

Debian FTP Masters <[email protected]> Mon, 03 Aug 2026 15:52:17 +0000
Newsgroups gmane.linux.debian.devel.changes.stable
Message-ID <[email protected]>
--===============6150783060850312933==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 24 Jul 2026 16:14:13 +0300
Source: samba
Architecture: source
Version: 2:4.22.10+dfsg-0+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Samba Maintainers <[email protected]>
Changed-By: Michael Tokarev <[email protected]>
Changes:
 samba (2:4.22.10+dfsg-0+deb13u2) trixie-security; urgency=3Dmedium
 .
   * 2026-jul-sec-update-bug-16039-v4-22-combined.patch:
     Jul-2026 samba security update addresses the following defects:
 .
     CVE-2026-6949: https://bugzilla.samba.org/show_bug.cgi?id=3D16083
       TSIG packet with crafted name compression can crash internal DNS server
 .
     CVE-2026-58224: https://bugzilla.samba.org/show_bug.cgi?id=3D16085
       CTDB: heap OOB read via unchecked packet length fields
 .
     CVE-2026-58216: https://bugzilla.samba.org/show_bug.cgi?id=3D16087
       kpasswd service: 6-byte heap OOB read in packet parser
 .
     CVE-2026-58218: https://bugzilla.samba.org/show_bug.cgi?id=3D16115
       DNS TKEY negotiation stores unauthenticated GSS contexts
       in a fixed FIFO before authentication completes
 .
     CVE-2026-58221: https://bugzilla.samba.org/show_bug.cgi?id=3D16147
       authenticated LDAP access to internal LDB special DNs
       permits domain takeover
 .
     CVE-2026-58222: https://bugzilla.samba.org/show_bug.cgi?id=3D16148
       LDAP Compare filter injection and trusted-request
       confusion disclose protected attributes
Checksums-Sha1:
 e876ea4765016baf162f972286d6d43e9ed1a145 5665 samba_4.22.10+dfsg-0+deb13u2.d=
sc
 997d64904b689e9e3964d95e833b08a8142c7c1c 25648480 samba_4.22.10+dfsg.orig.ta=
r.xz
 da29af59791d4102048869e82be6c5503969e296 202944 samba_4.22.10+dfsg-0+deb13u2=
.debian.tar.xz
 b0eff57c8f70b0c88b7b5b145de8b04e75837881 5478 samba_4.22.10+dfsg-0+deb13u2_s=
ource.buildinfo
Checksums-Sha256:
 f4fe0f8f1e9b29074f081d9e31b3b43da30a0df04070dd7568d507487f4741ed 5665 samba_=
4.22.10+dfsg-0+deb13u2.dsc
 3be9827fbfbb418ea98eb8db2e6b3ededf9ba54fe8c4521ae34a361c0708b005 25648480 sa=
mba_4.22.10+dfsg.orig.tar.xz
 329ba61988d22d399f5bfcfffcec84e0be3215a0fbf677cdac47ff278fed5ccf 202944 samb=
a_4.22.10+dfsg-0+deb13u2.debian.tar.xz
 114911251c0a78d78eb8072bc36b89ea1b4ca145fe3aff7dea3e393e08b311b1 5478 samba_=
4.22.10+dfsg-0+deb13u2_source.buildinfo
Files:
 f2d4ea2e6d101932d96a1cb2ba790d11 5665 net optional samba_4.22.10+dfsg-0+deb1=
3u2.dsc
 f72ea9cca2c6a12e0147faf679a3be78 25648480 net optional samba_4.22.10+dfsg.or=
ig.tar.xz
 ebd6a884a824d81d594c17ceb57ae7a3 202944 net optional samba_4.22.10+dfsg-0+de=
b13u2.debian.tar.xz
 297f05c827173c929d31c5b27c894f45 5478 net optional samba_4.22.10+dfsg-0+deb1=
3u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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3D
=3DESki
-----END PGP SIGNATURE-----


--===============6150783060850312933==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanC5MQAKCRCb9qggYcy5
ISOyAP0S5hQENFfl2eb6YIvonlPwpT+y+LK3Ed74mZuHYZDcSgD/elc/wZxGRPqa
kF4y7GAaY1ghNZoSNz8TA2nAezpodgE=
=Sq7e
-----END PGP SIGNATURE-----

--===============6150783060850312933==--