[DSA 6401-1] samba security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6401-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
July 28, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : samba
CVE ID         : CVE-2026-6949 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221
                 CVE-2026-58222 CVE-2026-58224

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file,
print, and login server for Unix, which might result in denial of
service, domain takeover, information disclosure or privilege
escalation.

For the stable distribution (trixie), these problems have been fixed in
version 2:4.22.10+dfsg-0+deb13u2.

We recommend that you upgrade your samba packages.

For the detailed security status of samba please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/samba

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=+hdi
-----END PGP SIGNATURE-----