[Git][security-tracker-team/security-tracker][master] Samba/LTS triagging

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
500d04a7 by Bastien Roucariès at 2026-08-09T23:07:19+02:00
Samba/LTS triagging

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9014,10 +9014,12 @@ CVE-2026-58224 [The CTDB protocol has bounds checking issues]
 CVE-2026-58222 (A security flaw combining LDAP filter injection and improper authoriza ...)
 	{DSA-6401-1}
 	- samba 2:4.24.5+dfsg-1
+	[bullseye] - samba <ignored> (AD only; out of security support for bullseye)
 	NOTE: https://www.samba.org/samba/security/CVE-2026-58222-advisory.html
 CVE-2026-58221 [Samba AD authenticated LDAP access domain takeover]
 	{DSA-6401-1}
 	- samba 2:4.24.5+dfsg-1
+	[bullseye] - samba <ignored> (AD only; out of security support for bullseye)
 	NOTE: https://www.samba.org/samba/security/CVE-2026-58221-advisory.html
 CVE-2026-58218 (A flaw was found in Samba's internal DNS server where unauthenticated  ...)
 	{DSA-6401-1}
@@ -9026,6 +9028,8 @@ CVE-2026-58218 (A flaw was found in Samba's internal DNS server where unauthenti
 CVE-2026-58216 (An out-of-bounds read flaw was found in Samba's Kerberos Key Distribut ...)
 	{DSA-6401-1}
 	- samba 2:4.24.5+dfsg-1
+	[bookworm] - samba <postponed> (minor issue; DoS)
+	[bullseye] - samba <postponed> (minor issue; DoS)
 	NOTE: https://www.samba.org/samba/security/CVE-2026-58216-advisory.html
 CVE-2026-6949 [TSIG packet with name compression can crash DNS]
 	{DSA-6401-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/500d04a766dff0662be7dcbda5d1b29d700eb4dd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/500d04a766dff0662be7dcbda5d1b29d700eb4dd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260809/3d903aaf/attachment.htm>