[CLSA-2026:1789899030] Fix CVE(s): CVE-2026-6949
Type:
security
Severity:
Important
Release date:
2026-09-20 10:10:42 UTC
Description:
* SECURITY UPDATE: out-of-bounds write in the internal DNS server via a TSIG-signed packet using DNS name compression - debian/patches/CVE-2026-6949.patch: record the start offset of each dns_res_rec while pulling it and use the last additional record's offset to truncate the buffer for TSIG verification, instead of subtracting a re-pushed TSIG record length that can exceed the packet and underflow packet_len into a huge memcpy() size - CVE-2026-6949
CVEs fixed:
Updated packages:
  • ctdb_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:7327f51b955f40b587197db60d93ba8d9a7ad02a
  • libnss-winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:4fb90cc02d3b327929fd86bb80fafbefaed6f933
  • libpam-winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:555929d54eb0a3d7bbe3030b9b6e7cc77abe41a9
  • libsmbclient_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:02df8f171671de5eaf82542d9248a635a84fdebd
  • libsmbclient-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:193bb226cfc9747035c545224005aed263081b4a
  • libwbclient-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:1f96556043c475690c3f2f43bf50ddbc07f8dd10
  • libwbclient0_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:059eeff937dae74e396816b52afa863c2d2ecba2
  • python3-samba_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:3bc5c8069888a9ca76fc372927101dced66533b4
  • registry-tools_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:301592159853d5a33ec1ecfe88166d288af8ce3a
  • samba_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:889cd2bc439fd064fe09c41f4bae24a5edd2ea59
  • samba-common_4.13.13+dfsg-1~deb11u8+tuxcare.els4_all.deb
    sha:ec9765d4c0ff6f45394ccef1124ca8f445dfa58d
  • samba-common-bin_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:1610815a8e3c8817038b3eae5ee3507001926777
  • samba-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:709f534905fc953eff4b0866a9e1b6c826b8ea01
  • samba-dsdb-modules_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:4457ecd9415b9945188934cb0f6a409f885fae64
  • samba-libs_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:e121e4963e889c0a6f4198661d244035b9c57462
  • samba-testsuite_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:b3e7e54a9eaf5705f9da704e553962598ae30cbf
  • samba-vfs-modules_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:adea10e9ca4313695bb42155f0d4ba89875716fa
  • smbclient_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:595ac0b3dede6b5586f474e323e58d1bdccd0bb4
  • winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_amd64.deb
    sha:921d5f0ee5a2bc778b68137197fa3c1fabcdb564
  • ctdb_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:34b89d1cf624af2dd3123e47a2dada6d629a4004
  • libnss-winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:9a8edf371a475d67fa960cd792db1ebfee352afb
  • libpam-winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:997fc667d0e07560c11101516a7aaee3f50220dc
  • libsmbclient_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:dce4f8578afcefa38a490fe10db74966cc4f7458
  • libsmbclient-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:1520412858555b9497d71d60992bd1c9f7bdc024
  • libwbclient-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:8894750807560f830bf0a06c182cb83525d5058d
  • libwbclient0_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:d21aeee4258e60f3391da921f962d3f6488092fa
  • python3-samba_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:ad38b2059967affbd9238d301adbf73e0d071f5e
  • registry-tools_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:04f04e90236feb9bd8af535a95aa1577b41a4193
  • samba_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:b1ddcce73b50b98f03f307a2428a5d9070f18b87
  • samba-common-bin_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:ef3f0b4dc7cd871e27f9c129af0b97160bec36ac
  • samba-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:2f6d6e9b592ba8dc927a385ba4da2e9724f619dc
  • samba-dsdb-modules_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:aaa255ec78f4aa6aaf9d0ac68921a9582dbe77fd
  • samba-libs_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:8269a6b84b428678403170bf4c02d81e0d812991
  • samba-testsuite_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:e808b99908274e918d07239813af48498aa5bd7b
  • samba-vfs-modules_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:643e338d81e47da7e0a94825d8bb2fd90be54044
  • smbclient_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:1b5189e52e2b4d9c9425eb833eaf691ddf806016
  • winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_arm64.deb
    sha:52a1cdc2b4167660ae3339aee7b577004654caf1
  • ctdb_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:b64076ec3520c50c542805c3e2c30581bd856fbc
  • libnss-winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:2fed99e41d71c33ec13d0114c622d83b1b3be39d
  • libpam-winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:51bcc50976d06835a492dc53becc22af1fdcb18f
  • libsmbclient_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:5e0e61b513b1d2835c32f617470a1cf796b5f95d
  • libsmbclient-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:91593fb7f90081d77d26908c2bd405d8e1ce8112
  • libwbclient-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:62a712d8b84a0c498f01ea73fd3b031405dfba04
  • libwbclient0_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:ad0a8ae39d5ad224ec123de4267c16574103eaa8
  • python3-samba_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:0621fe6c10e08ef0e64531f5b98a036240d39c96
  • registry-tools_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:87464aaeb6f55f76b2138c2495a7e56adb13ce19
  • samba_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:3a74f5b6db6791efed666a46c21d245687054504
  • samba-common-bin_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:705ba2455b684e59829ece62b493c6ebfd2dd17f
  • samba-dev_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:3f0eb71ce4be4a9e2a82258ee14f26050985e9eb
  • samba-dsdb-modules_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:5ce741e5dcd4cb9b735bc501227a52187bd3513a
  • samba-libs_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:3153e47e817f1d835d66add5a8d0825cdb74ac64
  • samba-testsuite_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:e75702b0ac676b205fb18c77f5a4b1fd9d5f3a38
  • samba-vfs-modules_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:20d79456362beb17c5df65c52aad90c0b4875e35
  • smbclient_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:860936b5d564c3fbe5f0a71e2bbaf7156abeafd7
  • winbind_4.13.13+dfsg-1~deb11u8+tuxcare.els4_armel.deb
    sha:453736a2c5cce3ec1706458355693165513c92f4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.