-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 24 Jul 2026 16:14:13 +0300
Source: samba
Binary: samba-ad-provision samba-common
Architecture: all
Version: 2:4.22.10+dfsg-0+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 samba-ad-provision - Samba files needed for AD domain provision
 samba-common - common files used by both the Samba server and client
Changes:
 samba (2:4.22.10+dfsg-0+deb13u2) trixie-security; urgency=medium
 .
   * 2026-jul-sec-update-bug-16039-v4-22-combined.patch:
     Jul-2026 samba security update addresses the following defects:
 .
     CVE-2026-6949: https://bugzilla.samba.org/show_bug.cgi?id=16083
       TSIG packet with crafted name compression can crash internal DNS server
 .
     CVE-2026-58224: https://bugzilla.samba.org/show_bug.cgi?id=16085
       CTDB: heap OOB read via unchecked packet length fields
 .
     CVE-2026-58216: https://bugzilla.samba.org/show_bug.cgi?id=16087
       kpasswd service: 6-byte heap OOB read in packet parser
 .
     CVE-2026-58218: https://bugzilla.samba.org/show_bug.cgi?id=16115
       DNS TKEY negotiation stores unauthenticated GSS contexts
       in a fixed FIFO before authentication completes
 .
     CVE-2026-58221: https://bugzilla.samba.org/show_bug.cgi?id=16147
       authenticated LDAP access to internal LDB special DNs
       permits domain takeover
 .
     CVE-2026-58222: https://bugzilla.samba.org/show_bug.cgi?id=16148
       LDAP Compare filter injection and trusted-request
       confusion disclose protected attributes
Checksums-Sha1:
 04b02b1f57a1b39179035b303ba32059fcbbba34 507516 samba-ad-provision_4.22.10+dfsg-0+deb13u2_all.deb
 8af993a8fac99d6dbc01ba7c6c5be3e88c621d60 65352 samba-common_4.22.10+dfsg-0+deb13u2_all.deb
 bd37b64645ee02161cd4a0fb05a78af2ecdb8135 6029 samba_4.22.10+dfsg-0+deb13u2_all-buildd.buildinfo
Checksums-Sha256:
 464dcf4a4eb26b4451690eda25f14a3433e0c7a7b72c7e6382ba18ac7d45a3f0 507516 samba-ad-provision_4.22.10+dfsg-0+deb13u2_all.deb
 4b89a3220bcab20808c2c649adf2adff82dc6698012cbcde2dcf79d4c0c4a09a 65352 samba-common_4.22.10+dfsg-0+deb13u2_all.deb
 9c0ff6c921c634a2d518f5dedfa431d2df709d47fb552e663d33b5419dc26aa5 6029 samba_4.22.10+dfsg-0+deb13u2_all-buildd.buildinfo
Files:
 db61fd35736daece87130478cba45880 507516 net optional samba-ad-provision_4.22.10+dfsg-0+deb13u2_all.deb
 201dbdeff823ed63b8885658551edac4 65352 net optional samba-common_4.22.10+dfsg-0+deb13u2_all.deb
 afb53053a23859525c49ddae192dfd27 6029 net optional samba_4.22.10+dfsg-0+deb13u2_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmpjdCQACgkQmgPNRvTf
/zdzdQ/6AvYOgNct/hI5T1z2HFZfL9PB8KMJ+l1xXNAoGOpklBX3vPqTWPSrIkAc
/tM8QaFfvBo20WSVKDQgr/FuAYPOjr9rslB9lUtbc5BAHFOxFXhVhyYh6zKtJrzU
Hl71xTWUjODZfomuLfE4NGJD5zBQw4OB+SygDI4Cf+5pu7AZjCX02khXNH0y9mmy
C00pqH1hBEurH50PnzcXg1du+xppLqMMPTCAeaeBNVz760GWJbESOnAifxMzrHwd
Kin6xRwoB55RyL1qB/kRpQFTKapGuS8m2M8PkeZzhjlL+Ms8oAaLOVpIWX2wY9vm
pWw7JvUNKR64asQHyN6EtTdd8aqGXJITAPTTX8ObcvRlpY1KhIvtXqaWUi0WVsPu
IeJVlBcgXd5j6YSlOJ8PTWtJQwO6NHx2rfcKeGSz0hzAGei3rLsvldcOi6WzHJLg
FzfAMlb571OpEcAfUN6ZTg1GOfV2LDb7TvjoCLSjPOGG+YazfsHu28Q4ll+o3bsr
0qwqdCYAW0irUSl6D14XamA8huzeNLvczEO82QOGupeHNUPh7h8uD6jnP6vdEpeq
MNLXwEha6lN7gba9HH8HrH5e/ocXW7hBS+6sYhnkvnkY5nY2v77c8AB2P1RBrR9Z
/kyde/fBMSQCZ5hNT2O3sW7DwdP10xUPIQSAURi6UEXYdai+Y70=
=nJI0
-----END PGP SIGNATURE-----