Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-6949: TSIG packet with name compression can crash DNS CVE-2026-58224: The CTDB protocol has bounds checking issues NOTE: https://www.samba.org/samba/security/CVE-2026-58224-advisory.html CVE-2026-58222: Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes CVE-2026-15779: A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | ctdb | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | ctdb-tests | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | libsmbclient | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | libsmbclient-devel | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | libwbclient | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | libwbclient-devel | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-client | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-client-libs | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-common | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-common-libs | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-common-tools | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-dc | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-dc-libs | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-debuginfo | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-devel | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-krb5-printing | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-libs | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-pidl | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-python | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-python-test | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-test | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-test-libs | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-vfs-glusterfs | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-winbind | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-winbind-clients | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-winbind-krb5-locator | 0:4.10.16-24.amzn2.0.9 |
| Amazon Linux · 2 | samba-winbind-modules | 0:4.10.16-24.amzn2.0.9 |
Vulnerabilities 3
-
High 8.8CVE-2026-58222 Public exploit
Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes…
-
Medium 6.5
Samba: ctdb fails to do integrity checking of received packets
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packe…
-
Medium 6.1
Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation
A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (…