[CLSA-2026:1786477676] Fix CVE(s): CVE-2026-6949
Type:
security
Severity:
Important
Release date:
2026-08-11 19:48:07 UTC
Description:
* SECURITY UPDATE: out-of-bounds write in the internal DNS server via a TSIG-signed packet using DNS name compression - debian/patches/CVE-2026-6949.patch: record the start offset of each dns_res_rec while pulling it and use the last additional record's offset to truncate the buffer for TSIG verification, instead of subtracting a re-pushed TSIG record length that can exceed the packet and underflow packet_len into a huge memcpy() size - CVE-2026-6949
CVEs fixed:
Updated packages:
  • ctdb_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:267f066f02c0742bacacb86b0a256f72ac7ebf31
  • libnss-winbind_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:08a6994cc893876e962a4974333457e471387416
  • libpam-winbind_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:3fac595a987db4dc0b4ec5a37753a66c5bd18fa2
  • libsmbclient_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:ca8a6ecf1ccf27be6e2a466db2d8c18eb9ac913e
  • libsmbclient-dev_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:fb2bb4db773a68a36980d9e01349507cf57cf76c
  • libwbclient-dev_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:8749a719e61925e3c4ef61144140ef447d788abe
  • libwbclient0_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:6a601aa0cac2ed33cc4740b12ad5853409c54be7
  • python-samba_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:d621ab16139b7a75b030d432a6471be82f7c3914
  • registry-tools_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:75e9d6eec10ea500a1ce3e36ebc9cef4e430ea4d
  • samba_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:28cd88d8084d6d6b1b94ade6b304341ea7638807
  • samba-common_4.9.5+dfsg-5+deb10u5+tuxcare.els9_all.deb
    sha:2df7ac02de101ce8ab261212b71069867f63898f
  • samba-common-bin_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:cd4a6d9ec8edb1dadd43692698b1402d7a2cd970
  • samba-dev_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:601dbbf34b2ecf1c0dacfa2cd697f54513b379c1
  • samba-dsdb-modules_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:c89b955fb245bb1e8daecea96c27b1ad14a9310d
  • samba-libs_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:c575ff6a3499bbefec1037537d66248a1811f4af
  • samba-testsuite_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:ad32e0da3187841985fff5a4525912375d1079a7
  • samba-vfs-modules_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:b066717537b174f7cb86140db991cb6a7189c37a
  • smbclient_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:9742458843efeea9e88076b823b5a2b07ebb7842
  • winbind_4.9.5+dfsg-5+deb10u5+tuxcare.els9_amd64.deb
    sha:903b4b6c38e6e087f561d1bf77ff2be2b4f7b77a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.