[CLSA-2026:1782159797] Fix CVE(s): CVE-2026-3238
Type:
security
Severity:
Important
Release date:
2026-06-22 20:23:32 UTC
Description:
* CVE-2026-3238: source4 WINS server NULL pointer dereference in nbtd_winsserver_register/query/release(); craft NBT packets with qdcount=0, arcount=0, or empty netbios addresses crash the nbt process on servers running `wins support = yes` (typical AD DC role). Fix dissolves direct variable initialization and adds NBTD_ASSERT_PACKET qdcount/arcount/length validation before any packet array dereference. - debian/patches/CVE-2026-3238.patch - CVE-2026-3238
CVEs fixed:
Updated packages:
  • ctdb_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:f4b3ad787c2f4337c4d94fbeff1b0d2f95233863
  • libnss-winbind_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:b14fdc106a313ec86d790a00b1489e83f8aba00e
  • libpam-winbind_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:794e5fd5130f2a9da9af60eacab807d6d1fa03e3
  • libsmbclient_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:41baf7025ffba07490324f62cca42f514db5c5df
  • libsmbclient-dev_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:a9fa9b7bb539a1664de82414ba9369768ba2965f
  • libwbclient-dev_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:070fe56af553f5013f87d149c029335a716fce87
  • libwbclient0_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:06b1a632ee1ae54eb4201d89b5804e661c90dd01
  • python3-samba_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:3b7b05fc9c8b55b65b1376d31b2854f7b9b49644
  • registry-tools_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:58739bd642bd484c55e5a3596abc7be2b05ab58e
  • samba_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:697043869ec1c9032d75509b652799ccae253be2
  • samba-common_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_all.deb
    sha:aa40ded6fc301fa38c46e44e386e0b06738ab46a
  • samba-common-bin_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:96890d7d3587af3d2a121d64d839e94fac48a5c0
  • samba-dev_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:3526c8acc3fad09a9de2e6989fcc28989de9edd6
  • samba-dsdb-modules_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:62d022248e8bc34b27412a7d77719ef59943b308
  • samba-libs_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:b023cb2c382179f9dd9bfb7c58d7bbcfd279f3ab
  • samba-testsuite_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:81786d9d0211c8a309ed0239fd2af93fd017715e
  • samba-vfs-modules_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:fc1e8539033fcd4dea84aefe5d7362d3f4eaaf51
  • smbclient_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:56ee8ec04cfe952bfb508b7a7287a0be56b6c849
  • winbind_4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els5_amd64.deb
    sha:6f4b48f5edf82cae8db745f6fc97d76176d6f289
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.