samba May-2026 security fixes
authorDebian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org>
Fri, 15 May 2026 03:38:23 +0000 (06:38 +0300)
committerMichael Tokarev <mjt@tls.msk.ru>
Fri, 15 May 2026 03:38:23 +0000 (06:38 +0300)
commitbcb6ae503fdc22239f67d9514df98b601fdc0ee1
tree5fa05688bebe39edf7be3e3894ec61be7d291c63
parent61a5917dbb73e5709128c61d66d408d590728bc7
samba May-2026 security fixes

Origin: upstream, https://bugzilla.samba.org/show_bug.cgi?id=16018
Forwarded: not-needed

This is bug-16018-v4-22-06.patch, with addition+deletion of
selftest/knownfail.d/vfs-worm commented-out (as dpkg does not
handle this situation well).

From f428950037af7a8e96b625b3bfc6e33fb7162aa3 Mon Sep 17 00:00:00 2001
From: Volker Lendecke <vl@samba.org>
Date: Thu, 5 Feb 2026 20:24:12 +0100
Subject: [PATCH 01/31] CVE-2026-1933 tests: Fix permissions used for creating
 reparse points

SEC_STD_ALL does not lead to fsp->access_mask to include the required
bits.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15992
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Gbp-Pq: Name bug-16018-v4-22-06.patch
27 files changed:
docs-xml/smbdotconf/printing/printcommand.xml
docs-xml/smbdotconf/security/checkpasswordscript.xml
lib/util/samba_util.h
lib/util/substitute.c
lib/util/substitute.h
lib/util/tests/test_string_sub.c [new file with mode: 0644]
lib/util/util_str.c
lib/util/util_str_escape.c
lib/util/wscript_build
python/samba/gp/gp_cert_auto_enroll_ext.py
python/samba/tests/gpo.py
python/samba/tests/smb3unix.py
selftest/knownfail.d/gpo-auto-enrol [new file with mode: 0644]
selftest/tests.py
source3/lib/substitute.c
source3/lib/substitute_generic.c
source3/modules/util_reparse.c
source3/modules/vfs_worm.c
source3/printing/print_generic.c
source3/rpc_server/samr/srv_samr_chgpasswd.c
source3/rpc_server/samr/srv_samr_nt.c
source3/rpc_server/samr/srv_samr_util.h
source3/script/tests/test_worm.sh
source3/torture/test_rpc_samr.c [new file with mode: 0644]
source3/torture/wscript_build
source3/utils/testparm.c
source4/nbt_server/wins/winsserver.c