{"schema_version":"1.7.2","id":"OESA-2026-3364","modified":"2026-08-13T14:01:34Z","published":"2026-08-13T14:01:34Z","upstream":["CVE-2026-15779"],"summary":"samba security update","details":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.(CVE-2026-15779)","affected":[{"package":{"ecosystem":"openEuler:20.03-LTS-SP4","name":"samba","purl":"pkg:rpm/openEuler/samba&distro=openEuler-20.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-40.oe2003sp4"}]}],"ecosystem_specific":{"aarch64":["ctdb-4.11.12-40.oe2003sp4.aarch64.rpm","ctdb-tests-4.11.12-40.oe2003sp4.aarch64.rpm","libsmbclient-4.11.12-40.oe2003sp4.aarch64.rpm","libsmbclient-devel-4.11.12-40.oe2003sp4.aarch64.rpm","libwbclient-4.11.12-40.oe2003sp4.aarch64.rpm","libwbclient-devel-4.11.12-40.oe2003sp4.aarch64.rpm","python3-samba-4.11.12-40.oe2003sp4.aarch64.rpm","python3-samba-dc-4.11.12-40.oe2003sp4.aarch64.rpm","python3-samba-test-4.11.12-40.oe2003sp4.aarch64.rpm","samba-4.11.12-40.oe2003sp4.aarch64.rpm","samba-client-4.11.12-40.oe2003sp4.aarch64.rpm","samba-common-4.11.12-40.oe2003sp4.aarch64.rpm","samba-common-tools-4.11.12-40.oe2003sp4.aarch64.rpm","samba-dc-4.11.12-40.oe2003sp4.aarch64.rpm","samba-dc-bind-dlz-4.11.12-40.oe2003sp4.aarch64.rpm","samba-dc-provision-4.11.12-40.oe2003sp4.aarch64.rpm","samba-debuginfo-4.11.12-40.oe2003sp4.aarch64.rpm","samba-debugsource-4.11.12-40.oe2003sp4.aarch64.rpm","samba-devel-4.11.12-40.oe2003sp4.aarch64.rpm","samba-help-4.11.12-40.oe2003sp4.aarch64.rpm","samba-krb5-printing-4.11.12-40.oe2003sp4.aarch64.rpm","samba-libs-4.11.12-40.oe2003sp4.aarch64.rpm","samba-test-4.11.12-40.oe2003sp4.aarch64.rpm","samba-winbind-4.11.12-40.oe2003sp4.aarch64.rpm","samba-winbind-clients-4.11.12-40.oe2003sp4.aarch64.rpm","samba-winbind-krb5-locator-4.11.12-40.oe2003sp4.aarch64.rpm","samba-winbind-modules-4.11.12-40.oe2003sp4.aarch64.rpm"],"noarch":["samba-pidl-4.11.12-40.oe2003sp4.noarch.rpm"],"src":["samba-4.11.12-40.oe2003sp4.src.rpm"],"x86_64":["ctdb-4.11.12-40.oe2003sp4.x86_64.rpm","ctdb-tests-4.11.12-40.oe2003sp4.x86_64.rpm","libsmbclient-4.11.12-40.oe2003sp4.x86_64.rpm","libsmbclient-devel-4.11.12-40.oe2003sp4.x86_64.rpm","libwbclient-4.11.12-40.oe2003sp4.x86_64.rpm","libwbclient-devel-4.11.12-40.oe2003sp4.x86_64.rpm","python3-samba-4.11.12-40.oe2003sp4.x86_64.rpm","python3-samba-dc-4.11.12-40.oe2003sp4.x86_64.rpm","python3-samba-test-4.11.12-40.oe2003sp4.x86_64.rpm","samba-4.11.12-40.oe2003sp4.x86_64.rpm","samba-client-4.11.12-40.oe2003sp4.x86_64.rpm","samba-common-4.11.12-40.oe2003sp4.x86_64.rpm","samba-common-tools-4.11.12-40.oe2003sp4.x86_64.rpm","samba-dc-4.11.12-40.oe2003sp4.x86_64.rpm","samba-dc-bind-dlz-4.11.12-40.oe2003sp4.x86_64.rpm","samba-dc-provision-4.11.12-40.oe2003sp4.x86_64.rpm","samba-debuginfo-4.11.12-40.oe2003sp4.x86_64.rpm","samba-debugsource-4.11.12-40.oe2003sp4.x86_64.rpm","samba-devel-4.11.12-40.oe2003sp4.x86_64.rpm","samba-help-4.11.12-40.oe2003sp4.x86_64.rpm","samba-krb5-printing-4.11.12-40.oe2003sp4.x86_64.rpm","samba-libs-4.11.12-40.oe2003sp4.x86_64.rpm","samba-test-4.11.12-40.oe2003sp4.x86_64.rpm","samba-vfs-glusterfs-4.11.12-40.oe2003sp4.x86_64.rpm","samba-winbind-4.11.12-40.oe2003sp4.x86_64.rpm","samba-winbind-clients-4.11.12-40.oe2003sp4.x86_64.rpm","samba-winbind-krb5-locator-4.11.12-40.oe2003sp4.x86_64.rpm","samba-winbind-modules-4.11.12-40.oe2003sp4.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3364"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15779"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"database_specific":{"severity":"Medium"}}