Update Info

SUSE-PackageHub-16.0-890


Security update for samba


Type: security
Severity: critical
Issued: 2026-06-05
Description:
This update for samba fixes the following issues

Security issues:

- CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

Changes for samba:

- network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755).
- Samba service start times out (SElinux relabel takes too long) (bsc#1259050).
- samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058).
- VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667).
- Updated to 4.22.9


              

Packages


  • samba-4.22.9+git.506.22c03ce0781-160000.1.1