Security update for samba
| Announcement ID: | SUSE-SU-2026:2072-1 |
|---|---|
| Release Date: | 2026-05-26T12:35:18Z |
| Rating: | critical |
| References: | |
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves five vulnerabilities can now be installed.
Description:
This update for samba fixes the following issues
- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.5
zypper in -t patch SUSE-2026-2072=1 -
SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2026-2072=1 -
SUSE Linux Enterprise High Availability Extension 15 SP5
zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2026-2072=1 -
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2072=1 -
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2072=1 -
SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2072=1 -
SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2072=1
Package List:
-
openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)
- samba-winbind-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-gpupdate-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-test-4.17.12+git.553.4b71189e782-150500.3.39.1
- ctdb-pcp-pmda-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- ctdb-pcp-pmda-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debugsource-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-python3-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-test-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- ctdb-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- ctdb-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-tool-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
-
openSUSE Leap 15.5 (aarch64 x86_64)
- samba-ceph-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ceph-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
-
openSUSE Leap 15.5 (x86_64)
- samba-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-devel-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
-
openSUSE Leap 15.5 (aarch64_ilp32)
- libsamba-policy0-python3-64bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-64bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-64bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-64bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-64bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-64bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-64bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-64bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-64bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-devel-64bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-64bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-64bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-64bit-4.17.12+git.553.4b71189e782-150500.3.39.1
-
openSUSE Leap 15.5 (noarch)
- samba-doc-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)
- samba-debugsource-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64)
- ctdb-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debugsource-4.17.12+git.553.4b71189e782-150500.3.39.1
- ctdb-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64)
- samba-winbind-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-gpupdate-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debugsource-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-python3-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ceph-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-tool-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ceph-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64)
- samba-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64)
- samba-winbind-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-gpupdate-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debugsource-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-python3-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ceph-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-tool-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ceph-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64)
- samba-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
- samba-winbind-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-gpupdate-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debugsource-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-python3-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-tool-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 x86_64)
- samba-ceph-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ceph-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64)
- samba-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
- samba-winbind-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-gpupdate-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debugsource-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-python3-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-python3-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-devel-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- libsamba-policy0-python3-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-tool-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-dcerpc-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ldb-ldap-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64)
- samba-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ceph-debuginfo-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-client-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-winbind-libs-32bit-4.17.12+git.553.4b71189e782-150500.3.39.1
- samba-ceph-4.17.12+git.553.4b71189e782-150500.3.39.1
References:
- https://www.suse.com/security/cve/CVE-2026-2340.html
- https://www.suse.com/security/cve/CVE-2026-3012.html
- https://www.suse.com/security/cve/CVE-2026-3238.html
- https://www.suse.com/security/cve/CVE-2026-4408.html
- https://www.suse.com/security/cve/CVE-2026-4480.html
- https://bugzilla.suse.com/show_bug.cgi?id=1261158
- https://bugzilla.suse.com/show_bug.cgi?id=1261159
- https://bugzilla.suse.com/show_bug.cgi?id=1261160
- https://bugzilla.suse.com/show_bug.cgi?id=1261161
- https://bugzilla.suse.com/show_bug.cgi?id=1261163