SUSE-SU-2026:2072-1
Security update for samba
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for samba fixes the following issues - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159). - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160). - CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163). - CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.5 | ctdb, libsamba-policy-devel, libsamba-policy-python3-devel y 18 más | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise Micro 5.5 | samba-client-libs | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
Mostrar las 22 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.5 | ctdb | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | libsamba-policy-devel | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | libsamba-policy-python3-devel | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | libsamba-policy0-python3 | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-ceph | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-client | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-client-libs | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-client-libs-32bit | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-dcerpc | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-devel | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-gpupdate | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-ldb-ldap | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-libs | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-libs-32bit | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-libs-python3 | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-python3 | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-tool | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-winbind | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-winbind-libs | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise 15.5 | samba-winbind-libs-32bit | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
| SUSE Linux Enterprise Micro 5.5 | samba-client-libs | 4.17.12+git.553.4b71189e782-150500.3.39.1 |
Referencias
- https://bugzilla.suse.com/1261158
- https://bugzilla.suse.com/1261159
- https://bugzilla.suse.com/1261160
- https://bugzilla.suse.com/1261161
- https://bugzilla.suse.com/1261163
- https://lists.suse.com/pipermail/sle-updates/2026-May/046778.html
- https://www.suse.com/security/cve/CVE-2026-2340/
- https://www.suse.com/security/cve/CVE-2026-3012/