SUSE-SU-2026:2076-1
Security update for samba
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159). - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160). - CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163). - CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161). Non security issue: - network:samba:STABLE/samba: 'use-kerberos=desired' broken / Dolphin requires login for Samba shares (bsc#1255755). - Generated dynamic profile based on path to special 'printers' share. (bsc#1259441). - Fix regression 'use-kerberos=desired' broken doesn't even try to authenticate with kerberos and instead fallsback to NTLM (bsc#1255755). - Fix memory leak using cups parsed options and filename allocated when processing end of printing job (bsc#1257200). - Fix manpage for 'net offlinejoin requestodj'. - Fix 'ctdbd socket' documentation in manpage for smb.conf - Fix rpc workers with long living clients from growing server memory keytab and increasing memory used by workers (bsc#1257200).
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.7 | ctdb, ldb-tools, libldb-devel and 20 more | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
Show all 23 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.7 | ctdb | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | ldb-tools | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | libldb-devel | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | libldb2 | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | libldb2-32bit | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | python3-ldb | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-ceph | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-client | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-client-libs | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-client-libs-32bit | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-dcerpc | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-devel | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-gpupdate | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-ldb-ldap | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-libs | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-libs-32bit | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-libs-python3 | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-python3 | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-tool | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-winbind | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-winbind-libs | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
| SUSE Linux Enterprise 15.7 | samba-winbind-libs-32bit | 4.21.10+git.501.277ba349a01-150700.3.26.1 |
References
- https://bugzilla.suse.com/1255755
- https://bugzilla.suse.com/1257200
- https://bugzilla.suse.com/1259441
- https://bugzilla.suse.com/1261158
- https://bugzilla.suse.com/1261159
- https://bugzilla.suse.com/1261160
- https://bugzilla.suse.com/1261161
- https://bugzilla.suse.com/1261163
All 18 references
- https://bugzilla.suse.com/1261188
- https://lists.suse.com/pipermail/sle-updates/2026-May/046775.html
- https://www.suse.com/security/cve/CVE-2026-1933/
- https://www.suse.com/security/cve/CVE-2026-2340/
- https://www.suse.com/security/cve/CVE-2026-3012/
- https://www.suse.com/security/cve/CVE-2026-3238/
- https://www.suse.com/security/cve/CVE-2026-4408/
- https://www.suse.com/security/cve/CVE-2026-4480/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-20262076-1/