critical Security update for samba

SUSE-SLE-HA-12-SP5-2026-2073

This update for samba fixes the following issues - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160). - CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163). - CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

• Release Date
  May 26 2026
• References
  Bugzilla: 1261158, 1261160, 1261161, 1261163
  CVEs: CVE-2026-2340, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise High Availability Extension 12.5 s390x

• Packages
  ctdb
  Clustered TDB

  4.15.13+git.701.449cb7f5cd3-3.106.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.701.449cb7f5cd3-3.106.1

  lock src

SUSE Linux Enterprise High Availability Extension 12.5 ppc64le

• Packages
  ctdb
  Clustered TDB

  4.15.13+git.701.449cb7f5cd3-3.106.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.701.449cb7f5cd3-3.106.1

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.5 x86_64

• Packages
  ctdb
  Clustered TDB

  4.15.13+git.701.449cb7f5cd3-3.106.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.701.449cb7f5cd3-3.106.1

  lock src