critical Security update for samba

SUSE-SLE-Micro-5.4-2026-2108

This update for samba fixes the following issues - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160). - CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163). - CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161). Non security issues: - Fix pthreadpool_tevent race conditions accessing both pthreadpool_tevent.jobs list and pthreadpool_tevent.glue_list (bsc#1252963)

• Release Date
  May 29 2026
• References
  Bugzilla: 1252963, 1261158, 1261160, 1261161, 1261163
  CVEs: CVE-2026-2340, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Micro 5.4 aarch64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock src

  samba-client-libs
  Samba client libraries

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock rpm

  samba-libs
  Samba libraries

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock rpm

SUSE Linux Enterprise Micro 5.4 s390x

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock src

  samba-client-libs
  Samba client libraries

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock rpm

  samba-libs
  Samba libraries

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock rpm

SUSE Linux Enterprise Micro 5.4 x86_64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock src

  samba-client-libs
  Samba client libraries

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock rpm

  samba-libs
  Samba libraries

  4.15.13+git.780.d2f53cbcded-150400.3.49.1 lock rpm