critical Security update for samba

SUSE-SLE-Micro-5.5-2026-2072

This update for samba fixes the following issues - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159). - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160). - CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163). - CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

• Release Date
  May 26 2026
• References
  Bugzilla: 1261158, 1261159, 1261160, 1261161, 1261163
  CVEs: CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Micro 5.5 s390x

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.17.12+git.553.4b71189e782-150500.3.39.1 lock src

  samba-client-libs
  Samba client libraries

  4.17.12+git.553.4b71189e782-150500.3.39.1 lock rpm

SUSE Linux Enterprise Micro 5.5 aarch64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.17.12+git.553.4b71189e782-150500.3.39.1 lock src

  samba-client-libs
  Samba client libraries

  4.17.12+git.553.4b71189e782-150500.3.39.1 lock rpm

SUSE Linux Enterprise Micro 5.5 ppc64le

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.17.12+git.553.4b71189e782-150500.3.39.1 lock src

  samba-client-libs
  Samba client libraries

  4.17.12+git.553.4b71189e782-150500.3.39.1 lock rpm

SUSE Linux Enterprise Micro 5.5 x86_64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.17.12+git.553.4b71189e782-150500.3.39.1 lock src

  samba-client-libs
  Samba client libraries

  4.17.12+git.553.4b71189e782-150500.3.39.1 lock rpm