SUSE-SU-2026:22080-1

Advisory lineage Upstream: 6 Downstream: 0
Published: 05 Jun 2026, 08:34
Last modified:16 Jun 2026, 18:24

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Jun 2026, 08:34
Published
Vulnerability first disclosed
16 Jun 2026, 18:24
Last Modified
Vulnerability information updated

Description

Security update for samba This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159). - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160). - CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163). - CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161). Changes for samba: - network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755). - Samba service start times out (SElinux relabel takes too long) (bsc#1259050). - samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058). - VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667). - Updated to 4.22.9

Affected Systems

  • suse•samba&distro=SUSE Linux Enterprise Server 16.0

    < 4.22.9+git.506.22c03ce0781-160000.1.1

  • suse•samba&distro=SUSE Linux Enterprise Server for SAP applications 16.0

    < 4.22.9+git.506.22c03ce0781-160000.1.1

References (18)