Security update for samba
This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159). - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160). - CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163). - CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161). Changes for samba: - network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755). - Samba service start times out (SElinux relabel takes too long) (bsc#1259050). - samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058). - VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667). - Updated to 4.22.9
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159). - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160). - CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163). - CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161). Changes for samba: - network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755). - Samba service start times out (SElinux relabel takes too long) (bsc#1259050). - samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058). - VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667). - Updated to 4.22.9
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1249058
- https://bugzilla.suse.com/1255755
- https://bugzilla.suse.com/1257200
- https://bugzilla.suse.com/1259050
- https://bugzilla.suse.com/1259667
- https://bugzilla.suse.com/1261158
- https://bugzilla.suse.com/1261159
- https://bugzilla.suse.com/1261160
- https://bugzilla.suse.com/1261161
- https://bugzilla.suse.com/1261163
- https://bugzilla.suse.com/1261188
- https://www.suse.com/security/cve/CVE-2026-1933
- https://www.suse.com/security/cve/CVE-2026-2340
- https://www.suse.com/security/cve/CVE-2026-3012
- https://www.suse.com/security/cve/CVE-2026-3238
- https://www.suse.com/security/cve/CVE-2026-4408
- https://www.suse.com/security/cve/CVE-2026-4480
- https://www.suse.com/support/update/announcement/2026/suse-su-202622045-1/