Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2108-1

Опубликовано: 29 мая 2026
Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

Non security issues:

  • Fix pthreadpool_tevent race conditions accessing both pthreadpool_tevent.jobs list and pthreadpool_tevent.glue_list (bsc#1252963)

Список пакетов

Image SLES15-SP4-BYOS
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-Azure
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-EC2
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-GCE
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-CHOST-BYOS
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-CHOST-BYOS-Aliyun
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-CHOST-BYOS-Azure
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-CHOST-BYOS-EC2
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-CHOST-BYOS-GCE
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-CHOST-BYOS-SAP-CCloud
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-HPC-BYOS
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-HPC-BYOS-Azure
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-HPC-BYOS-EC2
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-HPC-BYOS-GCE
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-HPC-EC2
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-HPC-GCE
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-Hardened-BYOS
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-Hardened-BYOS-Azure
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-Hardened-BYOS-EC2
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-Hardened-BYOS-GCE
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-Azure
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-BYOS
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-BYOS-Azure
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-BYOS-EC2
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-BYOS-GCE
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-EC2
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-GCE
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-Hardened
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-Hardened-Azure
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-Hardened-BYOS
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAP-Hardened-GCE
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAPCAL
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAPCAL-Azure
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAPCAL-EC2
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-SAPCAL-GCE
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
SUSE Linux Enterprise High Availability Extension 15 SP4
ctdb-4.15.13+git.780.d2f53cbcded-150400.3.49.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
libsamba-policy-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
libsamba-policy-python3-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
libsamba-policy0-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ad-dc-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ad-dc-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ceph-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-devel-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-dsdb-modules-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-gpupdate-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ldb-ldap-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-tool-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
libsamba-policy-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
libsamba-policy-python3-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
libsamba-policy0-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ad-dc-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ad-dc-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ceph-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-devel-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-dsdb-modules-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-gpupdate-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ldb-ldap-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-tool-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
SUSE Linux Enterprise Micro 5.3
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
SUSE Linux Enterprise Micro 5.4
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
SUSE Linux Enterprise Server 15 SP4-LTSS
libsamba-policy-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
libsamba-policy-python3-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
libsamba-policy0-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ad-dc-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ad-dc-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ceph-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-devel-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-dsdb-modules-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-gpupdate-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ldb-ldap-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-tool-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
libsamba-policy-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
libsamba-policy-python3-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
libsamba-policy0-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ad-dc-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ad-dc-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ceph-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-client-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-devel-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-devel-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-dsdb-modules-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-gpupdate-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-ldb-ldap-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-libs-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-python3-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-tool-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
samba-winbind-libs-32bit-4.15.13+git.780.d2f53cbcded-150400.3.49.1

Ссылки

Описание

A flaw was found in Samba's vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-EC2:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-GCE:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Ссылки

Описание

A flaw was found in Samba's WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-EC2:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-GCE:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Ссылки

Описание

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-EC2:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-GCE:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Ссылки

Описание

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-EC2:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS-GCE:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Image SLES15-SP4-BYOS:samba-client-libs-4.15.13+git.780.d2f53cbcded-150400.3.49.1
Ссылки
Уязвимость SUSE-SU-2026:2108-1