{"schema_version":"1.7.5","id":"SUSE-SU-2026:22045-1","published":"2026-06-05T08:34:05Z","modified":"2026-06-10T18:24:10.617070194Z","related":["CVE-2026-1933","CVE-2026-2340","CVE-2026-3012","CVE-2026-3238","CVE-2026-4408","CVE-2026-4480"],"upstream":["CVE-2026-1933","CVE-2026-2340","CVE-2026-3012","CVE-2026-3238","CVE-2026-4408","CVE-2026-4480"],"summary":"Security update for samba","details":"This update for samba fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).\n- CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).\n- CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).\n- CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).\n- CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).\n- CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).\n\nChanges for samba:\n\n- network:samba:STABLE/samba: \"use-kerberos=desired\" broken / Dolphin requires login for Samba shares (bsc#1255755).\n- Samba service start times out (SElinux relabel takes too long) (bsc#1259050).\n- samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058).\n- VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667).\n- Updated to 4.22.9\n","affected":[{"package":{"name":"samba","ecosystem":"SUSE:Linux Micro 6.2","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Micro%206.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.9+git.506.22c03ce0781-160000.1.1"}]}],"ecosystem_specific":{"binaries":[{"libldb2":"4.22.9+git.506.22c03ce0781-160000.1.1","samba-client-libs":"4.22.9+git.506.22c03ce0781-160000.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22045-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622045-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1249058"},{"type":"REPORT","url":"https://bugzilla.suse.com/1255755"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257200"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259050"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259667"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261158"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261159"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261160"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261161"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261163"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261188"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-1933"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-2340"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3012"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3238"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4408"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4480"}]}