SUSE-SU-2025:03604-1
Security update for samba
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.5 | ctdb, libsamba-policy-devel, libsamba-policy-python3-devel y 20 más | 4.15.13+git.664.e8416d8d213-3.99.1 |
Mostrar las 23 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.5 | ctdb | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | libsamba-policy-devel | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | libsamba-policy-python3-devel | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | libsamba-policy0-python3 | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | libsamba-policy0-python3-32bit | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-client | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-client-32bit | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-client-libs | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-client-libs-32bit | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-devel | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-devel-32bit | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-doc | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-ldb-ldap | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-libs | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-libs-32bit | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-libs-python3 | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-libs-python3-32bit | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-python3 | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-tool | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-winbind | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-winbind-libs | 4.15.13+git.664.e8416d8d213-3.99.1 |
| SUSE Linux Enterprise 12.5 | samba-winbind-libs-32bit | 4.15.13+git.664.e8416d8d213-3.99.1 |
Referencias
- https://bugzilla.suse.com/1251279
- https://bugzilla.suse.com/1251280
- https://lists.suse.com/pipermail/sle-updates/2025-October/042172.html
- https://www.suse.com/security/cve/CVE-2025-10230/
- https://www.suse.com/security/cve/CVE-2025-9640/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2025/suse-su-202503604-1/