SUSE-SU-2025:03618-1
Security update for samba
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.4 | ctdb, libsamba-policy-devel, libsamba-policy-python3-devel y 22 más | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.3 | samba-client-libs, samba-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.4 | samba-client-libs, samba-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
Mostrar las 29 entradas de 3 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.4 | ctdb | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | libsamba-policy-devel | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | libsamba-policy-python3-devel | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | libsamba-policy0-python3 | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-ad-dc-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-ad-dc-libs-32bit | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-ceph | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-client | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-client-32bit | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-client-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-client-libs-32bit | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-devel | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-devel-32bit | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-dsdb-modules | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-gpupdate | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-ldb-ldap | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-libs-32bit | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-libs-python3 | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-python3 | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-tool | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-winbind | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-winbind-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise 15.4 | samba-winbind-libs-32bit | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.3 | samba-client-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.3 | samba-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.4 | samba-client-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.4 | samba-libs | 4.15.13+git.736.b791be993ba-150400.3.40.1 |
Referencias
- https://bugzilla.suse.com/1251279
- https://bugzilla.suse.com/1251280
- https://lists.suse.com/pipermail/sle-updates/2025-October/042178.html
- https://www.suse.com/security/cve/CVE-2025-10230/
- https://www.suse.com/security/cve/CVE-2025-9640/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2025/suse-su-202503618-1/