SUSE-SU-2025:3677-1
Security update for samba
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for samba fixes the following issues: - CVE-2025-9640: Fixed vfs_streams_xattr uninitialized memory write (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS Server Hook Script (bsc#1251280).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.3 | ctdb, libsamba-policy-devel, libsamba-policy-python3-devel y 22 más | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise Micro 5.2 | samba-client-libs | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
Mostrar las 26 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.3 | ctdb | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | libsamba-policy-devel | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | libsamba-policy-python3-devel | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | libsamba-policy0-python3 | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-ad-dc-libs | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-ad-dc-libs-32bit | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-ceph | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-client | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-client-32bit | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-client-libs | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-client-libs-32bit | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-devel | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-devel-32bit | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-dsdb-modules | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-gpupdate | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-ldb-ldap | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-libs | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-libs-32bit | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-libs-python3 | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-python3 | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-tool | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-winbind | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-winbind-libs | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise 15.3 | samba-winbind-libs-32bit | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
| SUSE Linux Enterprise Micro 5.2 | samba-client-libs | 4.15.13+git.736.b791be993ba-150300.3.96.1 |
Referencias
- https://bugzilla.suse.com/1251279
- https://bugzilla.suse.com/1251280
- https://lists.suse.com/pipermail/sle-updates/2025-October/042218.html
- https://www.suse.com/security/cve/CVE-2025-10230/
- https://www.suse.com/security/cve/CVE-2025-9640/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2025/suse-su-20253677-1/