SUSE-SU-2025:03603-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:03603-1

UNKNOWN

Security update for samba

Published Oct 15, 2025

Modified 5 months ago

Fix available

Details

This update for samba fixes the following issues:

CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).
CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).

Affected Packages(21 packages)

ctdb

SUSE Linux Enterprise High Availability Extension 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

samba

SUSE Linux Enterprise High Availability Extension 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Server 15 SP5-LTSS

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

libsamba-policy-devel

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

libsamba-policy-python3-devel

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

libsamba-policy0-python3

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

samba-ceph

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

samba-client

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

samba-client-libs

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

samba-client-libs-32bit

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

samba-dcerpc

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP5

Fixed in:

4.17.12+git.510.0efaadf376b-150500.3.34.1

References

https://bugzilla.suse.com/1251279

https://bugzilla.suse.com/1251280

https://www.suse.com/security/cve/CVE-2025-10230

https://www.suse.com/security/cve/CVE-2025-9640

https://www.suse.com/support/update/announcement/2025/suse-su-202503603-1/

Upstream

CVE-2025-10230 CVE-2025-9640

Related

CVE-2025-10230 CVE-2025-9640

Ecosystems(6)

SUSE Linux Enterprise High Availability Extension 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 15 SP5-LTSS

Timeline

PublishedOct 15, 2025

ModifiedOct 15, 2025