Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:03604-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:03604-1

UNKNOWN

Security update for samba

Published Oct 15, 2025

Modified 3 months ago

Fix available

Details

This update for samba fixes the following issues:

CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).
CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).

Affected Packages

SUSE:Linux Enterprise High Availability Extension 12 SP5ctdb

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise High Availability Extension 12 SP5samba

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSlibsamba-policy-devel

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSlibsamba-policy-python3-devel

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSlibsamba-policy0-python3

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSlibsamba-policy0-python3-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-client

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-client-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-client-libs

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-client-libs-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-devel

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-devel-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-doc

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-ldb-ldap

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-libs

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-libs-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-libs-python3

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-libs-python3-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-python3

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-tool

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-winbind

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-winbind-libs

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server 12 SP5-LTSSsamba-winbind-libs-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5libsamba-policy-devel

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5libsamba-policy-python3-devel

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5libsamba-policy0-python3

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5libsamba-policy0-python3-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-client

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-client-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-client-libs

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-client-libs-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-devel

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-devel-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-doc

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-ldb-ldap

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-libs

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-libs-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-libs-python3

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-libs-python3-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-python3

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-tool

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-winbind

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-winbind-libs

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5samba-winbind-libs-32bit

Fixed in:

4.15.13+git.664.e8416d8d213-3.99.1

References

REPORThttps://bugzilla.suse.com/1251279 REPORThttps://bugzilla.suse.com/1251280 WEBhttps://www.suse.com/security/cve/CVE-2025-10230 WEBhttps://www.suse.com/security/cve/CVE-2025-9640 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-202503604-1/

Upstream

CVE-2025-10230 CVE-2025-9640

Related

CVE-2025-10230 CVE-2025-9640

Ecosystems

SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Timeline

PublishedOct 15, 2025

ModifiedOct 15, 2025