Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:03612-1

Опубликовано: 16 окт. 2025
Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

  • CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).
  • CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).

Список пакетов

SUSE Linux Enterprise High Availability Extension 15 SP6
ctdb-4.19.8+git.435.78ced6cf30d-150600.3.21.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
libsamba-policy-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
libsamba-policy-python3-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
libsamba-policy0-python3-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-ceph-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-client-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-client-libs-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-client-libs-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-dcerpc-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-gpupdate-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-ldb-ldap-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-libs-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-libs-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-libs-python3-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-python3-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-tool-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-winbind-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-winbind-libs-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-winbind-libs-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
openSUSE Leap 15.6
ctdb-4.19.8+git.435.78ced6cf30d-150600.3.21.1
ctdb-pcp-pmda-4.19.8+git.435.78ced6cf30d-150600.3.21.1
libsamba-policy-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
libsamba-policy-python3-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
libsamba-policy0-python3-4.19.8+git.435.78ced6cf30d-150600.3.21.1
libsamba-policy0-python3-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-ceph-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-client-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-client-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-client-libs-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-client-libs-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-dcerpc-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-devel-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-doc-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-gpupdate-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-ldb-ldap-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-libs-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-libs-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-libs-python3-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-libs-python3-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-python3-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-test-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-tool-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-winbind-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-winbind-libs-4.19.8+git.435.78ced6cf30d-150600.3.21.1
samba-winbind-libs-32bit-4.19.8+git.435.78ced6cf30d-150600.3.21.1

Ссылки

Описание

unknown

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP6:ctdb-4.19.8+git.435.78ced6cf30d-150600.3.21.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libsamba-policy-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libsamba-policy-python3-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libsamba-policy0-python3-4.19.8+git.435.78ced6cf30d-150600.3.21.1
Ссылки

Описание

A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP6:ctdb-4.19.8+git.435.78ced6cf30d-150600.3.21.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libsamba-policy-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libsamba-policy-python3-devel-4.19.8+git.435.78ced6cf30d-150600.3.21.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libsamba-policy0-python3-4.19.8+git.435.78ced6cf30d-150600.3.21.1
Ссылки