SUSE-SU-2025:3676-1

Опубликовано: 20 окт. 2025

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).
CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).

Update to 4.21.8:

netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981).
getpwuid does not shift to new DC when current DC is down; (bso#15844).
Windows security hardening locks out schannel'ed netlogon dc calls like netr_DsRGetDCName; (bso#15876).
kinit command is failing with Missing cache Error; (bso#15840).
Figuring out the DC name from IP address fails and breaks fork_domain_child(); (bso#15891).
Delayed leader broadcast can block ctdb forever; (bso#15892).
'net ads group' failed to list domain groups; (bso#15900).
Apparently there is a conflict between shadow_copy2 module and virusfilter (action quarantine); (bso#15663).
Fix handling of empty GPO link; (bso#15877).
SMB ACL inheritance doesn't work for files created; (bso#15880).

Список пакетов

Container suse/multi-linux-manager/5.1/x86_64/server:latest

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/samba-client:latest

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/samba-server:latest

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-dcerpc-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/samba-toolbox:latest

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-Azure-3P

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-Azure-Basic

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-Azure-Standard

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-BYOS-Azure

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-BYOS-EC2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-BYOS-GCE

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-CHOST-BYOS-Aliyun

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-CHOST-BYOS-Azure

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-CHOST-BYOS-EC2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-CHOST-BYOS-GCE

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-CHOST-BYOS-GDC

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-EC2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-EC2-ECS-HVM

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-GCE

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-GCE-3P

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-HPC-Azure

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-HPC-BYOS-Azure

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-HPC-BYOS-EC2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-HPC-BYOS-GCE

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-Hardened-BYOS-Azure

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-Hardened-BYOS-EC2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-Hardened-BYOS-GCE

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Azure

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Azure-3P

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-BYOS-Azure

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-BYOS-EC2

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-BYOS-GCE

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-EC2

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-GCE

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-GCE-3P

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Hardened-Azure

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAP-Hardened-GCE

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAPCAL-Azure

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-dcerpc-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAPCAL-EC2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-dcerpc-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image SLES15-SP7-SAPCAL-GCE

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-dcerpc-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image server-image

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Image server-image-sles15sp7

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

SUSE Linux Enterprise High Availability Extension 15 SP7

ctdb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

SUSE Linux Enterprise Module for Basesystem 15 SP7

ldb-tools-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb-devel-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

libldb2-32bit-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

python3-ldb-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-ceph-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-client-libs-32bit-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-dcerpc-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-devel-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-gpupdate-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-ldb-ldap-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-32bit-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-libs-python3-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-python3-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-tool-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-winbind-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-winbind-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

samba-winbind-libs-32bit-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20253676-1/
Link for SUSE-SU-2025:3676-1
https://lists.suse.com/pipermail/sle-updates/2025-October/042219.html
E-Mail link for SUSE-SU-2025:3676-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1251279
SUSE Bug 1251279
https://bugzilla.suse.com/1251280
SUSE Bug 1251280
https://www.suse.com/security/cve/CVE-2025-10230/
SUSE CVE CVE-2025-10230 page
https://www.suse.com/security/cve/CVE-2025-9640/
SUSE CVE CVE-2025-9640 page

Описание

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller's wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.

Затронутые продукты

Container suse/multi-linux-manager/5.1/x86_64/server:latest:libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/multi-linux-manager/5.1/x86_64/server:latest:samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/samba-client:latest:libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/samba-client:latest:samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Ссылки

https://www.suse.com/security/cve/CVE-2025-10230.html
CVE-2025-10230
https://bugzilla.suse.com/1251280
SUSE Bug 1251280

Описание

A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.

Затронутые продукты

Container suse/multi-linux-manager/5.1/x86_64/server:latest:libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/multi-linux-manager/5.1/x86_64/server:latest:samba-client-libs-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/samba-client:latest:libldb2-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Container suse/samba-client:latest:samba-client-4.21.8+git.418.e80c9b2a88c-150700.3.11.2

Ссылки

https://www.suse.com/security/cve/CVE-2025-9640.html
CVE-2025-9640
https://bugzilla.suse.com/1251279
SUSE Bug 1251279

SUSE-SU-2025:3676-1

Описание

Список пакетов

Container suse/multi-linux-manager/5.1/x86_64/server:latest

Container suse/samba-client:latest

Container suse/samba-server:latest

Container suse/samba-toolbox:latest

Image SLES15-SP7-Azure-3P

Image SLES15-SP7-Azure-Basic

Image SLES15-SP7-Azure-Standard

Image SLES15-SP7-BYOS-Azure

Image SLES15-SP7-BYOS-EC2

Image SLES15-SP7-BYOS-GCE

Image SLES15-SP7-CHOST-BYOS-Aliyun

Image SLES15-SP7-CHOST-BYOS-Azure

Image SLES15-SP7-CHOST-BYOS-EC2

Image SLES15-SP7-CHOST-BYOS-GCE

Image SLES15-SP7-CHOST-BYOS-GDC

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

Image SLES15-SP7-EC2

Image SLES15-SP7-EC2-ECS-HVM

Image SLES15-SP7-GCE

Image SLES15-SP7-GCE-3P

Image SLES15-SP7-HPC-Azure

Image SLES15-SP7-HPC-BYOS-Azure

Image SLES15-SP7-HPC-BYOS-EC2

Image SLES15-SP7-HPC-BYOS-GCE

Image SLES15-SP7-Hardened-BYOS-Azure

Image SLES15-SP7-Hardened-BYOS-EC2

Image SLES15-SP7-Hardened-BYOS-GCE

Image SLES15-SP7-SAP-Azure

Image SLES15-SP7-SAP-Azure-3P

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP7-SAP-BYOS-Azure

Image SLES15-SP7-SAP-BYOS-EC2

Image SLES15-SP7-SAP-BYOS-GCE

Image SLES15-SP7-SAP-EC2

Image SLES15-SP7-SAP-GCE

Image SLES15-SP7-SAP-GCE-3P

Image SLES15-SP7-SAP-Hardened-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

Image SLES15-SP7-SAP-Hardened-GCE

Image SLES15-SP7-SAPCAL-Azure

Image SLES15-SP7-SAPCAL-EC2

Image SLES15-SP7-SAPCAL-GCE

Image server-image

Image server-image-sles15sp7

SUSE Linux Enterprise High Availability Extension 15 SP7

SUSE Linux Enterprise Module for Basesystem 15 SP7

Ссылки

Уязвимость: CVE-2025-10230

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-9640

Описание

Затронутые продукты

Ссылки