critical Security update for samba

SUSE-SLE-HA-12-SP5-2025-3604

This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).

• Release Date
  Oct 15 2025
• References
  Bugzilla: 1251280, 1251279
  CVEs: CVE-2025-10230, CVE-2025-9640
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise High Availability Extension 12.5 ppc64le

• Packages
  ctdb
  Clustered TDB

  4.15.13+git.664.e8416d8d213-3.99.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.664.e8416d8d213-3.99.1

  lock src

SUSE Linux Enterprise High Availability Extension 12.5 s390x

• Packages
  ctdb
  Clustered TDB

  4.15.13+git.664.e8416d8d213-3.99.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.664.e8416d8d213-3.99.1

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.5 x86_64

• Packages
  ctdb
  Clustered TDB

  4.15.13+git.664.e8416d8d213-3.99.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.664.e8416d8d213-3.99.1

  lock src