critical Security update for samba

SUSE-SLE-Micro-5.4-2025-3618

This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).

• Release Date
  Oct 16 2025
• References
  Bugzilla: 1251279, 1251280
  CVEs: CVE-2025-10230, CVE-2025-9640
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Micro 5.4 aarch64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock src

  samba-client-libs
  Samba client libraries

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock rpm

  samba-libs
  Samba libraries

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock rpm

SUSE Linux Enterprise Micro 5.4 x86_64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock src

  samba-client-libs
  Samba client libraries

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock rpm

  samba-libs
  Samba libraries

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock rpm

SUSE Linux Enterprise Micro 5.4 s390x

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock src

  samba-client-libs
  Samba client libraries

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock rpm

  samba-libs
  Samba libraries

  4.15.13+git.736.b791be993ba-150400.3.40.1 lock rpm