critical Security update for samba

SUSE-SLE-Micro-5.5-2025-3603

This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).

• Release Date
  Oct 15 2025
• References
  Bugzilla: 1251280, 1251279
  CVEs: CVE-2025-9640, CVE-2025-10230
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Micro 5.5 aarch64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.17.12+git.510.0efaadf376b-150500.3.34.1 lock src

  samba-client-libs
  Samba client libraries

  4.17.12+git.510.0efaadf376b-150500.3.34.1 lock rpm

SUSE Linux Enterprise Micro 5.5 x86_64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.17.12+git.510.0efaadf376b-150500.3.34.1 lock src

  samba-client-libs
  Samba client libraries

  4.17.12+git.510.0efaadf376b-150500.3.34.1 lock rpm

SUSE Linux Enterprise Micro 5.5 ppc64le

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.17.12+git.510.0efaadf376b-150500.3.34.1 lock src

  samba-client-libs
  Samba client libraries

  4.17.12+git.510.0efaadf376b-150500.3.34.1 lock rpm

SUSE Linux Enterprise Micro 5.5 s390x

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.17.12+git.510.0efaadf376b-150500.3.34.1 lock src

  samba-client-libs
  Samba client libraries

  4.17.12+git.510.0efaadf376b-150500.3.34.1 lock rpm