|
| 1 | + ============================== |
| 2 | + Release Notes for Samba 4.23.2 |
| 3 | + October 15, 2025 |
| 4 | + ============================== |
| 5 | + |
| 6 | + |
| 7 | +This is a security release in order to address the following defects: |
| 8 | + |
| 9 | +o CVE-2025-9640: Uninitialized memory disclosure via vfs_streams_xattr. |
| 10 | + https://www.samba.org/samba/security/CVE-2025-9640.html |
| 11 | + |
| 12 | +o CVE-2025-10230: Command injection via WINS server hook script. |
| 13 | + https://www.samba.org/samba/security/CVE-2025-10230.html |
| 14 | + |
| 15 | + |
| 16 | +Changes since 4.23.1 |
| 17 | +-------------------- |
| 18 | + |
| 19 | +o Douglas Bagnall < [email protected]> |
| 20 | + * BUG 15903: CVE-2025-10230. |
| 21 | + |
| 22 | +o Andrew Walker < [email protected]> |
| 23 | + * BUG 15885: CVE-2025-9640. |
| 24 | + |
| 25 | + |
| 26 | +####################################### |
| 27 | +Reporting bugs & Development Discussion |
| 28 | +####################################### |
| 29 | + |
| 30 | +Please discuss this release on the samba-technical mailing list or by |
| 31 | +joining the #samba-technical:matrix.org matrix room, or |
| 32 | +#samba-technical IRC channel on irc.libera.chat. |
| 33 | + |
| 34 | +If you do report problems then please try to send high quality |
| 35 | +feedback. If you don't provide vital information to help us track down |
| 36 | +the problem then you will probably be ignored. All bug reports should |
| 37 | +be filed under the Samba 4.1 and newer product in the project's Bugzilla |
| 38 | +database (https://bugzilla.samba.org/). |
| 39 | + |
| 40 | + |
| 41 | +====================================================================== |
| 42 | +== Our Code, Our Bugs, Our Responsibility. |
| 43 | +== The Samba Team |
| 44 | +====================================================================== |
| 45 | + |
| 46 | + |
| 47 | +Release notes for older releases follow: |
| 48 | +---------------------------------------- |
1 | 49 | ============================== |
2 | 50 | Release Notes for Samba 4.23.1 |
3 | 51 | September 26, 2025 |
@@ -52,8 +100,7 @@ database (https://bugzilla.samba.org/). |
52 | 100 | ====================================================================== |
53 | 101 |
|
54 | 102 |
|
55 | | -Release notes for older releases follow: |
56 | | ----------------------------------------- |
| 103 | +---------------------------------------------------------------------- |
57 | 104 | ============================== |
58 | 105 | Release Notes for Samba 4.23.0 |
59 | 106 | September 12, 2025 |
|
0 commit comments