Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-9640: A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.
Fixed packages 55
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libnetapi | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | libnetapi-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | libnetapi-devel | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | libsmbclient | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | libsmbclient-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | libsmbclient-devel | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | libwbclient | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | libwbclient-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | libwbclient-devel | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | python3-samba | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | python3-samba-dc | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | python3-samba-dc-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | python3-samba-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | python3-samba-devel | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | python3-samba-test | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-client | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-client-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-client-libs | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-client-libs-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-common | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-common-libs | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-common-libs-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-common-tools | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-common-tools-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-dc-libs | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-dc-libs-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-dcerpc | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-dcerpc-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-debugsource | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-devel | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-krb5-printing | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-krb5-printing-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-ldb-ldap-modules | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-ldb-ldap-modules-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-libs | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-libs-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-pidl | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-test | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-test-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-test-libs | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-test-libs-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-tools | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-usershares | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-vfs-iouring | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-vfs-iouring-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-winbind | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-winbind-clients | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-winbind-clients-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-winbind-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-winbind-krb5-locator | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-winbind-krb5-locator-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-winbind-modules | 2:4.17.12-1.amzn2023.0.3 |
| Amazon Linux · 2023 | samba-winbind-modules-debuginfo | 2:4.17.12-1.amzn2023.0.3 |
Vulnerabilities 1
-
Medium 4.3
Samba: vfs_streams_xattr uninitialized memory write possible
A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an inform…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-9640.html