ALAS2023-2025-1234


Amazon Linux 2023 Security Advisory: ALAS2023-2025-1234
Advisory Released Date: 2025-10-27
Advisory Updated Date: 2025-10-27
Severity: Medium

Issue Overview:

A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability. (CVE-2025-9640)


Affected Packages:

samba


Issue Correction:
Run dnf update samba --releasever 2023.9.20251027 or dnf update --advisory ALAS2023-2025-1234 --releasever 2023.9.20251027 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:
aarch64:
    samba-winbind-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-libs-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-devel-4.17.12-1.amzn2023.0.3.aarch64
    samba-client-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-common-libs-4.17.12-1.amzn2023.0.3.aarch64
    samba-dcerpc-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-4.17.12-1.amzn2023.0.3.aarch64
    python3-samba-dc-4.17.12-1.amzn2023.0.3.aarch64
    python3-samba-test-4.17.12-1.amzn2023.0.3.aarch64
    samba-common-libs-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    python3-samba-4.17.12-1.amzn2023.0.3.aarch64
    samba-test-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-winbind-4.17.12-1.amzn2023.0.3.aarch64
    samba-winbind-krb5-locator-4.17.12-1.amzn2023.0.3.aarch64
    python3-samba-dc-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-client-4.17.12-1.amzn2023.0.3.aarch64
    samba-winbind-modules-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-dcerpc-4.17.12-1.amzn2023.0.3.aarch64
    samba-winbind-modules-4.17.12-1.amzn2023.0.3.aarch64
    libnetapi-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    libnetapi-4.17.12-1.amzn2023.0.3.aarch64
    samba-common-tools-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-debugsource-4.17.12-1.amzn2023.0.3.aarch64
    samba-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    python3-samba-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-test-4.17.12-1.amzn2023.0.3.aarch64
    samba-winbind-clients-4.17.12-1.amzn2023.0.3.aarch64
    samba-client-libs-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-common-tools-4.17.12-1.amzn2023.0.3.aarch64
    samba-libs-4.17.12-1.amzn2023.0.3.aarch64
    samba-client-libs-4.17.12-1.amzn2023.0.3.aarch64
    samba-ldb-ldap-modules-4.17.12-1.amzn2023.0.3.aarch64
    libsmbclient-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-winbind-clients-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    libsmbclient-4.17.12-1.amzn2023.0.3.aarch64
    libwbclient-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-vfs-iouring-4.17.12-1.amzn2023.0.3.aarch64
    libwbclient-4.17.12-1.amzn2023.0.3.aarch64
    samba-krb5-printing-4.17.12-1.amzn2023.0.3.aarch64
    samba-test-libs-4.17.12-1.amzn2023.0.3.aarch64
    samba-dc-libs-4.17.12-1.amzn2023.0.3.aarch64
    samba-test-libs-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    libsmbclient-devel-4.17.12-1.amzn2023.0.3.aarch64
    samba-winbind-krb5-locator-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    libnetapi-devel-4.17.12-1.amzn2023.0.3.aarch64
    samba-dc-libs-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-vfs-iouring-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-ldb-ldap-modules-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    libwbclient-devel-4.17.12-1.amzn2023.0.3.aarch64
    samba-krb5-printing-debuginfo-4.17.12-1.amzn2023.0.3.aarch64
    samba-tools-4.17.12-1.amzn2023.0.3.aarch64
    python3-samba-devel-4.17.12-1.amzn2023.0.3.aarch64
    samba-usershares-4.17.12-1.amzn2023.0.3.aarch64

noarch:
    samba-pidl-4.17.12-1.amzn2023.0.3.noarch
    samba-common-4.17.12-1.amzn2023.0.3.noarch

src:
    samba-4.17.12-1.amzn2023.0.3.src

x86_64:
    samba-winbind-modules-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    python3-samba-dc-4.17.12-1.amzn2023.0.3.x86_64
    samba-dcerpc-4.17.12-1.amzn2023.0.3.x86_64
    samba-dcerpc-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-client-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-client-4.17.12-1.amzn2023.0.3.x86_64
    samba-debugsource-4.17.12-1.amzn2023.0.3.x86_64
    python3-samba-dc-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-libs-4.17.12-1.amzn2023.0.3.x86_64
    python3-samba-4.17.12-1.amzn2023.0.3.x86_64
    samba-winbind-clients-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    python3-samba-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-test-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    libsmbclient-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-devel-4.17.12-1.amzn2023.0.3.x86_64
    libnetapi-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    libnetapi-4.17.12-1.amzn2023.0.3.x86_64
    samba-common-libs-4.17.12-1.amzn2023.0.3.x86_64
    samba-libs-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    libwbclient-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-common-tools-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-winbind-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-4.17.12-1.amzn2023.0.3.x86_64
    samba-common-libs-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-client-libs-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    python3-samba-test-4.17.12-1.amzn2023.0.3.x86_64
    samba-test-4.17.12-1.amzn2023.0.3.x86_64
    samba-winbind-4.17.12-1.amzn2023.0.3.x86_64
    samba-common-tools-4.17.12-1.amzn2023.0.3.x86_64
    samba-client-libs-4.17.12-1.amzn2023.0.3.x86_64
    samba-winbind-clients-4.17.12-1.amzn2023.0.3.x86_64
    libsmbclient-4.17.12-1.amzn2023.0.3.x86_64
    samba-test-libs-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    libsmbclient-devel-4.17.12-1.amzn2023.0.3.x86_64
    samba-winbind-modules-4.17.12-1.amzn2023.0.3.x86_64
    samba-test-libs-4.17.12-1.amzn2023.0.3.x86_64
    libnetapi-devel-4.17.12-1.amzn2023.0.3.x86_64
    samba-winbind-krb5-locator-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    libwbclient-4.17.12-1.amzn2023.0.3.x86_64
    samba-dc-libs-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-vfs-iouring-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    libwbclient-devel-4.17.12-1.amzn2023.0.3.x86_64
    samba-ldb-ldap-modules-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-dc-libs-4.17.12-1.amzn2023.0.3.x86_64
    samba-ldb-ldap-modules-4.17.12-1.amzn2023.0.3.x86_64
    samba-winbind-krb5-locator-4.17.12-1.amzn2023.0.3.x86_64
    samba-vfs-iouring-4.17.12-1.amzn2023.0.3.x86_64
    samba-krb5-printing-debuginfo-4.17.12-1.amzn2023.0.3.x86_64
    samba-krb5-printing-4.17.12-1.amzn2023.0.3.x86_64
    samba-tools-4.17.12-1.amzn2023.0.3.x86_64
    python3-samba-devel-4.17.12-1.amzn2023.0.3.x86_64
    samba-usershares-4.17.12-1.amzn2023.0.3.x86_64