Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:21005-1 Final 1 1 2025-11-18T22:57:17Z current 2025-11-18T22:57:17Z 2025-11-18T22:57:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: Update to 4.22.5: * CVE-2025-10230: Command injection via WINS server hook script (bsc#1251280). * CVE-2025-9640: uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - Relax samba-gpupdate requirement for cepces, certmonger, and sscep to a recommends. They are only required if utilizing certificate auto enrollment (bsc#1249087). - Disable timeouts for smb.service so that possibly slow running ExecStartPre script 'update-samba-security-profile' doesn't cause service start to fail due to timeouts (bsc#1249181). - Ensure semanage is pulled in as a requirement when samba in installed when selinux security access mechanism that is used (bsc#1249180). - don't attempt to label paths that don't exist, also remove unecessary evaluation of semange & restorecon cmds (bsc#1249179). Update to 4.22.4: * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0 * getpwuid does not shift to new DC when current DC is down * Windows security hardening locks out schannel'ed netlogon dc calls like netr_DsRGetDCName- * Unresponsive second DC can cause idmapping failure when using idmap_ad- * kinit command is failing with Missing cache Error. * Figuring out the DC name from IP address fails and breaks fork_domain_child(). * vfs_streams_depot fstatat broken. * Delayed leader broadcast can block ctdb forever. * Apparently there is a conflict between shadow_copy2 module and virusfilter (action quarantine). * Fix handling of empty GPO link. * SMB ACL inheritance doesn't work for files created. - adjust gpgme build dependency for future-proofing The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLES-16.0-22 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-202521005-1/ Link for SUSE-SU-2025:21005-1 https://lists.suse.com/pipermail/sle-security-updates/2025-November/023386.html E-Mail link for SUSE-SU-2025:21005-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1249087 SUSE Bug 1249087 https://bugzilla.suse.com/1249179 SUSE Bug 1249179 https://bugzilla.suse.com/1249180 SUSE Bug 1249180 https://bugzilla.suse.com/1249181 SUSE Bug 1249181 https://bugzilla.suse.com/1251279 SUSE Bug 1251279 https://bugzilla.suse.com/1251280 SUSE Bug 1251280 https://www.suse.com/security/cve/CVE-2025-10230/ SUSE CVE CVE-2025-10230 page https://www.suse.com/security/cve/CVE-2025-9640/ SUSE CVE CVE-2025-9640 page SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 16.0 ctdb-4.22.5+git.431.dc5a539f124-160000.1.1 ctdb-pcp-pmda-4.22.5+git.431.dc5a539f124-160000.1.1 ldb-tools-4.22.5+git.431.dc5a539f124-160000.1.1 libldb-devel-4.22.5+git.431.dc5a539f124-160000.1.1 libldb2-4.22.5+git.431.dc5a539f124-160000.1.1 python3-ldb-4.22.5+git.431.dc5a539f124-160000.1.1 samba-4.22.5+git.431.dc5a539f124-160000.1.1 samba-ad-dc-4.22.5+git.431.dc5a539f124-160000.1.1 samba-ad-dc-libs-4.22.5+git.431.dc5a539f124-160000.1.1 samba-client-4.22.5+git.431.dc5a539f124-160000.1.1 samba-client-libs-4.22.5+git.431.dc5a539f124-160000.1.1 samba-dcerpc-4.22.5+git.431.dc5a539f124-160000.1.1 samba-devel-4.22.5+git.431.dc5a539f124-160000.1.1 samba-doc-4.22.5+git.431.dc5a539f124-160000.1.1 samba-dsdb-modules-4.22.5+git.431.dc5a539f124-160000.1.1 samba-gpupdate-4.22.5+git.431.dc5a539f124-160000.1.1 samba-ldb-ldap-4.22.5+git.431.dc5a539f124-160000.1.1 samba-libs-4.22.5+git.431.dc5a539f124-160000.1.1 samba-libs-python3-4.22.5+git.431.dc5a539f124-160000.1.1 samba-python3-4.22.5+git.431.dc5a539f124-160000.1.1 samba-tool-4.22.5+git.431.dc5a539f124-160000.1.1 samba-winbind-4.22.5+git.431.dc5a539f124-160000.1.1 samba-winbind-libs-4.22.5+git.431.dc5a539f124-160000.1.1 ctdb-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 ctdb-pcp-pmda-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 ldb-tools-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 libldb-devel-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 libldb2-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 python3-ldb-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-ad-dc-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-ad-dc-libs-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-client-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-client-libs-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-dcerpc-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-devel-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-doc-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-dsdb-modules-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-gpupdate-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-ldb-ldap-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-libs-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-libs-python3-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-python3-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-tool-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-winbind-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 samba-winbind-libs-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 ctdb-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 ctdb-pcp-pmda-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 ldb-tools-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 libldb-devel-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 libldb2-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 python3-ldb-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-ad-dc-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-ad-dc-libs-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-client-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-client-libs-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-dcerpc-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-devel-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-doc-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-dsdb-modules-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-gpupdate-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-ldb-ldap-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-libs-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-libs-python3-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-python3-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-tool-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-winbind-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 samba-winbind-libs-4.22.5+git.431.dc5a539f124-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 16.0 A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller's wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process. CVE-2025-10230 SUSE Linux Enterprise Server 16.0:ctdb-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:ctdb-pcp-pmda-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:ldb-tools-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:libldb-devel-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:libldb2-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:python3-ldb-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-ad-dc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-ad-dc-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-client-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-client-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-dcerpc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-devel-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-doc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-dsdb-modules-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-gpupdate-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-ldb-ldap-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-libs-python3-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-python3-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-tool-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-winbind-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-winbind-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:ctdb-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:ctdb-pcp-pmda-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:ldb-tools-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:libldb-devel-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:libldb2-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:python3-ldb-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-ad-dc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-ad-dc-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-client-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-client-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-dcerpc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-devel-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-doc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-dsdb-modules-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-gpupdate-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-ldb-ldap-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-libs-python3-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-python3-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-tool-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-winbind-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-winbind-libs-4.22.5+git.431.dc5a539f124-160000.1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-202521005-1/ https://www.suse.com/security/cve/CVE-2025-10230.html CVE-2025-10230 https://bugzilla.suse.com/1251280 SUSE Bug 1251280 A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability. CVE-2025-9640 SUSE Linux Enterprise Server 16.0:ctdb-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:ctdb-pcp-pmda-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:ldb-tools-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:libldb-devel-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:libldb2-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:python3-ldb-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-ad-dc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-ad-dc-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-client-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-client-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-dcerpc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-devel-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-doc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-dsdb-modules-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-gpupdate-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-ldb-ldap-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-libs-python3-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-python3-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-tool-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-winbind-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server 16.0:samba-winbind-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:ctdb-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:ctdb-pcp-pmda-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:ldb-tools-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:libldb-devel-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:libldb2-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:python3-ldb-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-ad-dc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-ad-dc-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-client-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-client-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-dcerpc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-devel-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-doc-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-dsdb-modules-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-gpupdate-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-ldb-ldap-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-libs-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-libs-python3-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-python3-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-tool-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-winbind-4.22.5+git.431.dc5a539f124-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 16.0:samba-winbind-libs-4.22.5+git.431.dc5a539f124-160000.1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-202521005-1/ https://www.suse.com/security/cve/CVE-2025-9640.html CVE-2025-9640 https://bugzilla.suse.com/1251279 SUSE Bug 1251279