oss-sec mailing list archives

Re: Samba security releases for CVE-2025-10230 and CVE-2025-9640

From: Demi Marie Obenour <demiobenour () gmail com>
Date: Thu, 16 Oct 2025 14:37:43 -0400

On 10/15/25 22:18, Douglas Bagnall wrote:

Anyway, the summary is the Samba 3/4 history has left us with
unmaintained pockets within our codebase that we ignore because we
assume nobody is using them, but which we don't delete because maybe
somebody is using them. There may not be very many more.


Would it make sense to announce that they are deprecated, and then
remove them in the next release?

-- 
Sincerely,
Demi Marie Obenour (she/her/hers)

Attachment: OpenPGP_0xB288B55FFF9C22C1.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Current thread:

Fwd: Heads-up: Upcoming Samba security releases Douglas Bagnall (Oct 08)
- Samba security releases for CVE-2025-10230 and CVE-2025-9640 Douglas Bagnall (Oct 15)
  - RE: Samba security releases for CVE-2025-10230 and CVE-2025-9640 Caveney, Seamus G (Oct 15)
    - Re: Samba security releases for CVE-2025-10230 and CVE-2025-9640 Douglas Bagnall (Oct 15)
    - Re: Samba security releases for CVE-2025-10230 and CVE-2025-9640 Demi Marie Obenour (Oct 21)
  - Re: Samba security releases for CVE-2025-10230 and CVE-2025-9640 Douglas Bagnall (Oct 15)
    - Re: Samba security releases for CVE-2025-10230 and CVE-2025-9640 Demi Marie Obenour (Oct 16)
    - Re: Samba security releases for CVE-2025-10230 and CVE-2025-9640 Douglas Bagnall (Oct 16)
    - Re: Samba security releases for CVE-2025-10230 and CVE-2025-9640 Peter Gutmann (Oct 16)