[Deepin Integration]~[v25-Release] fix: fix CVE-2025-10230 WINS hook shell command injection vulnerability by Zeno-sole@deepin-community/samba by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
samba	2:4.19.5+dfsg-1deepin5

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-3754/testing/ ./

Changelog | 更新信息

samba (2:4.19.5+dfsg-1deepin5) unstable; urgency=high

• Fix CVE-2025-10230: WINS hook shell command injection vulnerability
  • Add validation for WINS names before passing to wins hook script
  • Prevent arbitrary command execution through malicious NetBIOS names
  • Restrict valid characters to letters, digits, hyphens, underscores and periods
  • Add test cases to verify the fix

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@zeno: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#3754