-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Binary: cifs-utils cifs-utils-dbgsym
Architecture: i386
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 cifs-utils - Common Internet File System utilities
Closes: 1140422
Changes:
 cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
     (Closes: #1140422)
   * mount.cifs: reject option delimiters in username and domain
     (CVE-2026-104715)
   * mount.cifs: validate username derived from the passwd database
     (CVE-2026-104715)
Checksums-Sha1:
 ec88992cf2a0b6816e292a2851122ec71c430c50 179992 cifs-utils-dbgsym_7.4-1+deb13u1_i386.deb
 5b082ba4ac774cccecc71cc2732b4601772c5c68 7409 cifs-utils_7.4-1+deb13u1_i386-buildd.buildinfo
 ab2c43fa6a7e37838d1cd4147c4d2a0aa9ce096a 103064 cifs-utils_7.4-1+deb13u1_i386.deb
Checksums-Sha256:
 b1f752d1bbd63dcf17db69508ae02c544ce3252f7a158a55ee007606ec666dbf 179992 cifs-utils-dbgsym_7.4-1+deb13u1_i386.deb
 9d07bdb09c167329d4f2f5257d363608a13afbb1242818b54fa25e83922d8b5e 7409 cifs-utils_7.4-1+deb13u1_i386-buildd.buildinfo
 8067dd5ed3dd5a5be2af1c2ed0697feed78e87489c91c2e9108a7ddb27336cbf 103064 cifs-utils_7.4-1+deb13u1_i386.deb
Files:
 ec123476dc5d7d8c896d803d8c039a32 179992 debug optional cifs-utils-dbgsym_7.4-1+deb13u1_i386.deb
 6c6c5c94a1783ed86b7fd27186363b05 7409 otherosfs optional cifs-utils_7.4-1+deb13u1_i386-buildd.buildinfo
 1595ffeff3ef539db3e8dbbcb59fe40f 103064 otherosfs optional cifs-utils_7.4-1+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=E/W2
-----END PGP SIGNATURE-----