-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Binary: cifs-utils cifs-utils-dbgsym
Architecture: riscv64
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-01) <buildd_riscv64-rv-osuosl-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 cifs-utils - Common Internet File System utilities
Closes: 1140422
Changes:
 cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
     (Closes: #1140422)
   * mount.cifs: reject option delimiters in username and domain
     (CVE-2026-104715)
   * mount.cifs: validate username derived from the passwd database
     (CVE-2026-104715)
Checksums-Sha1:
 6c07484c610500b7cc4493955d4c87616f2319e2 193240 cifs-utils-dbgsym_7.4-1+deb13u1_riscv64.deb
 b7c0d08ddd7a6dcbf9ee237b2079659329df54be 7452 cifs-utils_7.4-1+deb13u1_riscv64-buildd.buildinfo
 e69d091df2e25d841db8f8d84ccc16f9c0e50186 102028 cifs-utils_7.4-1+deb13u1_riscv64.deb
Checksums-Sha256:
 a05615447448875556a649b7cd403d7b3915d869b7feaaca8a6bd3babb10508b 193240 cifs-utils-dbgsym_7.4-1+deb13u1_riscv64.deb
 043a359007a3114fa99302cebb75b33c50623a334b0d53ed1bc2f50367e5394f 7452 cifs-utils_7.4-1+deb13u1_riscv64-buildd.buildinfo
 ed307debe184d5ba4d10de8994d042207dd1b9e27f8ff72126eb69ccb59ec218 102028 cifs-utils_7.4-1+deb13u1_riscv64.deb
Files:
 406aaac6dc68579528320a39d2a917f5 193240 debug optional cifs-utils-dbgsym_7.4-1+deb13u1_riscv64.deb
 e204457055e76a29f8a71c38853baacb 7452 otherosfs optional cifs-utils_7.4-1+deb13u1_riscv64-buildd.buildinfo
 9cbe46e637d111ace6f2565fb15448bd 102028 otherosfs optional cifs-utils_7.4-1+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=8imC
-----END PGP SIGNATURE-----