-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Binary: cifs-utils cifs-utils-dbgsym
Architecture: s390x
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 cifs-utils - Common Internet File System utilities
Closes: 1140422
Changes:
 cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
     (Closes: #1140422)
   * mount.cifs: reject option delimiters in username and domain
     (CVE-2026-104715)
   * mount.cifs: validate username derived from the passwd database
     (CVE-2026-104715)
Checksums-Sha1:
 104e7c935b833939c31ed14c235a1dc07b0758a4 201080 cifs-utils-dbgsym_7.4-1+deb13u1_s390x.deb
 c0294691a898f035b3306ed8de8bf9743d7117a2 7367 cifs-utils_7.4-1+deb13u1_s390x-buildd.buildinfo
 5a2cfc187fc920427d9c3f2ce95cd54f2cb90194 99036 cifs-utils_7.4-1+deb13u1_s390x.deb
Checksums-Sha256:
 9f368b2fbe0fa627a81a4e9dcda445b6e6f2ad11bfcdc104ff81243e856f8c87 201080 cifs-utils-dbgsym_7.4-1+deb13u1_s390x.deb
 84f5b6606769dd634ebcf3ae5d5e2135457aaefc30eabcd7b19558b51b9155c2 7367 cifs-utils_7.4-1+deb13u1_s390x-buildd.buildinfo
 7d2f2d158952b51580c9ccd0703c11a541f30224deeebd18da004e94d4e7678d 99036 cifs-utils_7.4-1+deb13u1_s390x.deb
Files:
 ae50fc2ef547e4c9f6da426471ee3266 201080 debug optional cifs-utils-dbgsym_7.4-1+deb13u1_s390x.deb
 cdbd8c575141481c2f3592df80dd6aa9 7367 otherosfs optional cifs-utils_7.4-1+deb13u1_s390x-buildd.buildinfo
 c5bff3faf10501de9be24a41ed7285c2 99036 otherosfs optional cifs-utils_7.4-1+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=5Ld8
-----END PGP SIGNATURE-----