-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Architecture: source
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1140422
Changes:
 cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
     (Closes: #1140422)
   * mount.cifs: reject option delimiters in username and domain
     (CVE-2026-104715)
   * mount.cifs: validate username derived from the passwd database
     (CVE-2026-104715)
Checksums-Sha1:
 d01691fedd28992772df957c905d5596a140b894 2667 cifs-utils_7.4-1+deb13u1.dsc
 4735e4c9bce71cc6fafaaf1cba095f858d279d54 389033 cifs-utils_7.4.orig.tar.bz2
 c62d4b080d1004ad1fb1cec4318355eab50a3d41 833 cifs-utils_7.4.orig.tar.bz2.asc
 e6ed1321583597f5d1ecdad15c2628313d53fed4 14448 cifs-utils_7.4-1+deb13u1.debian.tar.xz
 484eaf3b0faaa4128ab1050d338117d445e43c95 5317 cifs-utils_7.4-1+deb13u1_source.buildinfo
Checksums-Sha256:
 ebf2fa195698962db851d806dfb4e4f52f81d261fd83c81a7aa4cdb9ce5acc6b 2667 cifs-utils_7.4-1+deb13u1.dsc
 53353d05c30b4fc9dac006a8f0c5054cdd8a1834c176313c91e4694025c4b891 389033 cifs-utils_7.4.orig.tar.bz2
 b441a8ebcde505899a22db15874a16c36f597c490b463feaad1e82f24c8b22ff 833 cifs-utils_7.4.orig.tar.bz2.asc
 435b1a10c18839f0896c2c4ab45ede2374605c1889b97310c9608217afec040d 14448 cifs-utils_7.4-1+deb13u1.debian.tar.xz
 4daa790ab41d9055aaa94e2bb454d9e94b7c4e85f818346721cf3ee9284c53d0 5317 cifs-utils_7.4-1+deb13u1_source.buildinfo
Files:
 7c2e240da867598fafc66306095ff638 2667 otherosfs optional cifs-utils_7.4-1+deb13u1.dsc
 ced910b43321c604a9c402beac45cb4e 389033 otherosfs optional cifs-utils_7.4.orig.tar.bz2
 65ebf7b79d2e006433da1b9b06936ac4 833 otherosfs optional cifs-utils_7.4.orig.tar.bz2.asc
 c2d6f45b135ad4aac9e5ffd748bcb548 14448 otherosfs optional cifs-utils_7.4-1+deb13u1.debian.tar.xz
 7170db483b1d3fc77c3d3610b167f18f 5317 otherosfs optional cifs-utils_7.4-1+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=vWkb
-----END PGP SIGNATURE-----