-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Binary: cifs-utils cifs-utils-dbgsym
Architecture: amd64
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 cifs-utils - Common Internet File System utilities
Closes: 1140422
Changes:
 cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
     (Closes: #1140422)
   * mount.cifs: reject option delimiters in username and domain
     (CVE-2026-104715)
   * mount.cifs: validate username derived from the passwd database
     (CVE-2026-104715)
Checksums-Sha1:
 21522e3135b5cb3d81042aded818be611b442a90 198828 cifs-utils-dbgsym_7.4-1+deb13u1_amd64.deb
 b5d842c12017d020c6553a79f538ee7e6a962d52 7508 cifs-utils_7.4-1+deb13u1_amd64-buildd.buildinfo
 bdac220d561b0b2504c67359588e4d8fc9ea376b 100888 cifs-utils_7.4-1+deb13u1_amd64.deb
Checksums-Sha256:
 fdca4f1e5404ee7fe3124a9eaf256d2b4127993b44d29b20cf7704e272b103c1 198828 cifs-utils-dbgsym_7.4-1+deb13u1_amd64.deb
 96298e1ef7693c1b4684130999d8e0e64f44f566ff72859ca539473893add721 7508 cifs-utils_7.4-1+deb13u1_amd64-buildd.buildinfo
 be5cecde2e120a789861348bc9e9bca9852a58268ba9ca141a61bdbcbbe0e174 100888 cifs-utils_7.4-1+deb13u1_amd64.deb
Files:
 06971a1964b77e7ae96c47e999f78fec 198828 debug optional cifs-utils-dbgsym_7.4-1+deb13u1_amd64.deb
 88cbd629b9973c3cf24ac1f0978084a1 7508 otherosfs optional cifs-utils_7.4-1+deb13u1_amd64-buildd.buildinfo
 ea8188ca0d90142eeabbc308e45e3f7f 100888 otherosfs optional cifs-utils_7.4-1+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=gfFP
-----END PGP SIGNATURE-----