-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Binary: cifs-utils cifs-utils-dbgsym
Architecture: armhf
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 cifs-utils - Common Internet File System utilities
Closes: 1140422
Changes:
 cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
     (Closes: #1140422)
   * mount.cifs: reject option delimiters in username and domain
     (CVE-2026-104715)
   * mount.cifs: validate username derived from the passwd database
     (CVE-2026-104715)
Checksums-Sha1:
 6f9c432e7e5aa001844e313c39bfc103ed77d44f 198408 cifs-utils-dbgsym_7.4-1+deb13u1_armhf.deb
 32392a6d2ce09949e178a69145e90a9fbc60501e 7371 cifs-utils_7.4-1+deb13u1_armhf-buildd.buildinfo
 f390265278a244efcd16d5879827b5dc4c226200 94700 cifs-utils_7.4-1+deb13u1_armhf.deb
Checksums-Sha256:
 bd76402914f7d8aa04ccbc3b7bc2ad302dd3b0fa09746df488e8e6764d290fd6 198408 cifs-utils-dbgsym_7.4-1+deb13u1_armhf.deb
 415bff0c17f25a3fd5bad5c0aa1adb99d9d08b2c51e1604e1632920822e9fddf 7371 cifs-utils_7.4-1+deb13u1_armhf-buildd.buildinfo
 5df00c9dfc27778fcd18af19a33779f89613a2168b96d173a2aaa2305e4e946a 94700 cifs-utils_7.4-1+deb13u1_armhf.deb
Files:
 c96ef69a696bb2b97107f816b6c84160 198408 debug optional cifs-utils-dbgsym_7.4-1+deb13u1_armhf.deb
 7c1457033ec4ddf1182f540c8664aea4 7371 otherosfs optional cifs-utils_7.4-1+deb13u1_armhf-buildd.buildinfo
 470ef8cb47bd4c542754b05de06c5bbe 94700 otherosfs optional cifs-utils_7.4-1+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=ZFHX
-----END PGP SIGNATURE-----