-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Binary: cifs-utils cifs-utils-dbgsym
Architecture: armel
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 cifs-utils - Common Internet File System utilities
Closes: 1140422
Changes:
 cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
     (Closes: #1140422)
   * mount.cifs: reject option delimiters in username and domain
     (CVE-2026-104715)
   * mount.cifs: validate username derived from the passwd database
     (CVE-2026-104715)
Checksums-Sha1:
 511e545aa7cf6700e49cf220066ede558b5aedd2 194608 cifs-utils-dbgsym_7.4-1+deb13u1_armel.deb
 30a03eac44d5a5f92bb9921c680b06fca6e409ca 7357 cifs-utils_7.4-1+deb13u1_armel-buildd.buildinfo
 fb7aaa09a60ffba92284717589a22aced33d0f90 94912 cifs-utils_7.4-1+deb13u1_armel.deb
Checksums-Sha256:
 dc6d19a0f2779d12bd1cc00a948a42d9b212f28f1133410011397dbd84b0c169 194608 cifs-utils-dbgsym_7.4-1+deb13u1_armel.deb
 b9669d17ce63ad16f306189f46be53e6b8d989c1e79d22e91abac2fc20e4f5b4 7357 cifs-utils_7.4-1+deb13u1_armel-buildd.buildinfo
 1be21dde94bdac2755e7c45996646492ce41c0bbf5361a2cc638a094fcc4d6f7 94912 cifs-utils_7.4-1+deb13u1_armel.deb
Files:
 2b876beb6c1e65177c53826b0dc5efb5 194608 debug optional cifs-utils-dbgsym_7.4-1+deb13u1_armel.deb
 3ac6b2e62b2ba329132a4f696d5141ce 7357 otherosfs optional cifs-utils_7.4-1+deb13u1_armel-buildd.buildinfo
 3b3aadb84db3d3921ca8f7520b640a3a 94912 otherosfs optional cifs-utils_7.4-1+deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=Hy7b
-----END PGP SIGNATURE-----