-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Binary: cifs-utils cifs-utils-dbgsym
Architecture: arm64
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 cifs-utils - Common Internet File System utilities
Closes: 1140422
Changes:
 cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
     (Closes: #1140422)
   * mount.cifs: reject option delimiters in username and domain
     (CVE-2026-104715)
   * mount.cifs: validate username derived from the passwd database
     (CVE-2026-104715)
Checksums-Sha1:
 b8809afd9deab2f2f7d6755226b8fa71e9eef500 203024 cifs-utils-dbgsym_7.4-1+deb13u1_arm64.deb
 9f1540669621f278f1bd0b1a98cd54ab77a8059c 7489 cifs-utils_7.4-1+deb13u1_arm64-buildd.buildinfo
 fee5d71f46b0ea1ee01f08cbc875de660932d68d 98780 cifs-utils_7.4-1+deb13u1_arm64.deb
Checksums-Sha256:
 fa7d3a8c2be715439ace25404fefed100544279c2646d5cc89a22850972d3f95 203024 cifs-utils-dbgsym_7.4-1+deb13u1_arm64.deb
 c1e764e125e49859e73abaa81fb1d9a771dc705bbf5ba1e46d4ae710a6b8cf40 7489 cifs-utils_7.4-1+deb13u1_arm64-buildd.buildinfo
 de9a6560aaafbc71def63ccf61aa833a299fa94fdc16ad5cb97ece2010395bc9 98780 cifs-utils_7.4-1+deb13u1_arm64.deb
Files:
 6bcba6d345d10f7d3cedda884f3f6fa7 203024 debug optional cifs-utils-dbgsym_7.4-1+deb13u1_arm64.deb
 1feb3cc3487ce51498521ff160cdc18a 7489 otherosfs optional cifs-utils_7.4-1+deb13u1_arm64-buildd.buildinfo
 a8428a6c0e62b16fdc5865e35b659862 98780 otherosfs optional cifs-utils_7.4-1+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEgSZRd/+N1Ed3hy+mPMAxAOQQpzsFAmrPpocACgkQPMAxAOQQ
pzvXvw/+JKqqz3XUt92Y+7Mh5JFI8IGuKx5KEOTwMNbwHIZP4l4k7BOsoiCjkT7C
XPC+KU1/TxPSH7WZ1PZ31lAx7bwsQDPOvx/dJRIdDFy+euPcDZU8/LHC4cBbWB+B
GOEFcEOuJa81A6QOzq2reiRlFVIlnX56fC3cEL5h1ifge9lU0y8/SY32pL3RvWPQ
Y/Sg0lDpEeTfqKNrxnr3U/15hZ41sJGqnkMQuNdociPLQ1Gi26+Ucfnbk4HCDM4u
02A4CBCBdxPTnFe6Emc8Lcl8OMkfaxCIl5cpj9Xog6CCfkv+Ynen7FXC6h41FSVS
MCoQgQwi1rdH3gEumqZ4gBQBO6XoSLaJPA4R1IOrEXjjEDiXT/t67QBLXYAdFoNY
sDyD95dPVdTbKwYnsV/F452rBJIoCWLF6p+i5I1ezP78lnKsmIM7SANm5HWv5GcD
aUpGZM39mGmTdRQLXnLGlPE/eIVFug04rNoeUr4mTClUtpvWxvFFU9AsLWrwNMqz
OgBQfBR8pF0slNp539JG/EvHKpgU6gexaVNWL3GoHlVr2B5Gi+9z2yVaEd4nS88V
aj9zLNd9Mpx9S0tFBRUrV1QQzG/C/8WIwBxQ/j/hwAjnPNHRKMvGT6Uln7v8RI/K
t1PCV4I81m+BM7kRqV7yE4i+YNWw0SsmisO62ZxBvxU3SmESEfo=
=tPNA
-----END PGP SIGNATURE-----