-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Oct 2026 13:18:53 +0200 Source: cifs-utils Binary: cifs-utils cifs-utils-dbgsym Architecture: ppc64el Version: 2:7.4-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Salvatore Bonaccorso Description: cifs-utils - Common Internet File System utilities Closes: 1140422 Changes: cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505) (Closes: #1140422) * mount.cifs: reject option delimiters in username and domain (CVE-2026-104715) * mount.cifs: validate username derived from the passwd database (CVE-2026-104715) Checksums-Sha1: f4abfcb306ca35b6bc3a16e30eae77ff3adce697 201040 cifs-utils-dbgsym_7.4-1+deb13u1_ppc64el.deb e7e11bf5bbc5c0b02c02e17f4c90f9c0adc71bc7 7507 cifs-utils_7.4-1+deb13u1_ppc64el-buildd.buildinfo ca97f703f64347b160390554eb612d2e31b491bd 104332 cifs-utils_7.4-1+deb13u1_ppc64el.deb Checksums-Sha256: eced3e3a79425f9aaf6bc2338a206a91f4c016a464dd7263e3f54846252f0ae5 201040 cifs-utils-dbgsym_7.4-1+deb13u1_ppc64el.deb 864f25429f0e5e0d25aff309721c1b104e413abf3cfcfad730888ed243df18b7 7507 cifs-utils_7.4-1+deb13u1_ppc64el-buildd.buildinfo eaebfc24cc108d5ce835b5632c03e110e28a1c566e64c7c5dc3edb553b756a53 104332 cifs-utils_7.4-1+deb13u1_ppc64el.deb Files: 5a3b65db78c28a69a5d0048acb4386a1 201040 debug optional cifs-utils-dbgsym_7.4-1+deb13u1_ppc64el.deb 7cf838be90808093ce6b3ddd45da43df 7507 otherosfs optional cifs-utils_7.4-1+deb13u1_ppc64el-buildd.buildinfo f7bd87e4ede86c6c5c6c86082a746991 104332 otherosfs optional cifs-utils_7.4-1+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmrPpqMACgkQNINNphgy m2ROnRAAqs6kfQLy3213xHXMnpNkdAr7tpmIBbm4Niyd7tQoAdUMZx3rOw3jyJv+ 1K3UbOVKfFf9Qw9cpHsogeiBngZbTIfdliYwK1AKuLcCDdTCV+SPlJZbXPTq/fi3 CwD9jxn7DiAzv01bw3XaqM/3zkUhmZmGOhYlT696IY0+nMhjCMBMdh3yisarrfP3 6GVpqkyHEX14cMoJqo2ZUq7PfpaR3TBMJnKahsP2+XieewiCMdVYfvoR3bkLpRcC PQhCaMWcPxiP1TKWkgqEJafHDyfIY1HG+CCnK/f66SfYs53km0CPNju23+Hph/dQ HNFPYTnsgOZnSuvYi3F5fng9WTZjH9Jv8jbDkSiWU7O1Jc22VeQOSvPmd6YfT9bQ /3T1mCftPoY8jImZdyu0DOidtHAn6M2k4+nwHk/SmArsabPH6Z/49AgH1w0pUaB0 /2V5sAFCY5r5MuZqCCq1MzoH4JIAwNewvZHkkReqK2U77NItzT6bl5UwwzDsFQly V4sYWouLc4U3z7odok76dd8UPIscOSC398L65w7fM+BXyuMopAivCFqnhYdSjoZC jTopC3rEUsBVtFiI1PtETWdLZnCvrCNSW8TEoDTK5djFVSukWM/dOVdgBfWxm4Qz //O646dwU0hQ/6R+eEq9E8E32T6JlhdM5MFMnnQzJAZKGhu6fn0= =qSz4 -----END PGP SIGNATURE-----