[From nobody Sat Oct 17 15:34:41 2026 Received: (at 1140422-close) by bugs.debian.org; 17 Oct 2026 14:32:32 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 99; hammy, 150; neutral, 166; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:39800) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xI5Sa-000FSf-01 for 1140422-close@bugs.debian.org; Sat, 17 Oct 2026 14:32:32 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xI5SY-008lUA-2A for 1140422-close@bugs.debian.org; Sat, 17 Oct 2026 14:32:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=8a8vrkQsy9YvMchh71nBC+dgdJHNFo6s45MtcJDts8I=; b=I2jI/Im2KQ7ncjqw+O7XKpwjvJ 9YN7Lx8RQrGwj6a/GVZqdhAQ6b0t3yWso7STN7Bv7UKWw3xjdWIWleIz6KuY/nKLEZu/dL4eHlXze 0655/x8HXnoCuU5gCYaymEQmoF32588NE3QfnzDlmJBkUIA6cwDRHLM7hm9hSILCvnGxJUEA26qZP RPqitW+XblnE3gXxmUXJk3aqlCJl8lDkd9RWgKmNZmTEbUxQ0g0nVQ2FUwhE+psbPSCASlquZUYZU 0SBBZYl4fugczY4UohxtM373BelxOL9ucZJg7E42GRhY2H6qZwVWDS5Pwz/57q7xPmVM5+e+QkrEh /+QzRpWw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xI5SX-0000000BodN-2xEb; Sat, 17 Oct 2026 14:32:29 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 1140422-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: cifs-utils Debian: DAK Debian-Changes: cifs-utils_7.4-1+deb13u1_source.changes Debian-Source: cifs-utils Debian-Version: 2:7.4-1+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1140422: fixed in cifs-utils 2:7.4-1+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2915925591452770611==" Message-Id: <E1xI5SX-0000000BodN-2xEb@fasolo.debian.org> Date: Sat, 17 Oct 2026 14:32:29 +0000 --===============2915925591452770611== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: cifs-utils Source-Version: 2:7.4-1+deb13u1 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of cifs-utils, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1140422@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated cifs-utils pack= age) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Oct 2026 13:18:53 +0200 Source: cifs-utils Architecture: source Version: 2:7.4-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1140422 Changes: cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=3Dhigh . * Non-maintainer upload by the Security Team. * cifs.upcall: remove getpwuid() dependency (CVE-2026-12505) (Closes: #1140422) * mount.cifs: reject option delimiters in username and domain (CVE-2026-104715) * mount.cifs: validate username derived from the passwd database (CVE-2026-104715) Checksums-Sha1: d01691fedd28992772df957c905d5596a140b894 2667 cifs-utils_7.4-1+deb13u1.dsc 4735e4c9bce71cc6fafaaf1cba095f858d279d54 389033 cifs-utils_7.4.orig.tar.bz2 c62d4b080d1004ad1fb1cec4318355eab50a3d41 833 cifs-utils_7.4.orig.tar.bz2.asc e6ed1321583597f5d1ecdad15c2628313d53fed4 14448 cifs-utils_7.4-1+deb13u1.debi= an.tar.xz 484eaf3b0faaa4128ab1050d338117d445e43c95 5317 cifs-utils_7.4-1+deb13u1_sourc= e.buildinfo Checksums-Sha256: ebf2fa195698962db851d806dfb4e4f52f81d261fd83c81a7aa4cdb9ce5acc6b 2667 cifs-u= tils_7.4-1+deb13u1.dsc 53353d05c30b4fc9dac006a8f0c5054cdd8a1834c176313c91e4694025c4b891 389033 cifs= -utils_7.4.orig.tar.bz2 b441a8ebcde505899a22db15874a16c36f597c490b463feaad1e82f24c8b22ff 833 cifs-ut= ils_7.4.orig.tar.bz2.asc 435b1a10c18839f0896c2c4ab45ede2374605c1889b97310c9608217afec040d 14448 cifs-= utils_7.4-1+deb13u1.debian.tar.xz 4daa790ab41d9055aaa94e2bb454d9e94b7c4e85f818346721cf3ee9284c53d0 5317 cifs-u= tils_7.4-1+deb13u1_source.buildinfo Files: 7c2e240da867598fafc66306095ff638 2667 otherosfs optional cifs-utils_7.4-1+de= b13u1.dsc ced910b43321c604a9c402beac45cb4e 389033 otherosfs optional cifs-utils_7.4.or= ig.tar.bz2 65ebf7b79d2e006433da1b9b06936ac4 833 otherosfs optional cifs-utils_7.4.orig.= tar.bz2.asc c2d6f45b135ad4aac9e5ffd748bcb548 14448 otherosfs optional cifs-utils_7.4-1+d= eb13u1.debian.tar.xz 7170db483b1d3fc77c3d3610b167f18f 5317 otherosfs optional cifs-utils_7.4-1+de= b13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmrPolFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EahoP/3IcUMtdT98o/qznPOAA1uIQevtc+dT/ 0ceyMMCzM6rJ7YNfxLyJR1k0ZkRfvxVvaFKUQKSG3aQmzlwlLf3g8HW/rDHvkCrK mfWxNshGnh49yi6bgRT7WLjksMWMy2oaTnpS+OrY3B8BQFsdlwUNgx3dIgOvhjyr 75OJMpcaKWhiiE9W8ZeXo+NfjFO96pnEIZmIS1oXqFwYacR95BEopEdyuQfUMVQh xt6ClNKMbFGEDFs1JdlvPwJ/qDQBrdFL56VN8aTL95PuNGEKfpKg7dY6tFITpu+O BMnFhUZvTuteOgcFTLCiKwaxvrj+Gq1tjxCrwTdG5Ln8C8yf7Q2DX24sRWaWOhx7 zdw1ZiNvXm4ovENZhkdre8RitzJcEYXBOFlhcm9ux+Yr4HUkSP0L9z/Nw3lWYf4o PNqYcRQIYlW4yV3PbzqPvMuqdDAWAt+fxEgFmrb64pjVDm1NTiG6ePq+Sl/qM2CN E+O1XJMDx523MfsF57ppekATBq1gdjADnsJu+XZSVW2sAPyFVj/VekI5sj9Y05D5 YeB+HAkK+/xvx3TY+0xe4zgC/SZuUYPBkrnpeo6Thm2XM8IUblS5iBHQL1nKseDl MhFjOd9TS/njHd77Wtxt/sGVe7pEY7sardJP6+BVAdA2kKWnVAcUUOD2hOW7jb1o f1sgZR7D6gtp =3DvWkb -----END PGP SIGNATURE----- --===============2915925591452770611== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCatOG/QAKCRCb9qggYcy5 IYZHAP9DJkAbslRFKiahPmsBlgUFFXVal/gUvcw7WpGIRIC1LwD+Ke7kd1yKAX7j yLTeDoEHR4g09LegevOdTM8BNrR+WQ8= =CHaX -----END PGP SIGNATURE----- --===============2915925591452770611==-- ]