-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Oct 2026 07:35:28 +0300 Source: cifs-utils Architecture: source Version: 2:7.9-1 Distribution: unstable Urgency: medium Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Changes: cifs-utils (2:7.9-1) unstable; urgency=medium . * new upstream security release (closes: CVE-2026-104715): - mount.cifs: validate username derived from the passwd database - mount.cifs: reject option delimiters in username and domain Checksums-Sha1: acfcf26fe27104a1d1783d3c1888195a5176b3a6 2580 cifs-utils_7.9-1.dsc 9ebfd6ebf681bed6875f2c10064649ed3fda4d99 459744 cifs-utils_7.9.orig.tar.bz2 0fb46d3a293e14e24eff7a9a8940c3d339973399 833 cifs-utils_7.9.orig.tar.bz2.asc dccd19fa6498653b0d4a78eef16906f9d8074b12 10424 cifs-utils_7.9-1.debian.tar.xz 4836df303d6eac322b125c4bf02a65f8d2b801f3 7328 cifs-utils_7.9-1_source.buildinfo Checksums-Sha256: 926f602559d0c31c77962f545b4e1d643ae6ec57e3cb580be15696a2eaa07b64 2580 cifs-utils_7.9-1.dsc 9f3750f402520b15c2c8eb52fd485df6ea77e5e66fe5e39ce8ac4386c32c0296 459744 cifs-utils_7.9.orig.tar.bz2 1e5698e9c218294e8b33e15341dba57e38b3c9d263bf83adb72f5ace4caac1b5 833 cifs-utils_7.9.orig.tar.bz2.asc 5f0a40a9bc2dff63132824e269c6b9d1eba1fb2c099a593d5f692cdc838e28f8 10424 cifs-utils_7.9-1.debian.tar.xz 59a41fdb1170e49e891f957645e24c4ae459bf4f5d09392d783c3abfcead9d1a 7328 cifs-utils_7.9-1_source.buildinfo Files: e2ec3cdac7087e20d2eb5c2c793d049f 2580 otherosfs optional cifs-utils_7.9-1.dsc cb1253a501b7468e63a9a5ab453565ba 459744 otherosfs optional cifs-utils_7.9.orig.tar.bz2 f352630f65f4801afc6c66e1ee4b0167 833 otherosfs optional cifs-utils_7.9.orig.tar.bz2.asc b4af9eb26e387ddbb7606925cfa65ed9 10424 otherosfs optional cifs-utils_7.9-1.debian.tar.xz ac749bf7c2261f93e8fe772b1412c181 7328 otherosfs optional cifs-utils_7.9-1_source.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJq0amhCRCCqkokOx6UeEcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmeyieyJ3TdfkEwDL5utntlJNGml0X9u4BXRfKTzTFCf jBYhBGSqKrUx1WkDNmv++YKqSiQ7HpR4AABOLg/8DIL/dhlkN/NK1mFxxrWzMyop 1yElDrHTrTs/6A0ykuJ+jeVDPl4a0FWVuRhI3PP6PEHrOhXtXruYWQkjod2aRi8x CK37yplOT+1ujiJKoCqLM26SbXxlVmce9LwLGIAPJysFGvsDGgdHAxyc90ki3eZb l6od4LXWjgt9Rdq2FKRfRLNAxddE/HqpuawlL1POlxYjfjb3R1CsJe40h2rGK3eR YY+tgsUnkMA9y/Bkywfm3aXGcDr2kx8ah9C0nfoo2ZiwvQeTj7ajnubVi0nKMGtw oHALX0/zP2JV5Xg5G86QY1tRM2RTIZOH0YHUbpVDCeVUaKXRwtrniSM50Gs/2+ym xyPwYn8W3f0hT9QHJc+RS7A58kHlXf/6XYSor7FmBqyXMPMhzdp2d03nWITIZ/f5 WvTl1Yb5r6ey9Db8nZFo7fLe3QHGak2nF8JgDGe75ZmNuw1lbXOoq4ehMDRyNp75 ZJxykerBRuvAzT7A0dGqpimMbxhWLU5o3Jp+vYjyNEPNym09HPjvsjvbzkl4tpH6 4UPC5fyfZwDnQbGS4x5zfcRz+SVpaPmjAqP3kj2qyMdvtrUOSP0BDCF/QQqmsglp a3G8Lnq0rocRiKqWLnqJadGJHdY3mpnax5bz+WpxnQkF0UTEy3dCKSWeNv0mXNls qGw0D9w0/ojj3IwYpNA= =1cwH -----END PGP SIGNATURE-----