Debian Package Tracker

general

source: cifs-utils (main)
version: 2:6.9-1
maintainer: Debian Samba Maintainers (archive) (DMD)
uploaders: Mathieu Parent [DMD] – Jelmer Vernooĳ [DMD] – Steve Langasek [DMD] – Noèl Köthe [DMD]
std-ver: 4.4.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2:6.4-1
oldstable: 2:6.7-1
stable: 2:6.8-2
testing: 2:6.9-1
unstable: 2:6.9-1

versioned links

2:6.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:6.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:6.8-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:6.9-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

cifs-utils (20 bugs: 0, 17, 3, 0)

action needed

A new upstream version is available: 6.11 high

A new upstream version 6.11 is available, you should consider packaging it.

Created: 2020-06-29 Last update: 2020-10-22 22:05

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2020-14342: It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.

Please fix it.

Created: 2020-09-08 Last update: 2020-09-12 17:35

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2020-14342: It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.

Please fix it.

Created: 2020-09-08 Last update: 2020-09-12 17:35

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2:6.9-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 13ed2df2b3a97c00135513d0489c66d13eb6596b
Merge: 3a1a731 2b2192e
Author: Jelmer Vernooĳ <jelmer@debian.org>
Date:   Sun Oct 20 19:05:02 2019 +0000

    Merge branch 'lintian-fixes' into 'master'
    
    Fix some issues reported by lintian
    
    See merge request samba-team/cifs-utils!6

commit 2b2192e091199bb7a778091c919098f4c4a916d6
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Sun Oct 20 18:15:44 2019 +0000

    Update standards version to 4.4.1, no changes needed.
    
    Fixes lintian: out-of-date-standards-version
    See https://lintian.debian.org/tags/out-of-date-standards-version.html for more details.

commit 3a1a731baa96fc5896669540649bf79eec6ec219
Merge: d0ec6e7 de98f58
Author: Jelmer Vernooĳ <jelmer@debian.org>
Date:   Sat Oct 19 17:36:18 2019 +0000

    Merge branch 'lintian-fixes' into 'master'
    
    Fix some issues reported by lintian
    
    See merge request samba-team/cifs-utils!5

commit de98f58727ffb2b151e694edf7b750069e0aa212
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Tue Oct 1 02:02:14 2019 +0000

    Remove obsolete fields Name, Contact from debian/upstream/metadata.

commit 321fa4398f68c70af66ac928c6e5a6990ae9ceed
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Tue Oct 1 02:01:59 2019 +0000

    Set upstream metadata fields: Bug-Submit.

Created: 2019-10-19 Last update: 2020-10-21 17:35

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-08-22 06:03

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2020-14342: It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.

Please fix it.

Created: 2020-09-08 Last update: 2020-09-12 17:35

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2020-14342: It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.

Please fix it.

Created: 2020-09-08 Last update: 2020-09-12 17:35

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.0).

Created: 2019-09-29 Last update: 2020-01-21 05:06

news

[rss feed]

[2019-09-03] cifs-utils 2:6.9-1 MIGRATED to testing (Debian testing watch)
[2019-08-29] Accepted cifs-utils 2:6.9-1 (source) into unstable (Mathieu Parent)
[2018-06-23] cifs-utils 2:6.8-2 MIGRATED to testing (Debian testing watch)
[2018-06-17] Accepted cifs-utils 2:6.8-2 (source amd64) into unstable (Mathieu Parent)
[2018-04-04] cifs-utils 2:6.8-1 MIGRATED to testing (Debian testing watch)
[2018-03-29] Accepted cifs-utils 2:6.8-1 (source amd64) into unstable (Mathieu Parent)
[2017-03-14] cifs-utils 2:6.7-1 MIGRATED to testing (Debian testing watch)
[2017-03-08] Accepted cifs-utils 2:6.7-1 (source amd64) into unstable (Mathieu Parent)
[2017-01-18] cifs-utils 2:6.6-5 MIGRATED to testing (Debian testing watch)
[2017-01-07] Accepted cifs-utils 2:6.6-5 (source amd64) into unstable (Jelmer Vernooĳ)
[2016-12-26] cifs-utils 2:6.6-4 MIGRATED to testing (Debian testing watch)
[2016-12-16] Accepted cifs-utils 2:6.6-4 (source amd64) into unstable (Mathieu Parent)
[2016-12-16] Accepted cifs-utils 2:6.6-3 (source amd64) into unstable (Mathieu Parent)
[2016-12-07] cifs-utils 2:6.6-2 MIGRATED to testing (Debian testing watch)
[2016-12-01] Accepted cifs-utils 2:6.6-2 (source amd64) into unstable (Mathieu Parent)
[2016-09-15] cifs-utils 2:6.6-1 MIGRATED to testing (Debian testing watch)
[2016-09-09] Accepted cifs-utils 2:6.6-1 (source amd64) into unstable (Mathieu Parent)
[2016-05-09] cifs-utils 2:6.5-2 MIGRATED to testing (Debian testing watch)
[2016-05-03] Accepted cifs-utils 2:6.5-2 (source amd64) into unstable (Mathieu Parent)
[2016-04-30] cifs-utils 2:6.5-1 MIGRATED to testing (Debian testing watch)
[2016-04-25] Accepted cifs-utils 2:6.5-1 (source amd64) into unstable (Jelmer Vernooij) (signed by: Jelmer Vernooĳ)
[2014-07-22] cifs-utils 2:6.4-1 MIGRATED to testing (Britney)
[2014-07-17] Accepted cifs-utils 2:6.4-1 (source amd64) (Jelmer Vernooij)
[2014-04-05] cifs-utils 2:6.3-1 MIGRATED to testing (Debian testing watch)
[2014-03-30] Accepted cifs-utils 2:6.3-1 (source amd64) (Jelmer Vernooij)
[2013-08-22] cifs-utils 2:6.1-1 MIGRATED to testing (Debian testing watch)
[2013-08-11] Accepted cifs-utils 2:6.1-1 (source amd64) (Luk Claes)
[2013-05-18] cifs-utils 2:6.0-1 MIGRATED to testing (Debian testing watch)
[2013-05-07] Accepted cifs-utils 2:6.0-1 (source amd64) (Luk Claes)
[2012-06-14] cifs-utils 2:5.5-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 24
RC: 0
I&N: 21
M&W: 3
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2:6.11-0ubuntu1
54 bugs
patches for 2:6.11-0ubuntu1