Your message dated Sat, 17 Oct 2026 14:32:29 +0000
with message-id <[email protected]>
and subject line Bug#1140422: fixed in cifs-utils 2:7.4-1+deb13u1
has caused the Debian Bug report #1140422,
regarding cifs-utils: CVE-2026-12505
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1140422: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140422
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: cifs-utils
Version: 2:7.4-1
Severity: important
Tags: security upstream
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi,
The following vulnerability was published for cifs-utils.
CVE-2026-12505[0]:
| A flaw was found in the cifs-utils package where the cifs.upcall
| helper fails to securely drop its root privileges before looking up
| user information inside a user-controlled environment. A local, low
| privileged attacker can exploit this by using a crafted request_key
| payload to trick the root-owned helper into entering a custom
| environment (namespace) containing a malicious NSS module. This
| forces the system to load the attacker's controlled NSS Module and
| configuration, allowing them to execute arbitrary commands as the
| root user, elevating their privileges and fully compromising the
| system.
If I'm not completely wrong this helped to exploit CVE-2026-46243
without the kernel side fix.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-12505
https://www.cve.org/CVERecord?id=CVE-2026-12505
[1] https://bugzilla.redhat.com/show_bug.cgi?id=2489805
[2]
https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: cifs-utils
Source-Version: 2:7.4-1+deb13u1
Done: Salvatore Bonaccorso <[email protected]>
We believe that the bug you reported is fixed in the latest version of
cifs-utils, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <[email protected]> (supplier of updated cifs-utils
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 14 Oct 2026 13:18:53 +0200
Source: cifs-utils
Architecture: source
Version: 2:7.4-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Samba Maintainers <[email protected]>
Changed-By: Salvatore Bonaccorso <[email protected]>
Closes: 1140422
Changes:
cifs-utils (2:7.4-1+deb13u1) trixie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* cifs.upcall: remove getpwuid() dependency (CVE-2026-12505)
(Closes: #1140422)
* mount.cifs: reject option delimiters in username and domain
(CVE-2026-104715)
* mount.cifs: validate username derived from the passwd database
(CVE-2026-104715)
Checksums-Sha1:
d01691fedd28992772df957c905d5596a140b894 2667 cifs-utils_7.4-1+deb13u1.dsc
4735e4c9bce71cc6fafaaf1cba095f858d279d54 389033 cifs-utils_7.4.orig.tar.bz2
c62d4b080d1004ad1fb1cec4318355eab50a3d41 833 cifs-utils_7.4.orig.tar.bz2.asc
e6ed1321583597f5d1ecdad15c2628313d53fed4 14448
cifs-utils_7.4-1+deb13u1.debian.tar.xz
484eaf3b0faaa4128ab1050d338117d445e43c95 5317
cifs-utils_7.4-1+deb13u1_source.buildinfo
Checksums-Sha256:
ebf2fa195698962db851d806dfb4e4f52f81d261fd83c81a7aa4cdb9ce5acc6b 2667
cifs-utils_7.4-1+deb13u1.dsc
53353d05c30b4fc9dac006a8f0c5054cdd8a1834c176313c91e4694025c4b891 389033
cifs-utils_7.4.orig.tar.bz2
b441a8ebcde505899a22db15874a16c36f597c490b463feaad1e82f24c8b22ff 833
cifs-utils_7.4.orig.tar.bz2.asc
435b1a10c18839f0896c2c4ab45ede2374605c1889b97310c9608217afec040d 14448
cifs-utils_7.4-1+deb13u1.debian.tar.xz
4daa790ab41d9055aaa94e2bb454d9e94b7c4e85f818346721cf3ee9284c53d0 5317
cifs-utils_7.4-1+deb13u1_source.buildinfo
Files:
7c2e240da867598fafc66306095ff638 2667 otherosfs optional
cifs-utils_7.4-1+deb13u1.dsc
ced910b43321c604a9c402beac45cb4e 389033 otherosfs optional
cifs-utils_7.4.orig.tar.bz2
65ebf7b79d2e006433da1b9b06936ac4 833 otherosfs optional
cifs-utils_7.4.orig.tar.bz2.asc
c2d6f45b135ad4aac9e5ffd748bcb548 14448 otherosfs optional
cifs-utils_7.4-1+deb13u1.debian.tar.xz
7170db483b1d3fc77c3d3610b167f18f 5317 otherosfs optional
cifs-utils_7.4-1+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=vWkb
-----END PGP SIGNATURE-----
pgpe4vHBxZS4x.pgp
Description: PGP signature
--- End Message ---
