cifs-utils 7.9 fixes a mount-option injection vulnerability in mount.cifs that can allow local privilege escalation in affected privileged mounting configurations.
Affected versions: cifs-utils-4.2 - cifs-utils-7.8 Users are recommended to upgrade to version cifs-utils 7.9, which fixes the issue. Distributors can alternatively backport the fixes. Credit: Johnathan Benge (reporter) Paulo Alcantara (patch author) cifs-utils 7.9 release: webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/ git: git://git.samba.org/cifs-utils.git gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary
