[CLSA-2026:1793266869] cifs-utils: Fix of CVE-2026-104715
Type:
security
Severity:
Important
Release date:
2026-10-29 18:02:35 UTC
Description:
- CVE-2026-104715: fix mount option injection via unsanitized username and domain from a credentials file or the USER environment variable
CVEs fixed:
Updated packages:
  • cifs-utils-6.2-10.el7.0.5.tuxcare.els4.aarch64.rpm
    sha:9ce8a5d1c937b344f2fb9155d3bd2ddb4da80ef956ffcd37b2dbdd1ec320456a
  • cifs-utils-6.2-10.el7.0.5.tuxcare.els4.i686.rpm
    sha:6a314e49705f49f650fcb75ea3ed736950231b05bbd84aee0e69a34a4ff8dc26
  • cifs-utils-6.2-10.el7.0.5.tuxcare.els4.x86_64.rpm
    sha:86a9893e77ee74b837162db94f067b7f44c7621a29bf3cc04290be8cf34b3295
  • cifs-utils-devel-6.2-10.el7.0.5.tuxcare.els4.aarch64.rpm
    sha:6a19ea68cebf5d6d38161c42af1895dd5c10ceb658bfbd68932382a435d59c86
  • cifs-utils-devel-6.2-10.el7.0.5.tuxcare.els4.i686.rpm
    sha:8067a91fdf06f0c0b49a9fbe5a633f336ba8d6e0aa1fcf905b73940e0eb56e95
  • cifs-utils-devel-6.2-10.el7.0.5.tuxcare.els4.x86_64.rpm
    sha:afc687cd701a9d4f5c8c727c1898e7b5717d03ac6c004343a37ac5096274e2e2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.