[CLSA-2026:1793264602] cifs-utils: Fix of CVE-2026-104715
Type:
security
Severity:
Important
Release date:
2026-10-29 09:03:33 UTC
Description:
- CVE-2026-104715: fix mount option injection via unsanitized username and domain from a credentials file or the USER environment variable
CVEs fixed:
Updated packages:
  • cifs-utils-6.2-10.el7.0.5.tuxcare.els4.i686.rpm
    sha:411ddbab2f2afc6333cbb7add36d0c5aaee18035880fc9293cc8ce9d34a9d847
  • cifs-utils-6.2-10.el7.0.5.tuxcare.els4.x86_64.rpm
    sha:0edf413010f483402caa02679fd606187a4055d9cfac272f4bfdcd551de947cd
  • cifs-utils-devel-6.2-10.el7.0.5.tuxcare.els4.i686.rpm
    sha:41d54e414b2d48e6a8c8b8631c3cd9aa8ee72b98a3c55a5696e39c7f477b0dbb
  • cifs-utils-devel-6.2-10.el7.0.5.tuxcare.els4.x86_64.rpm
    sha:9c0af27266b7938370362d1ee975ae3582da42797829ea78f4b1e8a263d955db
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.