[CLSA-2026:1793264546] cifs-utils: Fix of CVE-2026-104715
Type:
security
Severity:
Important
Release date:
2026-10-29 09:02:37 UTC
Description:
- CVE-2026-104715: fix mount option injection via unsanitized username and domain from a credentials file or the USER environment variable
CVEs fixed:
Updated packages:
  • cifs-utils-6.2-10.el7.0.5.tuxcare.els4.i686.rpm
    sha:1cbc34a247ad18e26a145242b5d5fb8bd4a8208f94a766938238114cbc9e6a0e
  • cifs-utils-6.2-10.el7.0.5.tuxcare.els4.x86_64.rpm
    sha:c108383f3442840ce009f51b21daa0168ea8107069d1f952636c33e0c7b8bf2b
  • cifs-utils-devel-6.2-10.el7.0.5.tuxcare.els4.i686.rpm
    sha:01f58dcdaf8631a2940c8a4da18b9b88dd5f24fad817b8eb56d92e761efc6a80
  • cifs-utils-devel-6.2-10.el7.0.5.tuxcare.els4.x86_64.rpm
    sha:c09a4e49a82e36fb9c83412ec58c5cc511e4a2479a9baa9f2d5ed58d0895b951
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.