Summary
[7.0-5]
- resolves: RHEL-192933 - fix krb5 mount regression
[7.0-4]
- cifs.upcall: remove getpwuid dependency
- cifs.upcall: fix compiler warning with -Wvla
- Resolves: RHEL-185759 - Fix CVE-2026-12505
[7.0-3]
- docs: update echo_interval description
- Resolves: RHEL-80397
[7.0-2]
- mount.cifs.rst: add missing reference for sssd
- mount.cifs.rst: update section about xattr/acl support
- Resolves: RHEL-41059
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cifs-utils | 0:7.0-5.el8_10 |
| Oracle Linux · 8 | cifs-utils-devel | 0:7.0-5.el8_10 |
| Oracle Linux · 8 | pam_cifscreds | 0:7.0-5.el8_10 |
Vulnerabilities 1
-
High 7.8
Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted re…