Skip to content

[Deepin Integration]~[v25-Release] fix: CVE-2026-12505 - cifs.upcall local privilege escalation by deepin-ci-robot@deepin-community/cifs-utils by deepin-community-ci-bot[bot] #14130

Open

Description

@deepin-bot

Package information | 软件包信息

包名 版本
cifs-utils 2:7.4-1deepin1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4273/testing/ ./

Changelog | 更新信息

cifs-utils (2:7.4-1deepin1) unstable; urgency=medium

  • CVE-2026-12505: cifs.upcall: fix local privilege escalation via
    forged cifs.spnego key description. Look up the GID via getpwuid()
    while still in the host namespace, and map UID/GID into the target
    user namespace via /proc//{uid,gid}_map. (Closes: #1140422)

Activity

  1. added this to the v25-Release milestone on Oct 13, 2026
  2. deepin-bot commented on Oct 13, 2026

    @deepin-bot
    Author

    Integration Test Info

    Test suggestion | 测试建议

    Influence | 影响范围

    ADDITIONAL INFORMATION | 额外补充

  3. deepin-bot commented on Oct 13, 2026

    @deepin-bot
    Author

    IntegrationProjector Notify the author
    @deepin: Integrated issue updated

  4. deepin-bot commented on Oct 13, 2026

    @deepin-bot
    Author

    IntegrationProjector Bot
    Deepin Testing Integration Project Manager Info
    Link to deepin-community/Repository-Integration#4273

  5. moved this from In progress to 测试通过 in 集成管理on Oct 16, 2026
  6. xuqi27837288 commented on Oct 16, 2026

    @xuqi27837288

    测试通过

  7. moved this from 测试通过 to 已集成 in 集成管理on Oct 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions