Packages
- cifs-utils - Common Internet File System utilities
Details
USN-8496-1 fixed a vulnerability in cifs-utils. Unfortunately, the fix
introduced a regression with Kerberos mounts. This update reverts the
security update until a complete fix is available.
We apologize for the inconvenience.
Original advisory details:
It was discovered that cifs-utils incorrectly dropped root privileges
before looking up user information. A local attacker could possibly use
this issue to execute arbitrary code as the root user.
USN-8496-1 fixed a vulnerability in cifs-utils. Unfortunately, the fix
introduced a regression with Kerberos mounts. This update reverts the
security update until a complete fix is available.
We apologize for the inconvenience.
Original advisory details:
It was discovered that cifs-utils incorrectly dropped root privileges
before looking up user information. A local attacker could possibly use
this issue to execute arbitrary code as the root user.
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 26.04 LTS resolute | cifs-utils – 2:7.4-1ubuntu0.26.04.2 | ||
| 25.10 questing | cifs-utils – 2:7.4-1ubuntu0.25.10.2 | ||
| 24.04 LTS noble | cifs-utils – 2:7.0-2ubuntu0.4 | ||
| 22.04 LTS jammy | cifs-utils – 2:6.14-1ubuntu0.5 | ||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.