Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.changes > #13132
| From | Debian FTP Masters <ftpmaster@ftp-master.debian.org> |
|---|---|
| Newsgroups | linux.debian.changes |
| Subject | Accepted smb4k 4.0.0-1+deb13u1 (source) into proposed-updates |
| Date | 2026-01-02 15:40 +0100 |
| Message-ID | <M8OtR-7wNa-5@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 27 Dec 2025 10:40:36 +0100
Source: smb4k
Architecture: source
Version: 4.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1122381
Changes:
smb4k (4.0.0-1+deb13u1) trixie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix two security issues in the KAuth mounthelper:
- CVE-2025-66002: local users can perform arbitrary unmounts via
smb4kmounthelper due to lack of input validation
- CVE-2025-66003: local users can perform a local root exploit via smb4k
mounthelper if they can access and control the contents of a Samba share
(Closes: #1122381)
* Merge Smb4KHardwareInterface class from master so that the merged security
fixes can be compiled
Checksums-Sha1:
b0c5a5020f122d455edbe94d45f6fdfe3c814cbf 2994 smb4k_4.0.0-1+deb13u1.dsc
dbe96db0505cba109068084d07303e400df9ec2c 4852924 smb4k_4.0.0.orig.tar.xz
58cd2c7be587b9e890de1279c2b17aea0507e654 38496 smb4k_4.0.0-1+deb13u1.debian.tar.xz
ca260e59e77bb09a0887e24745a3cc3e413f6a4c 6243 smb4k_4.0.0-1+deb13u1_source.buildinfo
Checksums-Sha256:
c5ed6dc8bb975cedf511212a0f4878d0dd969c71159036f7a9b3ebcb37474747 2994 smb4k_4.0.0-1+deb13u1.dsc
d7da661711c9bc565cc4c14713e3ea5916dca245fddfa00fa0441763985b1bae 4852924 smb4k_4.0.0.orig.tar.xz
a4c8ce7ce93fa4702b0f65acf432ce5cebfa1a439f5cb3de0a9abefff5f4ecb2 38496 smb4k_4.0.0-1+deb13u1.debian.tar.xz
8789e8880de9f7527fbb4487247b87e826007a0ff712f78efbccf59f9622a87b 6243 smb4k_4.0.0-1+deb13u1_source.buildinfo
Files:
188ce8cdfa91c312d79b6067694d5500 2994 kde optional smb4k_4.0.0-1+deb13u1.dsc
09eaa3f79339115a4da2c9fe648318ea 4852924 kde optional smb4k_4.0.0.orig.tar.xz
85a810b59b286faacae0cef4a4236e79 38496 kde optional smb4k_4.0.0-1+deb13u1.debian.tar.xz
74d94d4d4b9a5efc670b99923d1533c6 6243 kde optional smb4k_4.0.0-1+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=zDqX
-----END PGP SIGNATURE-----
Back to linux.debian.changes | Previous | Next | Find similar | Unroll thread
Accepted smb4k 4.0.0-1+deb13u1 (source) into proposed-updates Debian FTP Masters <ftpmaster@ftp-master.debian.org> - 2026-01-02 15:40 +0100
csiph-web