{"id":"CLSA-2026-1792790974","summary":"Fix CVE(s): CVE-2026-104715","details":"   * SECURITY UPDATE: mount option injection via credentials file values\n     - debian/patches/CVE-2026-104715.patch: in mount.cifs.c, reject\n       username= and domain= values from a credentials file, and the USER\n       environment variable or passwd login name, that contain an option\n       delimiter (comma, equals, CR or LF) before they are assembled into\n       the kernel mount option string.\n     - CVE-2026-104715","modified":"2026-10-26T09:31:53.127539561Z","published":"2026-10-23T21:29:45Z","upstream":["CVE-2026-104715"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1792790974.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104715"}],"affected":[{"package":{"name":"cifs-utils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cifs-utils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-2+deb10u1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792790974.json"}}],"schema_version":"1.9.0"}