Ubuntu 24.10: USN-7536-1 critical: cifs-utils sensitive data exposure

ubuntu

May 27, 2025

cifs-utils could be made to expose sensitive information.

Summary

cifs-utils could be made to expose sensitive information.

Software Description:

- cifs-utils: Common Internet File System utilities

Details:

It was discovered that cifs-utils incorrectly handled namespaces when

obtaining Kerberos credentials. An attacker could possibly use this issue

to obtain sensitive information.

Topics Covered

security advisory security issue ubuntu sensitive information Kerberos cifs-utils

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   cifs-utils                      2:7.0-2.1ubuntu0.1

Ubuntu 24.04 LTS
   cifs-utils                      2:7.0-2ubuntu0.1

Ubuntu 22.04 LTS
   cifs-utils                      2:6.14-1ubuntu0.2

Ubuntu 20.04 LTS
   cifs-utils                      2:6.9-1ubuntu0.3

In general, a standard system update will make all the necessary changes.