Ubuntu has issued an advisory on May 27: https://ubuntu.com/security/notices/USN-7536-1
Source RPM: (none) => cifs-utils-7.0-1.mga9.src.rpmCVE: (none) => CVE-2025-2312Status comment: (none) => Patch available from Ubuntu
Some Ubuntu versions cite v7.0.2 as the fix. We have 7.2 in Cauldron, OK. Quite unable to find the patch following everything from the URL in comment 0. Assigning globally, no fixed maintainer for this.
Assignee: bugsquad => pkg-bugs
Suggested advisory: ======================== The updated packages fix a security vulnerability: cifs.upcall makes an upcall to the wrong namespace in containerized environments. (CVE-2025-2312) References: https://ubuntu.com/security/notices/USN-7536-1 ======================== Updated packages in core/updates_testing: ======================== cifs-utils-7.0-1.1.mga9 cifs-utils-devel-7.0-1.1.mga9 from SRPM: cifs-utils-7.0-1.1.mga9.src.rpm
Status: NEW => ASSIGNEDAssignee: pkg-bugs => qa-bugsStatus comment: Patch available from Ubuntu => (none)
Keywords: (none) => advisory
MGA9-64 Plasma Wayland on Compaq H000SB No installation issues. ref bug 30360 for testing # mount.cifs //mach1/beelden /mnt/cifstest/ -o domain=WORKGROUP -o username=herman Password for herman@//mach1/beelden: # ls -als /mnt/cifstest/ total 1032 0 drwxr-xr-x 2 root root 0 Nov 29 2024 ./ 4 drwxr-xr-x 6 root root 4096 Jun 4 16:29 ../ 0 drwxr-xr-x 2 root root 0 Jul 27 2020 accessbasis/ 0 drwxr-xr-x 2 root root 0 Jul 27 2020 accessfinesses/ 0 drwxr-xr-x 2 root root 0 May 9 13:34 Afbeeldingen/ 0 drwxr-xr-x 2 root root 0 Feb 27 2023 fotos/ 820 -rwxr-xr-x 1 root root 838418 Mar 20 2018 Huishouden* 0 drwxr-xr-x 2 root root 0 Aug 23 2021 lost+found/ 0 drwxr-xr-x 2 root root 0 Jan 12 2019 RawORF/ 208 -rwxr-xr-x 1 root root 209872 Jan 6 2019 report.bug.xz* 0 drwxr-xr-x 2 root root 0 Nov 16 2016 rietmach2/ OK for me.
CC: (none) => herman.viaeneWhiteboard: (none) => MGA9-64-OK
Validating.
Keywords: (none) => validated_updateCC: (none) => andrewsfarm, sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2025-0176.html
Resolution: (none) => FIXEDStatus: ASSIGNED => RESOLVED