[SECURITY] [DSA 6092-1] smb4k security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6092-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
January 01, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : smb4k
CVE ID : CVE-2025-66002 CVE-2025-66003
Debian Bug : 1122381
Two vulnerabilities were discovered in smb4k, a KDE desktop utility
which allows unprivileged mounting of Samba/CIFS network shares, which
may result in local denial of service or local privilege escalation.
For the stable distribution (trixie), these problems have been fixed in
version 4.0.0-1+deb13u1.
We recommend that you upgrade your smb4k packages.
For the detailed security status of smb4k please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/smb4k
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=vVBe
-----END PGP SIGNATURE-----
Reply to: