Ubuntu
nfs-utils package

nfs-utils 1:1.2.8-9ubuntu12.3 source package in Ubuntu

Changelog

nfs-utils (1:1.2.8-9ubuntu12.3) xenial-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via directory permissions
    - debian/patches/CVE-2019-3689.patch: take user-id from
      /var/lib/nfs/sm in support/nsm/file.c, utils/statd/sm-notify.man,
      utils/statd/statd.man.
    - debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd.
    - CVE-2019-3689

 -- Marc Deslauriers <email address hidden>  Tue, 09 Jun 2020 08:16:51 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates main net
Xenial security main net

Downloads

File Size SHA-256 Checksum
nfs-utils_1.2.8.orig.tar.bz2 2.6 MiB 1cc8f02a633eddbf0a1d93421f331479c4cdab4c5ab33b8bf8c7c369f9156ac6
nfs-utils_1.2.8-9ubuntu12.3.debian.tar.bz2 56.2 KiB f6339f36da2234f222e3d233e7ae90998277704a0b4c26d3e29bf8019a7f6d4c
nfs-utils_1.2.8-9ubuntu12.3.dsc 2.4 KiB e6a8470ed64cee573773defa4fcd0a94cac9a896e40cf41c682360bd65caa405

View changes file

Binary packages built by this source

nfs-common: NFS support files common to client and server

 Use this package on any machine that uses NFS, either as client or
 server. Programs included: lockd, statd, showmount, nfsstat, gssd,
 idmapd and mount.nfs.

nfs-common-dbgsym: debug symbols for package nfs-common

 Use this package on any machine that uses NFS, either as client or
 server. Programs included: lockd, statd, showmount, nfsstat, gssd,
 idmapd and mount.nfs.

nfs-kernel-server: support for NFS kernel server

 The NFS kernel server is currently the recommended NFS server for use
 with Linux, featuring features such as NFSv3 and NFSv4, Kerberos
 support via GSS, and much more. It is also significantly faster and
 usually more reliable than the user-space NFS servers (from the
 unfs3 and nfs-user-server packages). However, it is more difficult to
 debug than the user-space servers, and has a slightly different
 feature set.
 .
 This package contains the user-space support needed to use the
 NFS kernel server. Most administrators wishing to set up an NFS server
 would want to install this package.

nfs-kernel-server-dbgsym: debug symbols for package nfs-kernel-server

 The NFS kernel server is currently the recommended NFS server for use
 with Linux, featuring features such as NFSv3 and NFSv4, Kerberos
 support via GSS, and much more. It is also significantly faster and
 usually more reliable than the user-space NFS servers (from the
 unfs3 and nfs-user-server packages). However, it is more difficult to
 debug than the user-space servers, and has a slightly different
 feature set.
 .
 This package contains the user-space support needed to use the
 NFS kernel server. Most administrators wishing to set up an NFS server
 would want to install this package.