UbuntuUpdates.org

Package "nbd-server"

Name: nbd-server

Description:

Network Block Device protocol - server

Latest version: 1:3.16.2-1ubuntu0.2
Release: bionic (18.04)
Level: updates
Repository: main
Head package: nbd
Homepage: http://nbd.sourceforge.net/

Links


Download "nbd-server"


Other versions of "nbd-server" in Bionic

Repository Area Version
base main 1:3.16.2-1
security main 1:3.16.2-1ubuntu0.2

Changelog

Version: 1:3.16.2-1ubuntu0.2 2022-03-14 13:07:12 UTC

  nbd (1:3.16.2-1ubuntu0.2) bionic-security; urgency=medium

  * SECURITY UPDATE: heap overflow via long name length
    - nbd-server.c: limit the size of a name length.
    - CVE-2022-26495
  * SECURITY UPDATE: buffer overflow in NBD_OPT_INFO/NBD_OPT_GO handling
    - nbd-server.c: use consume function instead of socket_read.
    - CVE-2022-26496

 -- Marc Deslauriers <email address hidden> Thu, 10 Mar 2022 08:17:54 -0500

Source diff to previous version
CVE-2022-26495 In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length
CVE-2022-26496 In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by

Version: 1:3.16.2-1ubuntu0.1 2018-07-24 07:06:38 UTC

  nbd (1:3.16.2-1ubuntu0.1) bionic; urgency=medium

  * Fix bugs causing nbd-smoke-test to fail (LP: #1772024)
    - Fix segfault when exporting only from a file on the command line.
      + https://github.com/NetworkBlockDevice/nbd/commit/4c924b7b64fb1b6cb9be8e8f508d459c0ed05a60
    - Fix fd leaks when fork fails.
      + https://github.com/NetworkBlockDevice/nbd/commit/0e094066a2676149e511f41a5eee1062de73e198
    - debian/control: change Maintainer

 -- Thadeu Lima de Souza Cascardo <email address hidden> Wed, 30 May 2018 15:10:02 -0300




About   -   Send Feedback to @ubuntu_updates