UbuntuUpdates.org

Package "nfs-common"

Name: nfs-common

Description:

NFS support files common to client and server
Latest version: 1:1.3.4-2.5ubuntu3.3
Release: focal (20.04)
Level: security
Repository: main
Head package: nfs-utils
Homepage: http://nfs.sourceforge.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "nfs-common"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "nfs-common" in Focal

Repository Area Version
base main 1:1.3.4-2.5ubuntu3
updates main 1:1.3.4-2.5ubuntu3.7

Changelog

Version: 1:1.3.4-2.5ubuntu3.3 2020-06-22 15:07:24 UTC

  nfs-utils (1:1.3.4-2.5ubuntu3.3) focal-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via directory permissions
    - debian/patches/CVE-2019-3689.patch: take user-id from
      /var/lib/nfs/sm in support/nsm/file.c, utils/statd/sm-notify.man,
      utils/statd/statd.man.
    - debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd.
    - CVE-2019-3689

 -- Marc Deslauriers <email address hidden> Wed, 17 Jun 2020 08:42:59 -0400
CVE-2019-3689 The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and


About   -   Send Feedback to @ubuntu_updates