UbuntuUpdates.org

Package "nfs-utils"

Name: nfs-utils

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • NFS support files common to client and server
  • support for NFS kernel server

Latest version: 1:1.3.4-2.5ubuntu3.3
Release: focal (20.04)
Level: security
Repository: main

Links



Other versions of "nfs-utils" in Focal

Repository Area Version
base main 1:1.3.4-2.5ubuntu3
updates main 1:1.3.4-2.5ubuntu3.6

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:1.3.4-2.5ubuntu3.3 2020-06-22 15:07:24 UTC

  nfs-utils (1:1.3.4-2.5ubuntu3.3) focal-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via directory permissions
    - debian/patches/CVE-2019-3689.patch: take user-id from
      /var/lib/nfs/sm in support/nsm/file.c, utils/statd/sm-notify.man,
      utils/statd/statd.man.
    - debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd.
    - CVE-2019-3689

 -- Marc Deslauriers <email address hidden> Wed, 17 Jun 2020 08:42:59 -0400

CVE-2019-3689 The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and



About   -   Send Feedback to @ubuntu_updates