nfs-utils 1:1.3.4-2.5ubuntu2.1 source package in Ubuntu


nfs-utils (1:1.3.4-2.5ubuntu2.1) eoan-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via directory permissions
    - debian/patches/CVE-2019-3689.patch: take user-id from
      /var/lib/nfs/sm in support/nsm/file.c, utils/statd/,
    - debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd.
    - CVE-2019-3689

 -- Marc Deslauriers <email address hidden>  Tue, 09 Jun 2020 08:13:52 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2020-06-09
Uploaded to:
Original maintainer:
Ubuntu Developers
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Eoan updates on 2020-06-22 main net
Eoan security on 2020-06-22 main net


File Size SHA-256 Checksum
nfs-utils_1.3.4.orig.tar.xz 588.1 KiB b42a5bc0a8d80d04650030ceb9a11f08f4acfbcb1ee297f657fb94e339c45975
nfs-utils_1.3.4-2.5ubuntu2.1.debian.tar.xz 57.5 KiB c485f2f4275a0ffc4465f9189638463da144eeadac0c80b2b5db7a9af435a1a7
nfs-utils_1.3.4-2.5ubuntu2.1.dsc 2.4 KiB 10bcd8a9e9f0a207168ff512ed6b23753aca9c117007ceed9213b765c5091334

View changes file

Binary packages built by this source

nfs-common: NFS support files common to client and server

 Use this package on any machine that uses NFS, either as client or
 server. Programs included: lockd, statd, showmount, nfsstat, gssd,
 idmapd and mount.nfs.

nfs-common-dbgsym: debug symbols for nfs-common
nfs-kernel-server: support for NFS kernel server

 The NFS kernel server is currently the recommended NFS server for use
 with Linux, featuring features such as NFSv3 and NFSv4, Kerberos
 support via GSS, and much more. It is also significantly faster and
 usually more reliable than the user-space NFS servers (from the
 unfs3 and nfs-user-server packages). However, it is more difficult to
 debug than the user-space servers, and has a slightly different
 feature set.
 This package contains the user-space support needed to use the
 NFS kernel server. Most administrators wishing to set up an NFS server
 would want to install this package.

nfs-kernel-server-dbgsym: debug symbols for nfs-kernel-server