nfs-utils 1:1.3.4-2.5ubuntu3.3 source package in Ubuntu


nfs-utils (1:1.3.4-2.5ubuntu3.3) focal-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via directory permissions
    - debian/patches/CVE-2019-3689.patch: take user-id from
      /var/lib/nfs/sm in support/nsm/file.c, utils/statd/,
    - debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd.
    - CVE-2019-3689

 -- Marc Deslauriers <email address hidden>  Wed, 17 Jun 2020 08:42:59 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2020-06-22
Uploaded to:
Original maintainer:
Ubuntu Developers
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates on 2020-06-22 main net
Focal security on 2020-06-22 main net


File Size SHA-256 Checksum
nfs-utils_1.3.4.orig.tar.xz 588.1 KiB b42a5bc0a8d80d04650030ceb9a11f08f4acfbcb1ee297f657fb94e339c45975
nfs-utils_1.3.4-2.5ubuntu3.3.debian.tar.xz 61.1 KiB 67ca108f6c2c8b5f781d2758e0e9014fe1c073bbfbcf97dfc50bec2c6c2c4c29
nfs-utils_1.3.4-2.5ubuntu3.3.dsc 2.4 KiB 8470273768cd106278932d1299f30ee7ffe193f40216540dd8eb4a3054f69eba

View changes file

Binary packages built by this source

nfs-common: NFS support files common to client and server

 Use this package on any machine that uses NFS, either as client or
 server. Programs included: lockd, statd, showmount, nfsstat, gssd,
 idmapd and mount.nfs.

nfs-common-dbgsym: debug symbols for nfs-common
nfs-kernel-server: support for NFS kernel server

 The NFS kernel server is currently the recommended NFS server for use
 with Linux, featuring features such as NFSv3 and NFSv4, Kerberos
 support via GSS, and much more. It is also significantly faster and
 usually more reliable than the user-space NFS servers (from the
 unfs3 and nfs-user-server packages). However, it is more difficult to
 debug than the user-space servers, and has a slightly different
 feature set.
 This package contains the user-space support needed to use the
 NFS kernel server. Most administrators wishing to set up an NFS server
 would want to install this package.

nfs-kernel-server-dbgsym: debug symbols for nfs-kernel-server