-
nfs-utils (1:1.3.4-2.5ubuntu2.1) eoan-security; urgency=medium
* SECURITY UPDATE: privilege escalation via directory permissions
- debian/patches/CVE-2019-3689.patch: take user-id from
/var/lib/nfs/sm in support/nsm/file.c, utils/statd/sm-notify.man,
utils/statd/statd.man.
- debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd.
- CVE-2019-3689
-- Marc Deslauriers <email address hidden> Tue, 09 Jun 2020 08:13:52 -0400
-
nfs-utils (1:1.3.4-2.5ubuntu2) eoan; urgency=medium
* No-change upload with strops.h and sys/strops.h removed in glibc.
-- Matthias Klose <email address hidden> Thu, 05 Sep 2019 11:04:05 +0000
-
nfs-utils (1:1.3.4-2.5ubuntu1) eoan; urgency=low
* Merge from Debian unstable. Remaining changes:
- debian/nfs-common.default: always start idmapd automatically; drop
the configuration option.
- Add 90-gss-free-lucid-sec-context.patch: adjust for changes to the ctx
argument of the serialize_krb5_ctx() function.
- Add remove-gssproxy.patch: Drop gssproxy as it does not exist in Ubuntu
- Fixing nfs-mountd dependency on rpcbind (race condition)
by adding "rpcbind.socket" to "nfs-mountd.service" as a dependency
to avoid race conditions:
- Add systemd-Fix-nfs-mountd-dependency-on-rpcbind.patch
- Convert mountstats and nfsiostat scripts to Python3 and recommend
python3 instead of python.
- truncate_gid*.patch: Backports from upstream to prevent truncating
UIDs and GIDs over 65536 on certain architectures
- Remove hard-coded dep on libtirpc1.
- d/nfs-utils_env.sh: alongside RPCSVCGSSDARGS, also export SVCGSSDARGS,
which is the variable name expected by the rpc-svcgssd systemd service.
- d/p/nfsiostat-replace-list-reserved-word.patch: fix nfsiostat crash due
to using 'list' as a variable name.
* Dropped changes, included in Debian:
- glibc-2.28-compat.patch: Include <sys/sysmacros.h> for major/minor.
nfs-utils (1:1.3.4-2.5) unstable; urgency=medium
* Non-maintainer upload.
[ Micha Lenk ]
* [abaa2ab] handle_gssd_upcall: Fix failure to find uid in upcall string 'mech=krb5'
by adding the suggested upstream commits as
debian/patches/0010-gssd-replace-non-thread-safe-strtok-with-strsep.patch and
debian/patches/0011-gssd-Duplicate-the-upcall-string-for-error-messages.patch.
rpc.gssd: WARNING: handle_gssd_upcall: failed to find uid in upcall string 'mech=krb5'
(Closes: #895381)
nfs-utils (1:1.3.4-2.4) unstable; urgency=medium
[ Laurent Bigonville ]
* debian/control: Downgrade the priority to optional to match the override
file
[ Hilko Bengen ]
* Add missing include, fixing FTBFS with glibc 2.28 (Closes: #915995)
-- Steve Langasek <email address hidden> Thu, 02 May 2019 22:43:12 -0700
-
nfs-utils (1:1.3.4-2.3ubuntu3) disco; urgency=medium
* d/p/nfsiostat-replace-list-reserved-word.patch: fix nfsiostat crash due to
using 'list' as a variable name. (LP: #1821261)
-- Matthew Ruffell <email address hidden> Tue, 02 Apr 2019 11:09:15 +1300