nfs-utils 1:1.0.6-3ubuntu1.1 source package in Ubuntu

Changelog

nfs-utils (1:1.0.6-3ubuntu1.1) warty-security; urgency=low


  * SECURITY UPDATE: fix remote Denial of Service, fix buffer overflow on 64
    bit architectures
  * utils/statd/statd.c (patch from SGI):
    - main(): ignore SIGPIPE to continue to run even if a peer prematurely
      closes his TCP connection
    - drop_privs(): fix uninitialized st.st_gid value when running as root
      (not exploitable, but using random group ids might be confusing)
    - CAN-2004-1014
  * utils/rquotad/rquota_server.c (Arjan van de Ven):
    - getquotainfo(): do not use memcpy() to copy
      values from struct dqblk to struct rquota; on 64 bit architectures time_t
      is 64 bits wide, but the target fields are only 32 bit, thus causing a
      buffer overflow
    - CAN-2004-0946
    - NOTE: rpc.quotad is not shipped in the debs by default (this is
      contained in the package "quota" which is not affected by this)

 -- Martin Pitt <email address hidden>  Wed,  1 Dec 2004 14:34:34 +0100