Format: 1.8 Date: Tue, 09 Jun 2020 08:13:52 -0400 Source: nfs-utils Binary: nfs-common nfs-kernel-server Architecture: amd64 Version: 1:1.3.4-2.5ubuntu2.1 Distribution: eoan Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: nfs-common - NFS support files common to client and server nfs-kernel-server - support for NFS kernel server Changes: nfs-utils (1:1.3.4-2.5ubuntu2.1) eoan-security; urgency=medium . * SECURITY UPDATE: privilege escalation via directory permissions - debian/patches/CVE-2019-3689.patch: take user-id from /var/lib/nfs/sm in support/nsm/file.c, utils/statd/sm-notify.man, utils/statd/statd.man. - debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd. - CVE-2019-3689 Checksums-Sha1: b662aab2801e3f7473bbd8f5249c1a2a654db851 689164 nfs-common-dbgsym_1.3.4-2.5ubuntu2.1_amd64.ddeb 70c287941fb5ce31860c5f1969b31bd86ceb5175 205704 nfs-common_1.3.4-2.5ubuntu2.1_amd64.deb b6aa67ea5f9e6a5704939ae5f965c066e6a258f3 353436 nfs-kernel-server-dbgsym_1.3.4-2.5ubuntu2.1_amd64.ddeb d7c17b55c8e79b468bd35d4e4b06b39355b38e28 94544 nfs-kernel-server_1.3.4-2.5ubuntu2.1_amd64.deb c8d6431e8425e8e37b7d6c453d384dc1660d6025 8151 nfs-utils_1.3.4-2.5ubuntu2.1_amd64.buildinfo Checksums-Sha256: 993ec76b6d6b25bb3b9b7c17c4a9469f1160b5461f71d3b1990dceec42fdda2d 689164 nfs-common-dbgsym_1.3.4-2.5ubuntu2.1_amd64.ddeb 78c3e496c3438934140b648c8aedb325c8092eec2b41b04893f638795a9451c5 205704 nfs-common_1.3.4-2.5ubuntu2.1_amd64.deb 9730fb3a40b2bbc57946827c210d83c484eb1d0e789d34ee293ba2c6fba18258 353436 nfs-kernel-server-dbgsym_1.3.4-2.5ubuntu2.1_amd64.ddeb 3647c134fa82f4b9cd8873ace9a89f96ccf34fc95ace75cf6fedb002d6272014 94544 nfs-kernel-server_1.3.4-2.5ubuntu2.1_amd64.deb 530157a2b20467fe9c5bfb7242f15ed0b767e5ba002ab9fb8917cfad99a7d7ee 8151 nfs-utils_1.3.4-2.5ubuntu2.1_amd64.buildinfo Files: 3d5ac43e42cd7ec485ea7e19b8d00145 689164 debug optional nfs-common-dbgsym_1.3.4-2.5ubuntu2.1_amd64.ddeb 9d14c9d836276ec7eba6fa690ae6eb72 205704 net optional nfs-common_1.3.4-2.5ubuntu2.1_amd64.deb 7b234d2bd6778678b685a42760b30789 353436 debug optional nfs-kernel-server-dbgsym_1.3.4-2.5ubuntu2.1_amd64.ddeb 56d4fcda59454a10e2700123df7d76f6 94544 net optional nfs-kernel-server_1.3.4-2.5ubuntu2.1_amd64.deb 7577af3cc4b28c79e3c2ce44306070bf 8151 net optional nfs-utils_1.3.4-2.5ubuntu2.1_amd64.buildinfo Original-Maintainer: Debian kernel team