ELSA-2026-3939

MEDIUM

ELSA-2026-3939: nfs-utils security update (MODERATE)

Published Mar 5, 2026

Modified 1 months ago

Fix available

Details

[2.8.3-0.0.1.el10_1.3]

[2.8.3-3]

[2.8.3-2]

mountd: Minor refactor of get_rootfh() (RHEL-127092)
mountd: Separate lookup of the exported directory and the mount path (RHEL-127092)
support: Add a mini-library to extract and apply RPC credentials (RHEL-127092)
Fix access checks when mounting subdirectories in NFSv3 (RHEL-127092) Resolves: CVE-2025-12801

Affected Packages

libnfsidmap

OracleLinux 10

Fixed in:

1:2.8.3-0.0.1.el10_1.3

libnfsidmap-devel

OracleLinux 10

Fixed in:

1:2.8.3-0.0.1.el10_1.3

nfs-utils

OracleLinux 10

Fixed in:

1:2.8.3-0.0.1.el10_1.3

nfs-utils-coreos

OracleLinux 10

Fixed in:

1:2.8.3-0.0.1.el10_1.3

nfsv4-client-utils

OracleLinux 10

Fixed in:

1:2.8.3-0.0.1.el10_1.3

Ecosystems

Timeline

PublishedMar 5, 2026

ModifiedMar 5, 2026