SUSE-SU-2019:2781-1

HIGH7.8

Security update for nfs-utils

Published Oct 25, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for nfs-utils fixes the following issues:

CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)

Affected Packages

nfs-client

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.3.0-34.22.1

nfs-doc

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

1.3.0-34.22.1

nfs-kernel-server

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.3.0-34.22.1

References

ADVISORY

https://bugzilla.suse.com/1150733

ADVISORY

https://www.suse.com/security/cve/CVE-2019-3689/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20192781-1.html

ADVISORY