SUSE-SU-2019:2781-1

UNKNOWN

Security update for nfs-utils

Published Oct 25, 2019

Modified 6 years ago

Fix available

Details

This update for nfs-utils fixes the following issues:

CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)

Affected Packages

nfs-client

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

1.3.0-34.22.1

nfs-doc

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.3.0-34.22.1

nfs-kernel-server

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

1.3.0-34.22.1

nfs-utils

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

1.3.0-34.22.1

References

REPORT

https://bugzilla.suse.com/1150733

WEB

https://www.suse.com/security/cve/CVE-2019-3689

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20192781-1/

Upstream

CVE-2019-3689

Ecosystems(17)

SUSE Enterprise Storage 4 SUSE Enterprise Storage 5 SUSE HPE Helion OpenStack 8 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP2-BCL

Timeline

PublishedOct 25, 2019

ModifiedOct 25, 2019