SUSE-SU-2019:2781-1

HIGH7.8

Security update for nfs-utils

Published Oct 25, 2019

Modified 1 months ago

Fix available

Details

Description of the patch:

This update for nfs-utils fixes the following issues:

CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)

Affected Packages

nfs-client

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3

Fixed in:

0:1.3.0-34.22.1

nfs-doc

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise High Performance Computing 12 SP4

Fixed in:

0:1.3.0-34.22.1

nfs-kernel-server

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3

Fixed in:

0:1.3.0-34.22.1

References

ADVISORY

https://bugzilla.suse.com/1150733

ADVISORY

https://www.suse.com/security/cve/CVE-2019-3689/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20192781-1.html

ADVISORY