Medium DLA-1965-1 1 CVE

nfs-utils - security update

Published Oct 19, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	nfs-utils	1:1.2.8-9+deb8u1

Vulnerabilities 1

Medium 5.1

CVE-2019-3689

nfs-utils: root-owned files stored in insecure /var/lib/nfs directory

The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains …

SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 nfs-utils Linux Debian Ubuntu

Sep 19, 2019