Summary
[1.18.1-3]
- Backport unit test of recent libnbd API addition
resolves: RHEL-16292
[1.18.1-2]
- Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871)
resolves: RHEL-15143
[1.18.1-1]
- Rebase to 1.18.1
resolves: RHEL-14476
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libnbd | 0:1.18.1-3.el9 |
| Oracle Linux · 9 | libnbd-bash-completion | 0:1.18.1-3.el9 |
| Oracle Linux · 9 | libnbd-devel | 0:1.18.1-3.el9 |
| Oracle Linux · 9 | nbdfuse | 0:1.18.1-3.el9 |
| Oracle Linux · 9 | ocaml-libnbd | 0:1.18.1-3.el9 |
| Oracle Linux · 9 | ocaml-libnbd-devel | 0:1.18.1-3.el9 |
| Oracle Linux · 9 | python3-libnbd | 0:1.18.1-3.el9 |
Vulnerabilities 2
-
Medium 5.3
Libnbd: crash or misbehaviour when nbd server returns an unexpected block size
A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the retu…
-
Medium 5.3
Libnbd: malicious nbd server may crash libnbd
A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service.