Summary
[2.3.3-68.0.1]
- nfsd: allow more than 64 backlogged connections
- spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 35173372]
[2.3.3-68]
- Add requires for selinux-policy (RHEL-127095)
[2.3.3-67]
- mountd: Minor refactor of get_rootfh() (RHEL-127095)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127095)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127095)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095)
Resolves: CVE-2025-12801
[2.3.3-66]
- gssd: protect kerberos ticket cache access (RHEL-103627)
[2.3.3-65]
- nfsrahead: modify get_device_info logic (RHEL-108924)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libnfsidmap | 1:2.3.3-68.0.1.el8_10 |
| Oracle Linux · 8 | libnfsidmap-devel | 1:2.3.3-68.0.1.el8_10 |
| Oracle Linux · 8 | nfs-utils | 1:2.3.3-68.0.1.el8_10 |
Vulnerabilities 1
-
Medium 6.5
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any…