Summary
[2.8.3-0.0.1.el10_1.3]
- remove multiple warnings when upgrading nfs-utils with gssproxy
[2.8.3-3]
- Add requires for selinux-policy (RHEL-127092)
[2.8.3-2]
- mountd: Minor refactor of get_rootfh() (RHEL-127092)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127092)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127092)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127092)
Resolves: CVE-2025-12801
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libnfsidmap | 1:2.8.3-0.0.1.el10_1.3 |
| Oracle Linux · 10 | libnfsidmap-devel | 1:2.8.3-0.0.1.el10_1.3 |
| Oracle Linux · 10 | nfs-utils | 1:2.8.3-0.0.1.el10_1.3 |
| Oracle Linux · 10 | nfs-utils-coreos | 1:2.8.3-0.0.1.el10_1.3 |
| Oracle Linux · 10 | nfsv4-client-utils | 1:2.8.3-0.0.1.el10_1.3 |
Vulnerabilities 1
-
Medium 6.5
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any…