Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #65355
| From | Sylvain Beucler <beuc@beuc.net> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs |
| Date | 2019-10-09 16:40 +0200 |
| Message-ID | <yPlib-855-31@gated-at.bofh.it> (permalink) |
| References | <yIxo5-7BN-1@gated-at.bofh.it> <yLYrM-2b4-7@gated-at.bofh.it> <yIxo5-7BN-1@gated-at.bofh.it> <yLYrM-2b4-7@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
Hi,
I submitted the following patch to address this issue:
https://salsa.debian.org/debian/nfs-utils/merge_requests/3/diffs
The source part of the fix was also submitted at:
https://bugzilla.linux-nfs.org/show_bug.cgi?id=338
I intend to push it to LTS/ELTS, I can also prepare an upload for
stable/oldstable if security-team wishes so.
What do you think?
To test:
pp/post_install_checknfs.sh:
#!/bin/sh -ex
if [ -e /var/lib/nfs ]; then
ls -ld /var/lib/nfs
if [ "$(dpkg -l | grep ' nfs-common ' | awk '{print $3}')" !=
'1:1.3.4-2.6' ]; then
exit 0
fi
if [ "$(stat -c '%U:%G' /var/lib/nfs)" != 'root:root' ]; then
exit 1
fi
fi
sudo piuparts -d bullseye nfs-utils_1.3.4-2.6_amd64.changes
--scriptsdir=$(pwd)/pp
sudo piuparts -d bullseye nfs-utils_1.3.4-2.6_amd64.changes
--scriptsdir=$(pwd)/pp --install-remove-install
Mount NFS with v3 mode to force statd:
$ sudo service rpcinfo stop
$ sudo service rpcinfo start
$ sudo mount -t nfs -o vers=3 127.0.0.1:/media/nfs /mnt/t
$ ps aux | grep statd
Ensure rpc.statd runs as 'statd' (not 'root').
Cheers!
Sylvain Beucler
Debian LTS Team
Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Salvatore Bonaccorso <carnil@debian.org> - 2019-09-20 22:10 +0200
Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Sylvain Beucler <beuc@beuc.net> - 2019-09-30 09:40 +0200
Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Sylvain Beucler <beuc@beuc.net> - 2019-10-09 16:40 +0200
Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Sylvain Beucler <beuc@beuc.net> - 2019-10-14 10:10 +0200
Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Salvatore Bonaccorso <carnil@debian.org> - 2020-03-10 11:10 +0100
Bug#940848: marked as done (nfs-utils: CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2020-03-13 15:00 +0100
Bug#940848: marked as done (nfs-utils: CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2020-07-03 21:10 +0200
Bug#940848: marked as done (nfs-utils: CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2020-07-09 21:40 +0200
csiph-web