-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2020 09:54:47 +0200 Source: nfs-utils Architecture: source Version: 1:1.3.4-2.5+deb10u1 Distribution: buster Urgency: medium Maintainer: Debian kernel team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 940848 Changes: nfs-utils (1:1.3.4-2.5+deb10u1) buster; urgency=medium . * statd: take user-id from /var/lib/nfs/sm (CVE-2019-3689) (Closes: #940848) * Don't make /var/lib/nfs owned by statd. Only sm and sm.bak need to be accessible by statd or sm-notify after they drop privileges. * debian/control: Point Vcs URLs to kernel-team namespace repository Checksums-Sha1: ee5e5d5645393d998faa6f63374f91980a86edb9 2525 nfs-utils_1.3.4-2.5+deb10u1.dsc f91d88dd16909acac2e3b7b4cd8fe8aec2dc6c76 49632 nfs-utils_1.3.4-2.5+deb10u1.debian.tar.xz Checksums-Sha256: e879f6b56f11ff7375f422031a9335c8fa97891c6b8e2f06ca50e2fcae8c0072 2525 nfs-utils_1.3.4-2.5+deb10u1.dsc 20d6f74ead986c1e03bf512716b3db65c9f5d0a8542dee61439093a3ce040850 49632 nfs-utils_1.3.4-2.5+deb10u1.debian.tar.xz Files: 5c119c77a69095b584cb4295c9c2cb57 2525 net optional nfs-utils_1.3.4-2.5+deb10u1.dsc deebc91813640f92f829cc37179b1f29 49632 net optional nfs-utils_1.3.4-2.5+deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl7871VfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ExrcQAIdx7ZImiEK9KT5lAJUfGQN72Vr2cgZ2 NCt+2W1yvM2NyRb83aGHVkP9YImJfJTyckAVQZ84Z4XB5XUekZRZOeUDKDNQRpTN Zn7d8CMvmPBfDndolqkhNkiyMSOS6rT7+1LtGlvSmD2mIFzjwt/J6OD6jFqv7SFt XmLpqt+NPI7zBL34/eJU7yZ7Gqgg1euctcikK5OzY7F4tpYnGs5wN0aZXAQkjYo1 WusA02bsVma+yhm2v8D3npE9yZYWbvoMhm3+1tv06ITvi+8a2S/MK4haDpZ8ab2K AMKskvw4FGlZAFKgblhUToaEsdZxiTG8wXJLeVGPkWtWJ8uzCjXgG5qNN/PKlCJo mwZ+zWu65jFgWv+BnMNGWq6GzKrXQV07rYZkbb79eWQWGMnimr/4InJ+h96vdRCm 92zJaAEHNuky8G+PjVZkW5ff9gj0DezgklYNaozNMFAjpqo4YDzCHyu6le9HaBJr 1JRCH8p9PaNigI8tpwUf1FaULPeR1cl4tEDxtYHU0igG6E5zoK3D0juVvM+Zc4Rw zZNq2XxiRfOcpfakvAKh8gQR4RvCIqdo0rhuZ8RIqDm6dyP9GkPEtrXRX4K5NNzb YxWx6Cn/nvDa9nh2dWEJma5OXSobfYt19f9hr95nynRXk+M9ksRRAvGrCkIxyR2o IqKdAU8H5CAk =BDi/ -----END PGP SIGNATURE-----