zfs-linux - Debian Package Tracker

general

source: zfs-linux (contrib)
version: 2.1.13-2
maintainer: Debian ZFS on Linux maintainers (archive) (DMD)
uploaders: Mo Zhou [DMD] – Aron Xu [DMD] – Carlos Alberto Lopez Perez [DMD]
arch: all
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.7.12-2+deb10u2
o-o-bpo: 2.0.3-9~bpo10+1
oldstable: 2.0.3-9+deb11u1
old-bpo: 2.1.11-1~bpo11+1
stable: 2.1.11-1
stable-bpo: 2.1.13-1~bpo12+1
testing: 2.1.13-2
unstable: 2.1.13-2
exp: 2.2.1-1~exp2

versioned links

0.7.12-2+deb10u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.3-9~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.3-9+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.11-1~bpo11+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.11-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.12-2~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.13-1~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.13-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.13-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.1-1~exp2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libnvpair3linux
libpam-zfs (1 bugs: 0, 1, 0, 0)
libuutil3linux
libzfs4linux
libzfsbootenv1linux
libzfslinux-dev
libzpool5linux
python3-pyzfs
pyzfs-doc
zfs-dkms (14 bugs: 0, 9, 5, 0)
zfs-dracut
zfs-initramfs (6 bugs: 0, 6, 0, 0)
zfs-test
zfs-zed
zfsutils-linux (19 bugs: 0, 17, 2, 0)

action needed

Marked for autoremoval on 30 December due to dracut: #1056059 high

Version 2.1.13-2 of zfs-linux is marked for autoremoval from testing on Sat 30 Dec 2023. It depends (transitively) on dracut, affected by #1056059. You should try to prevent the removal by fixing these RC bugs.

Created: 2023-11-23 Last update: 2023-11-30 18:41

The VCS repository is not up to date, push the missing commits. high

vcswatch reports that the current version of the package is not in its VCS.
Either you need to push your commits and/or your tags, or the information about the package's VCS are out of date. A common cause of the latter issue when using the Git VCS is not specifying the correct branch when the packaging is not in the default one (remote HEAD branch), which is usually "master" but can be modified in salsa.debian.org in the project's general settings with the "Default Branch" field). Alternatively the Vcs-Git field in debian/control can contain a "-b <branch-name>" suffix to indicate what branch is used for the Debian packaging.

Created: 2023-11-24 Last update: 2023-11-30 15:39

A new upstream version is available: 2.2.1 high

A new upstream version 2.2.1 is available, you should consider packaging it.

Created: 2023-10-14 Last update: 2023-11-30 14:13

2 security issues in trixie high

There are 2 open security issues in trixie.

2 important issues:

CVE-2013-20001: An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.
CVE-2023-49298: OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.

Created: 2023-11-24 Last update: 2023-11-30 06:38

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2013-20001: An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.
CVE-2023-49298: OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.

Created: 2023-11-24 Last update: 2023-11-30 06:38

2 security issues in buster high

There are 2 open security issues in buster.

2 important issues:

CVE-2013-20001: An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.
CVE-2023-49298: OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.

Created: 2023-11-24 Last update: 2023-11-30 06:38

debian/patches: 4 patches with invalid metadata, 13 patches to forward upstream high

Among the 20 debian patches available in version 2.1.13-2 of the package, we noticed the following issues:

4 patches with invalid metadata that ought to be fixed.
13 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2023-11-28 16:35

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2023-09-13 Last update: 2023-11-30 18:35

2 low-priority security issues in bullseye low

There are 2 open security issues in bullseye.

2 issues left for the package maintainer to handle:

CVE-2013-20001: (needs triaging) An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.
CVE-2023-49298: (needs triaging) OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-11-24 Last update: 2023-11-30 06:38

2 low-priority security issues in bookworm low

There are 2 open security issues in bookworm.

2 issues left for the package maintainer to handle:

CVE-2013-20001: (needs triaging) An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.
CVE-2023-49298: (needs triaging) OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-11-24 Last update: 2023-11-30 06:38

news

[rss feed]

[2023-11-30] Accepted zfs-linux 2.1.13-2~bpo12+1 (source) into stable-backports (Aron Xu)
[2023-11-30] zfs-linux 2.1.13-2 MIGRATED to testing (Debian testing watch)
[2023-11-28] Accepted zfs-linux 2.1.13-2 (source) into unstable (Shengqi Chen) (signed by: Aron Xu)
[2023-11-22] Accepted zfs-linux 2.2.1-1~exp2 (source) into experimental (Shengqi Chen) (signed by: Aron Xu)
[2023-11-22] Accepted zfs-linux 2.2.1-1~exp1 (source) into experimental (Shengqi Chen) (signed by: Aron Xu)
[2023-11-12] Accepted zfs-linux 2.1.13-1~bpo11+1 (source amd64 all) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: Aron Xu)
[2023-11-03] Accepted zfs-linux 2.2.0-1~exp1 (source) into experimental (Mo Zhou)
[2023-10-29] Accepted zfs-linux 2.1.13-1~bpo12+1 (source) into stable-backports (Aron Xu)
[2023-09-30] zfs-linux 2.1.13-1 MIGRATED to testing (Debian testing watch)
[2023-09-28] Accepted zfs-linux 2.1.13-1 (source) into unstable (Mo Zhou)
[2023-09-05] Accepted zfs-linux 2.1.12-2~bpo12+1 (source amd64 all) into stable-backports (Debian FTP Masters) (signed by: Aron Xu)
[2023-08-23] zfs-linux 2.1.12-2 MIGRATED to testing (Debian testing watch)
[2023-08-21] Accepted zfs-linux 2.1.12-2 (source) into unstable (Aron Xu)
[2023-06-22] zfs-linux 2.1.12-1 MIGRATED to testing (Debian testing watch)
[2023-06-15] Accepted zfs-linux 2.1.12-1 (source) into unstable (Mo Zhou)
[2023-05-17] Accepted zfs-linux 2.1.11-1~bpo11+1 (source) into bullseye-backports (Aron Xu)
[2023-05-14] zfs-linux 2.1.11-1 MIGRATED to testing (Debian testing watch)
[2023-05-13] zfs-linux 2.1.11-1 MIGRATED to testing (Debian testing watch)
[2023-04-23] Accepted zfs-linux 2.1.11-1 (source) into unstable (Aron Xu)
[2023-04-18] Accepted zfs-linux 2.1.9-4 (source) into unstable (Aron Xu)
[2023-04-16] Accepted zfs-linux 2.0.3-9+deb11u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Aron Xu)
[2023-04-14] Accepted zfs-linux 2.1.9-3~bpo11+1 (source) into bullseye-backports (Aron Xu)
[2023-04-14] zfs-linux 2.1.9-3 MIGRATED to testing (Debian testing watch)
[2023-03-26] Accepted zfs-linux 2.1.9-3 (source) into unstable (Aron Xu)
[2023-03-08] zfs-linux 2.1.9-2 MIGRATED to testing (Debian testing watch)
[2023-02-26] Accepted zfs-linux 2.1.9-2 (source) into unstable (Aron Xu)
[2023-02-02] Accepted zfs-linux 2.1.9-1~bpo11+1 (source) into bullseye-backports (Aron Xu)
[2023-01-31] zfs-linux 2.1.9-1 MIGRATED to testing (Debian testing watch)
[2023-01-26] Accepted zfs-linux 2.1.9-1 (source) into unstable (Aron Xu)
[2023-01-21] Accepted zfs-linux 2.1.8-1 (source) into unstable (Aron Xu)

bugs [bug history graph]

all: 47 48
RC: 0
I&N: 39
M&W: 8 9
F&P: 0
patch: 1

links

homepage
buildd: logs, exp
popcon
browse source code
edit tags
other distros
security tracker
l10n (92, -)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.2.0-0ubuntu3
91 bugs (5 patches)
patches for 2.2.0-0ubuntu3