Source: nfs-ganesha Version: 9.14-1 Severity: important Tags: security upstream X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi, The following vulnerability was published for nfs-ganesha. CVE-2026-105516[0]: | 9P TWALK component count stack buffer overflow Apparently the upstream fix planned is to remove the 9P implementation from the next release. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-105516 https://www.cve.org/CVERecord?id=CVE-2026-105516 [1] https://bugzilla.redhat.com/show_bug.cgi?id=2545962 Please adjust the affected versions in the BTS as needed. Regards, Salvatore
