Public bug reported:
A new release of libnfs is available for merging from Debian.
Ubuntu: 5.0.2-1ubuntu3
Debian Unstable: 5.0.2-1.1
### New Debian Changes ###
libnfs (5.0.2-1.1) unstable; urgency=medium
* Non-maintainer upload by the LTS Team.
* CVE-2026-53689 (Closes: #1139731)
fix validation of string size to prevent integer overflow
* debian/control: fix Maintainer: entry
-- Thorsten Alteholz <[email protected]> Sun, 12 Jul 2026 09:03:02
+0200
### Old Ubuntu Delta ###
libnfs (5.0.2-1ubuntu3) stonking; urgency=medium
* debian/tests/v3v4: Enable NFSv4.0 in the autopkgtest setup since
nfs-utils 2.9.1 disables it by default. (LP: #2156576)
-- Zineb Zaadoud <[email protected]> Wed, 24 Jun 2026
23:14:57 +0200
libnfs (5.0.2-1ubuntu2) stonking; urgency=medium
* SECURITY UPDATE: integer overflow during connection to NFS server
- debian/patches/CVE-2026-53689.patch: ZDR: check the string size for sanity
in lib/libnfs-zdr.c.
- CVE-2026-53689
-- Marc Deslauriers <[email protected]> Tue, 16 Jun 2026
08:19:41 -0400
libnfs (5.0.2-1ubuntu1) resolute; urgency=medium
* d/p/0003-use-const-qualifier-from-pointer-target-type.patch: add patch to
fix FTBFS against glibc 2.43 due to missing const pointer declaration
(LP: #2142895).
* d/p/0004-test-0223-fix-expr-call.patch: add patch to fix autopkgtests
caused by incorrect expr call (LP: #2143102).
-- Ural Tunaboyu <[email protected]> Mon, 02 Mar 2026
14:46:26 -0800
libnfs (5.0.2-1build2) resolute; urgency=medium
* No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)
-- Sebastien Bacher <[email protected]> Mon, 01 Dec 2025 13:44:17
+0100
libnfs (5.0.2-1build1) noble; urgency=high
* No change rebuild for 64-bit time_t and frame pointers.
-- Julian Andres Klode <[email protected]> Mon, 08 Apr 2024 18:05:49
+0200
** Affects: libnfs (Ubuntu)
Importance: Wishlist
Status: New
** Tags: dcr-merge
** Changed in: libnfs (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: libnfs (Ubuntu)
Milestone: None => ubuntu-26.05
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2161532
Title:
Merge libnfs 5.0.2-1.1 from Debian for stonking cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libnfs/+bug/2161532/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
