Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 10: 2009-0266 Critical: Nfs-Utils Tcp Wrapper Update

Added warnings to tcp wrapper code when mounts are denied due to misconfigured DNS configurations. gssd: By default, don't spam syslog when users' credentials expire. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-0266 2009-01-07 19:07:59 --------------------------------------------------------------------------------Name : nfs-utils Product : Fedora 10 Version : 1.1.4 Release : 6.fc10 URL : / Summary : NFS utilities and supporting clients and daemons for the kernel NFS server Description : The nfs-utils package provides a daemon for the kernel NFS server and related tools, which provides a much higher level of performance than the traditional Linux NFS server used by most users. This package also contains the showmount program. Showmount queries the mount daemon on a remote host for information about the NFS (Network File System) server on the remote host. For example, showmount can display the clients which are mounted on that host. This package also contains the mount.nfs and umount.nfs program. --------------------------------------------------------------------------------Update Information: Added warnings to tcp wrapper code when mounts are denied due to misconfigured DNS configurations. gssd: By default, don't spam syslog when users' credentials expire --------------------------------------------------------------------------------ChangeLog: * Mon Jan 5 2009 Steve Dickson 1.1.4-6 - Added warnings to tcp wrapper code when mounts are denied due to misconfigured DNS configurations. - gssd: By default, don't spam syslog when users' credentials expire * Sat Dec 20 2008 Steve Dickson 1.1.4-5 - Re-enabled and fixed/enhanced tcp wrappers. * Mon Dec 8 2008 Steve Dickson 1.1.4-4 - sm-notify: always exiting without any notification. - statd: not unlinking up host files (Note: 1.1.4-3 was skipped) * Mon Dec 1 2008 Steve Dickson 1.1.4-2 -Make sure /proc/fs/nfsd exists when the nfs init script does the exports (bz 473396) - Fixed typo in nfs init script that caused rpc.rquotad daemons to be started but not stoppped (bz 473929) --------------------------------------------------------------------------------References: [ 1 ] Bug #477864 - nfs-utils: missing tcp_wrappers support in Fedora 9 and 10 https://bugzilla.redhat.com/show_bug.cgi?id=477864 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update nfs-utils' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The latest nfs-utils patch for Fedora 10 enhances the logging of TCP wrapper alerts and refines syslog handling regarding outdated user authentication.. nfs-utils,tcp wrapper,Fedora 10,network file system,system security. . Severity: Critical. LinuxSecurity.com Team

Jan 14, 2009 •Critical Fedora