Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs

2020-03-09 Thread Sylvain Beucler
Upstream commit: https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=commitdiff;h=fee2cc29e888f2ced6a76990923aef19d326dc0e

Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs

2019-10-14 Thread Sylvain Beucler
Hi, Incidentally I contacted SuSE security who agreed that fs.protected_symlinks is not a valid mitigation (they will update MITRE). I also improved the piuparts check: #!/bin/sh -ex if [ -e /var/lib/nfs ]; then     ls -ld /var/lib/nfs     ls -ld /var/lib/nfs/sm     if [ "$(dpkg -l | grep ' nfs-c

Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs

2019-10-09 Thread Sylvain Beucler
d)/pp --install-remove-install Mount NFS with v3 mode to force statd: $ sudo service rpcinfo stop $ sudo service rpcinfo start $ sudo mount -t nfs -o vers=3 127.0.0.1:/media/nfs /mnt/t $ ps aux | grep statd Ensure rpc.statd runs as 'statd' (not 'root'). Cheers! Sylvain Beucler Debian LTS Team

Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs

2019-09-30 Thread Sylvain Beucler
Hi, I'm in the Debian LTS/ELTS team and considering an update for this issue. Do you (package maintainers) intend to address it? Or would you like a patch? Cheers! Sylvain

Bug#583653: xserver-xorg-video-radeon: 15x-slower performance regression in KMS mode for 2D operations

2010-06-13 Thread Sylvain Beucler
On Sun, Jun 06, 2010 at 10:33:54PM +0200, Sylvain Beucler wrote: > On Mon, May 31, 2010 at 09:47:17AM +0200, Michel Dänzer wrote: > > On Mon, 2010-05-31 at 09:43 +0200, Michel Dänzer wrote: > > > reassign 583653 linux-2.6 2.6.32-13 > > > kthxbye > > > >

Bug#583653: xserver-xorg-video-radeon: 15x-slower performance regression in KMS mode for 2D operations

2010-06-06 Thread Sylvain Beucler
On Mon, May 31, 2010 at 09:47:17AM +0200, Michel Dänzer wrote: > On Mon, 2010-05-31 at 09:43 +0200, Michel Dänzer wrote: > > reassign 583653 linux-2.6 2.6.32-13 > > kthxbye > > > > On Sam, 2010-05-29 at 17:33 +0200, Sylvain Beucler wrote: > > > On Sat, May

Bug#447766: Kernel panic when rebooting a xen DomU

2007-10-23 Thread Sylvain Beucler
Package: linux-image-2.6.18-5-xen-686 Version: 2.6.18.dfsg.1-13etch4 On a Dell 2950 server, I rebooted a Xen instance: xm reboot backup then I remember checking the console for progress: xm console backup and when the DomU rebooted (or shortly after, I can't remember), I got a kernel panic (I go