UbuntuUpdates.org

Package "libnfs14"

Name: libnfs14

Description:

NFS client library (shared library)
Latest version: 5.0.2-1ubuntu3.1
Release: stonking (26.10)
Level: updates
Repository: main
Head package: libnfs
Homepage: https://github.com/sahlberg/libnfs

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libnfs14"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libnfs14" in Stonking

Repository Area Version
base main 5.0.2-1ubuntu3
security main 5.0.2-1ubuntu3.1

Changelog

Version: 5.0.2-1ubuntu3.1 2026-11-09 18:08:41 UTC

libnfs (5.0.2-1ubuntu3.1) stonking-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write in ZDR decoding
    - debian/patches/CVE-2026-108985.patch: ZDR: enforce the maxsize bound in
      lib/libnfs-zdr.c, tests/CMakeLists.txt, tests/Makefile.am,
      tests/prog_zdr_maxsize.c.
    - CVE-2026-108985

 -- Marc Deslauriers Wed, 14 Oct 2026 13:20:20 -0400
CVE-2026-108985 ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string


About   -   Send Feedback to @ubuntu_updates