Fedora Legacy Test Update Notification: redhat-config-nfs

[Marc Deslauriers]

---------------------------------------------------------------------
Fedora Legacy Test Update Notification
FEDORALEGACY-2005-152787
Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152787
2005-10-25
---------------------------------------------------------------------

Name        : redhat-config-nfs
Versions    : rh9: redhat-config-nfs-1.0.13-6.legacy
Versions    : fc1: redhat-config-nfs-1.1.3-3.legacy
Versions    : fc2: system-config-nfs-1.2.3-5.legacy
Summary     : NFS server configuration tool
Description :
redhat-config-nfs is a graphical user interface for creating,
modifying, and deleting nfs shares.

---------------------------------------------------------------------
Update Information:

An updated redhat-config-nfs package that fixes a security issue is now
available.

redhat-config-nfs is a graphical user interface for creating,
modifying, and deleting nfs shares.

John Buswell discovered a flaw in redhat-config-nfs that could lead to
incorrect permissions on exported shares when exporting to multiple
hosts. This could cause an option such as "all_squash" to not be
applied to all of the listed hosts. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2004-0750 to
this issue.

Additionally, a bug was found that prevented redhat-config-nfs from
being run if hosts didn't have options set in /etc/exports.

All users of redhat-config-nfs should upgrade to this updated package,
which includes a patch to correct these issues.

---------------------------------------------------------------------
Changelogs

rh9:
* Wed Jul 27 2005 Pekka Savola <pekkas at netcore.fi> 1.0.13-6.legacy
- Patch from John Dalbec to completely fix CAN-2004-0750 (#152787)

* Thu Sep 23 2004 Marc Deslauriers <marcdeslauriers at videotron.ca>
1.0.13-5.legacy
- rebuilt as Fedora Legacy security update to fix CAN-2004-0750
- revert desktop file to rh9 format

fc1:
* Wed Jul 27 2005 Pekka Savola <pekkas at netcore.fi> 1.1.3-3.legacy
- Patch from John Dalbec to completely fix CAN-2004-0750 (#152787)

* Thu Sep 23 2004 Marc Deslauriers <marcdeslauriers at videotron.ca>
1.1.3-2.legacy
- close properties dialog when clicking OK button
- handle /etc/exports missing gracefully
- fix incorrect syntax for multiple hosts with a single mount point
  CAN-2004-0750 (patch by Shannon Mitchell)
- don't barf on optionless hosts
- readonly is default

fc2:
* Sun Oct 02 2005 David Eisenstein <deisenst at gtw.net> 1.2.3-5.legacy
- update the missingexports patch

* Sat Oct 01 2005 Pekka Savola <pekkas at netcore.fi> 1.2.3-4.legacy
- Add patches made to other FC legacy OS versios:
- close properties dialog when clicking OK button
- handle /etc/exports missing gracefully
- fix incorrect syntax for multiple hosts with a single mount point
  CAN-2004-0750 (patch by Shannon Mitchell)
- don't barf on optionless hosts
- readonly is default

* Wed Jul 27 2005 Pekka Savola <pekkas at netcore.fi> 1.2.3-2.legacy
- Patch from John Dalbec to completely fix CAN-2004-0750 (#152787)

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedoralegacy.org/
(sha1sums)

rh9:
6d0c5c269b0702a5f7ef352e1c01390dfcedf66e
redhat/9/updates-testing/i386/redhat-config-nfs-1.0.13-6.legacy.noarch.rpm
7dfd3e3cd3e937144b0a79b38967749caea1f779
redhat/9/updates-testing/SRPMS/redhat-config-nfs-1.0.13-6.legacy.src.rpm

fc1:
376cd7a13d85877976d606a2a8dc57e5a9de1766
fedora/1/updates-testing/i386/redhat-config-nfs-1.1.3-3.legacy.noarch.rpm
b1828331941b0d64625dc5981990b63fb8f5ee26
fedora/1/updates-testing/SRPMS/redhat-config-nfs-1.1.3-3.legacy.src.rpm

fc2:
e9694cfe870c4370ab080ef81fe2ee5d09f23a34
fedora/2/updates-testing/i386/system-config-nfs-1.2.3-5.legacy.noarch.rpm
6e4cee9467fa66760b8e757000e771f167225377
fedora/2/updates-testing/SRPMS/system-config-nfs-1.2.3-5.legacy.src.rpm

---------------------------------------------------------------------

Please test and comment in bugzilla.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20051025/9e367d5b/attachment.sig>