ELSA-2026-3938

ELSA-2026-3938 - nfs-utils security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-03-06

Description

[2.3.3-68.0.1]
- nfsd: allow more than 64 backlogged connections
- spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 35173372]

[2.3.3-68]
- Add requires for selinux-policy (RHEL-127095)

[2.3.3-67]
- mountd: Minor refactor of get_rootfh() (RHEL-127095)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127095)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127095)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095)
Resolves: CVE-2025-12801

[2.3.3-66]
- gssd: protect kerberos ticket cache access (RHEL-103627)

[2.3.3-65]
- nfsrahead: modify get_device_info logic (RHEL-108924)

Related CVEs

CVE-2025-12801

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	nfs-utils-2.3.3-68.0.1.el8_10.src.rpm	43860eb04497efa78bc78c5495bd6d91a9ad31ec6c438bf530879cca1a2d0b62	-	ol8_aarch64_baseos_latest
	nfs-utils-2.3.3-68.0.1.el8_10.src.rpm	43860eb04497efa78bc78c5495bd6d91a9ad31ec6c438bf530879cca1a2d0b62	-	ol8_aarch64_codeready_builder
	nfs-utils-2.3.3-68.0.1.el8_10.src.rpm	43860eb04497efa78bc78c5495bd6d91a9ad31ec6c438bf530879cca1a2d0b62	-	ol8_aarch64_u10_baseos_patch
	libnfsidmap-2.3.3-68.0.1.el8_10.aarch64.rpm	ab39b0f1490e2f6e822bf3dc04cd697671805a1b8434214fa2d9b59865c49007	-	ol8_aarch64_baseos_latest
	libnfsidmap-2.3.3-68.0.1.el8_10.aarch64.rpm	ab39b0f1490e2f6e822bf3dc04cd697671805a1b8434214fa2d9b59865c49007	-	ol8_aarch64_u10_baseos_patch
	libnfsidmap-devel-2.3.3-68.0.1.el8_10.aarch64.rpm	2cab6908d30d25093d045f40dda5aa8db86d9462d9730e93200b226ef071c079	-	ol8_aarch64_codeready_builder
	nfs-utils-2.3.3-68.0.1.el8_10.aarch64.rpm	98475140cc72208c3251c2458a70a74c58fb234648d0babfd7a49cf347a690b8	-	ol8_aarch64_baseos_latest
	nfs-utils-2.3.3-68.0.1.el8_10.aarch64.rpm	98475140cc72208c3251c2458a70a74c58fb234648d0babfd7a49cf347a690b8	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	nfs-utils-2.3.3-68.0.1.el8_10.src.rpm	43860eb04497efa78bc78c5495bd6d91a9ad31ec6c438bf530879cca1a2d0b62	-	ol8_x86_64_baseos_latest
	nfs-utils-2.3.3-68.0.1.el8_10.src.rpm	43860eb04497efa78bc78c5495bd6d91a9ad31ec6c438bf530879cca1a2d0b62	-	ol8_x86_64_codeready_builder
	nfs-utils-2.3.3-68.0.1.el8_10.src.rpm	43860eb04497efa78bc78c5495bd6d91a9ad31ec6c438bf530879cca1a2d0b62	-	ol8_x86_64_u10_baseos_patch
	libnfsidmap-2.3.3-68.0.1.el8_10.i686.rpm	cf8e239644c05f64b903d2674c0e2a918d69370a0b4a12530618583376c53464	-	ol8_x86_64_baseos_latest
	libnfsidmap-2.3.3-68.0.1.el8_10.i686.rpm	cf8e239644c05f64b903d2674c0e2a918d69370a0b4a12530618583376c53464	-	ol8_x86_64_u10_baseos_patch
	libnfsidmap-2.3.3-68.0.1.el8_10.x86_64.rpm	ac05f485a471e07fe011afa409638e3d04aa1743fd2513bbeff0100e14a089b4	-	ol8_x86_64_baseos_latest
	libnfsidmap-2.3.3-68.0.1.el8_10.x86_64.rpm	ac05f485a471e07fe011afa409638e3d04aa1743fd2513bbeff0100e14a089b4	-	ol8_x86_64_u10_baseos_patch
	libnfsidmap-devel-2.3.3-68.0.1.el8_10.i686.rpm	7513a9e9a4f38b38c835b2a708eefb314f624f556aab55510069aa859f871f18	-	ol8_x86_64_codeready_builder
	libnfsidmap-devel-2.3.3-68.0.1.el8_10.x86_64.rpm	ebb74d6f1658e090e7d8ebdc2eb9da787b36b968f1d1ebae49ffe421b4ba7c75	-	ol8_x86_64_codeready_builder
	nfs-utils-2.3.3-68.0.1.el8_10.x86_64.rpm	e7090d004b2f9241b6a51e6a557d7613ccaad26d952fd10209709b530e2362e7	-	ol8_x86_64_baseos_latest
	nfs-utils-2.3.3-68.0.1.el8_10.x86_64.rpm	e7090d004b2f9241b6a51e6a557d7613ccaad26d952fd10209709b530e2362e7	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team