ELSA-2026-3940

ELSA-2026-3940 - nfs-utils security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-03-05

Description

[2.5.4-38.0.1.el9_7.3]
- spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 36044562]

[2.5.4-38.3]
- Add requires for selinux-policy (RHEL-127104)

[2.5.4-38.2]
- Replace statfs64 with statfs (RHEL-127104)
- NFS export symlink vulnerability fix (RHEL-127104)
- mountd: Minor refactor of get_rootfh() (RHEL-127104)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127104)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127104)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127104)
Resolves: CVE-2025-12801

Related CVEs

CVE-2025-12801

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	nfs-utils-2.5.4-38.0.1.el9_7.3.src.rpm	3acd1839bd91401385fabfe29511be9ad8822440c5ea522e063afce95ebfebfa	-	ol9_aarch64_appstream
	nfs-utils-2.5.4-38.0.1.el9_7.3.src.rpm	3acd1839bd91401385fabfe29511be9ad8822440c5ea522e063afce95ebfebfa	-	ol9_aarch64_baseos_latest
	nfs-utils-2.5.4-38.0.1.el9_7.3.src.rpm	3acd1839bd91401385fabfe29511be9ad8822440c5ea522e063afce95ebfebfa	-	ol9_aarch64_codeready_builder
	nfs-utils-2.5.4-38.0.1.el9_7.3.src.rpm	3acd1839bd91401385fabfe29511be9ad8822440c5ea522e063afce95ebfebfa	-	ol9_aarch64_u7_baseos_patch
	libnfsidmap-2.5.4-38.0.1.el9_7.3.aarch64.rpm	4b178c7ce5cd77a835d6f90eca6195ce7345187e5e0f5b8b150297f5c987da67	-	ol9_aarch64_baseos_latest
	libnfsidmap-2.5.4-38.0.1.el9_7.3.aarch64.rpm	4b178c7ce5cd77a835d6f90eca6195ce7345187e5e0f5b8b150297f5c987da67	-	ol9_aarch64_u7_baseos_patch
	libnfsidmap-devel-2.5.4-38.0.1.el9_7.3.aarch64.rpm	1d878e019061522ded7c90b2880223f17461654e8dd22d2a6c94128f8a72ce65	-	ol9_aarch64_codeready_builder
	nfs-utils-2.5.4-38.0.1.el9_7.3.aarch64.rpm	18857935d2a1704bd7bbb662c883240cb6335cffe978c721b18b0d321890f250	-	ol9_aarch64_baseos_latest
	nfs-utils-2.5.4-38.0.1.el9_7.3.aarch64.rpm	18857935d2a1704bd7bbb662c883240cb6335cffe978c721b18b0d321890f250	-	ol9_aarch64_u7_baseos_patch
	nfs-utils-coreos-2.5.4-38.0.1.el9_7.3.aarch64.rpm	f910ec495f6cdba8d6708c52467c53eeba4dc05e1670d991bad6ad9c4f175d37	-	ol9_aarch64_appstream
	nfsv4-client-utils-2.5.4-38.0.1.el9_7.3.aarch64.rpm	dd606e6bca193383d7ea60d944eb72f67988da2110d829b6b51e70d4e22a0132	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	nfs-utils-2.5.4-38.0.1.el9_7.3.src.rpm	3acd1839bd91401385fabfe29511be9ad8822440c5ea522e063afce95ebfebfa	-	ol9_x86_64_appstream
	nfs-utils-2.5.4-38.0.1.el9_7.3.src.rpm	3acd1839bd91401385fabfe29511be9ad8822440c5ea522e063afce95ebfebfa	-	ol9_x86_64_baseos_latest
	nfs-utils-2.5.4-38.0.1.el9_7.3.src.rpm	3acd1839bd91401385fabfe29511be9ad8822440c5ea522e063afce95ebfebfa	-	ol9_x86_64_codeready_builder
	nfs-utils-2.5.4-38.0.1.el9_7.3.src.rpm	3acd1839bd91401385fabfe29511be9ad8822440c5ea522e063afce95ebfebfa	-	ol9_x86_64_u7_baseos_patch
	libnfsidmap-2.5.4-38.0.1.el9_7.3.i686.rpm	a6ecddb9fd38c8789b5e685513cb4578ce3acf9f2a3209789d5f0471b08b09da	-	ol9_x86_64_baseos_latest
	libnfsidmap-2.5.4-38.0.1.el9_7.3.i686.rpm	a6ecddb9fd38c8789b5e685513cb4578ce3acf9f2a3209789d5f0471b08b09da	-	ol9_x86_64_u7_baseos_patch
	libnfsidmap-2.5.4-38.0.1.el9_7.3.x86_64.rpm	137c827a9aa9eb311f601d9536882db8c9431d386f18254d30b87e965081c456	-	ol9_x86_64_baseos_latest
	libnfsidmap-2.5.4-38.0.1.el9_7.3.x86_64.rpm	137c827a9aa9eb311f601d9536882db8c9431d386f18254d30b87e965081c456	-	ol9_x86_64_u7_baseos_patch
	libnfsidmap-devel-2.5.4-38.0.1.el9_7.3.i686.rpm	d5bfffb73adecc6dcb89a37b3d3992ec7ba5df373667fbce0ab19bc2d37f2267	-	ol9_x86_64_codeready_builder
	libnfsidmap-devel-2.5.4-38.0.1.el9_7.3.x86_64.rpm	2868f0a05cc72d95ee7671c59ad95cdefa96e4ce35eaf944c51432ee36f88583	-	ol9_x86_64_codeready_builder
	nfs-utils-2.5.4-38.0.1.el9_7.3.x86_64.rpm	d9d4dc18779369b9d963554655069c41557a9bec8a01feef8c789cb31dba8156	-	ol9_x86_64_baseos_latest
	nfs-utils-2.5.4-38.0.1.el9_7.3.x86_64.rpm	d9d4dc18779369b9d963554655069c41557a9bec8a01feef8c789cb31dba8156	-	ol9_x86_64_u7_baseos_patch
	nfs-utils-coreos-2.5.4-38.0.1.el9_7.3.x86_64.rpm	3014b3a5ef042e5efabf7cc1714251922577add3e1f878a31eb4d91186bc6137	-	ol9_x86_64_appstream
	nfsv4-client-utils-2.5.4-38.0.1.el9_7.3.x86_64.rpm	c0134d1df17792615a51ae4c1a5b66bfabffcc75dd8d4c43d1f1fc2164e4ce22	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team