Bug 477864

Summary: nfs-utils: missing tcp_wrappers support in Fedora 9 and 10
Product: [Fedora] Fedora Reporter: Steve Dickson <steved>
Component: nfs-utilsAssignee: Steve Dickson <steved>
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 10CC: bressers, steved
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-01-15 02:50:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Proposed Fedora 9 and 10 patch none

Description Steve Dickson 2008-12-24 13:55:09 UTC 
nfs-utils as built in Fedora 9 and 10 is not built with TCP wrappers
support.

This means that anyone trying to protect their NFS service via TCP wrappers will
not be protected as they would expect.

Also the code that will be enabled does not work when hostnames 
are added to /etc/hosts.deny. The code only works with IP address.




-
Comment 1 Steve Dickson 2008-12-24 13:58:45 UTC 
Created attachment 327813 [details]
Proposed Fedora 9 and 10 patch
Comment 2 Fedora Update System 2009-01-06 19:45:34 UTC 
nfs-utils-1.1.4-6.fc10 has been submitted as an update for Fedora 10.
http://admin.fedoraproject.org/updates/nfs-utils-1.1.4-6.fc10
Comment 3 Fedora Update System 2009-01-06 19:56:18 UTC 
nfs-utils-1.1.2-9.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/nfs-utils-1.1.2-9.fc9
Comment 4 Fedora Update System 2009-01-07 21:53:20 UTC 
nfs-utils-1.1.4-6.fc10 has been pushed to the Fedora 10 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update nfs-utils'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F10/FEDORA-2009-0266
Comment 5 Fedora Update System 2009-01-07 21:53:25 UTC 
nfs-utils-1.1.2-9.fc9 has been pushed to the Fedora 9 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing-newkey update nfs-utils'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F9/FEDORA-2009-0297
Comment 6 Fedora Update System 2009-01-15 02:50:16 UTC 
nfs-utils-1.1.4-6.fc10 has been pushed to the Fedora 10 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 7 Fedora Update System 2009-01-15 03:04:52 UTC 
nfs-utils-1.1.2-9.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 8 Josh Bressers 2009-02-24 21:08:04 UTC 
MITRE has assigned this bug CVE-2009-0180.  It's really the same as CVE-2008-1376.