[USN-6511-1] OpenZFS vulnerability

Marc Deslauriers marc.deslauriers at canonical.com
Thu Nov 23 14:17:35 UTC 2023

Ubuntu Security Notice USN-6511-1
November 23, 2023

zfs-linux vulnerability

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS


OpenZFS could allow unintended access to network services.

Software Description:
- zfs-linux: OpenZFS filesystem for Linux


It was discovered that the OpenZFS sharenfs feature incorrectly handled
IPv6 address data. This could result in IPv6 restrictions not being
applied, contrary to expectations.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   libuutil3linux                  2.1.9-2ubuntu1.2
   zfsutils-linux                  2.1.9-2ubuntu1.2

Ubuntu 22.04 LTS:
   libuutil3linux                  2.1.5-1ubuntu6~22.04.2
   zfsutils-linux                  2.1.5-1ubuntu6~22.04.2

Ubuntu 20.04 LTS:
   libuutil1linux                  0.8.3-1ubuntu12.16
   zfsutils-linux                  0.8.3-1ubuntu12.16

After a standard system update you need to reboot your computer to make all
the necessary changes.


Package Information:

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20231123/f4e71642/attachment.sig>

More information about the ubuntu-security-announce mailing list