nfs-utils (1:1.3.4-2.1ubuntu5.3) bionic-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via directory permissions
    - debian/patches/CVE-2019-3689.patch: take user-id from
      /var/lib/nfs/sm in support/nsm/file.c, utils/statd/sm-notify.man,
      utils/statd/statd.man.
    - debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd.
    - CVE-2019-3689

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 09 Jun 2020 08:15:08 -0400

nfs-utils (1:1.3.4-2.1ubuntu5.2) bionic; urgency=medium

  * d/nfs-utils_env.sh: alongside RPCSVCGSSDARGS, also export SVCGSSDARGS,
    which is the variable name expected by the rpc-svcgssd systemd service.
    (LP: #1616123)

 -- Andreas Hasenack <andreas@canonical.com>  Thu, 25 Apr 2019 17:17:31 -0300

nfs-utils (1:1.3.4-2.1ubuntu5.1) bionic; urgency=medium

  * d/p/nfsiostat-replace-list-reserved-word.patch: fix nfsiostat crash due to
    using 'list' as a variable name. (LP: #1821261)

 -- Matthew Ruffell <matthew.ruffell@canonical.com>  Tue, 02 Apr 2019 13:46:35 +1300

nfs-utils (1:1.3.4-2.1ubuntu5) bionic; urgency=medium

  * Drop obsoleted 20-ticket-expired-error.patch (LP: #1709129)
    The original issue is fixed in the kernel starting with version 3.10.
  * Refresh patches
  * Remove whitespace after '=' in service files

 -- Balint Reczey <rbalint@ubuntu.com>  Tue, 16 Jan 2018 23:49:38 +0100

nfs-utils (1:1.3.4-2.1ubuntu4) bionic; urgency=medium

  * Convert mountstats and nfsiostat scripts to Python3 and recommend
    python3 instead of python. LP: #1735458.
  * Provide UINT16_MAX definition if not provided by glibc.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 01 Dec 2017 03:49:39 +0100

nfs-utils (1:1.3.4-2.1ubuntu2) artful; urgency=medium

  * Fix flaky autopkgtest: a 'sync' after an update on the server does not
    guarantee that the change is visible on the client.  For that, we need
    to flush the inode/dentry cache instead.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 31 Aug 2017 23:08:25 -0700

nfs-utils (1:1.3.4-2.1ubuntu1) artful; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/nfs-common.default: always start idmapd automatically; drop
      the configuration option.
    - Add 20-ticket-expired-error.patch: Add "-e" (ticket expiry is error)
      option to rpc.gssd to prevent hangs due to EKEYEXPIRED error from kernel
      on ticket expiry. (LP: #794112)
    - Add 90-gss-free-lucid-sec-context.patch: adjust for changes to the ctx
      argument of the serialize_krb5_ctx() function. (LP: #1331201)
    - Add remove-gssproxy.patch: Drop gssproxy as it does not exist in Ubuntu
      (LP: #1446851)
    - Add debian/nfs-common.maintscript: Clean up obsolete conffiles (upstart
      jobs) on upgrades. This needs to be kept until after 18.04 LTS.
    - Fixing nfs-mountd dependency on rpcbind (race condition) (LP: #1590799)
      by adding "rpcbind.socket" to "nfs-mountd.service"  as a dependency
      to avoid race conditions:
      - Add systemd-Fix-nfs-mountd-dependency-on-rpcbind.patch
  * Dropped already integrated changes:
    - Add a dependency on keyutils to nfs-common, so that idmapping will work
      under systemd. (LP: #1449074)

 -- Balint Reczey <rbalint@ubuntu.com>  Thu, 03 Aug 2017 20:50:38 +0200

nfs-utils (1:1.3.4-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix patch to also change pidfile path in service file (Closes: #850464)

 -- Andreas Henriksson <andreas@fatal.se>  Mon, 20 Mar 2017 16:07:55 +0100

nfs-utils (1:1.3.4-2) unstable; urgency=medium

  [ Daniel Pocock ]
  * Ignore failure to (re)start service during postinst. (Closes: #848115)
  * Correct location of nfs-utils_env.sh in service file. (Closes: #848145)
  * Use FD 9 in start-statd. (Closes: #848277)

  [ Helmut Grohne ]
  * Fix FTCBFS: Let dh_auto_configure provide cross flags (Closes: #836542)

 -- Daniel Pocock <daniel@pocock.pro>  Sat, 17 Dec 2016 11:49:21 +0100

nfs-utils (1:1.3.4-1) unstable; urgency=medium

  [ Daniel Pocock ]
  * New upstream release.

  [ Ben Hutchings ]
  * Update debian/watch

  [ Salvatore Bonaccorso ]
  * Fix typo in comment for installed idmapd.conf.
    Thanks to Ferenc Wágner (Closes: #841387)

 -- Daniel Pocock <daniel@pocock.pro>  Tue, 13 Dec 2016 19:37:42 +0100

# For older changelog entries, run 'apt-get changelog nfs-common'
