[USN-6511-1] OpenZFS vulnerability

-----BEGIN PGP SIGNATURE-----
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=DvvB
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6511-1
November 23, 2023

zfs-linux vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

OpenZFS could allow unintended access to network services.

Software Description:
- zfs-linux: OpenZFS filesystem for Linux

Details:

It was discovered that the OpenZFS sharenfs feature incorrectly handled
IPv6 address data. This could result in IPv6 restrictions not being
applied, contrary to expectations.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
libuutil3linux 2.1.9-2ubuntu1.2
zfsutils-linux 2.1.9-2ubuntu1.2

Ubuntu 22.04 LTS:
libuutil3linux 2.1.5-1ubuntu6~22.04.2
zfsutils-linux 2.1.5-1ubuntu6~22.04.2

Ubuntu 20.04 LTS:
libuutil1linux 0.8.3-1ubuntu12.16
zfsutils-linux 0.8.3-1ubuntu12.16

After a standard system update you need to reboot your computer to make all
the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6511-1
CVE-2013-20001

Package Information:
https://launchpad.net/ubuntu/+source/zfs-linux/2.1.9-2ubuntu1.2
https://launchpad.net/ubuntu/+source/zfs-linux/2.1.5-1ubuntu6~22.04.2
https://launchpad.net/ubuntu/+source/zfs-linux/0.8.3-1ubuntu12.16