==========================================================================
Ubuntu Security Notice USN-6511-1
November 23, 2023
zfs-linux vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
OpenZFS could allow unintended access to network services.
Software Description:
- zfs-linux: OpenZFS filesystem for Linux
Details:
It was discovered that the OpenZFS sharenfs feature incorrectly handled
IPv6 address data. This could result in IPv6 restrictions not being
applied, contrary to expectations.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
   libuutil3linux                  2.1.9-2ubuntu1.2
   zfsutils-linux                  2.1.9-2ubuntu1.2
Ubuntu 22.04 LTS:
   libuutil3linux                  2.1.5-1ubuntu6~22.04.2
   zfsutils-linux                  2.1.5-1ubuntu6~22.04.2
Ubuntu 20.04 LTS:
   libuutil1linux                  0.8.3-1ubuntu12.16
   zfsutils-linux                  0.8.3-1ubuntu12.16
After a standard system update you need to reboot your computer to make all
the necessary changes.
References:
   https://ubuntu.com/security/notices/USN-6511-1
   CVE-2013-20001
Package Information:
   https://launchpad.net/ubuntu/+source/zfs-linux/2.1.9-2ubuntu1.2
   https://launchpad.net/ubuntu/+source/zfs-linux/2.1.5-1ubuntu6~22.04.2
   https://launchpad.net/ubuntu/+source/zfs-linux/0.8.3-1ubuntu12.16