All errata/p9/ALT-PU-2026-10541-1
ALT-PU-2026-10541-1

Package update kernel-modules-zfs-std-def in branch p9

Version2.0.4-alt1.329006.1
Task#419672
Published2026-07-06
Max severityHIGH
Severity:

Closed issues (3)

CVE-2013-20001
HIGH7.5

An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.

Published: 2021-02-12Modified: 2026-06-16
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
CVE-2020-24716
HIGH7.8

OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.

Published: 2020-08-27Modified: 2026-06-17
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS 3.xHIGH 7.8
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
CVE-2020-24717
HIGH7.8

OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.

Published: 2020-08-27Modified: 2026-06-17
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS 3.xHIGH 7.8
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References