[OE-core][PATCH] nfs-utils: upgrade 2.8.5 -> 2.8.6

[OE-core][PATCH] nfs-utils: upgrade 2.8.5 -> 2.8.6

[Peter Marko]

From: Peter Marko <peter.marko@siemens.com>

Fixes CVE-2025-12801 per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-12801

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 .../nfs-utils/{nfs-utils_2.8.5.bb => nfs-utils_2.8.6.bb}        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-connectivity/nfs-utils/{nfs-utils_2.8.5.bb => nfs-utils_2.8.6.bb} (98%)

diff --git a/meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.5.bb b/meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.6.bb
similarity index 98%
rename from meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.5.bb
rename to meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.6.bb
index 119e49e2a2..7c2b0078d0 100644
--- a/meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.5.bb
+++ b/meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.6.bb
@@ -25,7 +25,7 @@ SRC_URI = "${KERNELORG_MIRROR}/linux/utils/nfs-utils/${PV}/nfs-utils-${PV}.tar.x
            file://0005-find-OE-provided-Kerberos.patch \
            "
 
-SRC_URI[sha256sum] = "b13ca4a9df44186bdbe107514b22732d4243f785f95daf2fb86afc1edba15bbb"
+SRC_URI[sha256sum] = "2bd7b34e809a7eff2f4bc5fc5fd96ebcd66a5458b471a270cbd2dc169b011550"
 
 # Only kernel-module-nfsd is required here (but can be built-in)  - the nfsd module will
 # pull in the remainder of the dependencies.

Re: [OE-core][PATCH] nfs-utils: upgrade 2.8.5 -> 2.8.6

[Mathieu Dubois-Briand]

On Thu Mar 12, 2026 at 9:04 PM CET, Peter Marko via lists.openembedded.org wrote:
> From: Peter Marko <peter.marko@siemens.com>
>
> Fixes CVE-2025-12801 per [1].
>
> [1] https://security-tracker.debian.org/tracker/CVE-2025-12801
>
> Signed-off-by: Peter Marko <peter.marko@siemens.com>
> ---

Hi Peter,

Thanks for the upgrade.

It looks like this is having issues with musl:
[    1.485154] udevd[147]: starting version 3.2.14
[    1.489350] usb 2-2: new high-speed USB device number 3 using ehci-pci
[    1.492825] udevd[148]: starting eudev-3.2.14
[    1.519296] traps: nfsrahead[175] general protection fault ip:7f51bd8fbf9b sp:7fffd3b63708 error:0 in libc.so[4bf9b,7f51bd8c2000+6a000]
[    1.519391] traps: nfsrahead[174] general protection fault ip:7fd52597df9b sp:7ffd0db22588 error:0
[    1.519389] traps: nfsrahead[171] general protection fault ip:7fa02af85f9b sp:7ffedb159978 error:0 in libc.so[4bf9b,7fa02af4c000+6a000]
[    1.520062] traps: nfsrahead[173] general protection fault ip:7fca37d52f9b sp:7ffd6397c578 error:0 in libc.so[4bf9b,7fca37d19000+6a000]
[    1.526911] udevd[167]: '/usr/libexec/nfsrahead 1:11' [175] terminated by signal 11 (Segmentation fault)
[    1.527274] traps: nfsrahead[169] general protection fault ip:7fdfa34e8f9b sp:7fffad0c0e68 error:0 in libc.so[4bf9b,7fdfa34af000+6a000]
[    1.527828] traps: nfsrahead[170] general protection fault ip:7ff367ae1f9b sp:7ffca27b7958 error:0 in libc.so[4bf9b,7ff367aa8000+6a000]
[    1.527927] udevd[162]: '/usr/libexec/nfsrahead 11:0' [170] terminated by signal 11 (Segmentation fault)
[    1.528466] traps: nfsrahead[172] general protection fault ip:7f065d110f9b sp:7fff1b31a278 error:0 in libc.so[4bf9b,7f065d0d7000+6a000]
[    1.529105] traps: nfsrahead[176] general protection fault ip:7f4527694f9b sp:7ffe7ccacf18 error:0
[    1.529299] udevd[154]: '/usr/libexec/nfsrahead 1:10' [172] terminated by signal 11 (Segmentation fault)

https://autobuilder.yoctoproject.org/valkyrie/#/builders/3/builds/3410
https://autobuilder.yoctoproject.org/valkyrie/#/builders/6/builds/3379

Can you have a look at the issue?

Thanks,
Mathieu

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

RE: [OE-core][PATCH] nfs-utils: upgrade 2.8.5 -> 2.8.6

[Marko, Peter]

This has currently very low priority for me.
I will be able to look at it in about 4 weeks when my wrynose activities are finished.

Peter


> -----Original Message-----
> From: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
> Sent: Friday, March 13, 2026 11:32
> To: Marko, Peter (FT D EU SK BFS1) <Peter.Marko@siemens.com>;
> openembedded-core@lists.openembedded.org
> Subject: Re: [OE-core][PATCH] nfs-utils: upgrade 2.8.5 -> 2.8.6
> 
> On Thu Mar 12, 2026 at 9:04 PM CET, Peter Marko via lists.openembedded.org
> wrote:
> > From: Peter Marko <peter.marko@siemens.com>
> >
> > Fixes CVE-2025-12801 per [1].
> >
> > [1] https://security-tracker.debian.org/tracker/CVE-2025-12801
> >
> > Signed-off-by: Peter Marko <peter.marko@siemens.com>
> > ---
> 
> Hi Peter,
> 
> Thanks for the upgrade.
> 
> It looks like this is having issues with musl:
> [    1.485154] udevd[147]: starting version 3.2.14
> [    1.489350] usb 2-2: new high-speed USB device number 3 using ehci-pci
> [    1.492825] udevd[148]: starting eudev-3.2.14
> [    1.519296] traps: nfsrahead[175] general protection fault ip:7f51bd8fbf9b
> sp:7fffd3b63708 error:0 in libc.so[4bf9b,7f51bd8c2000+6a000]
> [    1.519391] traps: nfsrahead[174] general protection fault ip:7fd52597df9b
> sp:7ffd0db22588 error:0
> [    1.519389] traps: nfsrahead[171] general protection fault ip:7fa02af85f9b
> sp:7ffedb159978 error:0 in libc.so[4bf9b,7fa02af4c000+6a000]
> [    1.520062] traps: nfsrahead[173] general protection fault ip:7fca37d52f9b
> sp:7ffd6397c578 error:0 in libc.so[4bf9b,7fca37d19000+6a000]
> [    1.526911] udevd[167]: '/usr/libexec/nfsrahead 1:11' [175] terminated by signal
> 11 (Segmentation fault)
> [    1.527274] traps: nfsrahead[169] general protection fault ip:7fdfa34e8f9b
> sp:7fffad0c0e68 error:0 in libc.so[4bf9b,7fdfa34af000+6a000]
> [    1.527828] traps: nfsrahead[170] general protection fault ip:7ff367ae1f9b
> sp:7ffca27b7958 error:0 in libc.so[4bf9b,7ff367aa8000+6a000]
> [    1.527927] udevd[162]: '/usr/libexec/nfsrahead 11:0' [170] terminated by signal
> 11 (Segmentation fault)
> [    1.528466] traps: nfsrahead[172] general protection fault ip:7f065d110f9b
> sp:7fff1b31a278 error:0 in libc.so[4bf9b,7f065d0d7000+6a000]
> [    1.529105] traps: nfsrahead[176] general protection fault ip:7f4527694f9b
> sp:7ffe7ccacf18 error:0
> [    1.529299] udevd[154]: '/usr/libexec/nfsrahead 1:10' [172] terminated by signal
> 11 (Segmentation fault)
> 
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/3/builds/3410
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/6/builds/3379
> 
> Can you have a look at the issue?
> 
> Thanks,
> Mathieu
> 
> --
> Mathieu Dubois-Briand, Bootlin
> Embedded Linux and Kernel engineering
> https://bootlin.com