[El-errata] ELSA-2026-3938 Moderate: Oracle Linux 8 nfs-utils security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-3938

http://linux.oracle.com/errata/ELSA-2026-3938.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libnfsidmap-2.3.3-68.0.1.el8_10.i686.rpm
libnfsidmap-2.3.3-68.0.1.el8_10.x86_64.rpm
libnfsidmap-devel-2.3.3-68.0.1.el8_10.i686.rpm
libnfsidmap-devel-2.3.3-68.0.1.el8_10.x86_64.rpm
nfs-utils-2.3.3-68.0.1.el8_10.x86_64.rpm

aarch64:
libnfsidmap-2.3.3-68.0.1.el8_10.aarch64.rpm
libnfsidmap-devel-2.3.3-68.0.1.el8_10.aarch64.rpm
nfs-utils-2.3.3-68.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/nfs-utils-2.3.3-68.0.1.el8_10.src.rpm

Related CVEs:

CVE-2025-12801




Description of changes:

[2.3.3-68.0.1]
- nfsd: allow more than 64 backlogged connections
- spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 35173372]

[2.3.3-68]
- Add requires for selinux-policy (RHEL-127095)

[2.3.3-67]
- mountd: Minor refactor of get_rootfh() (RHEL-127095)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127095)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127095)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095)
  Resolves: CVE-2025-12801

[2.3.3-66]
- gssd: protect kerberos ticket cache access (RHEL-103627)

[2.3.3-65]
- nfsrahead: modify get_device_info logic (RHEL-108924)