[Pkg-libvirt-maintainers] Bug#1081981: Bug#1081981: libvirt-daemon-driver-storage: introduces hard dependency on NFS and rpcbind
Andrea Bolognani
eof at kiyuko.org
Sun Oct 20 10:48:21 BST 2024
On Tue, Sep 17, 2024 at 08:18:28AM +0200, Ansgar wrote:
> Package: libvirt-daemon-driver-storage
> Version: 10.7.0-2
> Severity: important
>
> libvirt (via libvirt-daemon-driver-storage) gained a new hard
> dependency on nfs-common and rpcbind. Neither is required on systems
> not using NFS.
>
> In addition rpcbind provides a network service and thus potentially
> remote security holes. I think a hard dependency on such services
> should be avoided.
>
> I'm fairly confident one can use libvirt without NFS. My laptop
> certainly doesn't use NFS :-)
Thanks for the report. [1] should take care of it.
[1] https://salsa.debian.org/libvirt-team/libvirt/-/merge_requests/237
--
Andrea Bolognani <eof at kiyuko.org>
Resistance is futile, you will be garbage collected.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-libvirt-maintainers/attachments/20241020/ce4dd38c/attachment.sig>
More information about the Pkg-libvirt-maintainers
mailing list