← Back to all sparks
N

nfs-ganesha

INFRA · APIS
Velocity5.0

NFS server running in user space

NFS-Ganesha 15.11 closes a batch of crash and memory-safety bugs a week after 15.10

nfsstoragecephinteroperabilitysecurity-hardeningopen-source
◆Current state
NFS-Ganesha is a userspace NFS server used with Ceph, GPFS and clustered storage. 15.10 added NFSv4.1 named attributes, Samba-style masks and macOS client handling; 15.11, four days later, is a memory-safety release fixing a use-after-free in open, a heap overflow in the gRPC client manager, several NULL dereferences and cross-client delegation revocation checks.
◆Where it's heading
The 15.x line alternates small feature drops with hardening releases on a roughly weekly beat, and the newer gRPC management surface is now drawing its own fixes. The input-validation work that began in 15.8 is extending from XDR parsing into state and export management.
◆Prediction
Expect 15.12 within one to two weeks, most likely another fix-heavy release with an ntirpc pullup.

◆Recent moves

  1. 7d ago

    NFS-Ganesha 15.11: use-after-free, heap overflow and crash fixes

    A hardening release that fixes a use-after-free in open, a heap overflow in the gRPC client listing, NULL dereferences in export handling and delegation revocation checks across clients. Operators exposing the gRPC management API have the clearest reason to upgrade.

    View source ↗
  2. 10d ago

    NFS-Ganesha 15.10: named attributes, Samba-style masks, macOS fixes

    15.10 brings real options after a run of fix releases: NFSv4.1 named attributes stored as xattrs, Samba-style masks and forced modes, and macOS client handling. XDR validation continues alongside.

    View source ↗
  3. 25d ago

    NFS-Ganesha 15.9: 9P removed, session use-after-free fixed

    Removing 9P is a scope cut anyone still using that protocol needs to know about, and a session use-after-free and a Ceph cross-filesystem handle check are fixed. Input validation work continues in XDR.

    View source ↗
  4. 1mo ago

    NFS-Ganesha 15.8: XDR input checks and GPFS fixes

    Rejects empty file handles, client IDs and owners in XDR, with GPFS and statd fixes. Continues the input-hardening run.

    View source ↗
  5. 1mo ago

    NFS-Ganesha 15.7: offset overflow fix and GPFS readdir speedup

    An integer overflow in read and write offset checks is fixed and GPFS readdir gets faster, with an ntirpc pullup. A mix of hardening and performance.

    View source ↗
  6. 1mo ago

    NFS-Ganesha 15.6: Ceph ACL inheritance and aligned I/O buffers

    Two Ceph ACL inheritance fixes and page-aligned I/O buffers. A short maintenance release.

    View source ↗