[SECURITY] Fedora 9 Update: libtirpc-0.1.7-20.fc9
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9204
2008-10-30 11:39:02
--------------------------------------------------------------------------------
Name : libtirpc
Product : Fedora 9
Version : 0.1.7
Release : 20.fc9
URL : http://nfsv4.bullopensource.org/
Summary : Transport Independent RPC Library
Description :
This package contains SunLib's implementation of transport-independent
RPC (TI-RPC) documentation. This library forms a piece of the base of
Open Network Computing (ONC), and is derived directly from the
Solaris 2.3 source.
TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V
Transport Layer Interface (TLI) or an equivalent X/Open Transport Interface
(XTI). TI-RPC is on-the-wire compatible with the TS-RPC, which is supported
by almost 70 vendors on all major operating systems. TS-RPC source code
(RPCSRC 4.0) remains available from several internet sites.
--------------------------------------------------------------------------------
Update Information:
CVE-2008-4619
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 27 2008 Steve Dickson <steved(a)redhat.com> 0.1.7-20
- Fix bad assumption taddr2uaddr processing that
caused a segfault (bz468014)
* Tue Sep 16 2008 Steve Dickson <steved(a)redhat.com> 0.1.7-19
- Added super-H(sh3,sh4) architecture support
- Updated COPYING with new license agreement
- Fix incorrect sizeof() in __rpc_getbroadifs
- Fix for taddr2addr conversion bug of local addresses
- Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
src/clnt_raw.c
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #468014 - CVE-2008-4619 libtirpc: rpcbind DoS in the taddr2uaddr XDR_DECODE
https://bugzilla.redhat.com/show_bug.cgi?id=468014
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libtirpc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------