Fedora 19 Update: libtirpc-0.2.3-4.fc19

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-22218
2013-11-27 03:58:17
--------------------------------------------------------------------------------

Name        : libtirpc
Product     : Fedora 19
Version     : 0.2.3
Release     : 4.fc19
URL         : http://nfsv4.bullopensource.org/
Summary     : Transport Independent RPC Library
Description :
This package contains SunLib's implementation of transport-independent
RPC (TI-RPC) documentation.  This library forms a piece of the base of
Open Network Computing (ONC), and is derived directly from the
Solaris 2.3 source.

TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V
Transport Layer Interface (TLI) or an equivalent X/Open Transport Interface
(XTI).  TI-RPC is on-the-wire compatible with the TS-RPC, which is supported
by almost 70 vendors on all major operating systems.  TS-RPC source code
(RPCSRC 4.0) remains available from several internet sites.

--------------------------------------------------------------------------------
Update Information:

Race on getnetconfig.c leads to crash during fclose, endnetconfig, getnetconfig

  Using tirpc (0.2.1-6) instead of the RPC functions in glibc there are segfaults on file operations, mostly on fclose() in endnetconfig() but sometimes on fgets() in getnetconfig().
Debugging they all seem to be due to NULL nc_file.

There are multiple threads involved, according to the included README the clnt_* functions should be thread safe. But there are  race condition here.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 25 2013 Steve Dickson <steved at redhat.com> 0.2.3-4
- Update to latest RC release: libtirpc-0-2-4-rc3 (bz 1034438)
* Mon Jul  1 2013 Steve Dickson <steved at redhat.com> 0.2.3-3
- Update to latest RC release: libtirpc-0-2-4-rc2
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1034438 - Race on getnetconfig.c leads to crash during fclose, endnetconfig, getnetconfig
        https://bugzilla.redhat.com/show_bug.cgi?id=1034438
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update libtirpc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------