< back to search

shield Recommended update for libtirpc
SUSE-SUSE-MicroOS-5.2-2023-4310

This Update for libtirpc to 1.3.4, fixing the following issues: Update to 1.3.4 (bsc#1199467) * binddynport.c honor ip_local_reserved_ports - replaces: binddynport-honor-ip_local_reserved_ports.patch * gss-api: expose gss major/minor error in authgss_refresh() * rpcb_clnt.c: Eliminate double frees in delete_cache() * rpcb_clnt.c: memory leak in destroy_addr * portmapper: allow TCP-only portmapper * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep * clnt_raw.c: fix a possible null pointer dereference * bindresvport.c: fix a potential resource leakage Update to 1.3.3: * Fix DoS vulnerability in libtirpc - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch * _rpc_dtablesize: use portable system call * libtirpc: Fix use-after-free accessing the error number * Fix potential memory leak of parms.r_addr - replaces 0001-fix-parms.r_addr-memory-leak.patch * rpcb_clnt.c add mechanism to try v2 protocol first - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch * Eliminate deadlocks in connects with an MT environment * clnt_dg_freeres() uncleared set active state may deadlock * thread safe clnt destruction * SUNRPC: mutexed access blacklist_read state variable * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c Update to 1.3.2: * Replace the final SunRPC licenses with BSD licenses * blacklist: Add a few more well known ports * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS Update to 1.3.1: * Remove AUTH_DES interfaces from auth_des.h The unsupported AUTH_DES authentication has be compiled out since commit d918e41d889 (Wed Oct 9 2019) replaced by API routines that return errors. * svc_dg: Free xp_netid during destroy * Fix memory management issues of fd locks * libtirpc: replace array with list for per-fd locks * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf * __rpc_dtbsize: rlim_cur instead of rlim_max * pkg-config: use the correct replacements for libdir/includedir

  • Release Date
    Oct 31 2023
  • References
    Bugzilla: 1196647
  • Type
    recommended
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64
  • Packages
    libtirpc
    Transport Independent RPC Library
    1.3.4-150300.3.20.1 lock src
    libtirpc-netconfig
    Netconfig configuration file for TI-RPC Library
    1.3.4-150300.3.20.1 lock rpm
    libtirpc3
    Transport Independent RPC Library
    1.3.4-150300.3.20.1 lock rpm
SUSE Linux Enterprise Micro 5.2 s390x
  • Packages
    libtirpc
    Transport Independent RPC Library
    1.3.4-150300.3.20.1 lock src
    libtirpc-netconfig
    Netconfig configuration file for TI-RPC Library
    1.3.4-150300.3.20.1 lock rpm
    libtirpc3
    Transport Independent RPC Library
    1.3.4-150300.3.20.1 lock rpm
SUSE Linux Enterprise Micro for Rancher 5.2 x86_64
  • Packages
    libtirpc
    Transport Independent RPC Library
    1.3.4-150300.3.20.1 lock src
    libtirpc-netconfig
    Netconfig configuration file for TI-RPC Library
    1.3.4-150300.3.20.1 lock rpm
    libtirpc3
    Transport Independent RPC Library
    1.3.4-150300.3.20.1 lock rpm