From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:47828) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d6Y6t-0006m1-Je for guix-patches@gnu.org; Fri, 05 May 2017 03:57:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d6Y6p-0005Y8-7x for guix-patches@gnu.org; Fri, 05 May 2017 03:57:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:57153) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1d6Y6p-0005Y2-5k for guix-patches@gnu.org; Fri, 05 May 2017 03:57:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1d6Y6o-000815-VV for guix-patches@gnu.org; Fri, 05 May 2017 03:57:02 -0400 Subject: bug#26781: rpcbind, libtirpc CVE-2017-8779 Resent-Message-ID: From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) References: <20170505013227.GA6479@jasmine> Date: Fri, 05 May 2017 09:56:44 +0200 In-Reply-To: <20170505013227.GA6479@jasmine> (Leo Famulari's message of "Thu, 4 May 2017 21:32:27 -0400") Message-ID: <87inlfbutf.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Leo Famulari Cc: 26781@debbugs.gnu.org Leo Famulari skribis: > These patches update libtirpc and rpcbind to the latest release and fix > CVE-2017-8779 ("rpcbomb"). > > https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-8779 > https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-deni= al-of-service-patches/ Excellent. The 3 patches LGTM. Thank you Leo! Ludo=E2=80=99.