libtirpc-0.2.1-6.AXS4

エラータID: AXSA:2013-481:01

Release date: 
Friday, June 21, 2013 - 14:41
Subject: 
libtirpc-0.2.1-6.AXS4
Affected Channels: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Asianux Server 4 for ppc
Severity: 
High
Description: 

This package contains SunLib's implementation of transport-independent RPC (TI-RPC) documentation. This library forms a piece of the base of Open Network Computing (ONC), and is derived directly from the Solaris 2.3 source.

TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V Transport Layer Interface (TLI) or an equivalent X/Open Transport Interface (XTI). TI-RPC is on-the-wire compatible with the TS-RPC, which is supported by almost 70 vendors on all major operating systems. TS-RPC source code (RPCSRC 4.0) remains available from several internet sites.

Security issues fixed with this release:

• CVE-2013-1950
No information available at the time of writing, please use the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2013-1950
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.


Additional Info: 

N/A

Download: 

SRPMS
  1. libtirpc-0.2.1-6.AXS4.src.rpm
    MD5: e6b299b1c58d76de9f341672800eae5a
    SHA-256: 7511d0343bdf6f5d2be9bf679de6b33e19d2b818f429703cc0252279faab6d34
    Size: 440.47 kB

Asianux Server 4 for x86
  1. libtirpc-0.2.1-6.AXS4.i686.rpm
    MD5: d0e968824013d258927c734cb798290a
    SHA-256: 611f232a385ea6c1e9576f9e1a75c8a915322e0a4c78a4945ddf09bed48b9077
    Size: 77.12 kB

Asianux Server 4 for x86_64
  1. libtirpc-0.2.1-6.AXS4.x86_64.rpm
    MD5: b3a88991ca1d10d25a9ba76365327792
    SHA-256: 178d535b32bdea0f6eeb1300ae5349eb073278c3b83e22e9f4c2f2e6c20530dd
    Size: 77.32 kB
  2. libtirpc-0.2.1-6.AXS4.i686.rpm
    MD5: d0e968824013d258927c734cb798290a
    SHA-256: 611f232a385ea6c1e9576f9e1a75c8a915322e0a4c78a4945ddf09bed48b9077
    Size: 77.12 kB