-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Package : rpcbind Version : 0.2.0-8+deb7u2 CVE ID : CVE-2017-8779 Debian Bug : 861835
Guido Vranken discovered that incorrect memory management in libtirpc, a transport-independent RPC library used by rpcbind and other programs may result in denial of service via memory exhaustion (depending on memory management settings). For Debian 7 "Wheezy", these problems have been fixed in version 0.2.0-8+deb7u2. We recommend that you upgrade your rpcbind packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlkTAOxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQACgkQ2a0UuVE7 UeTtUBAAofUiRgeQTILuX7MZ5get/Ig4KhhUMTY8Atmy/oKz/1064oYvqeUa33ZK AsVEeqYloW/v0UiOUwD86ZS5kDj/VbYdUgbSW2xZxVftvGvLRQZAUN5B6F0FMMN7 jeRZP3UxQWXHB0SF3iQ7zGwsXdyTBXdWLYyukx0Nsexg0vL1Vsy0LG1h9rvyjFUb G1BC2RUqg+iIaXKAUVZJ9UsoYtx9twkv6hn4C2/5n+r65sikcqsCZLB8AKgvwMRN vHFsZ0FGGt5ReeTFaJK1Du3+PEG2zttXEABCy/loiZb0WzwpUQuuzGr+b6o7nXpJ C0HJ29souVLL/QcZmRimbhwhNrKAtjCpbBe41jXBC9FrluIa6jf2w4CuOvhQm3in HUnmgwrheNxgS8gi0Qtlh/fJCooGK/VFTHisxY9aR4u2EZ85kGUKqiC8Fnw2qG6p JJW89Rg3yPLORXTH4/FD6vahHWTrT9firugxWQ6KV/XfmFGK1rgW5Z8N/beWqe8L LzPX6OHCgrUGSN5YIJyeCKMOtRUIqRG/RJrbZcLbbUoh8XPJ7GciV2e8vi00Or7S l4zthiV4SC3s3VfuzBU0fgMwR+iR7cgasIMXRNLGAd+I0+RqIPyheTeUpFrYTdNJ CPoEqSKBj3A+1MLFRqBxV/ZRVEpDIl+qNevTobp1Jypbj9NbZv4= =AAFy -----END PGP SIGNATURE-----
