[SECURITY] [DLA 937-1] rpcbind security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package : rpcbind
Version : 0.2.0-8+deb7u2
CVE ID : CVE-2017-8779
Debian Bug : 861835
Guido Vranken discovered that incorrect memory management in libtirpc,
a transport-independent RPC library used by rpcbind and other programs
may result in denial of service via memory exhaustion (depending on
memory management settings).
For Debian 7 "Wheezy", these problems have been fixed in version
0.2.0-8+deb7u2.
We recommend that you upgrade your rpcbind packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=AAFy
-----END PGP SIGNATURE-----
Reply to: