sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Re: [SM-Discuss] Security flaw in SunRPC XDR libraries

From: julian AT openit.de (Julian v. Bock)
To: Jon Svendsen <jon-sven AT frisurf.no>
Cc: Jonathan Evraire <evraire AT tuwg.com>, sm-discuss AT lists.ibiblio.org
Subject: Re: [SM-Discuss] Security flaw in SunRPC XDR libraries
Date: Tue, 06 Aug 2002 21:09:47 +0200

Hi

>>>>> "JS" == Jon Svendsen <jon-sven AT frisurf.no> writes:

JS> On Tue, 2002-08-06 at 19:32, Jonathan Evraire wrote:
>> Are we affected?

JS> Yes we are.

>> Can we easily become unaffected by patching the affected libraries
>> and recompiling everything?

JS> The appropriate fix will be to apply the attatched patch to glibc,
JS> and recompile it. It's unlikely that anything else should need to
JS> be recompiled, unless the sunrpc code is used in any statically
JS> linked binaries, which i doubt.

A glibc update will be included in the next update (today).

Julian

[SM-Discuss] Security flaw in SunRPC XDR libraries, Jonathan Evraire, 08/06/2002
- Re: [SM-Discuss] Security flaw in SunRPC XDR libraries, Jon Svendsen, 08/06/2002
  - Re: [SM-Discuss] Security flaw in SunRPC XDR libraries, Julian v. Bock, 08/06/2002
    - Re: [SM-Discuss] Security flaw in SunRPC XDR libraries, Jon Svendsen, 08/06/2002