SUSE-SU-2017:1336-1

Details

Description of the patch:

This update for rpcbind fixes the following issues:

CVE-2017-8779: A crafted UDP package could lead rcpbind to remote denial-of-service (bsc#1037559)

Affected Packages

rpcbind

SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise High Performance Computing 12 SP1SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server for SAP Applications 12 SP1

Fixed in:

0:0.2.1_rc4-17.3.1

References

ADVISORY

https://bugzilla.suse.com/1037559

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2017-May/002895.html

ADVISORY

https://www.suse.com/security/cve/CVE-2017-8779/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2017/suse-su-20171336-1/