SUSE-RU-2023:4310-1: Recommended update for libtirpc
This Update for libtirpc to 1.3.4, fixing the following issues: Update to 1.3.4 (bsc#1199467) binddynport.c honor iplocalreservedports replaces: binddynport-honor-iplocalreservedports.patch gss-api: expose gss major/minor error in authgssrefresh() rpcbclnt.c: Eliminate double frees in deletecache() rpcbclnt.c: memory leak in destroyaddr portmapper: allow TCP-only portmapper getnetconfigent: avoid potential DoS issue by removing unnecessary sleep clntraw.c: fix a possible null pointer dereference bindresvport.c: fix a potential resource leakage Update to 1.3.3: Fix DoS vulnerability in libtirpc replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch rpcdtablesize: use portable system call libtirpc: Fix use-after-free accessing the error number Fix potential memory leak of parms.raddr replaces 0001-fix-parms.raddr-memory-leak.patch rpcbclnt.c add mechanism to try v2 protocol first preplaces: 0001-rpcbclnt.c-config-to-try-protocolversion-2-first.patch Eliminate deadlocks in connects with an MT environment clntdgfreeres() uncleared set active state may deadlock thread safe clnt destruction SUNRPC: mutexed access blacklistread state variable SUNRPC: MT-safe overhaul of address cache management in rpcbclnt.c Update to 1.3.2: Replace the final SunRPC licenses with BSD licenses blacklist: Add a few more well known ports libtirpc: disallow calling authrefresh from clntcall with RPCSECGSS Update to 1.3.1: Remove AUTHDES interfaces from authdes.h The unsupported AUTHDES authentication has be compiled out since commit d918e41d889 (Wed Oct 9 2019) replaced by API routines that return errors. svcdg: Free xpnetid during destroy Fix memory management issues of fd locks libtirpc: replace array with list for per-fd locks svcvcdodestroy: fix double free of xpltaddr.buf rpcdtbsize: rlimcur instead of rlimmax pkg-config: use the correct replacements for libdir/includedir
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libtirpc-netconfigto a version that resolves this vulnerability.Fixed in 1.3.4-150300.3.20.1 - Upgrade
Upgrade
suse/libtirpc3to a version that resolves this vulnerability.Fixed in 1.3.4-150300.3.20.1 - Upgrade
Upgrade
suse/libtirpc3-debuginfoto a version that resolves this vulnerability.Fixed in 1.3.4-150300.3.20.1 - Upgrade
Upgrade
suse/libtirpc-debugsourceto a version that resolves this vulnerability.Fixed in 1.3.4-150300.3.20.1 - Upgrade
Upgrade
suse/libtirpc-develto a version that resolves this vulnerability.Fixed in 1.3.4-150300.3.20.1 - Upgrade
Upgrade
suse/libtirpc3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-1.3.4-150300.3.20.1 - Upgrade
Upgrade
suse/libtirpc3to a version that resolves this vulnerability.Fixed in 32bit-1.3.4-150300.3.20.1 - Upgrade
Upgrade
suse/libtirpc3to a version that resolves this vulnerability.Fixed in 64bit-1.3.4-150300.3.20.1 - Upgrade
Upgrade
suse/libtirpc3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-1.3.4-150300.3.20.1 - Upgrade
Upgrade
libtirpcto a version that resolves this vulnerability.Fixed in 1.3.4
Event History
Frequently Asked Questions
Which systems and packages are covered by this update?
The update applies to libtirpc3, libtirpc-netconfig, libtirpc3-debuginfo, libtirpc-debugsource, and libtirpc-devel on openSUSE Leap 15.3 and openSUSE Leap Micro 5.3. Listed architectures include aarch64, ppc64le, s390x, x86_64, i586, and aarch64_ilp32 where applicable.
What security-relevant failure modes are addressed?
The update includes fixes for a denial-of-service vulnerability as well as use-after-free, double-free, null-pointer dereference, potential resource leakage, and memory-leak issues. It also includes thread-safety and deadlock fixes in RPC-related code.
What version does the update provide?
The update moves libtirpc to version 1.3.4. It also incorporates changes from the 1.3.3 update, including the denial-of-service fix.