[SECURITY] Fedora 8 Update: libtirpc-0.1.7-15.fc8

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1017
2008-03-06 16:10:54
--------------------------------------------------------------------------------

Name        : libtirpc
Product     : Fedora 8
Version     : 0.1.7
Release     : 15.fc8
URL         : http://nfsv4.bullopensource.org/
Summary     : Transport Independent RPC Library
Description :
This package contains SunLib's implementation of transport-independent
RPC (TI-RPC) documentation.  This library forms a piece of the base of
Open Network Computing (ONC), and is derived directly from the
Solaris 2.3 source.

TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V
Transport Layer Interface (TLI) or an equivalent X/Open Transport Interface
(XTI).  TI-RPC is on-the-wire compatible with the TS-RPC, which is supported
by almost 70 vendors on all major operating systems.  TS-RPC source code
(RPCSRC 4.0) remains available from several internet sites.

--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2008 Steve Dickson  <steved at redhat.com> 0.1.7-15
- Protect from buffer overflow in the GSS code. (bz 362121)
* Mon Dec 17 2007 Steve Dickson  <steved at redhat.com> 0.1.7-14
- Fixed typo in /etc/netconfig file (bz 414471)
* Thu Oct 25 2007 Steve Dickson  <steved at redhat.com> 0.1.7-13
- Added a check for the ARM arch (bz 351071)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #250973 - CVE-2007-3999 krb5 RPC library buffer overflow
        https://bugzilla.redhat.com/show_bug.cgi?id=250973
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update libtirpc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------