Changelog for
libtirpc-devel-1.3.3-1.3.x86_64.rpm :
* Fri Aug 19 2022 Dirk Müller
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
* Fix DoS vulnerability in libtirpc
* _rpc_dtablesize: use portable system call
* libtirpc: Fix use-after-free accessing the error number
* Fix potential memory leak of parms.r_addr
* rpcb_clnt.c add mechanism to try v2 protocol first
* Eliminate deadlocks in connects with an MT environment
* clnt_dg_freeres() uncleared set active state may deadlock
* thread safe clnt destruction
* SUNRPC: mutexed access blacklist_read state variable
* SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
* Wed Sep 15 2021 Petr Vorel - Backport DoS vulnerability fix 0001-Fix-DoS-vulnerability-in-libtirpc.patch- Replace %setup with %autosetup
* Sun May 16 2021 Dirk Müller - update to 1.3.2:
* Replace the final SunRPC licenses with BSD licenses
* blacklist: Add a few more well known ports
* libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
* Wed Dec 23 2020 Dominique Leuenberger - Fix sed call to fixup libtirpc.pc.in: as we want our tirpc to be a transparent drop-in-replacement for rpc, we move the files from /usr/include/tirpc to /usr/include. Due to an upstream change in libtirpc.pc.in, though, the existing sed call no longer matched and no longer corrected the information according to our package.
* Wed Dec 02 2020 Petr Vorel - Update to libtirpc 1.3.1 - Remove AUTH_DES interfaces from auth_des.h The unsupported AUTH_DES authentication has be compiled out since commit d918e41d889 (Wed Oct 9 2019) replaced by API routines that return errors. - svc_dg: Free xp_netid during destroy - Fix memory management issues of fd locks - libtirpc: replace array with list for per-fd locks - __svc_vc_dodestroy: fix double free of xp_ltaddr.buf - __rpc_dtbsize: rlim_cur instead of rlim_max - pkg-config: use the correct replacements for libdir/includedir
* Thu Oct 29 2020 Ludwig Nussel - install libraries to %{_libdir} (boo#1029961)
* Wed Apr 15 2020 Petr Vorel - Update to libtirpc 1.2.6 - Drop patches all patches backported from this release (0001-Add-authdes_seccreate-stub.patch, 0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)
* Wed Feb 05 2020 Petr Vorel - Backport upstream fix daed7ee (\"Avoid multiple-definiton with gcc -fno-common\") to fix build error with gcc flag -fno-common (bsc#1160875). Tested on gcc-9 and gcc-10. 0001-Avoid-multiple-definiton-with-gcc-fno-common.patch
* Fri Jan 31 2020 Stefan Brüns - Skip unneeded autogen.sh run (configure is up-to-date), drop dependencies: libtool, autoconf- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)
* Fri Jan 03 2020 Petr Vorel - Update to libtirpc 1.2.5 - A number resource leaks and other issues were fix which were identified by a Coverity Scan. - The AUTH_DES authentication has been deprecated. If any of those routines are called, they will fail immediately. - numerous bug fixes- Package changes: - Build without AUTH_DES authentication - Add patch from next release 0001-Add-authdes_seccreate-stub.patch (a86b4ff Add authdes_seccreate() stub) - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch) - Drop patches all patches backported from this release (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch, 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch, 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)
* Tue Nov 12 2019 Petr Vorel - Fix previous version: - actually delete 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch) - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch (renamed from 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)
* Wed Oct 16 2019 Petr Vorel - Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release) - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect upstream changes after 1.1.4 release - remove /etc/bindresvport.blacklist as it\'s still supported by glibc although it\'s not compiled with --enable-obsolete-rpc- Drop patches accepted in previous releases or not needed - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4) - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory) - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1) - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch (backport of 25d38d7, libtirpc-1-0-4-rc1) - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch (backport of 145272c, libtirpc-1-0-4-rc2)- Add fixes from upcomming release - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
* Mon Mar 11 2019 Michal Suchanek - Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096). - Add upstream patch 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
* Thu Apr 12 2018 Thomas.BlumeAATTsuse.com- fix socket leak introduced by change-rpc-protocol-version-order patch (bsc#1087925) - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
* Thu Apr 05 2018 kukukAATTsuse.de- Revert binddynport changes as they break backward compatibility [brc#1562169]. - add 002-revert-binddynport.patch
* Thu Mar 15 2018 jengelhAATTinai.de- Remove ineffective --with-pic.
* Wed Mar 14 2018 kukukAATTsuse.de- Update to libtirpc 1.0.3 - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429) - Avoid choosing reserved ports in legacy RPC APIs - rpcinfo: change order of version to be tried to 4, 3, 2 - includes 003-rpc-types.patch - includes 004-replace-bzero-with-memset.patch - includes 005-missing-includes.patch - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch - includes decls.patch- Drop COPYING.GPLv2, GPLv2 code was removed from library
* Mon Mar 05 2018 kukukAATTsuse.de- Adjust include directory [bsc#1083902]
* Thu Feb 22 2018 fvogtAATTsuse.com- Use %license (boo#1082318)
* Mon Jan 15 2018 kukukAATTsuse.de- Move /usr/include/tirpc to /usr/include