--===============7426014798277738215==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="3MwIy2ne0vdjdPXF"
Content-Disposition: inline


--3MwIy2ne0vdjdPXF
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-4986-2
June 09, 2021

rpcbind vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM

Summary:

rpcbind could be made to consume resources and crash if it received
specially crafted network traffic.

Software Description:
- rpcbind: converts RPC program numbers into universal addresses

Details:

USN-4986-1 fixed a vulnerability in rpcbind. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

 It was discovered that rpcbind incorrectly handled certain large data
 sizes. A remote attacker could use this issue to cause rpcbind to consume
 resources, leading to a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  rpcbind                         0.2.3-0.2ubuntu0.16.04.1+esm1

Ubuntu 14.04 ESM:
  rpcbind                         0.2.1-2ubuntu2.2+esm1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-4986-2
  https://ubuntu.com/security/notices/USN-4986-1
  CVE-2017-8779

--3MwIy2ne0vdjdPXF
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=hs1A
-----END PGP SIGNATURE-----

--3MwIy2ne0vdjdPXF--


--===============7426014798277738215==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce