Package name
Advisory ID
Affected versions
8.2 i586 , CS2.1 i586 , 8.2 i586 , 9.0 i586 , CS2.1 x86_64

Problem description

A vulnerability was found in versions of ypserv prior to version 2.7. If a malicious client were to query ypserv via TCP and subsequently ignore the server's response, ypserv will block attempting to send the reply. The result is that ypserv will fail to respond to other client requests. ypserv 2.7 and above have been altered to fork a child for each client request, which prevents any one request from causing the server to block.

Updated packages

8.2 i586

 234b379b94c17856c12f14a0ba51c00d  ppc/8.2/RPMS/ypserv-2.8-1.1mdk.ppc.rpm
136a45e21de7bb41301c103c5a192ddb  ppc/8.2/SRPMS/ypserv-2.8-1.1mdk.src.rpm

CS2.1 i586

 18a65b2a2cf94da05475a1d8350c0f81  corporate/2.1/RPMS/ypserv-2.8-1.1mdk.i586.rpm
136a45e21de7bb41301c103c5a192ddb  corporate/2.1/SRPMS/ypserv-2.8-1.1mdk.src.rpm

8.2 i586

 8bb9bdd63ddac248fa487459ffd49af1  8.2/RPMS/ypserv-2.8-1.1mdk.i586.rpm
136a45e21de7bb41301c103c5a192ddb  8.2/SRPMS/ypserv-2.8-1.1mdk.src.rpm

9.0 i586

 18a65b2a2cf94da05475a1d8350c0f81  9.0/RPMS/ypserv-2.8-1.1mdk.i586.rpm
136a45e21de7bb41301c103c5a192ddb  9.0/SRPMS/ypserv-2.8-1.1mdk.src.rpm

CS2.1 x86_64

 e47cdbc94ced265da0fd1613c5f103be  x86_64/corporate/2.1/RPMS/ypserv-2.8-1.1mdk.x86_64.rpm
136a45e21de7bb41301c103c5a192ddb  x86_64/corporate/2.1/SRPMS/ypserv-2.8-1.1mdk.src.rpm