[Midnightbsd-cvs] src [7338] trunk/UPDATING: security

[laffer1 at midnightbsd.org]

Revision: 7338
          http://svnweb.midnightbsd.org/src/?rev=7338
Author:   laffer1
Date:     2015-09-30 09:11:05 -0400 (Wed, 30 Sep 2015)
Log Message:
-----------
security

Modified Paths:
--------------
    trunk/UPDATING

Modified: trunk/UPDATING
===================================================================
--- trunk/UPDATING	2015-09-30 13:10:39 UTC (rev 7337)
+++ trunk/UPDATING	2015-09-30 13:11:05 UTC (rev 7338)
@@ -1,5 +1,11 @@
 Updating Information for MidnightBSD users.
 
+20150930:
+	In rpcbind(8), netbuf structures are copied directly, which would result in
+	two netbuf structures that reference to one shared address buffer.  When one
+	of the two netbuf structures is freed, access to the other netbuf structure
+	would result in an undefined result that may crash the rpcbind(8) daemon.
+
 20150926:
 	libmport now supports @preexec, @postexec, @preunexec and @postunexec
 	to replace @exec and @unexec.