[Midnightbsd-cvs] www [639] trunk/security/index.html: 0.7.1 release

[laffer1 at midnightbsd.org]

Revision: 639
          http://svnweb.midnightbsd.org/www/?rev=639
Author:   laffer1
Date:     2015-10-03 14:22:35 -0400 (Sat, 03 Oct 2015)
Log Message:
-----------
0.7.1 release

Modified Paths:
--------------
    trunk/security/index.html

Modified: trunk/security/index.html
===================================================================
--- trunk/security/index.html	2015-10-03 18:20:41 UTC (rev 638)
+++ trunk/security/index.html	2015-10-03 18:22:35 UTC (rev 639)
@@ -32,6 +32,22 @@
 				<img src="../images/oxygen/security32.png" alt=" "/> Security Updates
 			</h2>
 
+			<blockquote class="bluebox" id="a20150930">
+				<h3>
+					September 30, 2015
+				</h3>
+
+				<p>
+					0.7.1 RELEASE
+
+				<p> rpcbind(8) remote denial of service
+
+				<p>In rpcbind(8), netbuf structures are copied directly, which would result in
+					two netbuf structures that reference to one shared address buffer. When one
+					of the two netbuf structures is freed, access to the other netbuf structure
+					would result in an undefined result that may crash the rpcbind(8) daemon.</p>
+			</blockquote>
+
 			<blockquote class="bluebox" id="a20150825">
 				<h3>
 					August 25, 2015