** Description changed: The new nfs-utils in Debian adds dependencies on libtirpc and rpcbind for IPv6. One is a network-sensitive library and the other is a network server, so I guess we'll want some careful review. + + + == libtirpc == + * Availability: Package is in universe, synced from Debian + * Rationale: Dependency of rpcbind which is required for IPv6 support + * Security: + ** No CVE: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=tirpc + ** 2 old (2008) secunia advisories: http://secunia.com/advisories/product/17898/?task=advisories (fixed by upstream) + ** Ubuntu CVE tracker: none + ** SUID/SGID binaries: none + ** Executables in sbin: none + ** Daemons: none + * QA: + ** Just a library with two binary packages (one for the lib and one -dev), no debconf question or configuration. + ** No bug in Ubuntu: https://launchpad.net/ubuntu/+source/libtirpc/+bugs + ** No critical bugs in Debian: http://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=no&src=libtirpc + ** Package is maintained in Debian though not very active (last upload in December, moved to testing in February) + ** Build-depends on universe package "libgss-dev" which seems useless and should be dropped + *** A rebuild without the build-depend worked fine + *** Output of ldd is identical + *** Output of strings is identical
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/781516 Title: [MIR] libtirpc, rpcbind -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
