Date: Tue, 28 Aug 2018 13:30:18 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 230977] net/nbd-server: severely outdated Message-ID: <bug-230977-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D230977 Bug ID: 230977 Summary: net/nbd-server: severely outdated Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: bofh@freebsd.org Reporter: wouter@grep.be Assignee: bofh@freebsd.org Flags: maintainer-feedback?(bofh@freebsd.org) I'm upstream for nbd-server (and the Linux nbd-client, but that doesn't app= ly to FreeBSD) The last update of nbd-server in FreeBSD dates from 2013. Upstream developm= ent has not stalled since; the latest version of nbd-server is currently 3.18 (= vs 3.5 in FreeBSD). The last update that was not a drive-by update dates from = even longer before that (I gave up looking when I reached 2008). Everything before 3.11 is vulnerable to CVE-2015-0847 (unsafe signal handli= ng, possibility of a DoS). Additionally, more recent versions of NBD support TLS (through GnuTLS). It would be useful if nbd-server would be updated to something more recent. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-230977-7788>