[Bug 230977] net/nbd-server: severely outdated

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=230977

            Bug ID: 230977
           Summary: net/nbd-server: severely outdated
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: bofh at freebsd.org
          Reporter: wouter at grep.be
          Assignee: bofh at freebsd.org
             Flags: maintainer-feedback?(bofh at freebsd.org)

I'm upstream for nbd-server (and the Linux nbd-client, but that doesn't apply
to FreeBSD)

The last update of nbd-server in FreeBSD dates from 2013. Upstream development
has not stalled since; the latest version of nbd-server is currently 3.18 (vs
3.5 in FreeBSD). The last update that was not a drive-by update dates from even
longer before that (I gave up looking when I reached 2008).

Everything before 3.11 is vulnerable to CVE-2015-0847 (unsafe signal handling,
possibility of a DoS). Additionally, more recent versions of NBD support TLS
(through GnuTLS).

It would be useful if nbd-server would be updated to something more recent.

-- 
You are receiving this mail because:
You are the assignee for the bug.