[SAC] Fwd: [support.osuosl.org #29763] projects.osgeo.osuosl.org portmapper vulnerability

[Jürgen E. Fischer]

Hi Alex,

On Fri, 29. Sep 2017 at 16:34:32 -0700, Alex M wrote:
> Any have any idea what this is about? Perhaps someone could respond to
> OSUOSL asking about which host/IP is in question?

portmap was running on osgeo6, but I didn't find any traces of nfs activity -
so I simply removed nfs-common (which contains portmap on jessie).

It's also running on projects although there's no apparent trace of use there
either - removed portmap (also the package name on squeeze).

download, tracsvn, webextra & qgis didn't have it.


Jürgen

-- 
Jürgen E. Fischer           norBIT GmbH             Tel. +49-4931-918175-31
Dipl.-Inf. (FH)             Rheinstraße 13          Fax. +49-4931-918175-50
Software Engineer           D-26506 Norden             http://www.norbit.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 827 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20170930/0b8134f0/attachment.sig>