OpenSLP: Multiple vulnerabilities

Background

OpenSLP is an open-source implementation of Service Location Protocol (SLP).

Description

Multiple vulnerabilities have been discovered in OpenSLP. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

Gentoo has discontinued support for OpenSLP. We recommend that users unmerge OpenSLP:

 # emerge --unmerge "net-libs/openslp"

NOTE: The Gentoo developer(s) maintaining OpenSLP have discontinued support at this time. It may be possible that a new Gentoo developer will update OpenSLP at a later date. No known alternatives to OpenSLP are in the tree at this time.