gnu: rpcbind: Update to 1.2.9.

The patch was applied in the upstream commit
9a76cf2989dab549c1067491ee530e2dfd3e3dbd ("rpcbind:
Stop unauthenticated oversized allocation in PMAPPROC_CALLIT decode").

* gnu/packages/patches/rpcbind-CVE-2017-8779.patch: Delete patch.
* gnu/local.mk (dist_patch_DATA): Unregister it.
* gnu/packages/onc-rpc.scm (rpcbind): Update to 1.2.9.
  [source]<patches>: Remove the deleted patch.
  [inputs]: Remove libnsl.

Merges: https://codeberg.org/guix/guix/pulls/8718
Signed-off-by: Nguyễn Gia Phong <cnx@loang.net>

3 files changed, 4 insertions, 35 deletions

diff --git a/gnu/local.mk b/gnu/local.mk
index 2bb04a47cfe..43dfa99dd68 100644
--- a/gnu/local.mk
+++ b/gnu/local.mk
@@ -2412,7 +2412,6 @@ dist_patch_DATA =						\
   %D%/packages/patches/r-httpuv-1.6.6-unvendor-libuv.patch      \
   %D%/packages/patches/r-sapa-lapack.patch                      \
   %D%/packages/patches/ripperx-missing-file.patch               \
-  %D%/packages/patches/rpcbind-CVE-2017-8779.patch              \
   %D%/packages/patches/rpcbind-hurd.patch                       \
   %D%/packages/patches/rtosc-0.3.1-fix-invalid-comparison-operator.patch        \
   %D%/packages/patches/racket-chez-scheme-bin-sh.patch          \
diff --git a/gnu/packages/onc-rpc.scm b/gnu/packages/onc-rpc.scm
index e2298ced7df..4ba5953f1e1 100644
--- a/gnu/packages/onc-rpc.scm
+++ b/gnu/packages/onc-rpc.scm
@@ -88,23 +88,22 @@ IPv4 and IPv6.  ONC RPC is notably used by the network file system (NFS).")
 (define-public rpcbind
   (package
     (name "rpcbind")
-    (version "1.2.6")
+    (version "1.2.9")
     (source
      (origin
       (method url-fetch)
       (uri (string-append "mirror://sourceforge/" name "/" name "/"
                           version "/"
                           name "-" version ".tar.bz2"))
-      (patches (search-patches "rpcbind-hurd.patch"
-                               "rpcbind-CVE-2017-8779.patch"))
+      (patches (search-patches "rpcbind-hurd.patch"))
       (sha256
-       (base32 "1pp8xvprsfz8nlmmvxf829gilx0ibb08bfs3lhisxrfai5j784sn"))))
+       (base32 "06wrmavbc8rl33safiis87n3zhhxbjkm13x2jwl0pvv6qn3ilpyf"))))
     (build-system gnu-build-system)
     (arguments
      `(#:configure-flags
        `("--with-systemdsystemunitdir=no" "--enable-warmstarts")))
     (inputs
-     (list libnsl libtirpc))
+     (list libtirpc))
     (native-inputs
      (list pkg-config))
     (home-page "http://rpcbind.sourceforge.net/")
diff --git a/gnu/packages/patches/rpcbind-CVE-2017-8779.patch b/gnu/packages/patches/rpcbind-CVE-2017-8779.patch
deleted file mode 100644
index 6ca93ff12b7..00000000000
--- a/gnu/packages/patches/rpcbind-CVE-2017-8779.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-Fix CVE-2017-8779:
-
-https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779
-
-Patch copied from the bug reporter's 3rd-party repository:
-
-https://github.com/guidovranken/rpcbomb/blob/master/rpcbind_patch.txt
-
-diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c
-index 5862c26..e11f61b 100644
---- a/src/rpcb_svc_com.c
-+++ b/src/rpcb_svc_com.c
-@@ -48,6 +48,7 @@
- #include <rpc/rpc.h>
- #include <rpc/rpcb_prot.h>
- #include <rpc/svc_dg.h>
-+#include <rpc/rpc_com.h>
- #include <netconfig.h>
- #include <errno.h>
- #include <syslog.h>
-@@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp /*__unused*/,
- static bool_t
- xdr_encap_parms(XDR *xdrs, struct encap_parms *epp)
- {
--       return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0));
-+       return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE));
- }
- 
- /*