Login
Newsletter
Werbung

Sicherheit: Denial of Service in dhcp
Aktuelle Meldungen Distributionen
Name: Denial of Service in dhcp
ID: FEDORA-2011-16976
Distribution: Fedora
Plattformen: Fedora 15
Datum: Di, 3. Januar 2012, 07:53
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4539
Applikationen: ISC DHCP

Originalnachricht

Name        : dhcp
Product : Fedora 15
Version : 4.2.1
Release : 14.P1.fc15
URL : http://isc.org/products/DHCP/
Summary : Dynamic host configuration protocol software
Description :
DHCP (Dynamic Host Configuration Protocol) is a protocol which allows
individual devices on an IP network to get their own network
configuration information (IP address, subnetmask, broadcast address,
etc.) from a DHCP server. The overall purpose of DHCP is to make it
easier to administer a large network. The dhcp package includes the
ISC DHCP service and relay agent.

To use DHCP on your network, install a DHCP service (or relay agent),
and on clients run a DHCP client daemon. The dhcp package provides
the ISC DHCP service and relay agent.

-------------------------------------------------------------------------------
-
Update Information:

CVE-2011-4539 dhcpd: DoS due to processing certain regular expressions
-------------------------------------------------------------------------------
-
ChangeLog:

* Fri Dec 9 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-14.P1
- DoS due to processing certain regular expressions (CVE-2011-4539, #765681)
* Fri Sep 30 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-13.P1
- 56dhclient: ifcfg file was not sourced (#742482)
* Thu Sep 29 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-12.P1
- dhclient-script: address alias handling fixes from Scott Shambarger (#741786)
* Fri Sep 9 2011 Adam Tkac <atkac redhat com> - 12:4.2.1-11.P1
- rebuild against new bind
* Thu Aug 11 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-10.P1
- A pair of defects cause the server to halt upon processing certain packets
(CVE-2011-2748, CVE-2011-2749, #729850)
* Tue May 17 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-9.P1
- Fix typo in triggerun scriptlet (#705417)
* Mon May 16 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-8.P1
- Packages dhcp/dhclient/dhcp-common explicitly require the libs sub-package
with the same version and release (bug #705037).
- Fix triggerun scriptlet
* Mon May 9 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-7.P1
- Fix 11-dhclient to export variables (#702735)
* Fri Apr 29 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-6.P1
- Comply with guidelines for systemd services
* Wed Apr 27 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-5.P1
- Fix NetworkManager dispatcher script for dhcpd to support arbitrary interface
names
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #761265 - CVE-2011-4539 dhcp: DoS due to processing certain regular
expressions
https://bugzilla.redhat.com/show_bug.cgi?id=761265
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update dhcp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Gewinnspiel
Neue Nachrichten
Werbung