Описание
ELSA-2019-2060: dhcp security and bug fix update (MODERATE)
[12:4.2.5-77.0.1]
- Direct users to Oracle Linux support site.
[12:4.2.5-77]
- Resolves: #1712414 - Reset signal handlers set by isclib
[12:4.2.5-76]
- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase
[12:4.2.5-75]
- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events
[12:4.2.5-74]
- Use bind-export-libs package instead of bind99
- Use isc-config.sh to configure bind libs
- Change requirement to bind-export-devel
- Compile with recent bind includes, that does not include isc/util.h
[12:4.2.5-73]
- Resolves: #1635181
- Change default ipv6 prefix to /128.
- Allow its customization via cl option
[12:4.2.5-72]
- Resolves: #1647784 - Update renew time if it is greater than expiry
[12:4.2.5-71]
- Resolves: #1623792 - Load leases file in tracing mode only
[12:4.2.5-70]
- Resolves: #1574292 - Fix options conflict for ddns update
[12:4.2.5-69]
- Resolves: #1570895 - Fix command execution vulnerability (CVE-2018-1111)
Обновленные пакеты
Oracle Linux 7
Oracle Linux aarch64
dhclient
4.2.5-77.0.1.el7
dhcp
4.2.5-77.0.1.el7
dhcp-common
4.2.5-77.0.1.el7
dhcp-devel
4.2.5-77.0.1.el7
dhcp-libs
4.2.5-77.0.1.el7
Oracle Linux x86_64
dhclient
4.2.5-77.0.1.el7
dhcp
4.2.5-77.0.1.el7
dhcp-common
4.2.5-77.0.1.el7
dhcp-devel
4.2.5-77.0.1.el7
dhcp-libs
4.2.5-77.0.1.el7
Связанные CVE
Связанные уязвимости
There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version ...
There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version ...
There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lis
There had existed in one of the ISC BIND libraries a bug in a function ...