LISTSERV - SCIENTIFIC-LINUX-ERRATA Archives

SCIENTIFIC-LINUX-ERRATA Archives

April 2011

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV

	LISTSERV Archives
	SCIENTIFIC-LINUX-ERRATA Home
	SCIENTIFIC-LINUX-ERRATA April 2011

	Log In
	Register

	Subscribe or Unsubscribe

	Search Archives

Options:	Use Monospaced Font Show Text Part by Default Show All Mail Headers
Message:	[<< First] [< Prev] [Next >] [Last >>]
Topic:	[<< First] [< Prev] [Next >] [Last >>]
Author:	[<< First] [< Prev] [Next >] [Last >>]

Subject:	Security ERRATA Important: dhcp on SL4.x,SL5.x,SL6.x i386/x86_64
From:	Jason Harrington <[log in to unmask]>
Reply To:	[log in to unmask]
Date:	Fri, 8 Apr 2011 17:34:27 -0500
Content-Type:	text/plain
Parts/Attachments:	text/plain (64 lines)

Synopsis:   Important: dhcp security update
Issue date: 2011-04-08
CVE Names:  CVE-2011-0997

It was discovered that the DHCP client daemon, dhclient, did not
sufficiently sanitize certain options provided in DHCP server replies, such
as the client hostname. A malicious DHCP server could send such an option
with a specially-crafted value to a DHCP client. If this option's value was
saved on the client system, and then later insecurely evaluated by a
process that assumes the option is trusted, it could lead to arbitrary code
execution with the privileges of that process. (CVE-2011-0997)

SL 4.x
     SRPMS:
         dhcp-3.0.1-67.el4.src.rpm

     i386:
         dhclient-3.0.1-67.el4.i386.rpm
         dhcp-3.0.1-67.el4.i386.rpm
         dhcp-devel-3.0.1-67.el4.i386.rpm

     x86_64:
         dhclient-3.0.1-67.el4.x86_64.rpm
         dhcp-3.0.1-67.el4.x86_64.rpm
         dhcp-devel-3.0.1-67.el4.x86_64.rpm

SL 5.x
     SRPMS:
         dhcp-3.0.5-23.el5_6.4.src.rpm

     i386:
         dhclient-3.0.5-23.el5_6.4.i386.rpm
         dhcp-3.0.5-23.el5_6.4.i386.rpm
         dhcp-devel-3.0.5-23.el5_6.4.i386.rpm
         libdhcp4client-3.0.5-23.el5_6.4.i386.rpm
         libdhcp4client-devel-3.0.5-23.el5_6.4.i386.rpm

     x86_64:
         dhclient-3.0.5-23.el5_6.4.x86_64.rpm
         dhcp-3.0.5-23.el5_6.4.x86_64.rpm
         dhcp-devel-3.0.5-23.el5_6.4.i386.rpm
         dhcp-devel-3.0.5-23.el5_6.4.x86_64.rpm
         libdhcp4client-3.0.5-23.el5_6.4.i386.rpm
         libdhcp4client-3.0.5-23.el5_6.4.x86_64.rpm
         libdhcp4client-devel-3.0.5-23.el5_6.4.i386.rpm
         libdhcp4client-devel-3.0.5-23.el5_6.4.x86_64.rpm

SL 6.x
     SRPMS:
         dhcp-4.1.1-12.P1.el6_0.4.src.rpm

     i386:
         dhclient-4.1.1-12.P1.el6_0.4.i686.rpm
         dhcp-4.1.1-12.P1.el6_0.4.i686.rpm
         dhcp-devel-4.1.1-12.P1.el6_0.4.i686.rpm

     x86_64:
         dhclient-4.1.1-12.P1.el6_0.4.x86_64.rpm
         dhcp-4.1.1-12.P1.el6_0.4.x86_64.rpm
         dhcp-devel-4.1.1-12.P1.el6_0.4.i686.rpm
         dhcp-devel-4.1.1-12.P1.el6_0.4.x86_64.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2

LISTSERV.FNAL.GOV