Synopsis:          Moderate: dhcp security, bug fix, and enhancement update
Advisory ID:       SLSA-2016:2590-2
Issue Date:        2016-11-03
CVE Numbers:       CVE-2016-2774
--

Security Fix(es):

* A resource-consumption flaw was discovered in the DHCP server. dhcpd did
not restrict the number of open connections to OMAPI and failover ports. A
remote attacker able to establish TCP connections to one of these ports
could use this flaw to cause dhcpd to exit unexpectedly, stop responding
requests, or exhaust system sockets (denial of service). (CVE-2016-2774)

Additional Changes:
--

SL7
  x86_64
    dhclient-4.2.5-47.el7.x86_64.rpm
    dhcp-common-4.2.5-47.el7.x86_64.rpm
    dhcp-debuginfo-4.2.5-47.el7.i686.rpm
    dhcp-debuginfo-4.2.5-47.el7.x86_64.rpm
    dhcp-libs-4.2.5-47.el7.i686.rpm
    dhcp-libs-4.2.5-47.el7.x86_64.rpm
    dhcp-4.2.5-47.el7.x86_64.rpm
    dhcp-devel-4.2.5-47.el7.i686.rpm
    dhcp-devel-4.2.5-47.el7.x86_64.rpm

- Scientific Linux Development Team