Skip to content
OpenAdvisories
Medium ALSA-2022:8385 1 CVE

Moderate: dhcp security and enhancement update

Published Nov 15, 2022 · Updated Oct 29, 2026

Summary

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 9 dhcp-client 12:4.4.2-17.b1.el9
AlmaLinux · 9 dhcp-common 12:4.4.2-17.b1.el9
AlmaLinux · 9 dhcp-relay 12:4.4.2-17.b1.el9
AlmaLinux · 9 dhcp-server 12:4.4.2-17.b1.el9

Vulnerabilities 1

  • Medium 6.8

    DNS forwarders - cache poisoning vulnerability

    BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to…

References

  • report
    https://access.redhat.com/security/cve/CVE-2021-25220
  • report
    https://bugzilla.redhat.com/2064512
  • advisory
    https://errata.almalinux.org/9/ALSA-2022-8385.html