Skip to content
OpenAdvisories
Medium ELSA-2016-2590 1 CVE

Moderate: dhcp security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 9, 2016 · Updated Nov 9, 2016

Summary

[12:4.2.5-47.0.1]
- Added oracle-errwarn-message.patch

[12:4.2.5-47]
- 1269596 - fix undefined variable in dhclient-script

[12:4.2.5-46]
- unclosed TCP connections to OMAPI or failover ports can cause DoS (CVE-2016-2774)

[12:4.2.5-45]
- 1267489 - dhclient-script does not respect DEFROUTE/GATEWAYDEV patched

[12:4.2.5-44]
- 1269596 - dhclient-script doesn't keep old nameservers
- 1193586 - DHCP renewal does not update lifetimes if MTU has changed
- 1306608 - Add ignore-client-uids option to dhcpd
- 1267489 - dhclient-script does not respect DEFROUTE/GATEWAYDEV

[12:4.2.5-43]
- Fixing bug 1234251

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 dhclient 12:4.2.5-47.0.1.el7
Oracle Linux · 7 dhcp 12:4.2.5-47.0.1.el7
Oracle Linux · 7 dhcp-common 12:4.2.5-47.0.1.el7
Oracle Linux · 7 dhcp-devel 12:4.2.5-47.0.1.el7
Oracle Linux · 7 dhcp-libs 12:4.2.5-47.0.1.el7

Vulnerabilities 1