Skip to content
OpenAdvisories
Medium ELSA-2019-2060 1 CVE

Moderate: dhcp security and bug fix update (Oracle Linux 7)

Published Aug 13, 2019 · Updated Aug 13, 2019

Summary

[12:4.2.5-77.0.1]
- Direct users to Oracle Linux support site.

[12:4.2.5-77]
- Resolves: #1712414 - Reset signal handlers set by isclib

[12:4.2.5-76]
- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase

[12:4.2.5-75]
- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events

[12:4.2.5-74]
- Use bind-export-libs package instead of bind99
- Use isc-config.sh to configure bind libs
- Change requirement to bind-export-devel
- Compile with recent bind includes, that does not include isc/util.h

[12:4.2.5-73]
- Resolves: #1635181
- Change default ipv6 prefix to /128.
- Allow its customization via cl option

[12:4.2.5-72]
- Resolves: #1647784 - Update renew time if it is greater than expiry

[12:4.2.5-71]
- Resolves: #1623792 - Load leases file in tracing mode only

[12:4.2.5-70]
- Resolves: #1574292 - Fix options conflict for ddns update

[12:4.2.5-69]
- Resolves: #1570895 - Fix command execution vulnerability (CVE-2018-1111)

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 dhclient 12:4.2.5-77.0.1.el7
Oracle Linux · 7 dhcp 12:4.2.5-77.0.1.el7
Oracle Linux · 7 dhcp-common 12:4.2.5-77.0.1.el7
Oracle Linux · 7 dhcp-devel 12:4.2.5-77.0.1.el7
Oracle Linux · 7 dhcp-libs 12:4.2.5-77.0.1.el7

Vulnerabilities 1

  • Medium 6.5

    dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

    There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevente…