Skip to content
OpenAdvisories
Medium ELSA-2019-3525 1 CVE

Moderate: dhcp security and bug fix update (Oracle Linux 8)

Published Nov 14, 2019 · Updated Nov 14, 2019

Summary

[12:4.3.6-34]
- Resolves: #1704672 - Fix crash caused by bind rebase

[12:4.3.6-33]
- Resolves: #1673946 - Change default prefix length to 128
- Add address-prefix-lenght option to change default value
- Fix backporting issues

[12:4.3.6-31]
- Resolves: #1685560 - Drop executable flag from NM dispatcher

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 dhcp-client 12:4.3.6-34.el8
Oracle Linux · 8 dhcp-common 12:4.3.6-34.el8
Oracle Linux · 8 dhcp-libs 12:4.3.6-34.el8
Oracle Linux · 8 dhcp-relay 12:4.3.6-34.el8
Oracle Linux · 8 dhcp-server 12:4.3.6-34.el8

Vulnerabilities 1

  • Medium 6.5

    dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

    There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevente…