Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2018-03-02 22:24:02 by S.P.Zeidler | Files touched by this commit (2) | |
Log message:
Pullup ticket #5712 - requested by taca
net/isc-dhcp4: security update
Revisions pulled up:
- net/isc-dhcp4/Makefile.common 1.35
- net/isc-dhcp4/distinfo 1.27
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: taca
Date: Thu Mar 1 00:53:05 UTC 2018
Modified Files:
pkgsrc/net/isc-dhcp4: Makefile.common distinfo
Log message:
net/isc-dhcp4: update to 4.3.6p1 (ISC DHCP 4.3.6-P1)
Changes since 4.3.6
!- Plugged a socket descriptor leak in OMAPI, that can occur when there is
data pending to be written to an OMAPI connection, when the connection
is closed by the reader.
[ISc-Bugs #46767]
! Corrected an issue where large sized 'X/x' format options were causing
option handling logic to overwrite memory when expanding them to human
readable form. Reported by Felix Wilhelm, Google Security Team.
[ISC-Bugs #47139]
CVE: CVE-2018-5732
! Option reference count was not correctly decremented in error path
when parsing buffer for options. Reported by Felix Wilhelm, Google
Security Team.
[ISC-Bugs #47140]
CVE: CVE-2018-5733
To generate a diff of this commit:
cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/isc-dhcp4/Makefile.common
cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/isc-dhcp4/distinfo
|
Next | Query returned 1 messages, browsing 1 to 10 | previous