Path to this page:
Subject: CVS commit: [pkgsrc-2017Q4] pkgsrc/net/isc-dhcp4
From: S.P.Zeidler
Date: 2018-03-02 22:24:02
Message id: 20180302212402.B37F4FB40@cvs.NetBSD.org
Log Message:
Pullup ticket #5712 - requested by taca
net/isc-dhcp4: security update
Revisions pulled up:
- net/isc-dhcp4/Makefile.common 1.35
- net/isc-dhcp4/distinfo 1.27
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: taca
Date: Thu Mar 1 00:53:05 UTC 2018
Modified Files:
pkgsrc/net/isc-dhcp4: Makefile.common distinfo
Log Message:
net/isc-dhcp4: update to 4.3.6p1 (ISC DHCP 4.3.6-P1)
Changes since 4.3.6
!- Plugged a socket descriptor leak in OMAPI, that can occur when there is
data pending to be written to an OMAPI connection, when the connection
is closed by the reader.
[ISc-Bugs #46767]
! Corrected an issue where large sized 'X/x' format options were causing
option handling logic to overwrite memory when expanding them to human
readable form. Reported by Felix Wilhelm, Google Security Team.
[ISC-Bugs #47139]
CVE: CVE-2018-5732
! Option reference count was not correctly decremented in error path
when parsing buffer for options. Reported by Felix Wilhelm, Google
Security Team.
[ISC-Bugs #47140]
CVE: CVE-2018-5733
To generate a diff of this commit:
cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/isc-dhcp4/Makefile.common
cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/isc-dhcp4/distinfo
Files: