-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2009:151 http://www.mandriva.com/security/ _______________________________________________________________________ Package : dhcp Date : July 15, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 _______________________________________________________________________ Problem Description: A vulnerability has been found and corrected in ISC DHCP: Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option (CVE-2009-0692). This update provides fixes for this vulnerability. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 _______________________________________________________________________ Updated Packages: Mandriva Linux 2008.1: 4cd13c0fa308591d86453aa7c626a98d 2008.1/i586/dhcp-client-3.0.6-5.1mdv2008.1.i586.rpm d5c653262e5a7fcd9e4e9a4b15bce95e 2008.1/i586/dhcp-common-3.0.6-5.1mdv2008.1.i586.rpm 64f32fb6dd70254ddcb03fb37b76584f 2008.1/i586/dhcp-devel-3.0.6-5.1mdv2008.1.i586.rpm 9f34d9a940606e840f55afca2278530d 2008.1/i586/dhcp-doc-3.0.6-5.1mdv2008.1.i586.rpm d019d096e3a39d0de8c009840acfaa5b 2008.1/i586/dhcp-relay-3.0.6-5.1mdv2008.1.i586.rpm 86f63eba79002256abc419571cc08966 2008.1/i586/dhcp-server-3.0.6-5.1mdv2008.1.i586.rpm 2cf6f851a2ffac9bcebd76ded76afbe0 2008.1/SRPMS/dhcp-3.0.6-5.1mdv2008.1.src.rpm Mandriva Linux 2008.1/X86_64: b3f83840a4bdc9a9e9c45bdda724c074 2008.1/x86_64/dhcp-client-3.0.6-5.1mdv2008.1.x86_64.rpm b3e44b2256ef7f965eb6f34c4dabcfc2 2008.1/x86_64/dhcp-common-3.0.6-5.1mdv2008.1.x86_64.rpm 0e0f0b3e95fd2b6c68c841012e79c2ff 2008.1/x86_64/dhcp-devel-3.0.6-5.1mdv2008.1.x86_64.rpm 00bdeee89cfe516bb64038a2938598d2 2008.1/x86_64/dhcp-doc-3.0.6-5.1mdv2008.1.x86_64.rpm 673894e8d9b0fce1b8c0216bc2d96b92 2008.1/x86_64/dhcp-relay-3.0.6-5.1mdv2008.1.x86_64.rpm 76a762d1e6b4b73d18d59a9bc17cfbf2 2008.1/x86_64/dhcp-server-3.0.6-5.1mdv2008.1.x86_64.rpm 2cf6f851a2ffac9bcebd76ded76afbe0 2008.1/SRPMS/dhcp-3.0.6-5.1mdv2008.1.src.rpm Mandriva Linux 2009.0: 7828772d45f2e49b28e0131690cae716 2009.0/i586/dhcp-client-3.0.7-1.3mdv2009.0.i586.rpm 10f29dfb03f0e12c02f763c35cc86920 2009.0/i586/dhcp-common-3.0.7-1.3mdv2009.0.i586.rpm 9ade5eec8deb2538a4fe6eee38b695b7 2009.0/i586/dhcp-devel-3.0.7-1.3mdv2009.0.i586.rpm ace9cd717c6703e92f3602da4ee67d79 2009.0/i586/dhcp-doc-3.0.7-1.3mdv2009.0.i586.rpm 26efcc14702c7135d472c269ca39351f 2009.0/i586/dhcp-relay-3.0.7-1.3mdv2009.0.i586.rpm b545b4bb4c7173c00c5f2d0905cee3d5 2009.0/i586/dhcp-server-3.0.7-1.3mdv2009.0.i586.rpm 1edad702b89a7cb00da60658541f80a1 2009.0/SRPMS/dhcp-3.0.7-1.3mdv2009.0.src.rpm Mandriva Linux 2009.0/X86_64: 39c2269839704c240b67c197a74dbef6 2009.0/x86_64/dhcp-client-3.0.7-1.3mdv2009.0.x86_64.rpm 01c474de671fdcea02e1d0a9fe54a3f4 2009.0/x86_64/dhcp-common-3.0.7-1.3mdv2009.0.x86_64.rpm bf4583ab41bc8b01e12fb6ad154019a2 2009.0/x86_64/dhcp-devel-3.0.7-1.3mdv2009.0.x86_64.rpm 64879fd029304090683181522545e9e8 2009.0/x86_64/dhcp-doc-3.0.7-1.3mdv2009.0.x86_64.rpm 50989109d8caa700de1cdc0fe7b9b4c9 2009.0/x86_64/dhcp-relay-3.0.7-1.3mdv2009.0.x86_64.rpm 3b356f62ae5b07db2f309d36c3c765d6 2009.0/x86_64/dhcp-server-3.0.7-1.3mdv2009.0.x86_64.rpm 1edad702b89a7cb00da60658541f80a1 2009.0/SRPMS/dhcp-3.0.7-1.3mdv2009.0.src.rpm Mandriva Linux 2009.1: 71e07830a16cc391994dcf3ef9fc6dfc 2009.1/i586/dhcp-client-4.1.0-5.1mdv2009.1.i586.rpm 1d7012bea3a7d2c2edfce38499f4e193 2009.1/i586/dhcp-common-4.1.0-5.1mdv2009.1.i586.rpm ed3da60d275232ffe13b23eb6c5e64bf 2009.1/i586/dhcp-devel-4.1.0-5.1mdv2009.1.i586.rpm bc290c608b51a636e798778ea1505854 2009.1/i586/dhcp-doc-4.1.0-5.1mdv2009.1.i586.rpm 6cf00e2028827d7197955be009261e3a 2009.1/i586/dhcp-relay-4.1.0-5.1mdv2009.1.i586.rpm e5a49e05b77ae52ca1a76af5109407d2 2009.1/i586/dhcp-server-4.1.0-5.1mdv2009.1.i586.rpm 9aeb85d8e0eb0eb6ce03cf3db2124d2f 2009.1/SRPMS/dhcp-4.1.0-5.1mdv2009.1.src.rpm Mandriva Linux 2009.1/X86_64: f4c5b5021f8ba08bf9e3008cfcbca73d 2009.1/x86_64/dhcp-client-4.1.0-5.1mdv2009.1.x86_64.rpm 0772e5306d15b9dcf095099b2caa012f 2009.1/x86_64/dhcp-common-4.1.0-5.1mdv2009.1.x86_64.rpm 16a612f677999d895e5cf36bb5e595a9 2009.1/x86_64/dhcp-devel-4.1.0-5.1mdv2009.1.x86_64.rpm 8862bca44a1d1ee4b55ba84a0e132ed3 2009.1/x86_64/dhcp-doc-4.1.0-5.1mdv2009.1.x86_64.rpm d01b8aa8f8eff85859d34645063511e9 2009.1/x86_64/dhcp-relay-4.1.0-5.1mdv2009.1.x86_64.rpm 76bf9e340ed3fdaff1b55d8f6e8a77b1 2009.1/x86_64/dhcp-server-4.1.0-5.1mdv2009.1.x86_64.rpm 9aeb85d8e0eb0eb6ce03cf3db2124d2f 2009.1/SRPMS/dhcp-4.1.0-5.1mdv2009.1.src.rpm Corporate 3.0: 5c5d1c35b227dc1abdc64b359aca9fad corporate/3.0/i586/dhcp-client-3.0-1.rc14.0.2.C30mdk.i586.rpm 123b8e08573564fa32e3ca0344d8c0fc corporate/3.0/i586/dhcp-common-3.0-1.rc14.0.2.C30mdk.i586.rpm f5fd59531989ba2612dd5733644ee471 corporate/3.0/i586/dhcp-devel-3.0-1.rc14.0.2.C30mdk.i586.rpm 2cd978815eb0a2921fc8da265c697cef corporate/3.0/i586/dhcp-relay-3.0-1.rc14.0.2.C30mdk.i586.rpm c8cb1b80a941fdf42936622518b697fc corporate/3.0/i586/dhcp-server-3.0-1.rc14.0.2.C30mdk.i586.rpm a33f20def070596b266d8e53240004a5 corporate/3.0/SRPMS/dhcp-3.0-1.rc14.0.2.C30mdk.src.rpm Corporate 3.0/X86_64: 8cfa75f48a936849aaea8d2a86eb788c corporate/3.0/x86_64/dhcp-client-3.0-1.rc14.0.2.C30mdk.x86_64.rpm d52fd82f673b4fea9ae75ab65d923df6 corporate/3.0/x86_64/dhcp-common-3.0-1.rc14.0.2.C30mdk.x86_64.rpm 125593fd03e14bb2c3f4db303169f2cb corporate/3.0/x86_64/dhcp-devel-3.0-1.rc14.0.2.C30mdk.x86_64.rpm c2d93ed438f3e86e2cbe8abf42745e8a corporate/3.0/x86_64/dhcp-relay-3.0-1.rc14.0.2.C30mdk.x86_64.rpm 26cd3ebb2cb90c1ad96adb7b9fd51295 corporate/3.0/x86_64/dhcp-server-3.0-1.rc14.0.2.C30mdk.x86_64.rpm a33f20def070596b266d8e53240004a5 corporate/3.0/SRPMS/dhcp-3.0-1.rc14.0.2.C30mdk.src.rpm Corporate 4.0: 6ad0c2915f332fc5b3e92c21dcf9f4a3 corporate/4.0/i586/dhcp-client-3.0.4-2.2.20060mlcs4.i586.rpm 06b5b65e8e3a7f73ef76285b28b44296 corporate/4.0/i586/dhcp-common-3.0.4-2.2.20060mlcs4.i586.rpm 3e03b623fe344c45c45e54e6406d8d6a corporate/4.0/i586/dhcp-devel-3.0.4-2.2.20060mlcs4.i586.rpm d220982a55e2d4c6e3d95944ea8c61c4 corporate/4.0/i586/dhcp-relay-3.0.4-2.2.20060mlcs4.i586.rpm 5d0c5ca15e8d53ef616d02ca3ea0561e corporate/4.0/i586/dhcp-server-3.0.4-2.2.20060mlcs4.i586.rpm 2b26e96371889d63227573cf8252a30a corporate/4.0/SRPMS/dhcp-3.0.4-2.2.20060mlcs4.src.rpm Corporate 4.0/X86_64: 6fac390a2d1f0bc573843a6bdaa97d91 corporate/4.0/x86_64/dhcp-client-3.0.4-2.2.20060mlcs4.x86_64.rpm 6fe16cc08807c5dc93b55b6b5a478752 corporate/4.0/x86_64/dhcp-common-3.0.4-2.2.20060mlcs4.x86_64.rpm 4c8747a0cc72f49aa138e85eccc3f0aa corporate/4.0/x86_64/dhcp-devel-3.0.4-2.2.20060mlcs4.x86_64.rpm 80375f41430fd4bf08b0a945d97fb55b corporate/4.0/x86_64/dhcp-relay-3.0.4-2.2.20060mlcs4.x86_64.rpm a2c9ea695af81e2e7e1b02e042c6be89 corporate/4.0/x86_64/dhcp-server-3.0.4-2.2.20060mlcs4.x86_64.rpm 2b26e96371889d63227573cf8252a30a corporate/4.0/SRPMS/dhcp-3.0.4-2.2.20060mlcs4.src.rpm Multi Network Firewall 2.0: 306b2d346ce6f0b15065bb5d9d7f01d4 mnf/2.0/i586/dhcp-client-3.0-1.rc14.0.2.C30mdk.i586.rpm 6647587c8b18bab00651092ae03a53fe mnf/2.0/i586/dhcp-common-3.0-1.rc14.0.2.C30mdk.i586.rpm 344b17a9a4c1a5b430e46c005abb6b92 mnf/2.0/i586/dhcp-devel-3.0-1.rc14.0.2.C30mdk.i586.rpm 3ba378795bd28056e2cf15df82433f15 mnf/2.0/i586/dhcp-relay-3.0-1.rc14.0.2.C30mdk.i586.rpm 6810651722059cd1442bd72953b123a0 mnf/2.0/i586/dhcp-server-3.0-1.rc14.0.2.C30mdk.i586.rpm 123e2b911a2f959e1e933732fb33e78b mnf/2.0/SRPMS/dhcp-3.0-1.rc14.0.2.C30mdk.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFKXhHnmqjQ0CJFipgRAl2EAJ483PDoMMs4y85H11Vqz/jlhfEGVgCg4hQB g3VfQivkDBXVmxB5U4dKJOo= =oGPW -----END PGP SIGNATURE-----
