-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2009:172 http://www.mandriva.com/security/ _______________________________________________________________________ Package : dhcp Date : July 28, 2009 Affected: Enterprise Server 5.0 _______________________________________________________________________ Problem Description: A vulnerability has been found and corrected in ISC DHCP: ISC DHCP Server is vulnerable to a denial of service, caused by the improper handling of DHCP requests. If the host definitions are mixed using dhcp-client-identifier and hardware ethernet, a remote attacker could send specially-crafted DHCP requests to cause the server to stop responding (CVE-2009-1892). This update provides fixes for this vulnerability. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1892 http://xforce.iss.net/xforce/xfdb/51717 _______________________________________________________________________ Updated Packages: Mandriva Enterprise Server 5: 61c868539b33fbf517ada0933f121611 mes5/i586/dhcp-client-3.0.7-1.4mdvmes5.i586.rpm cf643aa926e4467559a94737790cc4d0 mes5/i586/dhcp-common-3.0.7-1.4mdvmes5.i586.rpm 65a6a31d3efeac3116180525a5babbdf mes5/i586/dhcp-devel-3.0.7-1.4mdvmes5.i586.rpm f76f144c5f5174b0e115269255d39bd8 mes5/i586/dhcp-doc-3.0.7-1.4mdvmes5.i586.rpm f9fce407b247f9f34a95201f7f38e3fe mes5/i586/dhcp-relay-3.0.7-1.4mdvmes5.i586.rpm cd12674e3a5be0816f668ec4c99739cd mes5/i586/dhcp-server-3.0.7-1.4mdvmes5.i586.rpm ccb45066c47b000f14e1b4102994b4a5 mes5/SRPMS/dhcp-3.0.7-1.4mdvmes5.src.rpm Mandriva Enterprise Server 5/X86_64: 2d31a3a5f8ad86f79fe96bc93acd3f4c mes5/x86_64/dhcp-client-3.0.7-1.4mdvmes5.x86_64.rpm 664c6268e0c3fd88ceee31ac9f5aa456 mes5/x86_64/dhcp-common-3.0.7-1.4mdvmes5.x86_64.rpm 8d5572a2f12ffaea8abd99121e89af84 mes5/x86_64/dhcp-devel-3.0.7-1.4mdvmes5.x86_64.rpm dcb5dd97e76719fd52601146258e7dc8 mes5/x86_64/dhcp-doc-3.0.7-1.4mdvmes5.x86_64.rpm a9881b3f7cb3f2e96ee8bb89b70beff6 mes5/x86_64/dhcp-relay-3.0.7-1.4mdvmes5.x86_64.rpm 3a966c4356e213300c16607f6fff45e6 mes5/x86_64/dhcp-server-3.0.7-1.4mdvmes5.x86_64.rpm ccb45066c47b000f14e1b4102994b4a5 mes5/SRPMS/dhcp-3.0.7-1.4mdvmes5.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFKb15LmqjQ0CJFipgRAl2NAKC0koyBvyZcSp/XC7zpyRwk2C/qsgCgzygF xPezBEwRoOubBqC1Q+LWD5Q= =/J2n -----END PGP SIGNATURE-----
