bugtraq - [SECURITY] [DSA 3442-1] isc-dhcp security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <E1aJKoJ-0002AK-82@alpha.psidef.org>
Date: Wed, 13 Jan 2016 07:45:59 -0500
From: Michael Gilbert <mgilbert@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3442-1] isc-dhcp security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3442-1                   security@...ian.org
https://www.debian.org/security/                          Michael Gilbert
January 13, 2016                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : isc-dhcp
CVE ID         : CVE-2015-8605
Debian Bug     : 810875

It was discovered that a maliciously crafted packet can crash any of
the isc-dhcp applications.  This includes the DHCP client, relay, and
server application.  Only IPv4 setups are affected.

For the oldstable distribution (wheezy), this problem has been fixed
in version 4.2.2.dfsg.1-5+deb70u8.

For the stable distribution (jessie), this problem has been fixed in
version 4.3.1-6+deb8u2.

For the testing (stretch) and unstable (sid) distributions, this
problem will be fixed soon.

We recommend that you upgrade your isc-dhcp packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=
=7PE2
-----END PGP SIGNATURE-----