Ispravljen je sigurnosni propust otkriven u radu programskog paketa DHCP. Udaljenim napadačima omogućuje izvođenje napada uskraćivanjem usluge (DoS).

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  dhcp (SSA:2012-258-01)

New dhcp packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37,
and -current to fix a security issue.


Here are the details from the Slackware 13.37 ChangeLog:
+--------------------------+
patches/packages/dhcp-4.2.4_P2-i486-1_slack13.37.txz:  Upgraded.
  An issue with the use of lease times was found and fixed.  Making certain
  changes to the end time of an IPv6 lease could cause the server to abort.
  Thanks to Glen Eustace of Massey University, New Zealand for finding this
  issue.  [ISC-Bugs #30281]
  For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3955
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 12.1:
ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/dhcp-4.1_ESV_R7-i486-1_slack12.1.tgz

Updated package for Slackware 12.2:
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/dhcp-4.1_ESV_R7-i486-1_slack12.2.tgz

Updated package for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/dhcp-4.1_ESV_R7-i486-1_slack13.0.txz

Updated package for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/dhcp-4.1_ESV_R7-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/dhcp-4.1_ESV_R7-i486-1_slack13.1.txz

Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/dhcp-4.1_ESV_R7-x86_64-1_slack13.1.txz

Updated package for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/dhcp-4.2.4_P2-i486-1_slack13.37.txz

Updated package for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/dhcp-4.2.4_P2-x86_64-1_slack13.37.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/dhcp-4.2.4_P2-i486-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/dhcp-4.2.4_P2-x86_64-1.txz


MD5 signatures:
+-------------+

Slackware 12.1 package:
eb9eb46069d67590e3e07029a4a71d07  dhcp-4.1_ESV_R7-i486-1_slack12.1.tgz

Slackware 12.2 package:
fca847eea77fc1d63f39abd7508c894b  dhcp-4.1_ESV_R7-i486-1_slack12.2.tgz

Slackware 13.0 package:
4ca418335fbedb6806c37a18ee82a3a1  dhcp-4.1_ESV_R7-i486-1_slack13.0.txz

Slackware x86_64 13.0 package:
55e54c1a7d15ffb9fbe060e91308140b  dhcp-4.1_ESV_R7-x86_64-1_slack13.0.txz

Slackware 13.1 package:
af60f47b8f903a0bf3465bb6975ad596  dhcp-4.1_ESV_R7-i486-1_slack13.1.txz

Slackware x86_64 13.1 package:
08721f29288b9420a9807da752333673  dhcp-4.1_ESV_R7-x86_64-1_slack13.1.txz

Slackware 13.37 package:
c89162e707c91d1c01530334ec504da8  dhcp-4.2.4_P2-i486-1_slack13.37.txz

Slackware x86_64 13.37 package:
2f8c5d72bf67eeffb73a9e7dc8fb0d36  dhcp-4.2.4_P2-x86_64-1_slack13.37.txz

Slackware -current package:
74b7290a3d2a8b1c5beef845f0d9b756  n/dhcp-4.2.4_P2-i486-1.txz

Slackware x86_64 -current package:
71e9db99927cf7fece9dd137a2bb0c23  n/dhcp-4.2.4_P2-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg dhcp-4.2.4_P2-i486-1_slack13.37.txz

Then, restart the dhcp daemon.


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite. with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlBTlwQACgkQakRjwEAQIjOKngCfUfJA6x85nf5DamV/XKUvLxLa
+D4AnjsMSZFdiBdxQ6T4qIqXiW5DXC3R
=CBrL
-----END PGP SIGNATURE-----