Security update for dhcp

SUSE Security Update: Security update for dhcp
Announcement ID: SUSE-SU-2012:1005-1
Rating: moderate
References: #772924
Affected Products:
  • SUSE Linux Enterprise Server 10 SP4
  • SUSE Linux Enterprise Desktop 10 SP4
  • SLE SDK 10 SP4

  • An update that fixes two vulnerabilities is now available.

    Description:


    This update of dhcp fixed two security vulnerabilities:

    * Malformed client identifiers could cause a Denial of
    Service (excessive CPU consumption), effectively causing
    further client requests to not be processed anymore.
    (CVE-2012-3571
    > )
    * Two unspecified memory leaks. (CVE-2012-3954
    > )

    Package List:

    • SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64):
    • dhcp-3.0.7-7.17.1
    • dhcp-client-3.0.7-7.17.1
    • dhcp-devel-3.0.7-7.17.1
    • dhcp-relay-3.0.7-7.17.1
    • dhcp-server-3.0.7-7.17.1
    • SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):
    • dhcp-3.0.7-7.17.1
    • dhcp-client-3.0.7-7.17.1
    • SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64):
    • dhcp-devel-3.0.7-7.17.1
    • dhcp-relay-3.0.7-7.17.1
    • dhcp-server-3.0.7-7.17.1

    References:

  • http://support.novell.com/security/cve/CVE-2012-3571.html
  • http://support.novell.com/security/cve/CVE-2012-3954.html
  • https://bugzilla.novell.com/772924
  • http://download.suse.com/patch/finder/?keywords=da94d5b3d48594aadd850e6fdb67f6f2