Issued:
2009-07-14
Updated:
2009-07-14

RHSA-2009:1136 - Security Advisory

Synopsis

Critical: dhcp security update

Type/Severity

Security Advisory: Critical

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated dhcp packages that fix a security issue are now available for Red
Hat Enterprise Linux 4 and 4.7 Extended Update Support.

This update has been rated as having critical security impact by the Red
Hat Security Response Team.

Description

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows
individual devices on an IP network to get their own network configuration
information, including an IP address, a subnet mask, and a broadcast
address.

The Mandriva Linux Engineering Team discovered a stack-based buffer
overflow flaw in the ISC DHCP client. If the DHCP client were to receive a
malicious DHCP response, it could crash or execute arbitrary code with the
permissions of the client (root). (CVE-2009-0692)

Users of DHCP should upgrade to these updated packages, which contain a
backported patch to correct this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.7 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.7 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.7 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7 ppc

Fixes

  • BZ - 507717 - CVE-2009-0692 dhclient: stack overflow leads to arbitrary code execution as root

Red Hat Enterprise Linux Server 4

SRPM
dhcp-3.0.1-65.el4_8.1.src.rpm SHA-256: 71aa98b9a78943266a8094df2cd03cf619c7d15a4cf8eaaaf082b75099c17204
x86_64
dhclient-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 9e92305885b9d5b4ddfa6b035d315d562b38e78494f266f333de7f6ff3d15975
dhclient-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 9e92305885b9d5b4ddfa6b035d315d562b38e78494f266f333de7f6ff3d15975
dhcp-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 3633117d1c63a9817314e0d86bc4a32623124db906030dba21eec9cdb5298e56
dhcp-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 3633117d1c63a9817314e0d86bc4a32623124db906030dba21eec9cdb5298e56
dhcp-devel-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 4f29a22530c20b015820648a1674521842cd29aa3ca10ae325e18822a241f77c
dhcp-devel-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 4f29a22530c20b015820648a1674521842cd29aa3ca10ae325e18822a241f77c
ia64
dhclient-3.0.1-65.el4_8.1.ia64.rpm SHA-256: c774500143be8232f0859097d6bec87b67597afe23b579e0d2819c853df27ba0
dhclient-3.0.1-65.el4_8.1.ia64.rpm SHA-256: c774500143be8232f0859097d6bec87b67597afe23b579e0d2819c853df27ba0
dhcp-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 0515b6bcb0d475a545cf307f11d6dd64bea350f97440f996a855a8d734511316
dhcp-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 0515b6bcb0d475a545cf307f11d6dd64bea350f97440f996a855a8d734511316
dhcp-devel-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 4537d51d84eb73945c0b506356a1df5428e771ba53590ef3145e1b9186fe14fe
dhcp-devel-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 4537d51d84eb73945c0b506356a1df5428e771ba53590ef3145e1b9186fe14fe
i386
dhclient-3.0.1-65.el4_8.1.i386.rpm SHA-256: 0b4e8150056685ff8ea4b8dddcf651311156d02bbba9b280eac054454ef956aa
dhclient-3.0.1-65.el4_8.1.i386.rpm SHA-256: 0b4e8150056685ff8ea4b8dddcf651311156d02bbba9b280eac054454ef956aa
dhcp-3.0.1-65.el4_8.1.i386.rpm SHA-256: 2c6edd3465af20fca5a4468e5c91a07bd35d228fa493b69ac34240748a0f4ea4
dhcp-3.0.1-65.el4_8.1.i386.rpm SHA-256: 2c6edd3465af20fca5a4468e5c91a07bd35d228fa493b69ac34240748a0f4ea4
dhcp-devel-3.0.1-65.el4_8.1.i386.rpm SHA-256: a3e1feacab7ceccdd82e8e23e5582816732c872e73f2b923057512ad8da4ce78
dhcp-devel-3.0.1-65.el4_8.1.i386.rpm SHA-256: a3e1feacab7ceccdd82e8e23e5582816732c872e73f2b923057512ad8da4ce78

Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8

SRPM
dhcp-3.0.1-65.el4_8.1.src.rpm SHA-256: 71aa98b9a78943266a8094df2cd03cf619c7d15a4cf8eaaaf082b75099c17204
x86_64
dhclient-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 9e92305885b9d5b4ddfa6b035d315d562b38e78494f266f333de7f6ff3d15975
dhclient-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 9e92305885b9d5b4ddfa6b035d315d562b38e78494f266f333de7f6ff3d15975
dhcp-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 3633117d1c63a9817314e0d86bc4a32623124db906030dba21eec9cdb5298e56
dhcp-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 3633117d1c63a9817314e0d86bc4a32623124db906030dba21eec9cdb5298e56
dhcp-devel-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 4f29a22530c20b015820648a1674521842cd29aa3ca10ae325e18822a241f77c
dhcp-devel-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 4f29a22530c20b015820648a1674521842cd29aa3ca10ae325e18822a241f77c
ia64
dhclient-3.0.1-65.el4_8.1.ia64.rpm SHA-256: c774500143be8232f0859097d6bec87b67597afe23b579e0d2819c853df27ba0
dhclient-3.0.1-65.el4_8.1.ia64.rpm SHA-256: c774500143be8232f0859097d6bec87b67597afe23b579e0d2819c853df27ba0
dhcp-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 0515b6bcb0d475a545cf307f11d6dd64bea350f97440f996a855a8d734511316
dhcp-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 0515b6bcb0d475a545cf307f11d6dd64bea350f97440f996a855a8d734511316
dhcp-devel-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 4537d51d84eb73945c0b506356a1df5428e771ba53590ef3145e1b9186fe14fe
dhcp-devel-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 4537d51d84eb73945c0b506356a1df5428e771ba53590ef3145e1b9186fe14fe
i386
dhclient-3.0.1-65.el4_8.1.i386.rpm SHA-256: 0b4e8150056685ff8ea4b8dddcf651311156d02bbba9b280eac054454ef956aa
dhclient-3.0.1-65.el4_8.1.i386.rpm SHA-256: 0b4e8150056685ff8ea4b8dddcf651311156d02bbba9b280eac054454ef956aa
dhcp-3.0.1-65.el4_8.1.i386.rpm SHA-256: 2c6edd3465af20fca5a4468e5c91a07bd35d228fa493b69ac34240748a0f4ea4
dhcp-3.0.1-65.el4_8.1.i386.rpm SHA-256: 2c6edd3465af20fca5a4468e5c91a07bd35d228fa493b69ac34240748a0f4ea4
dhcp-devel-3.0.1-65.el4_8.1.i386.rpm SHA-256: a3e1feacab7ceccdd82e8e23e5582816732c872e73f2b923057512ad8da4ce78
dhcp-devel-3.0.1-65.el4_8.1.i386.rpm SHA-256: a3e1feacab7ceccdd82e8e23e5582816732c872e73f2b923057512ad8da4ce78

Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.7

SRPM
dhcp-3.0.1-62.el4_7.1.src.rpm SHA-256: 608a28a2170dba572ce9a9871639ebb90c21b8daf814b1d0840d5143499a7d54
x86_64
dhclient-3.0.1-62.el4_7.1.x86_64.rpm SHA-256: 09ba0b005fc8411d3b32fad4ba21cbf9556d210bcbb8ed696372d4f5c0c2c5dc
dhclient-3.0.1-62.el4_7.1.x86_64.rpm SHA-256: 09ba0b005fc8411d3b32fad4ba21cbf9556d210bcbb8ed696372d4f5c0c2c5dc
dhcp-3.0.1-62.el4_7.1.x86_64.rpm SHA-256: 07fb290f2679015bc3119b98b147cbf73428107a7e9765bde15f4ec195225649
dhcp-3.0.1-62.el4_7.1.x86_64.rpm SHA-256: 07fb290f2679015bc3119b98b147cbf73428107a7e9765bde15f4ec195225649
dhcp-devel-3.0.1-62.el4_7.1.x86_64.rpm SHA-256: 043f14d7b53982d20b241f812bd5d57ac3f2dec03d8ecb6141e77ffa685d7c36
dhcp-devel-3.0.1-62.el4_7.1.x86_64.rpm SHA-256: 043f14d7b53982d20b241f812bd5d57ac3f2dec03d8ecb6141e77ffa685d7c36
ia64
dhclient-3.0.1-62.el4_7.1.ia64.rpm SHA-256: 98e64175205a1f9efd9163cd97a3ae76de9034653af22e48bbf1bec365846d4a
dhclient-3.0.1-62.el4_7.1.ia64.rpm SHA-256: 98e64175205a1f9efd9163cd97a3ae76de9034653af22e48bbf1bec365846d4a
dhcp-3.0.1-62.el4_7.1.ia64.rpm SHA-256: 1d48b4962eb87521f6c69fcc766e34f6029e8ddd7e96fc2f4380c9965929f431
dhcp-3.0.1-62.el4_7.1.ia64.rpm SHA-256: 1d48b4962eb87521f6c69fcc766e34f6029e8ddd7e96fc2f4380c9965929f431
dhcp-devel-3.0.1-62.el4_7.1.ia64.rpm SHA-256: c5c0d640ca13feba43f305bad3bac7b8476d51c01d9c70147b853c616af5ae11
dhcp-devel-3.0.1-62.el4_7.1.ia64.rpm SHA-256: c5c0d640ca13feba43f305bad3bac7b8476d51c01d9c70147b853c616af5ae11
i386
dhclient-3.0.1-62.el4_7.1.i386.rpm SHA-256: 6be238d4d3a8c26afd6d36ade0ff7c7756471c0adf251fd1a815654b3dc27f1c
dhclient-3.0.1-62.el4_7.1.i386.rpm SHA-256: 6be238d4d3a8c26afd6d36ade0ff7c7756471c0adf251fd1a815654b3dc27f1c
dhcp-3.0.1-62.el4_7.1.i386.rpm SHA-256: 36b5d869d58ce3b7a821135df3ef639a7c4d6036c2e53b33b6ae3add8ab8f4cf
dhcp-3.0.1-62.el4_7.1.i386.rpm SHA-256: 36b5d869d58ce3b7a821135df3ef639a7c4d6036c2e53b33b6ae3add8ab8f4cf
dhcp-devel-3.0.1-62.el4_7.1.i386.rpm SHA-256: dcc48e45c32f225466ca14c3014f81e29b793ba2239181658baf7a4cfb624975
dhcp-devel-3.0.1-62.el4_7.1.i386.rpm SHA-256: dcc48e45c32f225466ca14c3014f81e29b793ba2239181658baf7a4cfb624975

Red Hat Enterprise Linux Workstation 4

SRPM
dhcp-3.0.1-65.el4_8.1.src.rpm SHA-256: 71aa98b9a78943266a8094df2cd03cf619c7d15a4cf8eaaaf082b75099c17204
x86_64
dhclient-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 9e92305885b9d5b4ddfa6b035d315d562b38e78494f266f333de7f6ff3d15975
dhcp-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 3633117d1c63a9817314e0d86bc4a32623124db906030dba21eec9cdb5298e56
dhcp-devel-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 4f29a22530c20b015820648a1674521842cd29aa3ca10ae325e18822a241f77c
ia64
dhclient-3.0.1-65.el4_8.1.ia64.rpm SHA-256: c774500143be8232f0859097d6bec87b67597afe23b579e0d2819c853df27ba0
dhcp-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 0515b6bcb0d475a545cf307f11d6dd64bea350f97440f996a855a8d734511316
dhcp-devel-3.0.1-65.el4_8.1.ia64.rpm SHA-256: 4537d51d84eb73945c0b506356a1df5428e771ba53590ef3145e1b9186fe14fe
i386
dhclient-3.0.1-65.el4_8.1.i386.rpm SHA-256: 0b4e8150056685ff8ea4b8dddcf651311156d02bbba9b280eac054454ef956aa
dhcp-3.0.1-65.el4_8.1.i386.rpm SHA-256: 2c6edd3465af20fca5a4468e5c91a07bd35d228fa493b69ac34240748a0f4ea4
dhcp-devel-3.0.1-65.el4_8.1.i386.rpm SHA-256: a3e1feacab7ceccdd82e8e23e5582816732c872e73f2b923057512ad8da4ce78

Red Hat Enterprise Linux Desktop 4

SRPM
dhcp-3.0.1-65.el4_8.1.src.rpm SHA-256: 71aa98b9a78943266a8094df2cd03cf619c7d15a4cf8eaaaf082b75099c17204
x86_64
dhclient-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 9e92305885b9d5b4ddfa6b035d315d562b38e78494f266f333de7f6ff3d15975
dhcp-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 3633117d1c63a9817314e0d86bc4a32623124db906030dba21eec9cdb5298e56
dhcp-devel-3.0.1-65.el4_8.1.x86_64.rpm SHA-256: 4f29a22530c20b015820648a1674521842cd29aa3ca10ae325e18822a241f77c
i386
dhclient-3.0.1-65.el4_8.1.i386.rpm SHA-256: 0b4e8150056685ff8ea4b8dddcf651311156d02bbba9b280eac054454ef956aa
dhcp-3.0.1-65.el4_8.1.i386.rpm SHA-256: 2c6edd3465af20fca5a4468e5c91a07bd35d228fa493b69ac34240748a0f4ea4
dhcp-devel-3.0.1-65.el4_8.1.i386.rpm SHA-256: a3e1feacab7ceccdd82e8e23e5582816732c872e73f2b923057512ad8da4ce78

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
dhcp-3.0.1-65.el4_8.1.src.rpm SHA-256: 71aa98b9a78943266a8094df2cd03cf619c7d15a4cf8eaaaf082b75099c17204
s390x
dhclient-3.0.1-65.el4_8.1.s390x.rpm SHA-256: e017e357e2de86f1fb08d04a2e3d9a1f6c154a7551ac455331709ed8b48ad532
dhcp-3.0.1-65.el4_8.1.s390x.rpm SHA-256: f1c11b7d839f3ba351babac4c956fb911f6e706e7867455e04502041bacfe959
dhcp-devel-3.0.1-65.el4_8.1.s390x.rpm SHA-256: 54364914c58dd8159092a2f01b1bee574b2d34cadaa2dd5605ed81e57cc86455
s390
dhclient-3.0.1-65.el4_8.1.s390.rpm SHA-256: 9c9b440074c6662288b6b193eb18a88bd28c844eb2cc488ec0ba3486a2d2482d
dhcp-3.0.1-65.el4_8.1.s390.rpm SHA-256: d24977c915c1f6207d634262c700b7e1bff692d175f344205a4d6dd0428e2946
dhcp-devel-3.0.1-65.el4_8.1.s390.rpm SHA-256: 33d91eb38c7d7a075eecf91c229c9d474dbee485f8f3b57be64a07104922badf

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8

SRPM
dhcp-3.0.1-65.el4_8.1.src.rpm SHA-256: 71aa98b9a78943266a8094df2cd03cf619c7d15a4cf8eaaaf082b75099c17204
s390x
dhclient-3.0.1-65.el4_8.1.s390x.rpm SHA-256: e017e357e2de86f1fb08d04a2e3d9a1f6c154a7551ac455331709ed8b48ad532
dhcp-3.0.1-65.el4_8.1.s390x.rpm SHA-256: f1c11b7d839f3ba351babac4c956fb911f6e706e7867455e04502041bacfe959
dhcp-devel-3.0.1-65.el4_8.1.s390x.rpm SHA-256: 54364914c58dd8159092a2f01b1bee574b2d34cadaa2dd5605ed81e57cc86455
s390
dhclient-3.0.1-65.el4_8.1.s390.rpm SHA-256: 9c9b440074c6662288b6b193eb18a88bd28c844eb2cc488ec0ba3486a2d2482d
dhcp-3.0.1-65.el4_8.1.s390.rpm SHA-256: d24977c915c1f6207d634262c700b7e1bff692d175f344205a4d6dd0428e2946
dhcp-devel-3.0.1-65.el4_8.1.s390.rpm SHA-256: 33d91eb38c7d7a075eecf91c229c9d474dbee485f8f3b57be64a07104922badf

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7

SRPM
dhcp-3.0.1-62.el4_7.1.src.rpm SHA-256: 608a28a2170dba572ce9a9871639ebb90c21b8daf814b1d0840d5143499a7d54
s390x
dhclient-3.0.1-62.el4_7.1.s390x.rpm SHA-256: cb3574b88c4320b339b6470dd1f04a56188483a255c75a0c7aa824aa45dd8908
dhcp-3.0.1-62.el4_7.1.s390x.rpm SHA-256: 14e8202045d685cea79a52ba1915795ec69157fd90eede03ea122e739b55d823
dhcp-devel-3.0.1-62.el4_7.1.s390x.rpm SHA-256: 84d2130d2560e8b5be0db4bd189e0b11d9c141dbe0cc865d0e6bf9c595caef80
s390
dhclient-3.0.1-62.el4_7.1.s390.rpm SHA-256: 34f9de682e00a263f2102d4c17e4184d713a791c2543bd503a29e9999e861ad1
dhcp-3.0.1-62.el4_7.1.s390.rpm SHA-256: 862375dfa6bc532d3e9b4a4ec6ffbdc21d75a8ec6e98f5ae4012e08450ebadbe
dhcp-devel-3.0.1-62.el4_7.1.s390.rpm SHA-256: 2b6bf9d7a359e0781af2c2040867c000a838b0fd40df0322a958d33c1efd3b23

Red Hat Enterprise Linux for Power, big endian 4

SRPM
dhcp-3.0.1-65.el4_8.1.src.rpm SHA-256: 71aa98b9a78943266a8094df2cd03cf619c7d15a4cf8eaaaf082b75099c17204
ppc
dhclient-3.0.1-65.el4_8.1.ppc.rpm SHA-256: 48cbbffdbca8dc8e2d7d308a21c753e743bfeb0e623a3c3c91500c51f48b4d2f
dhcp-3.0.1-65.el4_8.1.ppc.rpm SHA-256: ca5dd46db7256271daad61e93a19d23dadbedf69bd34f02769e16f1d9c0c6ebb
dhcp-devel-3.0.1-65.el4_8.1.ppc.rpm SHA-256: c5accb70e08c5d3e201d9555455b6e1f8be7e97264935f035ead4ee8601f1b45

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8

SRPM
dhcp-3.0.1-65.el4_8.1.src.rpm SHA-256: 71aa98b9a78943266a8094df2cd03cf619c7d15a4cf8eaaaf082b75099c17204
ppc
dhclient-3.0.1-65.el4_8.1.ppc.rpm SHA-256: 48cbbffdbca8dc8e2d7d308a21c753e743bfeb0e623a3c3c91500c51f48b4d2f
dhcp-3.0.1-65.el4_8.1.ppc.rpm SHA-256: ca5dd46db7256271daad61e93a19d23dadbedf69bd34f02769e16f1d9c0c6ebb
dhcp-devel-3.0.1-65.el4_8.1.ppc.rpm SHA-256: c5accb70e08c5d3e201d9555455b6e1f8be7e97264935f035ead4ee8601f1b45

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7

SRPM
dhcp-3.0.1-62.el4_7.1.src.rpm SHA-256: 608a28a2170dba572ce9a9871639ebb90c21b8daf814b1d0840d5143499a7d54
ppc
dhclient-3.0.1-62.el4_7.1.ppc.rpm SHA-256: 7347629ecab5e175fa061725ae782c8e6ca4c8322a8f3879523ff74c37359059
dhcp-3.0.1-62.el4_7.1.ppc.rpm SHA-256: 1158a96e72f2a18d16343dd48b6c6cd669dd156bd3dc5942148b1c8d0ef2fd21
dhcp-devel-3.0.1-62.el4_7.1.ppc.rpm SHA-256: 0ed19e27d052e256e00e8b859c2ee7cb08cbd411c0a3c5cdd013f79de1feb7c6

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.