Issued:
2019-11-05
Updated:
2019-11-05

RHSA-2019:3525 - Security Advisory

Synopsis

Moderate: dhcp security and bug fix update

Type/Severity

Security Advisory: Moderate

Topic

An update for dhcp is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

  • dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS (CVE-2019-6470)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • BZ - 1660865 - ISC dhcpd cannot start TLS session to 389-DS after updating openldap rpm
  • BZ - 1685560 - Avoid unnecessary DHCPD restarts by NetworkManager on certain UP events w.r.t. bug #565921
  • BZ - 1708641 - CVE-2019-6470 dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS

CVEs

References

Red Hat Enterprise Linux for x86_64 8

SRPM
dhcp-4.3.6-34.el8.src.rpm SHA-256: 8090aa38e3d32883359b86d17fe5b0fac8b868c2c3de389b0c946916059cd3b4
x86_64
dhcp-client-4.3.6-34.el8.x86_64.rpm SHA-256: 6d6992c6b9543d5c3c3664c110f4b3e7ea5c1701618fc8318e3aff0295e9d250
dhcp-client-debuginfo-4.3.6-34.el8.i686.rpm SHA-256: e4459e328796e042f3ccc26751d033d9604300cadf2d60ac1cfb6eeac71e9bf9
dhcp-client-debuginfo-4.3.6-34.el8.x86_64.rpm SHA-256: 39cef38408db987f33ce1a4d6157ff154ad8eb38cb4326800a69a689909db17d
dhcp-common-4.3.6-34.el8.noarch.rpm SHA-256: 5610574a9de0d76d7b93b9c51c8e77bd08908d02065ceb2adcc2e8336776ee3a
dhcp-debuginfo-4.3.6-34.el8.i686.rpm SHA-256: c425570ae250215d2fe8b7f4b391f0300665988384e7c3879a1ea1167e2b2648
dhcp-debuginfo-4.3.6-34.el8.x86_64.rpm SHA-256: f44900cfecffac9f5f29be4006978fc8360b762cf4ce776d8b043c2719e21d48
dhcp-debugsource-4.3.6-34.el8.i686.rpm SHA-256: c09612449e1a7f532ea9d9098a3046d0aa0ffa19a8678ff6b819ed2831fb37a5
dhcp-debugsource-4.3.6-34.el8.x86_64.rpm SHA-256: e9fa106064608b43b5a1e27f685b7394ff9661da8bcd2424be32b1470b84520c
dhcp-libs-4.3.6-34.el8.i686.rpm SHA-256: 528c80d6afd4e0747733332a57fe4e59de5045615df0e4320bcf96d52d845945
dhcp-libs-4.3.6-34.el8.x86_64.rpm SHA-256: dfb579156472ab8930692ac097cc397bbd30a360138928e3cf556542e3d4c008
dhcp-libs-debuginfo-4.3.6-34.el8.i686.rpm SHA-256: a53024d487934f16823b83d055f30233cb9e3f8ee13d2d65d432062f794f51c7
dhcp-libs-debuginfo-4.3.6-34.el8.x86_64.rpm SHA-256: 16673ce417045d23ec021c3b2ee18f0d3f6e358f9d0a51e16fdfeb06e6f3e3d5
dhcp-relay-4.3.6-34.el8.x86_64.rpm SHA-256: f2118ad7a14886384669defa1f9ba91643655e4104d289ea0af0203fcfbb26d5
dhcp-relay-debuginfo-4.3.6-34.el8.i686.rpm SHA-256: b64ae3ba99c29132cc9ce62e72b112e0b93408dbc818c5c352486eb378ffca17
dhcp-relay-debuginfo-4.3.6-34.el8.x86_64.rpm SHA-256: d12d51bf0185876db504b7744dc894accdc3d45d2ee28ddc7241f2112b4fe9ca
dhcp-server-4.3.6-34.el8.x86_64.rpm SHA-256: 0b6fa54825c90df57f871f875e59e9edbcd30a43bd65d4bc27a348a86785be45
dhcp-server-debuginfo-4.3.6-34.el8.i686.rpm SHA-256: 6113fa827861272b10df25576e75c1465f73a44599b72f046cf930490dbb1c79
dhcp-server-debuginfo-4.3.6-34.el8.x86_64.rpm SHA-256: e610cf9cf395a9b15b9d4736dc85f988c288039c486440cd8661682e670f0256

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
dhcp-4.3.6-34.el8.src.rpm SHA-256: 8090aa38e3d32883359b86d17fe5b0fac8b868c2c3de389b0c946916059cd3b4
s390x
dhcp-client-4.3.6-34.el8.s390x.rpm SHA-256: c74e22497bdbf112f062152a13159eb29d3bb81f474cfb7c9eb1336919ae98c0
dhcp-client-debuginfo-4.3.6-34.el8.s390x.rpm SHA-256: 553a431af3b0c70062eff94ea5c4da3b612140cbab11f73b87be127c04729077
dhcp-common-4.3.6-34.el8.noarch.rpm SHA-256: 5610574a9de0d76d7b93b9c51c8e77bd08908d02065ceb2adcc2e8336776ee3a
dhcp-debuginfo-4.3.6-34.el8.s390x.rpm SHA-256: e56626a41ef87dea391a062e56cc062a86f7957a69a4515a99b61f2a005e1b3a
dhcp-debugsource-4.3.6-34.el8.s390x.rpm SHA-256: 099a913e19b4e0e9bf83bd8ec961c875397bb50a6bbbd44b4ec439d3f705717d
dhcp-libs-4.3.6-34.el8.s390x.rpm SHA-256: 99d8994c92f6f65bfae5a01c82512f6c2f8e7e0abb49674e7ddd717090ac7bfd
dhcp-libs-debuginfo-4.3.6-34.el8.s390x.rpm SHA-256: 0f0a81f076a1f34bfd5228b1f20762b5a0532f6b45831a475ba3060017899f50
dhcp-relay-4.3.6-34.el8.s390x.rpm SHA-256: 4d0d4683ac9873a691e11e55f2a73c49d6a1ef64f077ff9aee36ce1a12f6261b
dhcp-relay-debuginfo-4.3.6-34.el8.s390x.rpm SHA-256: 28f485c51380301cb683d8627bc7483f2eff2a00dbaedc92abbed1213eb14019
dhcp-server-4.3.6-34.el8.s390x.rpm SHA-256: fc5f8c078d1d12bd31b8b3484263a07b78bc8798de2dcec08d5e17041221c3f1
dhcp-server-debuginfo-4.3.6-34.el8.s390x.rpm SHA-256: bad52b63b7fa317d49f0445aee0c02c10b80dad30e24c6c4142e9ebb0881654d

Red Hat Enterprise Linux for Power, little endian 8

SRPM
dhcp-4.3.6-34.el8.src.rpm SHA-256: 8090aa38e3d32883359b86d17fe5b0fac8b868c2c3de389b0c946916059cd3b4
ppc64le
dhcp-client-4.3.6-34.el8.ppc64le.rpm SHA-256: 0b6fb466c460037ee6284de240585255f965dfac90988cf577b11c871da8208a
dhcp-client-debuginfo-4.3.6-34.el8.ppc64le.rpm SHA-256: 2aec0c5d50904043012835e1f0c8be553d38320ccc0c8c75dbbf9536b9b4cfe4
dhcp-common-4.3.6-34.el8.noarch.rpm SHA-256: 5610574a9de0d76d7b93b9c51c8e77bd08908d02065ceb2adcc2e8336776ee3a
dhcp-debuginfo-4.3.6-34.el8.ppc64le.rpm SHA-256: 6041628947fc2e9b66174a776d5cb1c42a761bf3537dc68e7fe214074be1e51b
dhcp-debugsource-4.3.6-34.el8.ppc64le.rpm SHA-256: 79506c35ecce3c689fcc135ca791390136f6a46d359bd404f44b67a6dc44650e
dhcp-libs-4.3.6-34.el8.ppc64le.rpm SHA-256: f0f0e87800d709acbd93b272e61cce405c4d6cbb807c10081e1b0a4e6b005b91
dhcp-libs-debuginfo-4.3.6-34.el8.ppc64le.rpm SHA-256: cf47f00d0951cdc90cbc75346f9037ec10c4d475975e152858125b427aa2114c
dhcp-relay-4.3.6-34.el8.ppc64le.rpm SHA-256: 2a651c2d8d4561d6a509944381470ac29fe691486198a28b4164d874bda4514d
dhcp-relay-debuginfo-4.3.6-34.el8.ppc64le.rpm SHA-256: bd13aab519290171df10676d7b3a2789d6a69fab91d40e84cb6eaaa9e902fc76
dhcp-server-4.3.6-34.el8.ppc64le.rpm SHA-256: 81bba1a8bb77bfed0f95e2d1e414f5859fbb4d9f3e79614ceb38e18336913f7a
dhcp-server-debuginfo-4.3.6-34.el8.ppc64le.rpm SHA-256: b8a4915f299c26a58cfc4e10e91902a77f8f978298f53b4b3ac9978cdd27f72f

Red Hat Enterprise Linux for ARM 64 8

SRPM
dhcp-4.3.6-34.el8.src.rpm SHA-256: 8090aa38e3d32883359b86d17fe5b0fac8b868c2c3de389b0c946916059cd3b4
aarch64
dhcp-client-4.3.6-34.el8.aarch64.rpm SHA-256: 580f850a91a7a7c1147fcc13e869d92ac2947ebb6b3d6d1ccf3e3f80d0f22a89
dhcp-client-debuginfo-4.3.6-34.el8.aarch64.rpm SHA-256: 9763bd8810877b66d7e4191c3f4bf2886d4333234fe0ebf4a968f88aa08aa439
dhcp-common-4.3.6-34.el8.noarch.rpm SHA-256: 5610574a9de0d76d7b93b9c51c8e77bd08908d02065ceb2adcc2e8336776ee3a
dhcp-debuginfo-4.3.6-34.el8.aarch64.rpm SHA-256: 217b97a824d3f3584341da95e5198da25a66361ae47ea47723a16b6ba52844e2
dhcp-debugsource-4.3.6-34.el8.aarch64.rpm SHA-256: 846ee208099feb0d9a4f4490982066b6ad27c9654525395b8692cec1b62afa7f
dhcp-libs-4.3.6-34.el8.aarch64.rpm SHA-256: 55e82227b4be6a011b03c1ec185428ea7e41744aa595d313d74f0dd319878179
dhcp-libs-debuginfo-4.3.6-34.el8.aarch64.rpm SHA-256: 1b018d859b24336198b8eac5282067e6439ccd97ef719feece63f1a4c2b3e73a
dhcp-relay-4.3.6-34.el8.aarch64.rpm SHA-256: dd8219daeb933894bad2fdb654eca03e1b418797c3f534c9da6929fca39cc62f
dhcp-relay-debuginfo-4.3.6-34.el8.aarch64.rpm SHA-256: 3331f7c6cb4025f8f3d29b68b43a0e9289dda9fba3f56f751aa253b221124720
dhcp-server-4.3.6-34.el8.aarch64.rpm SHA-256: 66696dca3bc0e8a66dee349dcb6062323dcbd85cfdb848894452054b638cbde7
dhcp-server-debuginfo-4.3.6-34.el8.aarch64.rpm SHA-256: 4b7e5222248d7ca4f2f89a00f1bd86d66be244f42c235992702361bd2dee9c81

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.