Which packages needs to be updated to fix CVE-2012-3955?

Issue

• Can you confirm whether or not the latest version of dhcp available for RHEL5 and RHEL6 is vulnerable to CVE-2012-3955?
• According to the following bug, it appears that at a minimum, RHEL6 is affected:
  https://bugzilla.redhat.com/show_bug.cgi?id=856766
• If either version of RHEL is affected, please provide an estimated timeline for when errata will be released to address this CVE.