On Mon Oct 29, 2007 at 19:33:17 +0100, Tomas Hoger wrote:

> During testing of our updated dhcp packages, we have found out that
> patch for CVE-2007-5365 used by OpenBSD was not sufficient and it was
> still possible to crash dhcpd.  Your dhcp packages released in DSA
> 1388-1 also seem affected. You can find better patch based on dhcp-3.x
> code here:
> 
>   https://bugzilla.redhat.com/show_bug.cgi?id=327781#c5
> 
> Note: [EMAIL PROTECTED] was notified on 2007-10-23.
>     Updated DSA 1388-3 released on 2007-10-29.

  Thanks, we have a built package already.  I'm not sure who is
  releasing it - I guess I should since I did the previous one.
  I'll chase it tomorrow/wednesday.

Steve
-- 



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to