Debian alert DLA-2674-1 (isc-dhcp)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 2674-1] isc-dhcp security update
Date:
             
 
Thu, 03 Jun 2021 13:42:33 +0200
Message-ID:
             
 
<20210603114233.83D882B9C7B@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2674-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
June 03, 2021                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : isc-dhcp
Version        : 4.3.5-3+deb9u2
CVE ID         : CVE-2021-25217
Debian Bug     : 989157

Jon Franklin and Pawel Wieczorkiewicz found an issue in the ISC DHCP
client and server when parsing lease information, which could lead to
denial of service via application crash.

For Debian 9 stretch, this problem has been fixed in version
4.3.5-3+deb9u2.

We recommend that you upgrade your isc-dhcp packages.

For the detailed security status of isc-dhcp please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/isc-dhcp

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmC4wCkACgkQnUbEiOQ2
gwLSAw/9EYyg7+uWNd5cL2IgBC2ODm3LmEjzEgbYngVg/pj9Pd72J8gzDFm/5J+M
9yXT8LQ2bt2VxG0GJ7TflSS+MuvTrM3yZGV1hqdEGS7Sdoka0bzzPTIvhwVDrboI
ujK40OrQFw3Zd3yoYU76Ax+bUQjuHZ1w47KgFD09rzS77rolZ5GKGaZw/n9gZhi1
E8m8ykKTKIwcZ1LEiSCVzqnicuHBJHrs+HfwSigRVZBSW8tM6s+4QyZcBd4DcWEv
waZj30FxHMlh1tr16GxpKud1N0ggLgbLM06QgYvLLJ2AAwj4P4VGaOP3q3BU4aGJ
n8eqv2cJluBd9JIUhTVQ2ahzK6Ftjk1angh75uh7kKUCwTbW8DZGxTnxfniWrrjL
29d7Le7ks6Xo8SJOyKdvPi5ocuN7PY/2qdZe+f1QulEHkXFU2ajNiUHkopM4QXvD
Ydk2TdGi6zRP16iRFd8lpaImb1dwGhqE7n4dKYYcE3BndJgAST5aYVvT0mO9HWVg
P1gXKAI3w3rUWObUlZqfb0UygJQfAjWBqsN6LUl2WV5HGaGDEKLDOUVKr77FMjaI
hYcXsOh2Mbxl98MH2loHM3AC0EShj96P28LryNw9y6UOlnFRrWGgYi9aTp9u4SLo
QGlqOQkKmpjE50kn1Fg/Kr4J6vxp1iGP+8P5geQJFU5s86o2DIM=
=ERkS
-----END PGP SIGNATURE-----