[CVE-2012-2152] dhcpcd 3.2.3 remote stack overflow / denial of service

Debian Bug report logs - #671265
[CVE-2012-2152] dhcpcd 3.2.3 remote stack overflow / denial of service

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Luciano Bello <luciano@debian.org>

To: submit@bugs.debian.org

Subject: [CVE-2012-2152] dhcpcd 3.2.3 remote stack overflow / denial of service

Date: Wed, 2 May 2012 22:08:37 +0200

Package: dhcpcd
Severity: important
Tags: security patch

The following vulnerability had been reported against dhcpcd: 
http://www.openwall.com/lists/oss-security/2012/05/02/4

A possible patch can be found in the report.

Please use CVE-2012-2152 for this issue.

Cheers,
luciano

Message #10 received at 671265-close@bugs.debian.org (full text, mbox, reply):

From: Simon Kelley <simon@thekelleys.org.uk>

To: 671265-close@bugs.debian.org

Subject: Bug#671265: fixed in dhcpcd 1:3.2.3-11

Date: Fri, 04 May 2012 14:47:46 +0000

Source: dhcpcd
Source-Version: 1:3.2.3-11

We believe that the bug you reported is fixed in the latest version of
dhcpcd, which is due to be installed in the Debian FTP archive:

dhcpcd_3.2.3-11.diff.gz
  to main/d/dhcpcd/dhcpcd_3.2.3-11.diff.gz
dhcpcd_3.2.3-11.dsc
  to main/d/dhcpcd/dhcpcd_3.2.3-11.dsc
dhcpcd_3.2.3-11_i386.deb
  to main/d/dhcpcd/dhcpcd_3.2.3-11_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 671265@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon Kelley <simon@thekelleys.org.uk> (supplier of updated dhcpcd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 3 May 2012 14:03:12 +0000
Source: dhcpcd
Binary: dhcpcd
Architecture: source i386
Version: 1:3.2.3-11
Distribution: unstable
Urgency: high
Maintainer: Simon Kelley <simon@thekelleys.org.uk>
Changed-By: Simon Kelley <simon@thekelleys.org.uk>
Description: 
 dhcpcd     - DHCP client for automatically configuring IPv4 networking
Closes: 671265
Changes: 
 dhcpcd (1:3.2.3-11) unstable; urgency=high
 .
     * Security fix, remote stack overflow: CVE-2012-2152. (closes: #671265)
Checksums-Sha1: 
 8383f99a7df2c4bf7a8e219b7ea9b34e39faf3c5 949 dhcpcd_3.2.3-11.dsc
 1507f9d9dbfce5389cef254cc6afc5c2d160c3a9 18696 dhcpcd_3.2.3-11.diff.gz
 f93d43a3ed019a1e63cee67b60ffc6e8b50f7f30 49650 dhcpcd_3.2.3-11_i386.deb
Checksums-Sha256: 
 c012b64894c1fb1f56b6fef391124e61dc882d7670fec7a62750c4552a649495 949 dhcpcd_3.2.3-11.dsc
 34af82121257a56ba21b300b6117e9d7cfd5ff12099d7e55d137e58b9caa8261 18696 dhcpcd_3.2.3-11.diff.gz
 bd80722f94582bb606086bc486feb93c43c70784a0eb46f091a796f56eb7fcd7 49650 dhcpcd_3.2.3-11_i386.deb
Files: 
 9af98a3b2703bb50493b24c0a295b509 949 net optional dhcpcd_3.2.3-11.dsc
 53288840b39a6a7fd3ca442804dc1543 18696 net optional dhcpcd_3.2.3-11.diff.gz
 5266304e9a6d2aa579eca25f726da53a 49650 net optional dhcpcd_3.2.3-11_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk+igxYACgkQKPyGmiibgrd4cgCcCYrF+YojnPbyut/Ow5qmaBoC
FFgAn2AgeAzoWJrwox5UQErkucA6IsmH
=K172
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.