| Message ID | 1452192214-29918-1-git-send-email-gustavo@zacarias.com.ar |
|---|---|
| State | Accepted |
| Commit | a8f89933659b9ceaf7b9c563656493e236edcf1f |
| Headers | show |
>>>>> "Gustavo" == Gustavo Zacarias <gustavo@zacarias.com.ar> writes: > Fixes: > CVE-2016-1503 - heap overflow via malformed dhcp responses later in > print_option (via dhcp_envoption1) due to incorrect option length > values. > CVE-2016-1504 - invalid read/crash via malformed dhcp responses. > Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Committed, thanks.
diff --git a/package/dhcpcd/dhcpcd.hash b/package/dhcpcd/dhcpcd.hash index 94ab89e..18ffaed 100644 --- a/package/dhcpcd/dhcpcd.hash +++ b/package/dhcpcd/dhcpcd.hash @@ -1,2 +1,2 @@ # Locally calculated from download (no sig, hash) -sha256 c3f3ff7473ef158a1e71db9aea7424df2c3477ad064e2b542f27948a5abc9ba0 dhcpcd-6.9.4.tar.xz +sha256 ab56af9b2e86913c55a965cb0f835e87749df78318564acf90d5d698f413ad35 dhcpcd-6.10.0.tar.xz diff --git a/package/dhcpcd/dhcpcd.mk b/package/dhcpcd/dhcpcd.mk index 2d0cb0c..27e0666 100644 --- a/package/dhcpcd/dhcpcd.mk +++ b/package/dhcpcd/dhcpcd.mk @@ -4,7 +4,7 @@ # ################################################################################ -DHCPCD_VERSION = 6.9.4 +DHCPCD_VERSION = 6.10.0 DHCPCD_SOURCE = dhcpcd-$(DHCPCD_VERSION).tar.xz DHCPCD_SITE = http://roy.marples.name/downloads/dhcpcd DHCPCD_DEPENDENCIES = host-pkgconf
Fixes: CVE-2016-1503 - heap overflow via malformed dhcp responses later in print_option (via dhcp_envoption1) due to incorrect option length values. CVE-2016-1504 - invalid read/crash via malformed dhcp responses. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> --- package/dhcpcd/dhcpcd.hash | 2 +- package/dhcpcd/dhcpcd.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)