Security update for dhcp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2727-2 Final 1 1 2019-11-12T21:32:49Z current 2019-11-12T21:32:49Z 2019-11-12T21:32:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for dhcp This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-Azure-BYOS-2019-2727,Image SLES12-SP4-EC2-HVM-BYOS-2019-2727,Image SLES12-SP4-GCE-BYOS-2019-2727,Image SLES12-SP4-OCI-BYOS-2019-2727,Image SLES12-SP4-SAP-Azure-2019-2727,Image SLES12-SP4-SAP-Azure-BYOS-2019-2727,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2019-2727,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-2727,Image SLES12-SP4-SAP-EC2-HVM-2019-2727,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-2727,Image SLES12-SP4-SAP-GCE-2019-2727,Image SLES12-SP4-SAP-GCE-BYOS-2019-2727,Image SLES12-SP4-SAP-OCI-BYOS-2019-2727,Image SLES12-SP5-Azure-BYOS-2019-2727,Image SLES12-SP5-Azure-Basic-On-Demand-2019-2727,Image SLES12-SP5-Azure-HPC-BYOS-2019-2727,Image SLES12-SP5-Azure-HPC-On-Demand-2019-2727,Image SLES12-SP5-Azure-SAP-BYOS-2019-2727,Image SLES12-SP5-Azure-SAP-On-Demand-2019-2727,Image SLES12-SP5-Azure-Standard-On-Demand-2019-2727,Image SLES12-SP5-EC2-BYOS-2019-2727,Image SLES12-SP5-EC2-ECS-On-Demand-2019-2727,Image SLES12-SP5-EC2-On-Demand-2019-2727,Image SLES12-SP5-EC2-SAP-BYOS-2019-2727,Image SLES12-SP5-EC2-SAP-On-Demand-2019-2727,Image SLES12-SP5-GCE-BYOS-2019-2727,Image SLES12-SP5-GCE-On-Demand-2019-2727,Image SLES12-SP5-GCE-SAP-BYOS-2019-2727,Image SLES12-SP5-GCE-SAP-On-Demand-2019-2727,Image SLES12-SP5-OCI-BYOS-BYOS-2019-2727,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-2727,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-2727,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-2727,SUSE-2019-2727,SUSE-SLE-SDK-12-SP5-2019-2727,SUSE-SLE-SERVER-12-SP5-2019-2727 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192727-2/ Link for SUSE-SU-2019:2727-2 https://lists.suse.com/pipermail/sle-security-updates/2019-November/006128.html E-Mail link for SUSE-SU-2019:2727-2 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1089524 SUSE Bug 1089524 https://bugzilla.suse.com/1134078 SUSE Bug 1134078 https://bugzilla.suse.com/1136572 SUSE Bug 1136572 https://www.suse.com/security/cve/CVE-2019-6470/ SUSE CVE CVE-2019-6470 page Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 dhcp-4.3.3-10.19.1 dhcp-client-4.3.3-10.19.1 dhcp-devel-4.3.3-10.19.1 dhcp-doc-4.3.3-10.19.1 dhcp-relay-4.3.3-10.19.1 dhcp-server-4.3.3-10.19.1 dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-Azure-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-Azure-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-GCE-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-GCE-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-OCI-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-OCI-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-Azure dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-Azure dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-EC2-HVM dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-EC2-HVM dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-GCE dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-GCE dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-GCE-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-GCE-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-GCE-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-GCE-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production dhcp-4.3.3-10.19.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production dhcp-client-4.3.3-10.19.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production dhcp-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Server 12 SP5 dhcp-client-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Server 12 SP5 dhcp-relay-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Server 12 SP5 dhcp-server-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Server 12 SP5 dhcp-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 dhcp-client-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 dhcp-relay-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 dhcp-server-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 dhcp-devel-4.3.3-10.19.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation. CVE-2019-6470 Image SLES12-SP4-Azure-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP4-Azure-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-EC2-HVM-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP4-EC2-HVM-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-GCE-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP4-GCE-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-OCI-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP4-OCI-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-Azure-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-Azure-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-Azure:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-Azure:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-EC2-HVM:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-EC2-HVM:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-GCE-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-GCE-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-GCE:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-GCE:dhcp-client-4.3.3-10.19.1 Image SLES12-SP4-SAP-OCI-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP4-SAP-OCI-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-Azure-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-Azure-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-Azure-Basic-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-Azure-Basic-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-Azure-HPC-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-Azure-HPC-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-Azure-HPC-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-Azure-HPC-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-Azure-SAP-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-Azure-SAP-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-Azure-SAP-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-Azure-SAP-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-Azure-Standard-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-Azure-Standard-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-EC2-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-EC2-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-EC2-ECS-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-EC2-ECS-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-EC2-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-EC2-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-EC2-SAP-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-EC2-SAP-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-EC2-SAP-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-EC2-SAP-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-GCE-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-GCE-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-GCE-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-GCE-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-GCE-SAP-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-GCE-SAP-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-GCE-SAP-On-Demand:dhcp-4.3.3-10.19.1 Image SLES12-SP5-GCE-SAP-On-Demand:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-OCI-BYOS-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-OCI-BYOS-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:dhcp-4.3.3-10.19.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dhcp-4.3.3-10.19.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dhcp-client-4.3.3-10.19.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dhcp-4.3.3-10.19.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dhcp-client-4.3.3-10.19.1 SUSE Linux Enterprise Server 12 SP5:dhcp-4.3.3-10.19.1 SUSE Linux Enterprise Server 12 SP5:dhcp-client-4.3.3-10.19.1 SUSE Linux Enterprise Server 12 SP5:dhcp-relay-4.3.3-10.19.1 SUSE Linux Enterprise Server 12 SP5:dhcp-server-4.3.3-10.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:dhcp-4.3.3-10.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:dhcp-client-4.3.3-10.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:dhcp-relay-4.3.3-10.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:dhcp-server-4.3.3-10.19.1 SUSE Linux Enterprise Software Development Kit 12 SP5:dhcp-devel-4.3.3-10.19.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192727-2/ https://www.suse.com/security/cve/CVE-2019-6470.html CVE-2019-6470 https://bugzilla.suse.com/1134078 SUSE Bug 1134078