diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2022-10-05 18:55:36 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2022-10-06 13:30:32 +0200 |
| commit | 153ac9bb204e55276263530db56bd39540d15b53 (patch) | |
| tree | 7f4d45e376c1f8aed47d1997422b80e118646cad /patches/source/dhcp/dhclient-script.PATH.diff | |
| parent | a96a6a61e41ba076afec827d2733e8f239b99ad4 (diff) | |
| download | current-153ac9bb204e55276263530db56bd39540d15b53.tar.gz current-153ac9bb204e55276263530db56bd39540d15b53.tar.xz | |
Wed Oct 5 18:55:36 UTC 202220221005185536_15.0
patches/packages/dhcp-4.4.3_P1-x86_64-1_slack15.0.txz: Upgraded.
This update fixes two security issues:
Corrected a reference count leak that occurs when the server builds
responses to leasequery packets.
Corrected a memory leak that occurs when unpacking a packet that has an
FQDN option (81) that contains a label with length greater than 63 bytes.
Thanks to VictorV of Cyber Kunlun Lab for reporting these issues.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2928
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2929
(* Security fix *)
Diffstat (limited to 'patches/source/dhcp/dhclient-script.PATH.diff')
| -rw-r--r-- | patches/source/dhcp/dhclient-script.PATH.diff | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/patches/source/dhcp/dhclient-script.PATH.diff b/patches/source/dhcp/dhclient-script.PATH.diff new file mode 100644 index 000000000..567ed2a4f --- /dev/null +++ b/patches/source/dhcp/dhclient-script.PATH.diff @@ -0,0 +1,13 @@ +--- ./client/scripts/linux.orig 2017-07-25 08:39:54.000000000 -0500 ++++ ./client/scripts/linux 2017-08-03 15:31:41.067873392 -0500 +@@ -22,6 +22,10 @@ + # 4. TIMEOUT not tested. ping has a flag I don't know, and I'm suspicious + # of the $1 in its args. + ++# Set a reasonable default path for Linux: ++PATH=/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin ++export PATH ++ + # 5. Script refresh in 2017. The aliasing code was too convoluted and needs + # to go away. Migrated DHCPv4 script to ip command from iproute2 suite. + # This is based on Debian script with some tweaks. ifconfig is no longer |