227135 CVE-2007-0062 2008-06-15 10:48 0000 net-misc/dhcp <3.1.1 dhcp-max-message-size DoS (CVE-2007-0062) 2008-08-07 12:58:51 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All All RESOLVED FIXED http://www.isc.org/index.pl?/sw/dhcp/ A3 [glsa] P2 normal --- 1 davidepesa@gmail.com security@gentoo.org arm@gentoo.org base-system@gentoo.org s390@gentoo.org sh@gentoo.org davidepesa@gmail.com 2008-06-15 10:48:51 0000 Just having 3.1.1 in portage should be enough. The changelog mentions: "Fixed a buffer overflow error which could have allowed a denial of service under unusual server configurations." I don't know if this could be seen as a security bug... carlo@gentoo.org 2008-06-15 15:05:44 0000 Server DoS is security relevant I think. carlo@gentoo.org 2008-06-15 15:23:26 0000 Eh, assign... thoger@redhat.com 2008-06-16 15:39:28 0000 Looks like an old VMWare CVE-2007-0062. Some more notes in: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-0062 HTH chainsaw@gentoo.org 2008-06-27 10:12:46 0000 Arches please test and mark stable 3.1.1 as it resolves a DoS through buffer overflow (alledgedly can only be triggered under "unusual server configurations"). chainsaw@gentoo.org 2008-06-27 10:23:45 0000 AMD64 done. ranger@gentoo.org 2008-06-27 13:54:15 0000 ppc and ppc64 done maekke@gentoo.org 2008-06-28 06:18:21 0000 x86 stable klausman@gentoo.org 2008-06-28 11:28:34 0000 Stable on alpha. jer@gentoo.org 2008-06-28 16:04:39 0000 Stable for HPPA. ricmm@gentoo.org 2008-06-29 07:51:28 0000 mips doesn't stabilize bluebird@gentoo.org 2008-06-29 10:12:17 0000 sparc stable keytoaster@gentoo.org 2008-08-07 12:58:51 0000 GLSA 200808-05