---
- branch: MAIN
  date: Thu Mar  1 00:53:05 UTC 2018
  files:
  - new: '1.35'
    old: '1.34'
    path: pkgsrc/net/isc-dhcp4/Makefile.common
    pathrev: pkgsrc/net/isc-dhcp4/Makefile.common@1.35
    type: modified
  - new: '1.27'
    old: '1.26'
    path: pkgsrc/net/isc-dhcp4/distinfo
    pathrev: pkgsrc/net/isc-dhcp4/distinfo@1.27
    type: modified
  id: 20180301T005305Z.32b2bef50a17852fc240f112d3e78ab2db5735ed
  log: "net/isc-dhcp4: update to 4.3.6p1 (ISC DHCP 4.3.6-P1)\n\n\t\t\tChanges since
    4.3.6\n\n!- Plugged a socket descriptor leak in OMAPI, that can occur when there
    is\n  data pending to be written to an OMAPI connection, when the connection\n
    \ is closed by the reader.\n  [ISc-Bugs #46767]\n\n! Corrected an issue where
    large sized 'X/x' format options were causing\n  option handling logic to overwrite
    memory when expanding them to human\n  readable form. Reported by Felix Wilhelm,
    Google Security Team.\n  [ISC-Bugs #47139]\n  CVE: CVE-2018-5732\n\n! Option reference
    count was not correctly decremented in error path\n  when parsing buffer for options.
    Reported by Felix Wilhelm, Google\n  Security Team.\n  [ISC-Bugs #47140]\n  CVE:
    CVE-2018-5733\n"
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/net/isc-dhcp4'
  unixtime: '1519865585'
  user: taca