==========================================================Ubuntu Security Notice USN-803-1              July 14, 2009
dhcp3 vulnerability
CVE-2009-0692
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  dhcp3-client                    3.0.3-6ubuntu7.1
  dhcp3-client-udeb               3.0.3-6ubuntu7.1

Ubuntu 8.04 LTS:
  dhcp3-client                    3.0.6.dfsg-1ubuntu9.1
  dhcp3-client-udeb               3.0.6.dfsg-1ubuntu9.1

Ubuntu 8.10:
  dhcp3-client                    3.1.1-1ubuntu2.1
  dhcp3-client-udeb               3.1.1-1ubuntu2.1

Ubuntu 9.04:
  dhcp3-client                    3.1.1-5ubuntu8.1
  dhcp3-client-udeb               3.1.1-5ubuntu8.1

After a standard system upgrade you need to restart any DHCP network
connections utilizing dhclient3 to effect the necessary changes.

Details follow:

It was discovered that the DHCP client as included in dhcp3 did not verify
the length of certain option fields when processing a response from an IPv4
dhcp server. If a user running Ubuntu 6.06 LTS or 8.04 LTS connected to a
malicious dhcp server, a remote attacker could cause a denial of service or
execute arbitrary code as the user invoking the program, typically the
'dhcp' user. For users running Ubuntu 8.10 or 9.04, a remote attacker
should only be able to cause a denial of service in the DHCP client. In
Ubuntu 9.04, attackers would also be isolated by the AppArmor dhclient3
profile.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:    65897 7bdd50b2e3b6b32faa68c032f05165bd
          Size/MD5:      787 872bbf0d4145d73b8af2a254b5cc2718
          Size/MD5:   870240 f91416a0b8ed3fd0601688cf0b7df58f

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   220920 19a9464523db9f8a93a15028f7ce95de
          Size/MD5:   453816 008c629051ce0407ffb61c3628e46ef4
          Size/MD5:   130676 b9c69fbaed980396a681a1dadf3d73af
          Size/MD5:   321502 05ba9f7060525605423431776eba0ba9
          Size/MD5:   176692 e24c0a6b3db345efb81f5e353aefac5e
          Size/MD5:   105808 eb18bf52a010ccbc420a337d1ed0018f

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   196146 6b8411b322f8e9168680231db6163495
          Size/MD5:   430996 d06636be0001aac838bb3ecf1c41c523
          Size/MD5:   117432 bac0668d4f252f4de3fa91af040d8c40
          Size/MD5:   289560 abec9af4b5378897c0ee06b3859acdc7
          Size/MD5:   151692 26e2df3feb2df6f3f6d4325d12a61dd4
          Size/MD5:    94032 eb08de7fb079d60ad4133d414d313b5b

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   202926 0b2a483a33413ffa042c6ace57d6da6d
          Size/MD5:   435708 5ed68ea1352cb1ebb83ea30640c411c0
          Size/MD5:   130188 3a3613c6452d77f210bcef63e95eeb19
          Size/MD5:   297610 57e2e9bfb67be900b9d4a7c649fba5ca
          Size/MD5:   157928 6b9d0d94e6f82c380567543a345e6d99
          Size/MD5:    96582 43dc7b05981e098269ead9c584591ba5

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   200000 b5b49284c561fc3480c655c5d9420a04
          Size/MD5:   434178 48a525b9dacc251b41761a87d496aaa5
          Size/MD5:   126680 5f0fa0a6325a6f108026ebc2892a27a8
          Size/MD5:   293910 be46ec2c962a6d93dbf818aa599b3ba9
          Size/MD5:   155374 3ede3ecf64223aaf347cac38660cbeb4
          Size/MD5:    96698 67d968295d7e618f9c8fb9b4ecfef974

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:    94755 b5b9154e556e45235f6d70094168884a
          Size/MD5:      901 6eaf80efb8fa16f4a9ada182f0bdb7db
          Size/MD5:   724045 e89ef34005c576ddbb229e3b4478f6e2

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   179364 6a4c86307506c8548d5491755e3fe084
          Size/MD5:   241308 36f6a940bfbc15c4742296d00a3dc462
          Size/MD5:   300588 4a143570ca93433f1cfb1046e61dfb56
          Size/MD5:   123926 175a4f0c27214388dddba3dee2a1ae87
          Size/MD5:   342458 095c7337dc9cf55cbc9993230f47c7a8
          Size/MD5:   114312 c7f86145065e4def633047db8c2ae685

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   159382 ee928a1ed3e03d4e1915da6c685d7f5e
          Size/MD5:   221294 df503928a85b2aab2d8c596d493a2d55
          Size/MD5:   281474 de11210f94524f16b106d4d31a87ec9c
          Size/MD5:   109734 a9568b9e453f353bbad64317fb7e5b0e
          Size/MD5:   318606 362c33a6116a9df3f565a1c53e1d7a17
          Size/MD5:   103226 cede590fbdd206a3c3e89c44358e6365

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   157496 ed5c83e51e6499c5865a17ad3774a789
          Size/MD5:   219612 344ebe50ea845c706162c75ae2174428
          Size/MD5:   279674 a850b841713253e9bb256f513f280e03
          Size/MD5:   108976 5f8baa921d2b94c9bb7fc68f2d7aac8b
          Size/MD5:   316432 78cde3a55059776471eb1ef812d186b5
          Size/MD5:   102236 3c75acb73590dd3cded03b719165975b

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   176712 21f5f94f5bf3a0b4ac4ba7d1c07f1b7d
          Size/MD5:   241318 fa1530eb3297fff84040bcddd9a49ad8
          Size/MD5:   296384 1d9ed34e833928298f190cac0aada99b
          Size/MD5:   122460 6e0c12f7b79f1b8ae40a7caf0a65f3fb
          Size/MD5:   341656 d9ec472a2591b75601d8f9a3b0115dd9
          Size/MD5:   112856 1b11cdca816022b221e1cb79af346c68

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   155866 103fd2376cf9fa5881ea3af640bfa282
          Size/MD5:   218030 3d940d849a7895df4483d43521e6722d
          Size/MD5:   276940 39b2c97b2002ce6d32f2eecec001e42a
          Size/MD5:   113420 2db19bd7e41fe1bc97a94aa2470124ce
          Size/MD5:   313262 2bf64eb9f098f9c0c4378ea75b395e40
          Size/MD5:   102834 4572738fdec81888d6ab539a219bbddd

Updated packages for Ubuntu 8.10:

  Source archives:

          Size/MD5:   136637 cd4f4188df3b9e1f0dd81ba40aeb3604
          Size/MD5:     1262 2187b44dcf7877119358b6a90e9b255c
          Size/MD5:   798228 fcc19330a9c3a0efb5620409214652a9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   209192 2938b02b279198a8d7ace80ba4cc8410
          Size/MD5:   267718 04ecc4d1a9d701ec23062d60f0832f02
          Size/MD5:   330534 44dfc27a9466d9d226ef3dab9444a24a
          Size/MD5:   126312 f348815a373a23e7336bc874ef4c6a7b
          Size/MD5:   390462 57bd20c2de80ed900e51da456242d71c
          Size/MD5:   123638 bf57ea96472ebfa450d27c512813bb79
          Size/MD5:   346450 e3046a9add6587823df532071129f507

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   193252 e8134d1f09f8fa8b3c6ac32b593bc227
          Size/MD5:   251538 6af5eb54c7cfd0b3d7b5e1f8f4b2fb3a
          Size/MD5:   315404 38fe2e5ecca06a59c347b21ec5921e59
          Size/MD5:   117546 6ea773bd4040578d8ef37d1bfe9e12e7
          Size/MD5:   370260 e6e11da89102686c64040e932887d41f
          Size/MD5:   115080 1892703226875523140efb6327ff9088
          Size/MD5:   325890 831af34abef8e108fcacc350ab409350

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   186762 bc5f948f14b09768bf2040bf1454f037
          Size/MD5:   245200 c16f859ee50c15b074759650b13b432f
          Size/MD5:   309676 b5258abd7f53ad4eedafc6c8bd3d122d
          Size/MD5:   114634 564c7c6f5a6f9c433dbe74f0c698926a
          Size/MD5:   362180 25ac957cfc4c36a0e57b4b8adf3ca0b9
          Size/MD5:   112460 e71c3b50597f5ed9635aef0037d063e8
          Size/MD5:   317848 9180bcea8a1eee705dd82edbd022364f

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   200166 718d72ef37dcdd402076019a4f0950fd
          Size/MD5:   258592 c50e129e573d3dfd6a5f3fc63e56fb38
          Size/MD5:   321664 ffd6a0a7e10a1ba2923cf0a95fbdc9e6
          Size/MD5:   120750 684337a1e959daaad19d9218bf6a9613
          Size/MD5:   379924 86261e8c6937725eb7c4a4495ee48081
          Size/MD5:   118998 2e8bc2140dd6630dda6ae06dbb069be8
          Size/MD5:   336144 29cb65254ee6b62df457be8defcdadfc

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   202844 c137c3a811600481579a01c2dbadd460
          Size/MD5:   260624 48674c9f034002e38b2787611aea9fb8
          Size/MD5:   322108 503e075b71c99c3e3341cc9c7228d3cf
          Size/MD5:   116420 3f3e1c899a116128644db0a1840d9718
          Size/MD5:   382740 e3e3646c8e6cb28bb91fe652496d7dbf
          Size/MD5:   119726 4551858af8a4e8b93cb1ac7bbe218efb
          Size/MD5:   339750 cdbf8dd95456c425db6034d74458c3de

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:   139264 b7a1fa8c401b6986d2f75bcfbd3e6795
          Size/MD5:     1319 2264c3d70030a125648fed968e28f732
          Size/MD5:   798228 fcc19330a9c3a0efb5620409214652a9

  Architecture independent packages:

          Size/MD5:    24884 f808ca8e0c2bb761c0a40a01c075bc21

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   209190 db762a6aa6cf0a97278eaedf3b5d8f80
          Size/MD5:   270412 d2ac9762408978984273ca9c7b101e17
          Size/MD5:   330722 abcee5d04c9513d76336dde097a0d1a1
          Size/MD5:   126534 b91cdf7c25afec6dc9d327042d02c20e
          Size/MD5:   391858 09d1dd315036e0e317c6c22a32fe1109
          Size/MD5:   123972 647b0305ebc2ca50763edcf1a9853460
          Size/MD5:   346904 6389a087dde516826743bc2e8fe504f1

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   193222 6c03d55d7e8bd9e5a14f2b848e995f2d
          Size/MD5:   254092 fe78d52cfd7ff2f335ccc5a83781ab87
          Size/MD5:   315614 03812a3792282fd50eff3822a2e86cb7
          Size/MD5:   117716 f6391467f3c04bf9c1b17a3d4503a0ce
          Size/MD5:   371720 ff1a2bef2adaa3ed946cdf8301987993
          Size/MD5:   115432 6ce41c7e93d80910fa66682f671f1046
          Size/MD5:   326204 2b558395bcaae66ee32e7787f3a5c887

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   186800 b574c08a421efbc27f63f96aaa864633
          Size/MD5:   247856 75293d627b862c06df4a224010e50961
          Size/MD5:   309870 2de4a6a574d31ff0a215951bedb915cd
          Size/MD5:   114810 d08ebc846f65c89df1ffb63cab194b2a
          Size/MD5:   363514 060eac21613c86accb5d1633bb76206d
          Size/MD5:   112760 6cbe91ddcf4c96c7bdfc67525d00e9cb
          Size/MD5:   318142 8e0dcaa7f6154927ad7f9c76e337a43b

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   200218 c196bdc2a32d4256d35b60d09d6b6626
          Size/MD5:   261468 fbf6050c482af7aa7513064e0e56f534
          Size/MD5:   321902 f3caee2dad9f492d6e7d2d6e5426defc
          Size/MD5:   120908 5f5a39a63c8434f9ed41b1183a8c277a
          Size/MD5:   381374 cc705fced564eaf3e0c7c95c8bcef1d6
          Size/MD5:   119314 b4377e423922b5b7fb8a4a2303a678f1
          Size/MD5:   336386 72e6f490465fb67c5f40efccfc3958a0

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   202854 8ad3a7015bafea3c80eee8ed412593e9
          Size/MD5:   263640 f3da1305c7d052293816c965511a7914
          Size/MD5:   322268 08df2251ad1fe15dd9f7ca523232c410
          Size/MD5:   116554 97072c5317d256ad0712d0dbd07e3131
          Size/MD5:   384090 efde6ecbf29d87f3d233fb25f3076acc
          Size/MD5:   119942 4910aa1eee7d4403b277d3456108b61c
          Size/MD5:   340106 3392f430834e3d35dacb02addf51dcad