PRODUCT_LINE: BCM ============================================ TITLE ===== BCM.R400.307-DHCP ======================== Release: 4.0 Issue: N/A Category: EMG Superceded By: NONE Release Date: 20091110 Patch Conflict(s): N/A Special Instructions: NO Patch Version: N/A ======================== Software Update Name: BCM.R400.307-DHCP Applicable H/W Platforms: BCM1000, BCM200, BCM400, SRG200 1.5, SRG400 1.5 Applicable S/W Platforms: BCM 4.0, SRG 1.5 based on BCM 4.0 Category: EMG Installation Recommendations: This update should be applied to all new installs of BCM 4.0 and SRG 1.5 based on BCM 4.0. It's recommended to apply this update to all BCMs at the earliest service opportunity to address the security vulnerability present in an older versions of the DHCP. Components and Versions: dhcp 4.1.0p1 Dependencies: Required Updates: None Product Dependencies: None Size: 0.64 MB System Impact: Time to apply approximately 20 minutes Does update application force reboot: Yes Other Impacts: None Limitations: None Update Removable: No Description: ----------- The following issue is addressed: 1. ISC DHCP dhcpclient buffer overflow vulnerability A security vulnerability has been reported in ISC DHCP, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system. dhcp component is updated to version 4.1.0p1 to address this issue. Q02065537-01 This update includes the content of the following superseded updates: No previous updates