A new dhcp package with the fix for the CVE-2021-25217 within CloudLinux 6 extended lifecycle support has been scheduled for gradual rollout from our production repository.

Rollout slot: 7

Rolled out to: 1%

ETA for 100% rollout: June, 7

Changelog

• Fix a buffer overrun in lease file parsing code (CVE-2021-25217)

Update command

yum update dhcp*

Immediate update (via bypass)

yum update dhcp* --enablerepo=cloudlinux-rollout-7-bypass