Change log for isc-dhcp package in Debian

isc-dhcp (4.4.3-P1-5) unstable; urgency=low

  * Upload to unstable

 -- Santiago Ruano Rincón <email address hidden>  Thu, 22 Feb 2024 11:47:42 -0300

isc-dhcp (4.4.3-P1-5~exp2) experimental; urgency=medium

  [ Michael Gilbert ]
  * Remove myself from the uploaders.

  [ Santiago Ruano Rincón ]
  * Add systemd-resolved integreation hooks. Taken from Ubuntu's. Thanks to
    Ken Milmore <email address hidden>
    (Closes: #1025062)
  * Thanks Michael for all your work!

 -- Santiago Ruano Rincón <email address hidden>  Mon, 05 Feb 2024 19:29:05 -0300

isc-dhcp (4.4.3-P1-5~exp1) experimental; urgency=medium

  * Move dhclient to /usr/sbin and add duplicated diversions (DEP17 P3 M18).
    Also add Conflicts: older isc-dhcp-client-ddns. Thanks to Chris
    Hofstaedtler <email address hidden> (Closes: #1060089)
  * Add isc-dhcp-client-ddns lintian overrides about
    diversion-for-unknown-file sbin/dhclient

 -- Santiago Ruano Rincón <email address hidden>  Thu, 25 Jan 2024 12:25:30 -0300

isc-dhcp (4.4.3-P1-4) unstable; urgency=low

  [ Athos Ribeiro ]
  * d/p/adjust-keama-tests.patch: do not rely on endianess (Closes: #1054077)

 -- Santiago Ruano Rincón <email address hidden>  Fri, 20 Oct 2023 09:16:37 -0300

isc-dhcp (4.4.3-P1-3) unstable; urgency=low

  [ Athos Ribeiro ]
  * Ship keama in a new isc-dhcp-keama binary package (Closes: #1036277)
  * Add DEP8 tests for keama
  * d/p/adjust-keama-tests.patch: adjust keama tests
  * d/rules: make keama tests fail on error messages

  [ Santiago Ruano Rincón ]
  * Make dhclient-script exits with error when it is not able to write in the
    temporary file. Patch by Johannes Weißl <email address hidden>
    (Closes: #982894)
  * Import debian/patches/0013-DHCPv6-over-PPP-support-626514.patch
    (Closes: #1015809)
  * Enable ARM builds in salsa-ci.yml
  * Bump Standards-Version to 4.6.2. No changes needed
  * Remove obsolete dependencies on lsb-base and policykit-1. Replace with
    polkitd
  * Fix assignment of dpkg-architecture variables in d/rules
  * Remove the --parallel argument from the call to dh on d/rules

 -- Santiago Ruano Rincón <email address hidden>  Fri, 15 Sep 2023 21:50:04 +0530

isc-dhcp (4.4.3-P1-2) unstable; urgency=medium

  [ Gabriel Potter ]
  * Support bound /etc/resolv.conf (Closes: #1034502)

  [ Bastian Germann ]
  * d/copyright Format: Add trailing slash

  [ Santiago Ruano Rincón ]
  * Add NEWS about isc-dhcp-server EOL'ed and its apparmor profile
  * Test debian/tests/client-server

 -- Santiago Ruano Rincón <email address hidden>  Mon, 17 Apr 2023 14:20:02 +0200

isc-dhcp (4.4.1-2.3+deb11u2) bullseye; urgency=medium

  * Non-maintainer upload.
  * Backport missing IPv6 address lifetime handling. (closes: #1022969)

 -- Bastian Blank <email address hidden>  Mon, 20 Feb 2023 09:19:43 +0100

isc-dhcp (4.4.3-P1-2~exp1) experimental; urgency=medium

  [ Gabriel Potter ]
  * Support bound /etc/resolv.conf (Closes: #1034502)

  [ Bastian Germann ]
  * d/copyright Format: Add trailing slash

  [ Santiago Ruano Rincón ]
  * Add NEWS about isc-dhcp-server EOL'ed and its apparmor profile
  * Test debian/tests/client-server

 -- Santiago Ruano Rincón <email address hidden>  Mon, 17 Apr 2023 14:20:02 +0200

isc-dhcp (4.4.3-P1-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Backport missing IPv6 address lifetime handling. (closes: #1022969)

 -- Bastian Blank <email address hidden>  Mon, 09 Jan 2023 10:15:41 +0100

isc-dhcp (4.4.1-2.3+deb11u1) bullseye-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * An option refcount overflow exists in dhcpd (CVE-2022-2928)
  * DHCP memory leak (CVE-2022-2929)

 -- Salvatore Bonaccorso <email address hidden>  Tue, 04 Oct 2022 22:52:25 +0200

isc-dhcp (4.4.3-P1-1) unstable; urgency=low

  * New upstream version 4.4.3-P1
  * Remove no longer needed CVE-2022-2928.patch and CVE-2022-2929.patch

 -- Santiago Ruano Rincón <email address hidden>  Thu, 13 Oct 2022 14:12:54 +0200

isc-dhcp (4.4.3-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * An option refcount overflow exists in dhcpd (CVE-2022-2928)
    (Closes: #1021320)
  * DHCP memory leak (CVE-2022-2929) (Closes: #1021320)

 -- Salvatore Bonaccorso <email address hidden>  Thu, 06 Oct 2022 22:20:47 +0200

isc-dhcp (4.4.3-2) unstable; urgency=medium

  * Explicitly link against -latomic to fix FTBFS on mipsel, m68k, powerpc and
    sh4

 -- Santiago Ruano Rincón <email address hidden>  Thu, 26 May 2022 21:31:55 +0200

isc-dhcp (4.4.3-1) unstable; urgency=low

  * New upstream version 4.4.3
  * Refresh fix-manpage-macro.patch
  * Refresh fix-spelling.patch
  * Disable dhclient-script-exit-status.patch. Upstream has fixed the related
    bug (#123)
  * Use bundled BIND libraries instead of libbind-export-dev (Closes: #942502)
  * Bump debhelper-compat to 13
  * Remove Fixed_gcc_10_compilation_issues.patch
  * Fix some install paths to make dh_missing happy
  * Add EOM NEWS for client and relay
  * Fix handling of stale pid file for init.d/dhcpd start. Thanks to H.-Dirk
    Schmitt <email address hidden> (Closes: #1009209)
  * Bump Standards-Version to 4.6.0.1. No changes required
  * Bump d/watch version to 4.
  * Update d/copyright

 -- Santiago Ruano Rincón <email address hidden>  Fri, 06 May 2022 17:24:11 +0200

isc-dhcp (4.4.2-P1-1) unstable; urgency=low

  [ Santiago Ruano Rincón ]
  * Fix debian/watch to make it take into account upstream security releases
    (e.g. -P1)
  * Update upstream signing key: replace revoked one by
    2455774D42FDFE6B9C383EB8FE1002BC5970811F
  * Add myself to Uploaders (Closes: #1000662)
  * Remove Files-Excluded from d/copyright
  * New upstream version 4.4.2-P1 (Closes: #975729)
  * Refresh configure.patch, disable-nsupdate.patch, system-bind.patch
  * Remove no longer needed patches: 4.4.2.CVE-2021-25217.patch
    CVE-2017-3144.patch CVE-2018-5732.patch CVE-2018-5733.patch
  * Move Vcs-* to debian/ namespace
  * Use https in d/watch and d/copyright

  [ Bernhard Schmidt ]
  * Add Salsa CI (again)

 -- Santiago Ruano Rincón <email address hidden>  Thu, 24 Feb 2022 11:24:43 +0100

isc-dhcp (4.4.1-2+deb10u1) buster; urgency=medium

  * Non-maintainer upload.
  * A buffer overrun in lease file parsing code can be used to exploit a
    common vulnerability shared by dhcpd and dhclient (CVE-2021-25217)
    (Closes: #989157)

 -- Salvatore Bonaccorso <email address hidden>  Thu, 03 Jun 2021 12:59:09 +0200

isc-dhcp (4.4.1-2.3) unstable; urgency=high

  * Non-maintainer upload.
  * A buffer overrun in lease file parsing code can be used to exploit a
    common vulnerability shared by dhcpd and dhclient (CVE-2021-25217)
    (Closes: #989157)

 -- Salvatore Bonaccorso <email address hidden>  Thu, 27 May 2021 06:59:48 +0200

isc-dhcp (4.4.1-2.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix FTBFS due gcc 10 compilation issues in client/dhclient.c,
    common/discover.c, relay/dhcrelay.c, server/mdb.c, server/mdb6.c
    (closes: 957379).

 -- Leonidas S. Barbosa <email address hidden>  Wed, 05 Aug 2020 23:08:47 -0300

isc-dhcp (4.4.1-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix FTBFS due to gcc-9 adding --as-needed by default; patch by Reiner
    Herrmann (Closes: #925720)

 -- Paul Gevers <email address hidden>  Wed, 22 Jan 2020 22:35:14 +0100

isc-dhcp (4.4.1-2) unstable; urgency=medium

  * Set initial address to 0.0.0.0 on hurd (closes: #875566).
    - Thanks to Joan Lledó.
  * Update IPv4 address lifetimes on renew (closes: #834532).
    - Thanks to Sven Ulland.

 -- Michael Gilbert <email address hidden>  Tue, 11 Dec 2018 03:55:12 +0000

isc-dhcp (4.4.1-1) experimental; urgency=medium

  * New upstream release.
    - License changed from ISC license to MPL 2.0.
  * Update debian/copyright.
  * Drop unused libssl build dependency.
  * Replace signing key with new upstream version.
  * Update debian/watch to be slightly more robust.
  * Support building with bind 9.11.5 (closes: #911975).
    - Thanks to Thorsten Alteholz.
  * Remove stale pid files in the server's postrm script (closes: #867362).
    - Thanks to Thorsten Alteholz.
  * Change maintainer email to <email address hidden> (closes: #899554).

 -- Michael Gilbert <email address hidden>  Sun, 18 Nov 2018 00:07:49 +0000

isc-dhcp (4.3.5-3+deb9u1) stretch-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Plugs a socket descriptor leak in OMAPI (CVE-2017-3144) (Closes: #887413)
  * Corrected refcnt loss in option parsing (CVE-2018-5733) (Closes: #891785)
  * Correct buffer overrun in pretty_print_option (CVE-2018-5732)
    (Closes: #891786)

 -- Salvatore Bonaccorso <email address hidden>  Sat, 03 Mar 2018 17:27:05 +0100

isc-dhcp (4.3.1-6+deb8u3) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Plugs a socket descriptor leak in OMAPI (CVE-2017-3144) (Closes: #887413)
  * Corrected refcnt loss in option parsing (CVE-2018-5733) (Closes: #891785)
  * Correct buffer overrun in pretty_print_option (CVE-2018-5732)
    (Closes: #891786)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 04 Mar 2018 11:20:38 +0100

isc-dhcp (4.3.5-4) unstable; urgency=medium

  * Acknowledge and apply the non-maintainer upload.
    - Thanks to Salvatore Bonaccorso.
  * Fix build failure caused by bind 9.11.3 (closes: #894093).

 -- Michael Gilbert <email address hidden>  Sun, 01 Apr 2018 05:37:25 +0000

isc-dhcp (4.3.5-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Plugs a socket descriptor leak in OMAPI (CVE-2017-3144) (Closes: #887413)
  * Corrected refcnt loss in option parsing (CVE-2018-5733) (Closes: #891785)
  * Correct buffer overrun in pretty_print_option (CVE-2018-5732)
    (Closes: #891786)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 04 Mar 2018 21:35:31 +0100

isc-dhcp (4.3.5-3) unstable; urgency=medium

  * Add support for read-only /etc (closes: #642544).
    - Thanks to Scott Moser.
  * Wait for /etc/resolv.conf to become writable (closes: #687337).
    - Thanks to Stéphane Graber.
  * Suggest policykit-1 instead of depending on it (closes: #850726).
  * Fix typo in --with-randomdev configure argument (closes: #838382).
  * Touch dhcpd6.leases before starting an ipv6 server (closes: #824770).
    - Thanks to Terry Burton.
  * Use getifaddrs() system call to handle alias interfaces (closes: #605657).
    - Thanks to Jiri Popelka.

 -- Michael Gilbert <email address hidden>  Mon, 09 Jan 2017 04:55:32 +0000

isc-dhcp (4.3.5-2) unstable; urgency=medium

  * Fix new upstream spelling errors.
  * Add policykit-1 dependency to the server package (closes: #816325).
  * Parse IPv6 server process id from the correct file (closes: #841766).
  * Initialize all local variables in dhclient scripts (closes: #849100).
  * Pass random device to configure when cross building (closes: #838382).
    - Thanks to Helmut Grohne.
  * Don't wait for a reply that will never come when releasing an ipv6 address
    (closes: #769189).

 -- Michael Gilbert <email address hidden>  Sun, 08 Jan 2017 23:11:52 +0000

isc-dhcp (4.3.5-1) unstable; urgency=medium

  * New upstream release.
  * Add lsb-base dependency to isc-dhcp-relay.
  * Use the original author's dhcp-lease-list manpage.
  * Correct the description of the common package (closes: #832782).
  * If no interfaces have been specified, start servers for both IPv4 and IPv6
    (closes: #815319).

 -- Michael Gilbert <email address hidden>  Sat, 26 Nov 2016 06:44:09 +0000

isc-dhcp (4.3.5~b1-1) unstable; urgency=medium

  * New upstream beta release.
  * Fix some lintian warnings.
  * Increase standards version.
  * Update version control fields.
  * Fix new upstream spelling mistakes.

 -- Michael Gilbert <email address hidden>  Sun, 11 Sep 2016 22:59:15 +0000

isc-dhcp (4.2.2.dfsg.1-5+deb70u8) wheezy-security; urgency=high

  * Fix CVE-2015-8605: maliciously crafted IPv4 packet can cause any of the
    running DHCP applications (server, client, or relay) to crash.

 -- Michael Gilbert <email address hidden>  Sat, 09 Jan 2016 21:30:13 +0000

isc-dhcp (4.3.4-1) unstable; urgency=medium

  * New upstream stable release (closes: #817158).
  * Touch dhcpd.leases in the server init script (closes: 765910).

 -- Michael Gilbert <email address hidden>  Tue, 05 Apr 2016 03:27:34 +0000

isc-dhcp (4.2.2.dfsg.1-5+deb70u7) wheezy; urgency=low

  [ Michael Gilbert ]
  * Fix error when max lease time is used on 64-bit systems (closes: #795227).

 -- Bastian Blank <email address hidden>  Thu, 08 Oct 2015 11:55:47 +0000

isc-dhcp (4.3.4~b1-1) experimental; urgency=medium

  * New upstream beta release:
    - Fix CVE-2016-2774: limit the number of server TCP connections to 200.
  * Link against bind 9.10.3.
  * Include a manpage for dhcp-lease-list.
  * Fix an error in the dhcpd.conf manpage.

 -- Michael Gilbert <email address hidden>  Sat, 26 Mar 2016 01:55:17 +0000

isc-dhcp (4.3.3-9) unstable; urgency=medium

  * Update standards version.
  * Drop manpage hyphens patch.
  * Install upstream changelogs.
  * Install an example dhcpd6.conf file.
  * Install upstream's README file (closes: #791788).
  * Fix incorrect path in dhcp-lease-list script (closes: #814693).
  * Add a status option to the relay init stript (closes: #726604).
  * Check IPv4 and IPv6 server status independently (closes: #815180).
  * Use /etc/dhcp/dhcpd6.conf for the IPv6 server settings (closes: #816008).
  * Touch dhcpd.leases during postinst if it doesn't exist (closes: #765910).

 -- Michael Gilbert <email address hidden>  Sun, 28 Feb 2016 20:38:52 +0000

isc-dhcp (4.3.3-8) unstable; urgency=medium

  * Fix typos in recent changes to the server init script.
  * Support server configurations still using INTERFACES (closes: #813339).

 -- Michael Gilbert <email address hidden>  Sat, 13 Feb 2016 18:38:20 +0000

isc-dhcp (4.3.3-7) unstable; urgency=medium

  * Migrate to dbgsym debug packages.
  * Fix spelling error in changelog entry.
  * Include LDFLAGS in all calls to configure.
  * Fix relaying return packets (closes: #648401).
    - Thanks to Steinar H. Gunderson.
  * Fix cross-architecture building (closes: #812525).
    - Thanks to Helmut Grohne.
  * Initialize exit status in dhclient-script (closes: #800914).
  * Fix CVE-2015-8605: maliciously crafted IPv4 packet can cause any of the
    running DHCP applications to crash (closes: #810875).

 -- Michael Gilbert <email address hidden>  Sun, 31 Jan 2016 01:31:59 +0000

isc-dhcp (4.3.1-6+deb8u2) jessie-security; urgency=high

  * Fix CVE-2015-8605: maliciously crafted IPv4 packet can cause any of the
    running DHCP applications (server, client, or relay) to crash.

 -- Michael Gilbert <email address hidden>  Sat, 09 Jan 2016 20:57:22 +0000

isc-dhcp (4.3.3-6) experimental; urgency=medium

  * Fix missing build flags from the last upload.
  * Support IPv6 in the server init script (closes: #592539).
    - Thanks to Florent Fourcot and Ron Murray.
  * Don't assume an IPv6 prefix length of 64 (closes: #684009).
    - Thanks to Arne Nordmark.

 -- Michael Gilbert <email address hidden>  Sun, 04 Oct 2015 03:24:47 +0000

isc-dhcp (4.3.3-5) unstable; urgency=medium

  * Add dependencies for the debug package.
  * Fix comments in the debug script (closes: #773804).
  * Add diversions for isc-dhcp-client-ddns (closes: #800749).
  * Fix directory output by the debug script (closes: #794770).
  * Fix exit code handling in dhclient-script (closes: #692846).
  * Escape parantheses in init script sed command (closes: #771530).
  * Add more IP address detail to dhclient output (closes: #486611).
  * Add dhcp6.fqdn and dhcp6.sntp-servers to the default request options.
  * Avoid infinite loop caused by misconfigured rfc3442-classless-static-routes
    (closes: #730294).

 -- Michael Gilbert <email address hidden>  Sat, 03 Oct 2015 18:41:26 +0000

isc-dhcp (4.3.3-4) unstable; urgency=medium

  * Reenable NSUPDATE (closes: #798237).
  * Add a DDNS enabled dhclient package.
  * Recommend rather than depend on policycoreutils.
  * Finish replacing macros in manpages (closes: #773801).

 -- Michael Gilbert <email address hidden>  Sun, 20 Sep 2015 20:39:58 +0000

isc-dhcp (4.3.3-3) unstable; urgency=medium

  * Revert change to lease file paths (closes: #798177).

 -- Michael Gilbert <email address hidden>  Sun, 06 Sep 2015 16:47:39 +0000

isc-dhcp (4.3.3-2) unstable; urgency=medium

  * Use default paths for lease files.
  * Move omshell into the server package.
  * Avoid unnecessary libirs dependencies.
  * Recommend rather than depend isc-dhcp-common.
  * Disable NSUPDATE (closes: #712503).
  * Update translation (closes: #677918).
  * Enable pid file logging (closes: #792928).
  * Fix variables in manpages (closes: #570895).
  * Use a symlink for the debug script (closes: #794771).
  * Enable -user, -group, and -chroot server options (closes: #793490).
  * Avoid launching the server when its already running (closes: #704175).
  * Fix error when max lease time is used on 64-bit systems (closes: #795227).

 -- Michael Gilbert <email address hidden>  Sun, 06 Sep 2015 04:21:05 +0000

isc-dhcp (4.3.3-1) unstable; urgency=medium

  * New upstream release.
  * Add uversionmangle to debian/watch.
  * Restore Enhances field for the ldap package (closes: #790164).
  * Add a logcheck snippet for the server package (closes: #688339).
    - Thanks to Jonathan Wiltshire.
  * Add DHCPv6 support to dhclient-script.linux.udeb (closes: #635897).
    - Thanks to Colin Watson.
  * Add policycoreutils dependency to isc-dhcp-server (closes: #797276).
  * Fix undefined variables in dhclient-script.kfreebsd (closes: #691090).
    - Thanks to Peter Marschall.
  * Avoid condition where hostname could be set to '(none)' (closes: #604883).
    - Thanks to Pavel Cahyna.

 -- Michael Gilbert <email address hidden>  Sat, 05 Sep 2015 19:20:42 +0000

isc-dhcp (4.3.2-1) unstable; urgency=medium

  * New upstream stable release.
    - Many fixes to incorrect checksumming (closes: #353161, #652739).
    - VLAN packets now only seen on VLAN interfaces (closes: #643564).
  * Remove references to old dhcp3 packages (closes: #773476).
  * Replace signing key with new upstream version.
  * Fix typo in debug script (closes: #781768).
  * Drop bind from the upstream tarball.
  * Drop transitional debug packages.
  * Drop dhcp3 conffile handling.
  * Update debian/copyright.

 -- Michael Gilbert <email address hidden>  Sun, 10 May 2015 22:44:17 +0000

isc-dhcp (4.3.1-6) unstable; urgency=medium


  * Fix a regression in error handling for the server's init script
    (closes: #775834).
    - Thanks to François-Régis Vuillemin.

 -- Michael Gilbert <email address hidden>  Fri, 13 Feb 2015 05:13:19 +0000

isc-dhcp (4.3.1-5) unstable; urgency=medium


  * Dynamically link against system bind libraries.

 -- Michael Gilbert <email address hidden>  Thu, 16 Oct 2014 01:28:44 +0000

isc-dhcp (4.3.1-4) unstable; urgency=medium


  * Bump standards to 3.9.6.
  * Correct netmask handling in dhclient-script.linux.udeb (closes: #759761).
  * Fix missing alias_subnet_mask in dhclient-script.linux (closes: #691091).

 -- Michael Gilbert <email address hidden>  Sun, 05 Oct 2014 22:10:15 +0000

isc-dhcp (4.3.1-3) unstable; urgency=medium


  * Ignore arguments passed to sourced scripts (closes: #763208).

 -- Michael Gilbert <email address hidden>  Sun, 28 Sep 2014 21:00:36 +0000

isc-dhcp (4.3.1-2) unstable; urgency=medium


  * Use /bin/sh instead of /bin/bash for dhclient scripts (closes: #762923).

 -- Michael Gilbert <email address hidden>  Sat, 27 Sep 2014 21:57:28 +0000

isc-dhcp (4.3.1-1) unstable; urgency=medium


  * New upstream release.
  * Avoid divide by zero issue (closes: #694650).
  * Correct typo in dhclient-script.linux (closes: #748272).
  * Ensure dhcpd.leases exists for the server init script (closes: #720860).

 -- Michael Gilbert <email address hidden>  Wed, 13 Aug 2014 23:36:21 +0000

isc-dhcp (4.3.0+dfsg-2) unstable; urgency=medium


  * Ship dhcp-lease-list (closes: #741488).
  * Fix lease removal in postrm (closes: #724033).
  * Add upstream public signing key for uscan verification.

 -- Michael Gilbert <email address hidden>  Mon, 09 Jun 2014 01:07:09 +0000

isc-dhcp (4.3.1~b1-1) experimental; urgency=medium


  * New upstream beta release.
  * Add debian/README.source.

 -- Michael Gilbert <email address hidden>  Sat, 19 Jul 2014 22:06:23 +0000

isc-dhcp (4.3.0+dfsg-1) unstable; urgency=medium


  * New upstream stable release.
  * Update debian/copyright to format 1.0.
  * Depend on iproute2 instead of iproute (closes: #742151).
  * Depend on freebsd-net-tools for kfreebsd (closes: #738934).
  * Acknowledge and apply the non-maintainer upload (closes: #747017).

 -- Michael Gilbert <email address hidden>  Sat, 24 May 2014 21:54:01 +0000

isc-dhcp (4.3.0a1-2.1) experimental; urgency=medium


  * Non-Maintainer Upload
  * rules: Fix bind patching.
  * bind-patches/hurd: Add upstream patch to fix Hurd build.
  * rules: Select proper backends in the Hurd case.
  * dhclient-script.hurd, dhclient-script.hurd.udeb,
    rfc3442-classless-routes.hurd: Add Hurd scripts.
  * Closes: #616290.

 -- Samuel Thibault <email address hidden>  Sun, 06 Apr 2014 22:14:44 +0200

isc-dhcp (4.3.0a1-2) experimental; urgency=medium


  * Remove unused template.
  * Remove unnecessary breaks.
  * Fix version control fields.
  * Escape hyphens in manpages.
  * Enable all build hardening flags.
  * Fix init functions lintian warning.
  * Create the /var/lib/dhcp directory (closes: #734773).

 -- Michael Gilbert <email address hidden>  Fri, 10 Jan 2014 04:00:42 +0000

isc-dhcp (4.3.0a1-1) experimental; urgency=medium


  * New upstream release.
  * Use debhelper 9 and and simplified debian rules.
  * Use a single package for debugging symbols.
  * Bump standards to 3.9.5.
  * Update watch file.
  * Use dh-autoreconf.

 -- Michael Gilbert <email address hidden>  Sat, 21 Dec 2013 22:04:30 +0000

isc-dhcp (4.2.2.dfsg.1-5+deb70u6) stable-proposed-updates; urgency=medium


  * Set --with-ldapcrypto to restore openssl support (closes: #692808).

 -- Michael Gilbert <email address hidden>  Mon, 27 May 2013 20:54:36 +0000

isc-dhcp (4.2.4-7) unstable; urgency=low


  * Set --with-ldapcrypto to restore openssl support (closes: #692808).
    - Thanks to Christian Hoffmann and Stéphane Graber.

 -- Michael Gilbert <email address hidden>  Mon, 27 May 2013 20:35:09 +0000

isc-dhcp (4.2.4-6) unstable; urgency=high


  * Fix cve-2013-2494: issues with regular expression handling in the embedded
    bind library (closes: #704426).

 -- Michael Gilbert <email address hidden>  Sun, 31 Mar 2013 23:52:58 +0000

isc-dhcp (4.2.2.dfsg.1-5+deb70u3) testing-proposed-updates; urgency=medium


  * Run exit hooks when "dhclient -1" fails (closes: #486520).
  * Add dhcp6.name-servers and dhcp6.domain-search to the default request
    options in dhclient.conf (closes: #693315).
  * Handle dhclient.conf left behind during a prior lenny->squeeze upgrade,
    upgrade it now to avoid an unnecessary conffile prompt (closes: #698582).
    - Thanks to Gregor Herrmann for the patch.
  * Also, do not copy dhclient.conf from /etc/dhcp3 anymore (closes: #700363).

 -- Michael Gilbert <email address hidden>  Sat, 16 Feb 2013 20:40:46 +0000

isc-dhcp (4.1.1-P1-15+squeeze8) squeeze-security; urgency=high


  * Non-maintainer upload.
  * Fix DoS in some situations via changing IPv6 lease expiration
    times (CVE-2012-3955).

 -- Nico Golde <email address hidden>  Sat, 21 Sep 2012 13:42:16 +0000

isc-dhcp (4.2.4-5) unstable; urgency=medium


  * Handle dhclient.conf left behind during a prior lenny->squeeze upgrade,
    upgrade it now to avoid an unnecessary conffile prompt (closes: #698582).
    - Thanks to Gregor Herrmann for the patch.
  * Also, do not copy dhclient.conf from /etc/dhcp3 anymore (closes: #700363).

 -- Michael Gilbert <email address hidden>  Tue, 12 Feb 2013 03:14:13 +0000

isc-dhcp (4.2.4-4) unstable; urgency=medium


  * Run exit hooks when "dhclient -1" fails (closes: #486520).
  * Add dhcp6.name-servers and dhcp6.domain-search to the default request
    options in dhclient.conf (closes: #693315).

 -- Michael Gilbert <email address hidden>  Thu, 13 Dec 2012 21:44:18 -0500

isc-dhcp (4.2.2.dfsg.1-5+deb70u2) testing-proposed-updates; urgency=high


  * Non-maintainer upload by the Security Team.
  * Fix CVE-2012-2248: dhclient sets a PATH that is influenced by the
    location of the build directory.

 -- Raphael Geissert <email address hidden>  Sun, 14 Oct 2012 15:48:19 -0500

isc-dhcp (4.2.4-3) unstable; urgency=high


  * Maintainer security upload.
  * Fix cve-2012-2248: as of 4.2.x the build system prefix now gets included
    in CLIENT_PATH.  This has security implications since the build system's
    source path is now included in dhclient's search PATH on users' systems,
    so sanitize the prefix to not include build system paths (closes: #690532)
    - Patch thanks to Raphael Geissert

 -- Michael Gilbert <email address hidden>  Mon, 15 Oct 2012 14:18:07 -0400

isc-dhcp (4.1.1-P1-15+squeeze6) squeeze-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Reorder patches in 00list as it seems some are deapplied during the
    build process. Thanks Mark Deslauriers for spotting this.
 
 -- Nico Golde <email address hidden>  Thu, 02 Aug 2012 17:32:44 +0000

isc-dhcp (4.2.2.dfsg.1-5+deb70u1) testing-proposed-updates; urgency=high


  * Correct multiple security issues (closes: #686174)
    - cve-2012-3570: buffer overflow via large hardware address lengths.
    - cve-2012-3571: denial-of-service via zero-length packets.
    - cve-2012-3954: two potential memory leaks.
    - cve-2012-3955: server abort due to certain lease time changes.

 -- Michael Gilbert <email address hidden>  Fri, 14 Sep 2012 00:26:44 -0400

isc-dhcp (4.2.4-2) unstable; urgency=low


  * Fix multiple security issues (closes: #686174)
    - cve-2012-3570: buffer overflow via lanrge hardware address length.
    - cve-2012-3571: denial-of-service via zero-length packets.
    - cve-2012-3954: two potential memory leaks.
    - cve-2012-3955: server abort due to certain lease time changes.

 -- Michael Gilbert <email address hidden>  Fri, 14 Sep 2012 00:46:11 -0400

isc-dhcp (4.2.4-1) unstable; urgency=low


  * New upstream release
  * debian/control: reformatted Uploaders so that dch doesn't think I'm making
    NMUs
  * debian/rules: do a clean between the LDAP-enabled build and the
    non-LDAP-enabled one, so that no LDAP-related artefacts are accidently
    incorporated into the non-LDAP build
  * debian/dhclient-script.*: conditionalise the chown/chmod of the new
    resolv.conf on the existence of the old one (closes: #595400)
  * debian/dhclient-script.linux: comply with RFC 3442 and ignore
    the routers option if the rfc3442-classless-static-routes option is present
    (closes: #592735)
  * debian/dhclient-script.kfreebsd: fix subnet mask handling (closes: #677985)

 -- Andrew Pollock <email address hidden>  Sat, 09 Jun 2012 14:01:05 -0700

isc-dhcp (4.2.2.dfsg.1-5) unstable; urgency=medium


  [ Andrew Pollock ]
  * debian/dhclient.conf: send the hostname (closes: #151820) 

  [ Michael Gilbert ]
  * Fix cve-2011-4868: error in DDNS handling with IPv6 (closes: #655746)
  * Fix cve-2011-4539: error in regular expression handling
    (closes: #652259)
  * Make dependencies diff-able
  * Add myself to uploaders
  * Remove all automatically generated files in clean rule
  * Medium urgency for security updates

 -- Michael Gilbert <email address hidden>  Sat, 28 Apr 2012 16:00:49 -0400

isc-dhcp (4.2.2.dfsg.1-4) unstable; urgency=low


  * The "Zoe woke up at 4am and I couldn't get back to sleep so I had some
    extra time to work on this" release
  * patch the Makefile for the embedded BIND libraries so that autoconf is run
    so that the modification to configure.in to fix the FTBFS on kFreeBSD
    actually does something useful (closes: #643569)

 -- Andrew Pollock <email address hidden>  Wed, 14 Mar 2012 06:25:28 -0700

isc-dhcp (4.2.2.dfsg.1-3) unstable; urgency=low


  * debian/control: remove transitional packages
  * debian/rules: apply the intent of Pierre Chifflier's patch to enable
    hardening options (closes: #644413)
  * debian/control: also add inetutils-ping to the dependencies for
    isc-dhcp-client on hurd (closes: #648140)
  * Convert to 3.0 (quilt) source format:
    - debian/control: remove build-dep on dpatch
    - debian/rules: stop including dpatch.make
    - debian/rules: remove dpatch-related target dependencies
    - convert patches from dpatch to pure quilt
    - remove debian/README.source
  * debian/rules: cleaned up the target names a bit to reflect the lack of
    patching going on now
  * repack bind.tar.gz in upstream source tarball to patch configure.in for
    FTBFS on kFreeBSD and remove RFCs (closes: #643569, #645760)
  * debian/watch: add dversionmangle to deal with dfsg upstream tarball
  * Updated Dutch debconf template translation (closes: #651396)
  * Added Polish debconf template translation (closes: #659372)
  * Updated Brazilian Portugeuse debconf template translation (closes: #663494)
  * debian/control: bumped Standards-Version (no changes)

 -- Andrew Pollock <email address hidden>  Tue, 13 Mar 2012 22:04:53 -0700

isc-dhcp (4.2.2-2) unstable; urgency=low


  * debian/rules: use dpkg-buildflags to set CFLAGS, and export CFLAGS (closes:
    #643470)
  * debian/dhclient.conf: revert hostname setting behaviour to something
    equivalent to what upstream ships to avoid surprising people with unwanted
    hostname changes when changing networks (closes: #648676)
  * debian/dhclient-script.kfreebsd: apply patch from Robert Millan to resync
    dhclient-script with FreeBSD version (closes: #645502)
  * debian/control: add inetutils-ping to the dependencies for isc-dhcp-client
    on kfreebsd (closes: #648140)
  * Updated German debconf template translation (closes: #641843)
  * added harding-wrapper to build dependencies and invoke it in debian/rules
    (closes: #611192)

 -- Andrew Pollock <email address hidden>  Sat, 19 Nov 2011 21:37:24 -0800

isc-dhcp (4.1.1-P1-15+squeeze3) squeeze-security; urgency=high


  * Apply patch from ISC to fix CVE-2011-2748 and CVE-2011-2749.

 -- Florian Weimer <email address hidden>  Tue, 09 Aug 2011 20:20:35 +0200

isc-dhcp (4.2.2-1) unstable; urgency=low


  * New upstream release, includes security fixes for CVE-2011-2748 and
    CVE-2011-2749 (closes: #638404)
  * Remove obsolete patches, refit remaining patches
  * Remove LDAP patch, it's finally upstream now (yay!)
  * debian/rules: adjust double build for the non-existence of the LDAP patch
  * debian/isc-dhcp-server-ldap.docs: update for new location of documentation
  * debian/rules: added build-arch and build-indep targets
  * debian/rules: applied patch from Kees Cook to call dh_link (closes: #614992)
  * debian/dhclient-script.linux: applied patch from Colin Watson to make
    dhclient-script support stateless DHCPv6 (closes: #632888) 
  * debian/dhclient-script.linux: fix regression for MTU <= 576 handling
    (closes: #638267)
  * Apply patch from Peter Marschall to split the rfc3442-classless-routes hook
    into a Linux and a kFreeBSD variant, so that the Linux one can use iproute
    (closes: #630519)
  * debian/isc-dhcp-server.postinst: apply patch from Peter Marschall to
    document new variables in /etc/default/isc-dhcp-server
  * debian/isc-dhcp-server.init.d: apply patch from Peter Marschall to
    - make the name of the default file configurable
    - make the name of the server configuration file configurable (closes:
      #590158, #565650)
    - allow passing additional options to dhcpd (closes: #613734)
    - read PID from config file
  * Add Catalan debconf template translation (closes: #628372)
  * debian/isc-dhcp-client,dhcp3-client}.links: apply patch from Peter
    Marschall to move old compatibility links to the old compatibility package
    (closes: #614992)
  * debian/isc-dhcp-server.postinst: apply patch from Peter Marschall to fix
    comment in /etc/default/isc-dhcp-server (closes: #616417)
  * debian/control: apply patch from Peter Marschall to add a Provides:
    dhcp-client to isc-dhcp-client (closes: #236001)
  * debian/dhclient-script.{linux,kfreebsd}: apply patch from Peter Marschall
    to fix metric calculation (closes: #629632)
  * debian/dhclient-script.linux: apply patches from Peter Marschall to support
    IPv6 link-local resolvers
  * debian/dhclient-script.{linux,kfreebsd}: applied patch from Peter Marschall
    to factor out the hostname setting to a separate function
  * debian/dhclient-script.{linux,kfreebsd}: applied patch from Peter Marschall
    to harmonize the logic for setting the hostname (closes: #246155)
  * apply patch from Peter Marschall to use one common script for the debug
    hooks
  * debian/rfc3442-classless-routes.{linux,kfreebsd}: applied patch from Peter
    Marschall to take care of link-local routes (closes: #521024)
  * debian/dhclient-script.*: apply patch from Peter Marschall to use alternate
    value expansion
  * debian/isc-dhcp-server.postinst: eliminate an error message from sed if no
    interfaces are provided 

 -- Andrew Pollock <email address hidden>  Sun, 28 Aug 2011 22:12:21 -0700