Change log for isc-dhcp package in Ubuntu

175 of 125 results
Published in yakkety-release 7 hours ago
Deleted in yakkety-proposed (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu15) yakkety; urgency=medium

  * Drop unused build dependency on hardening-wrapper.

 -- Matthias Klose <email address hidden>  Wed, 28 Sep 2016 15:32:44 +0200

Available diffs

Published in xenial-updates on 2016-09-26
Deleted in xenial-proposed (Reason: moved to -updates)
isc-dhcp (4.3.3-5ubuntu12.3) xenial; urgency=medium

  [ Mathieu Trudel-Lapierre ]
  * debian/isc-dhcp-client.install: install new files for initramfs-tools
    to their proper locations; from debian/initramfs-tools. (LP: #1621507)

 -- LaMont Jones <email address hidden>  Fri, 23 Sep 2016 15:09:46 -0600
Superseded in yakkety-release 7 hours ago
Deleted in yakkety-proposed (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu14) yakkety; urgency=medium

  * Add an initramfs-tools hook and ship everything we need to run dhclient in
    the initramfs. This is necessary for proper IPv6 netboot support.
    (LP: #1621507)

 -- Mathieu Trudel-Lapierre <email address hidden>  Wed, 21 Sep 2016 09:57:48 -0400
Published in precise-updates on 2016-09-26
Deleted in precise-proposed (Reason: moved to -updates)
isc-dhcp (4.1.ESV-R4-0ubuntu5.11) precise; urgency=medium

  * Don't assume IPv6 prefix length of 64 (LP: #1609898).
    Pulled from debian commit c347ab8a43587164486ce1f104eedfd638594e59.

 -- Dan Streetman <email address hidden>  Thu, 04 Aug 2016 13:07:23 -0400
Published in trusty-updates on 2016-09-26
Deleted in trusty-proposed (Reason: moved to -updates)
isc-dhcp (4.2.4-7ubuntu12.7) trusty; urgency=medium

  * Don't assume IPv6 prefix length of 64 (LP: #1609898).
    Pulled from debian commit c347ab8a43587164486ce1f104eedfd638594e59.

 -- Dan Streetman <email address hidden>  Thu, 04 Aug 2016 13:07:23 -0400
Superseded in xenial-proposed on 2016-09-24
isc-dhcp (4.3.3-5ubuntu12.2) xenial; urgency=medium

  * Don't assume IPv6 prefix length of 64 (LP: #1609898).
    Pulled from debian commit c347ab8a43587164486ce1f104eedfd638594e59.

 -- Dan Streetman <email address hidden>  Thu, 04 Aug 2016 13:07:23 -0400
Superseded in trusty-updates on 2016-09-26
Deleted in trusty-proposed on 2016-09-28 (Reason: moved to -updates)
isc-dhcp (4.2.4-7ubuntu12.6) trusty; urgency=medium

  * Fixed missing broadcast flag for Infiniband interfaces (LP: #1529815)
    - added:
      + d/p/dhcp-4.2.4-dhclient-options-changed.patch

 -- Rafael David Tinoco <email address hidden>  Tue, 07 Jun 2016 15:29:50 +0200
Superseded in yakkety-proposed on 2016-09-22
isc-dhcp (4.3.3-5ubuntu13.1) yakkety; urgency=medium

  * Don't assume IPv6 prefix length of 64 (LP: #1609898).
    Pulled from debian commit c347ab8a43587164486ce1f104eedfd638594e59.

 -- Dan Streetman <email address hidden>  Thu, 04 Aug 2016 14:14:46 -0500
Deleted in wily-proposed on 2016-08-22 (Reason: The package was removed due to its SRU bug(s) not being v...)
isc-dhcp (4.3.1-5ubuntu3.2) wily; urgency=medium

  * Fixed missing broadcast flag for Infiniband interfaces (LP: #1529815)
  - added:
    + d/p/dhcp-4.2.4-dhclient-options-changed.patch

 -- Rafael David Tinoco (Inaddy) <email address hidden>  Wed, 08 Jun 2016 11:33:51 +0200
Superseded in xenial-updates on 2016-09-26
Deleted in xenial-proposed on 2016-09-28 (Reason: moved to -updates)
isc-dhcp (4.3.3-5ubuntu12.1) xenial; urgency=medium

  * Fixed missing broadcast flag for Infiniband interfaces (LP: #1529815)
  - added:
    + d/p/dhcp-4.2.4-dhclient-options-changed.patch

 -- Rafael David Tinoco (Inaddy) <email address hidden>  Wed, 08 Jun 2016 10:51:06 +0200
Superseded in yakkety-release on 2016-09-28
Deleted in yakkety-proposed on 2016-09-29 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu13) yakkety; urgency=medium

  * Fixed missing broadcast flag for Infiniband interfaces (LP: #1529815)
  - added:
    + d/p/dhcp-4.2.4-dhclient-options-changed.patch

 -- Rafael David Tinoco (Inaddy) <email address hidden>  Tue, 07 Jun 2016 15:52:40 +0200
Superseded in trusty-updates on 2016-09-08
Deleted in trusty-proposed on 2016-09-09 (Reason: moved to -updates)
isc-dhcp (4.2.4-7ubuntu12.5) trusty; urgency=medium

  * debian/apparmor-profile.dhclient: Add the attach_disconnected flag to prevent
    disconnected path denials (LP: #1568485).

 -- Jorge Niedbalski <email address hidden>  Fri, 15 Apr 2016 14:44:06 +0200
Superseded in yakkety-release on 2016-06-07
Published in xenial-release on 2016-04-13
Deleted in xenial-proposed (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu12) xenial; urgency=medium

  * debian/apparmor/sbin.dhclient: Add the attach_disconnected flag to prevent
    disconnected path denials as seen with the new 1.1.93 based
    network-manager (LP: #1568485)

 -- Tyler Hicks <email address hidden>  Wed, 13 Apr 2016 10:02:12 -0500

Available diffs

Superseded in xenial-release on 2016-04-13
Deleted in xenial-proposed on 2016-04-14 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu11) xenial; urgency=medium

  * No change upload for rebuild

 -- LaMont Jones <email address hidden>  Fri, 18 Mar 2016 10:36:57 -0600

Available diffs

Superseded in xenial-release on 2016-03-19
Deleted in xenial-proposed on 2016-03-20 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu10) xenial; urgency=low

  [ Stefan Bader ]
  * Revert back to bind against bind9 export libraries
    (LP: #1556175, LP: #1551351)

  [ LaMont Jones ]
  * libirs-export requires libisccfg-export now

 -- Stefan Bader <email address hidden>  Thu, 17 Mar 2016 17:45:53 +0100
Superseded in xenial-release on 2016-03-18
Deleted in xenial-proposed on 2016-03-19 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu9) xenial; urgency=medium

  * debian/isc-dhcp-server.isc-dhcp-server{,6}.service: adjust permissions
    for most recent PARANOIA commits to avoid granting 'capability
    dac_override' in the AppArmor profile on second and subsequent starts
    (LP: #1543794):
    - /var/lib/dhcp is root:dhcpd and 775
    - /var/lib/dhcp/dhcpd{,6}.leases is root:dhcpd and 664
    - don't chown /run/dhcp-server to dhcpd:dhcpd since the pid file is now
      created as root:root and the pid file was not being created before. If
      this needs to be reintroduced in the future, use root:dhcpd and 775,
      like with the leases file.

 -- Jamie Strandboge <email address hidden>  Tue, 01 Mar 2016 08:19:43 -0600

Available diffs

Superseded in xenial-release on 2016-03-01
Deleted in xenial-proposed on 2016-03-03 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu8) xenial; urgency=medium

  * debian/apparmor/sbin.dhclient: include the openssl abstraction
    (LP: #1543794)

 -- Jamie Strandboge <email address hidden>  Thu, 25 Feb 2016 08:32:37 -0600

Available diffs

Superseded in xenial-release on 2016-02-27
Deleted in xenial-proposed on 2016-02-28 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu7) xenial; urgency=medium

  * Link with the non-export bind9 libraries.

 -- Matthias Klose <email address hidden>  Fri, 19 Feb 2016 13:19:29 +0100
Superseded in xenial-proposed on 2016-02-19
isc-dhcp (4.3.3-5ubuntu6) xenial; urgency=medium

  * isc-dhcp-server: Suggest policycoreutils instead of recommending it.
  * Build-depend on libbind-dev instead of libbind-export-dev.

 -- Matthias Klose <email address hidden>  Fri, 19 Feb 2016 13:02:25 +0100

Available diffs

Superseded in xenial-release on 2016-02-23
Deleted in xenial-proposed on 2016-02-25 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu5) xenial; urgency=medium

  * No-change rebuild using the updated bind9.

 -- Matthias Klose <email address hidden>  Wed, 17 Feb 2016 23:17:52 +0100

Available diffs

Superseded in xenial-release on 2016-02-18
Deleted in xenial-proposed on 2016-02-19 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu4) xenial; urgency=medium

  * Allow chown - PARANOIA means that dhcpd tries to chown the leases file
    for later use. LP: #1537789

 -- LaMont Jones <email address hidden>  Mon, 25 Jan 2016 12:17:39 -0700
Superseded in xenial-proposed on 2016-01-25
isc-dhcp (4.3.3-5ubuntu3) xenial; urgency=medium

  * Allow chown - PARANOIA means that dhcpd tries to chown the leases file
    for later use.

 -- LaMont Jones <email address hidden>  Mon, 25 Jan 2016 12:17:39 -0700

Available diffs

Superseded in xenial-release on 2016-01-25
Deleted in xenial-proposed on 2016-01-27 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu2) xenial; urgency=medium

  * Correct my previous upload: Create the initial leases file if it doesn't
    exist when isc-dhcp-server or isc-dhcp-server6 are started, because it
    won't do it by itself. (LP: #1535952)

 -- Mathieu Trudel-Lapierre <email address hidden>  Wed, 20 Jan 2016 13:24:59 -0500

Available diffs

Superseded in xenial-release on 2016-01-20
Deleted in xenial-proposed on 2016-01-22 (Reason: moved to release)
isc-dhcp (4.3.3-5ubuntu1) xenial; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Create user/group dhcpd.
    - Create /etc/dhcp/ddns-keys/ for DDNS updates.
    - Sanitize environment in dhclient-script.linux.
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Add an 'option subnet-mask' example to config.
    - Increase the timeout to 300 seconds for dhclient.conf (following the
      default added by dhclient-safer-timeout).
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6.
    - Separate default file for isc-dhcp-relay6.
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + revert-next-server.
      + multi-ip-addr-per-if.
      + dhclient-safer-timeout.
      + onetry_retry_after_initial_success.
      + dhcp-getifaddrs.patch
      + dhcp-lpf-ib.patch
      + dhcp-improved-xid.patch
      + dhcp-gpxe-cid.patch
      + dhcp-improved-xid-correct-byte-order.patch
      + CVE-2015-8605.patch
  * debian/patches/CVE-2015-8605.patch: refreshed for 4.3.3.
  * debian/patches/system-bind.patch: add -lirs-export to linking libraries
    for dhclient, dhcpd, omshell and dhcrelay since omapip now requires it.
  * debian/isc-dhcp-server*.{upstart,service}: don't chown lease files, since
    the permissions handling in paranoia mode is now done correctly so that
    dhcpd can rotate them. (LP: #1186662)

 -- Mathieu Trudel-Lapierre <email address hidden>  Wed, 13 Jan 2016 15:41:45 -0500

Available diffs

Superseded in xenial-release on 2016-01-15
Deleted in xenial-proposed on 2016-01-19 (Reason: moved to release)
isc-dhcp (4.3.1-5ubuntu5) xenial; urgency=medium

  * SECURITY UPDATE: denial of service via incorrect UDP payload length
    - debian/patches/CVE-2015-8605.patch: properly check payload length in
      common/packet.c.
    - CVE-2015-8605

 -- Marc Deslauriers <email address hidden>  Wed, 13 Jan 2016 08:43:37 -0500

Available diffs

Superseded in trusty-updates on 2016-07-29
Published in trusty-security on 2016-01-13
isc-dhcp (4.2.4-7ubuntu12.4) trusty-security; urgency=medium

  * SECURITY UPDATE: denial of service via incorrect UDP payload length
    - debian/patches/CVE-2015-8605.patch: properly check payload length in
      common/packet.c.
    - CVE-2015-8605

 -- Marc Deslauriers <email address hidden>  Mon, 11 Jan 2016 07:56:50 -0500
Superseded in precise-updates on 2016-09-26
Published in precise-security on 2016-01-13
isc-dhcp (4.1.ESV-R4-0ubuntu5.10) precise-security; urgency=medium

  * SECURITY UPDATE: denial of service via incorrect UDP payload length
    - debian/patches/CVE-2015-8605.dpatch: properly check payload length in
      common/packet.c.
    - CVE-2015-8605

 -- Marc Deslauriers <email address hidden>  Mon, 11 Jan 2016 07:59:30 -0500
Published in vivid-updates on 2016-01-13
Published in vivid-security on 2016-01-13
isc-dhcp (4.3.1-5ubuntu2.3) vivid-security; urgency=medium

  * SECURITY UPDATE: denial of service via incorrect UDP payload length
    - debian/patches/CVE-2015-8605.patch: properly check payload length in
      common/packet.c.
    - CVE-2015-8605

 -- Marc Deslauriers <email address hidden>  Mon, 11 Jan 2016 07:28:53 -0500
Published in wily-updates on 2016-01-13
Published in wily-security on 2016-01-13
isc-dhcp (4.3.1-5ubuntu3.1) wily-security; urgency=medium

  * SECURITY UPDATE: denial of service via incorrect UDP payload length
    - debian/patches/CVE-2015-8605.patch: properly check payload length in
      common/packet.c.
    - CVE-2015-8605

 -- Marc Deslauriers <email address hidden>  Mon, 11 Jan 2016 07:26:11 -0500
Superseded in xenial-release on 2016-01-13
Deleted in xenial-proposed on 2016-01-14 (Reason: moved to release)
isc-dhcp (4.3.1-5ubuntu4) xenial; urgency=medium

  [ John Johansen ]
  * debian/apparmor/sbin.dhclient: fix signal rule typo in nm-dhcp-helper
    profile (LP: #1515818)

 -- Jamie Strandboge <email address hidden>  Fri, 13 Nov 2015 08:16:54 -0600

Available diffs

Superseded in vivid-updates on 2016-01-13
Deleted in vivid-proposed on 2016-01-14 (Reason: moved to -updates)
isc-dhcp (4.3.1-5ubuntu2.2) vivid; urgency=medium

  * Replaced broken IB support with working one (LP: #1401141):
    - removed:
      + d/p/infiniband_lpf
      + d/p/infiniband_improved_xid
    - added:
      + d/p/dhcp-lpf-ib.patch
      + d/p/dhcp-improved-xid.patch
      + d/p/dhcp-gpxe-cid.patch
      + d/p/dhcp-improved-xid-correct-byte-order.patch

 -- Rafael David Tinoco (Inaddy) <email address hidden>  Tue, 02 Jun 2015 15:34:42 +0100
Published in utopic-updates on 2015-06-24
Deleted in utopic-proposed (Reason: moved to -updates)
isc-dhcp (4.2.4-7ubuntu14.1) utopic; urgency=medium

  * Replaced broken IB support with working one (LP: #1401141):
    - removed:
      + d/p/infiniband_lpf
      + d/p/infiniband_improved_xid
    - added:
      + d/p/dhcp-4.2.5-lpf-ib.patch
      + d/p/dhcp-4.2.4-improved-xid.patch
      + d/p/dhcp-4.2.2-gpxe-cid.patch
      + d/p/dhcp-4.2.4-improved-xid-correct-byte-order.patch

 -- Rafael David Tinoco (Inaddy) <email address hidden>  Tue, 02 Jun 2015 15:14:52 +0100
Superseded in trusty-updates on 2016-01-13
Deleted in trusty-proposed on 2016-01-14 (Reason: moved to -updates)
isc-dhcp (4.2.4-7ubuntu12.3) trusty; urgency=medium

  * Replaced broken IB support with working one (LP: #1401141):
    - removed:
      + d/p/infiniband_lpf
      + d/p/infiniband_improved_xid
    - added:
      + d/p/dhcp-4.2.5-lpf-ib.patch
      + d/p/dhcp-4.2.4-improved-xid.patch
      + d/p/dhcp-4.2.2-gpxe-cid.patch
      + d/p/dhcp-4.2.4-improved-xid-correct-byte-order.patch

 -- Rafael David Tinoco (Inaddy) <email address hidden>  Tue, 02 Jun 2015 14:26:37 +0100
Superseded in xenial-release on 2015-11-13
Published in wily-release on 2015-05-11
Deleted in wily-proposed (Reason: moved to release)
isc-dhcp (4.3.1-5ubuntu3) wily; urgency=medium

  [ Rafael David Tinoco (Inaddy) ]
  * replaced broken IB support with working one (LP: #1401141)
  * removed:
    - d/p/infiniband_lpf
    - d/p/infiniband_improved_xid
  * added:
    + d/p/dhcp-lpf-ib.patch
    + d/p/dhcp-improved-xid.patch
    + d/p/dhcp-gpxe-cid.patch
    + d/p/dhcp-improved-xid-correct-byte-order.patch

 -- Mathieu Trudel-Lapierre <email address hidden>  Mon, 11 May 2015 14:23:41 -0400
Superseded in vivid-updates on 2015-06-24
Superseded in wily-release on 2015-05-11
Deleted in wily-proposed on 2015-06-25 (Reason: moved to release)
Deleted in vivid-proposed on 2015-06-25 (Reason: moved to -updates)
isc-dhcp (4.3.1-5ubuntu2.1) vivid-proposed; urgency=medium

  * debian/patches/dhcp-getifaddrs.patch: use getifaddrs
    for getting nic addresses rather than /proc/net (LP: #1446767)
 -- Scott Moser <email address hidden>   Tue, 21 Apr 2015 18:10:40 +0000
Superseded in trusty-updates on 2015-06-24
Deleted in trusty-proposed on 2015-06-25 (Reason: moved to -updates)
isc-dhcp (4.2.4-7ubuntu12.2) trusty-proposed; urgency=medium

  * debian/patches/dhcp-getifaddrs.patch: use getifaddrs
    for getting nic addresses rather than /proc/net (LP: #1446767)
 -- Scott Moser <email address hidden>   Tue, 21 Apr 2015 18:10:40 +0000
Superseded in trusty-updates on 2015-05-27
Deleted in trusty-proposed on 2015-05-28 (Reason: moved to -updates)
isc-dhcp (4.2.4-7ubuntu12.1) trusty-proposed; urgency=medium

  * debian/apparmor-profile.dhclient: add 'network inet dgram' and
    'network inet6 dgram' to nm-dhcp-helper and dhclient-script for HWE
    kernels (LP: #1417658)
 -- Jamie Strandboge <email address hidden>   Mon, 30 Mar 2015 12:24:24 -0500
Superseded in wily-release on 2015-05-05
Published in vivid-release on 2015-01-15
Deleted in vivid-proposed (Reason: moved to release)
isc-dhcp (4.3.1-5ubuntu2) vivid; urgency=medium

  * Add systemd units for -server and -relay. Note that we don't use the -q
    (quiet) option, so that config file and other errors appear properly in
    the journal. Therefore we also don't need to separately call with "-t" to
    test config files before calling the server.
 -- Martin Pitt <email address hidden>   Thu, 15 Jan 2015 12:12:05 +0100

Available diffs

Superseded in vivid-release on 2015-01-15
Deleted in vivid-proposed on 2015-01-16 (Reason: moved to release)
isc-dhcp (4.3.1-5ubuntu1) vivid; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Create user/group dhcpd.
    - Create /etc/dhcp/ddns-keys/ for DDNS updates.
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user.
    - debian/dhclient.conf: Set for IPv6 (dhcp6.*).
    - Sanitize environment in dhclient-script.linux.
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
    - Add IPv6 support to dhclient-script.linux.udeb.
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Add an 'option subnet-mask' example to config.
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6.
    - Separate default file for isc-dhcp-relay6.
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Don't call 'ip addr flush' as it breaks IPv6 networking.
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + dhclient-more-debug.
      + dhclient-safer-timeout.
      + multi-ip-addr-per-if.
      + onetry_retry_after_initial_success.
      + revert-next-server.
      + infiniband_lpf
      + infiniband_improved_xid
      + udp_checksum_offloading
      + 64_bit_large_time_lease.patch
   * Move apparmor profiles to debian/apparmor to simplify installation.
   * debian/apparmor/sbin.dhclient: Add support for the new dispatcher binary
     used by NetworkManager.
 -- Mathieu Trudel-Lapierre <email address hidden>   Wed, 05 Nov 2014 13:48:28 -0500
Superseded in vivid-release on 2014-11-12
Published in utopic-release on 2014-09-05
Deleted in utopic-proposed (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu14) utopic; urgency=medium

  * debian/apparmor-profile.dhclient: add file_inherit inet{,6} dgram rules
    for child profiles
 -- Jamie Strandboge <email address hidden>   Wed, 27 Aug 2014 09:01:46 -0500
Superseded in utopic-release on 2014-09-05
Deleted in utopic-proposed on 2014-09-07 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu13) utopic; urgency=medium

  * apparmor-profile.dhclient: allow signal receive and ptrace readby by
    peer=/usr/sbin/NetworkManager to dhclient and nm-dhcp-client.action
    (LP: #1296415)
 -- Jamie Strandboge <email address hidden>   Wed, 25 Jun 2014 07:05:47 -0500

Available diffs

Superseded in utopic-release on 2014-06-26
Published in trusty-release on 2014-04-07
Deleted in trusty-proposed (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu12) trusty; urgency=medium

  * apparmor-profile.dhclient: add read for /var/lib/NetworkManager/*lease
 -- Jamie Strandboge <email address hidden>   Mon, 07 Apr 2014 08:38:02 -0500

Available diffs

Superseded in trusty-release on 2014-04-07
Deleted in trusty-proposed on 2014-04-08 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu11) trusty; urgency=medium

  * Fix broken shell syntax...
 -- Stephane Graber <email address hidden>   Thu, 03 Apr 2014 23:23:59 -0400

Available diffs

Superseded in trusty-release on 2014-04-04
Deleted in trusty-proposed on 2014-04-05 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu10) trusty; urgency=medium

  * Update old lucid configs to avoid conffile prompt. (LP: #1300654)
 -- Stephane Graber <email address hidden>   Thu, 03 Apr 2014 18:34:49 -0400

Available diffs

Superseded in trusty-release on 2014-04-04
Deleted in trusty-proposed on 2014-04-05 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu9) trusty; urgency=medium

  * Drop debugging code from the inifiniband patch.
 -- Stephane Graber <email address hidden>   Thu, 13 Mar 2014 11:42:55 -0400

Available diffs

Superseded in trusty-release on 2014-03-13
Obsolete in saucy-release on 2015-04-24
Deleted in saucy-proposed on 2015-04-28 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu8) saucy; urgency=low

  * debian/patches/large_interface_counters.patch: Allow for very large packet
    counts or bytes transferred without failing connections. (LP: #1222377)
 -- Mathieu Trudel-Lapierre <email address hidden>   Tue, 08 Oct 2013 15:15:44 -0400

Available diffs

Superseded in saucy-release on 2013-10-08
Deleted in saucy-proposed on 2013-10-10 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu7) saucy; urgency=low

  * debian/apparmor-profile.dhclient: added net_admin capability, which is
    now required in certain scenarios. (LP: #1220918)
 -- Marc Deslauriers <email address hidden>   Fri, 06 Sep 2013 12:42:03 -0400

Available diffs

Superseded in precise-updates on 2016-01-13
Deleted in precise-proposed on 2016-01-14 (Reason: moved to -updates)
isc-dhcp (4.1.ESV-R4-0ubuntu5.9) precise-proposed; urgency=low

  * debian/dhclient-script.linux: Allow stateless DHCPv6 to complete
    configuration. (LP: #1214385)
 -- Philipp Kern <email address hidden>   Tue, 20 Aug 2013 15:24:27 +0200
Superseded in saucy-release on 2013-09-06
Deleted in saucy-proposed on 2013-09-07 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu6) saucy; urgency=low

  * debian/apparmor-profile.dhclient: allow 'm' for nm-dhcp-client.action
    which is related to LP: 1202203
 -- Jamie Strandboge <email address hidden>   Wed, 28 Aug 2013 13:40:32 -0500

Available diffs

Superseded in saucy-release on 2013-08-28
Deleted in saucy-proposed on 2013-08-30 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu5) saucy; urgency=low

  * debian/control: Transition from iproute to iproute2.
 -- Stephane Graber <email address hidden>   Mon, 26 Aug 2013 18:26:24 -0400

Available diffs

Superseded in saucy-release on 2013-08-26
Deleted in saucy-proposed on 2013-08-28 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu4) saucy; urgency=low

  * debian/apparmor-profile.dhclient: allow 'm' of /bin/bash (LP: #1202203)
 -- Jamie Strandboge <email address hidden>   Thu, 18 Jul 2013 16:59:08 -0500

Available diffs

Superseded in saucy-release on 2013-07-18
Deleted in saucy-proposed on 2013-07-20 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu3) saucy; urgency=low

  * debian/apparmor-profile.dhclient: allow read of /bin/bash (LP: #1197484)
 -- Jamie Strandboge <email address hidden>   Tue, 16 Jul 2013 15:13:49 -0500

Available diffs

Superseded in saucy-release on 2013-07-16
Deleted in saucy-proposed on 2013-07-18 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu2) saucy; urgency=low

  * debian/rules: Re-add missing line continuation. LP: #1201506.
 -- Matthias Klose <email address hidden>   Tue, 16 Jul 2013 16:42:14 +0200

Available diffs

Superseded in saucy-release on 2013-07-16
Deleted in saucy-proposed on 2013-07-17 (Reason: moved to release)
isc-dhcp (4.2.4-7ubuntu1) saucy; urgency=low

  * Merge with Debian; remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6.
    - Separate default file for isc-dhcp-relay6.
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - dhclient.conf: Set for IPv6 (dhcp6.*).
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Create user/group dhcpd.
    - Create /etc/dhcp/ddns-keys/ for DDNS updates.
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user.
    - Add IPv6 support to dhclient-script.linux.udeb.
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
    - Sanitize environment in dhclient-script.linux.
    - Don't call 'ip addr flush' as it breaks IPv6 networking.
    - debian/apparmor-profile.dhclient: update to add the new paths used by
      NetworkManager for its conf and leases files; standardized under
      /var/lib/NetworkManager.
    - Remaining Ubuntu patches:
      + add-option-ignore-client-uids.patch (LP: #1069570)
      + dhclient-fix-backoff
      + dhclient-more-debug.
      + dhclient-safer-timeout.
      + dhcpd.conf-subnet-examples.
      + multi-ip-addr-per-if.
      + onetry_retry_after_initial_success.
      + revert-next-server.
    - 64_bit_time_overflow.patch: Fix for large lease times caused by
      isc_time_nowplusinterval() is not being safe with 64-bit.
    - debian/apparmor-profile.dhclient: use dhclient*.conf instead of
      dhclient-*.conf for NetworkManager to work with certain IPv6
      configurations.
  * Build-depend on autotools-dev and update the config.{guess,sub} copies
    in the bind tarball for arm64.

Available diffs

Obsolete in quantal-updates on 2015-04-24
Deleted in quantal-proposed on 2015-05-01 (Reason: moved to -updates)
isc-dhcp (4.2.4-1ubuntu10.4) quantal-proposed; urgency=low

  [ Ben Howard ]
  * debian/patches/64_bit_time_overflow.patch:
    Fix for large lease times caused by isc_time_nowplusinterval() is not
    being safe with 64-bit. (LP: #1189571)
 -- Scott Moser <email address hidden>   Thu, 13 Jun 2013 13:24:29 -0400
Obsolete in raring-updates on 2015-04-24
Deleted in raring-proposed on 2015-04-27 (Reason: moved to -updates)
isc-dhcp (4.2.4-5ubuntu2.1) raring-proposed; urgency=low

  * debian/patches/64_bit_time_overflow.patch:
    Fix for large lease times caused by isc_time_nowplusinterval() is not
    being safe with 64-bit. (LP: #1189571)
 -- Ben Howard <email address hidden>   Thu, 13 Jun 2013 08:03:53 -0600
Superseded in saucy-release on 2013-07-13
Deleted in saucy-proposed on 2013-07-14 (Reason: moved to release)
isc-dhcp (4.2.4-6ubuntu3) saucy; urgency=low

  * debian/patches/64_bit_time_overflow.patch:
    Fix for large lease times caused by isc_time_nowplusinterval() is not
    being safe with 64-bit. (LP: #1189571)
 -- Ben Howard <email address hidden>   Mon, 10 Jun 2013 16:06:47 -0400

Available diffs

Superseded in precise-updates on 2013-09-17
Deleted in precise-proposed on 2013-09-18 (Reason: moved to -updates)
isc-dhcp (4.1.ESV-R4-0ubuntu5.8) precise-proposed; urgency=low

  [ Dave Chiluk ]
  * Allow dhcpd to read /etc/ldap/ldap.conf for isc-dhcp-server-ldap.
    (LP: #1057358). Backported from Stéphane Graber's quantal patch.

  [ Stéphane Graber ]
  * Include patch from RedHat/Fedora to deal with hardware/xen/virtio offload
    of UDP checksums. (LP: #930962)
  * Update apparmor profile to add required the "network packet raw" rule
    for the checksum change.
 -- Stephane Graber <email address hidden>   Thu, 23 May 2013 11:13:07 -0400
Superseded in saucy-release on 2013-06-10
Deleted in saucy-proposed on 2013-06-12 (Reason: moved to release)
isc-dhcp (4.2.4-6ubuntu2) saucy-proposed; urgency=low

  * debian/apparmor-profile.dhclient: use dhclient*.conf instead of
    dhclient-*.conf for NetworkManager to work with certain IPv6
    configurations (LP: #1180516)
 -- Jamie Strandboge <email address hidden>   Wed, 15 May 2013 15:04:21 -0500

Available diffs

Superseded in saucy-release on 2013-05-15
Deleted in saucy-proposed on 2013-05-17 (Reason: moved to release)
isc-dhcp (4.2.4-6ubuntu1) saucy; urgency=low

  * Merge from Debian, remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6. (LP: #944849)
    - Separate default file for isc-dhcp-relay6. (LP: #944849)
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - dhclient.conf: Set for IPv6 (dhcp6.*) (LP: #770324)
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Create user/group dhcpd (LP: #727837)
    - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user
      (LP: #727837)
    - Add IPv6 support to dhclient-script.linux.udeb
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
      (LP: #856984)
    - Sanitize environment in dhclient-script.linux. (LP: #1045986)
    - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
    - debian/apparmor-profile.dhclient: update to add the new paths used by
      NetworkManager for its conf and leases files; standardized under
      /var/lib/NetworkManager.
    - Remaining Ubuntu patches:
      + add-option-ignore-client-uids.patch (LP: #1069570)
      + dhclient-fix-backoff
      + dhclient-more-debug (LP: #35265)
      + dhclient-safer-timeout (LP: #838968)
      + dhcpd.conf-subnet-examples (LP: #26661)
      + multi-ip-addr-per-if (LP: #717166)
      + onetry_retry_after_initial_success (LP: #974284)
      + revert-next-server

Available diffs

Superseded in quantal-updates on 2013-06-21
Deleted in quantal-proposed on 2013-06-22 (Reason: moved to -updates)
isc-dhcp (4.2.4-1ubuntu10.3) quantal-proposed; urgency=low

  * Allow "network packet raw" in the apparmor profile for dhcpd.
    This fixes dhcpd failing to start when used on InfiniBand and on setups
    that do checksum offloading (fixes a bug introduced by the previous upload)
    (LP: #1171838)
 -- Stephane Graber <email address hidden>   Tue, 23 Apr 2013 17:16:56 +0200
Superseded in saucy-release on 2013-05-07
Obsolete in raring-release on 2015-04-24
Deleted in raring-proposed on 2015-04-27 (Reason: moved to release)
isc-dhcp (4.2.4-5ubuntu2) raring; urgency=low

  * debian/patches/add-option-ignore-client-uids.patch:
    Add a new dhcpd.conf option 'ignore-client-uids'. (LP: #1069570)
 -- Scott Moser <email address hidden>   Thu, 14 Mar 2013 17:49:10 -0400

Available diffs

Superseded in quantal-updates on 2013-04-24
Deleted in quantal-proposed on 2013-04-25 (Reason: moved to -updates)
isc-dhcp (4.2.4-1ubuntu10.2) quantal-proposed; urgency=low

  * Fix isc-dhcp-server-ldap not actually containing ldap support.
    Thanks to Christian Hoffmann for tracking down the issue. (LP: #1071928)
  * Don't set fqdn.fqdn in dhclient.conf as that seems to confuse some DHCP
    servers. An alternative would have been to only set fqdn.fqdn and not
    host-name, but that appears to confuse another set of servers.
    For now go with just host-name which is the most common and if becomes a
    big problem for IPv6 (where fqdn.fqdn is apparently required), then we'll
    need to have a separate dhclient6.conf file and change all the calls to
    dhclient -6 to use that file instead. (LP: #1088682)
  * Include patch from RedHat/Fedora to deal with hardware/xen/virtio offload
    of UDP checksums. (LP: #930962)
 -- Stephane Graber <email address hidden>   Fri, 01 Mar 2013 16:07:49 -0500
Superseded in raring-release on 2013-03-14
Deleted in raring-proposed on 2013-03-16 (Reason: moved to release)
isc-dhcp (4.2.4-5ubuntu1) raring; urgency=low

  * Merge from Debian, remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6. (LP: #944849)
    - Separate default file for isc-dhcp-relay6. (LP: #944849)
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - dhclient.conf: Set for IPv6 (dhcp6.*) (LP: #770324)
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Create user/group dhcpd (LP: #727837)
    - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user
      (LP: #727837)
    - Add IPv6 support to dhclient-script.linux.udeb
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
      (LP: #856984)
    - Sanitize environment in dhclient-script.linux. (LP: #1045986)
    - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
    - debian/apparmor-profile.dhclient: update to add the new paths used by
      NetworkManager for its conf and leases files; standardized under
      /var/lib/NetworkManager.
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + dhclient-more-debug (LP: #35265)
      + dhclient-safer-timeout (LP: #838968)
      + dhcpd.conf-subnet-examples (LP: #26661)
      + multi-ip-addr-per-if (LP: #717166)
      + onetry_retry_after_initial_success (LP: #974284)
      + revert-next-server
    - Dropped Ubuntu patches:
      + dhclient-onetry-call-clientscript (now in Debian)

  * Add InfiniBand support patches from RedHat.
  * Update dhcpd apparmor profile for LPF. (LP: #1107686)

Available diffs

Deleted in precise-proposed on 2013-04-11 (Reason: SRU abandoned (verification-failed))
isc-dhcp (4.1.ESV-R4-0ubuntu5.7) precise; urgency=low

  * Allow dhcpd to read /etc/ldap/ldap.conf for isc-dhcp-server-ldap.
    (LP: #1057358). Backported from Stéphane Graber's quantal patch.
 -- chiluk <email address hidden>   Thu, 31 Jan 2013 16:44:46 -0600
Superseded in raring-release on 2013-02-27
Deleted in raring-proposed on 2013-02-28 (Reason: moved to release)
isc-dhcp (4.2.4-4ubuntu1) raring; urgency=low

  * Merge from Debian, remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6. (LP: #944849)
    - Separate default file for isc-dhcp-relay6. (LP: #944849)
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - dhclient.conf: Set for IPv6 (dhcp6.*) (LP: #770324)
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Create user/group dhcpd (LP: #727837)
    - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user
      (LP: #727837)
    - Add IPv6 support to dhclient-script.linux.udeb
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
      (LP: #856984)
    - Sanitize environment in dhclient-script.linux. (LP: #1045986)
    - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
    - debian/apparmor-profile.dhclient: update to add the new paths used by
      NetworkManager for its conf and leases files; standardized under
      /var/lib/NetworkManager.
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + dhclient-more-debug (LP: #35265)
      + dhclient-safer-timeout (LP: #838968)
      + dhcpd.conf-subnet-examples (LP: #26661)
      + multi-ip-addr-per-if (LP: #717166)
      + onetry_retry_after_initial_success (LP: #974284)
      + revert-next-server
    - Dropped Ubuntu patches:
      + dhclient-onetry-call-clientscript (now in Debian)
  * Fix isc-dhcp-server-ldap not actually containing ldap support.
    Thanks to Christian Hoffmann for tracking down the issue. (LP: #1071928)
  * Don't set fqdn.fqdn in dhclient.conf as that seems to confuse some DHCP
    servers. An alternative would have been to only set fqdn.fqdn and not
    host-name, but that appears to confuse another set of servers.
    For now go with just host-name which is the most common and if becomes a
    big problem for IPv6 (where fqdn.fqdn is apparently required), then we'll
    need to have a separate dhclient6.conf file and change all the calls to
    dhclient -6 to use that file instead. (LP: #1088682)
  * Include patch from RedHat/Fedora to deal with hardware/xen/virtio offload
    of UDP checksums. (LP: #930962)

Available diffs

Superseded in raring-release on 2013-01-18
Deleted in raring-proposed on 2013-01-19 (Reason: moved to release)
isc-dhcp (4.2.4-3ubuntu2) raring; urgency=low

  * debian/apparmor-profile.dhclient: update to add the new paths used by
    NetworkManager for its conf and leases files; standardized under
    /var/lib/NetworkManager.
 -- Mathieu Trudel-Lapierre <email address hidden>   Fri, 04 Jan 2013 14:50:31 -0500

Available diffs

Superseded in raring-release on 2013-01-04
Deleted in raring-proposed on 2013-01-06 (Reason: moved to release)
isc-dhcp (4.2.4-3ubuntu1) raring; urgency=low

  * Merge from Debian, remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6. (LP: #944849)
    - Separate default file for isc-dhcp-relay6. (LP: #944849)
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - dhcient.conf: Set for IPv6 (fqdn.fqdn and dhcp6.*) (LP: #770324)
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Create user/group dhcpd (LP: #727837)
    - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user
      (LP: #727837)
    - Add IPv6 support to dhclient-script.linux.udeb
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
      (LP: #856984)
    - Sanitize environment in dhclient-script.linux. (LP: #1045986)
    - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + dhclient-more-debug (LP: #35265)
      + dhclient-onetry-call-clientscript
      + dhclient-safer-timeout (LP: #838968)
      + dhcpd.conf-subnet-examples (LP: #26661)
      + multi-ip-addr-per-if (LP: #717166)
      + onetry_retry_after_initial_success (LP: #974284)
      + revert-next-server

Available diffs

Superseded in raring-release on 2012-10-31
Deleted in raring-proposed on 2012-11-01 (Reason: moved to release)
isc-dhcp (4.2.4-2ubuntu1) raring; urgency=low

  * Merge from Debian, remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6. (LP: #944849)
    - Separate default file for isc-dhcp-relay6. (LP: #944849)
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - dhcient.conf: Set for IPv6 (fqdn.fqdn and dhcp6.*) (LP: #770324)
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Create user/group dhcpd (LP: #727837)
    - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user
      (LP: #727837)
    - Add IPv6 support to dhclient-script.linux.udeb
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
      (LP: #856984)
    - Sanitize environment in dhclient-script.linux. (LP: #1045986)
    - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + dhclient-more-debug (LP: #35265)
      + dhclient-onetry-call-clientscript
      + dhclient-safer-timeout (LP: #838968)
      + dhcpd.conf-subnet-examples (LP: #26661)
      + multi-ip-addr-per-if (LP: #717166)
      + onetry_retry_after_initial_success (LP: #974284)
      + revert-next-server

Superseded in quantal-updates on 2013-04-22
Deleted in quantal-proposed on 2013-04-24 (Reason: moved to -updates)
isc-dhcp (4.2.4-1ubuntu10.1) quantal-proposed; urgency=low

  * Re-introduce missing symlink for dhclient in
    /etc/apparmor/init/network-interface-security/ (LP: #1067473)
 -- Stephane Graber <email address hidden>   Tue, 16 Oct 2012 21:37:40 +0200
Superseded in raring-release on 2012-10-29
Obsolete in quantal-release on 2015-04-24
isc-dhcp (4.2.4-1ubuntu10) quantal; urgency=low

  * Allow dhcpd to read /etc/ldap/ldap.conf for isc-dhcp-server-ldap.
    (LP: #1057358)
 -- Stephane Graber <email address hidden>   Tue, 09 Oct 2012 10:44:47 -0400

Available diffs

Superseded in precise-updates on 2013-05-31
Deleted in precise-proposed on 2013-06-01 (Reason: moved to -updates)
isc-dhcp (4.1.ESV-R4-0ubuntu5.6) precise-proposed; urgency=low

  [ Scott Moser ]
  * debian/apparmor-profile.dhcpd: use include directory to enable
    other packages to re-use isc-dhcp-server. (LP: #1049177)

  [ Stéphane Graber ]
  * Update onetry_retry_after_initial_success to disable the onetry variable
    early enough to actually prevent dhclient from exiting. (LP: #974284)
  * Update droppriv patch to also call initgroups() (LP: #727837)
 -- Stephane Graber <email address hidden>   Tue, 18 Sep 2012 10:34:10 -0400
Obsolete in natty-updates on 2013-06-04
Obsolete in natty-security on 2013-06-04
isc-dhcp (4.1.1-P1-15ubuntu9.6) natty-security; urgency=low

  [ Jamie Strandboge ]
  * debian/dhclient-script.linux: Explicitly set the PATH to that of
    ENV_SUPATH in /etc/login.defs and unset various other variables. We need
    to do this so /sbin/dhclient cannot abuse the environment to escape
    AppArmor confinement via this script. Don't worry about
    debian/dhclient-script.linux.udeb or debian/dhclient-script.kfreebsd*
    since AppArmor isn't used in these environments.
    - LP: #1045986

  [ Marc Deslauriers ]
  * SECURITY UPDATE: denial of service via ipv6 lease expiration time
    reduction
    - debian/patches/CVE-2012-3955.patch: properly handle time reduction in
      server/dhcpv6.c, server/mdb6.c.
    - CVE-2012-3955
 -- Marc Deslauriers <email address hidden>   Fri, 14 Sep 2012 13:04:46 -0400
Obsolete in oneiric-updates on 2015-04-24
Obsolete in oneiric-security on 2015-04-24
isc-dhcp (4.1.1-P1-17ubuntu10.5) oneiric-security; urgency=low

  [ Jamie Strandboge ]
  * debian/dhclient-script.linux: Explicitly set the PATH to that of
    ENV_SUPATH in /etc/login.defs and unset various other variables. We need
    to do this so /sbin/dhclient cannot abuse the environment to escape
    AppArmor confinement via this script. Don't worry about
    debian/dhclient-script.linux.udeb or debian/dhclient-script.kfreebsd*
    since AppArmor isn't used in these environments.
    - LP: #1045986

  [ Marc Deslauriers ]
  * SECURITY UPDATE: denial of service via ipv6 lease expiration time
    reduction
    - debian/patches/CVE-2012-3955.patch: properly handle time reduction in
      server/dhcpv6.c, server/mdb6.c.
    - CVE-2012-3955
 -- Marc Deslauriers <email address hidden>   Fri, 14 Sep 2012 13:02:05 -0400
Superseded in quantal-release on 2012-10-09
isc-dhcp (4.2.4-1ubuntu9) quantal; urgency=low

  * SECURITY UPDATE: denial of service via ipv6 lease expiration time
    reduction
    - debian/patches/CVE-2012-3955.patch: properly handle time reduction in
      server/dhcpv6.c, server/mdb6.c.
    - CVE-2012-3955
 -- Marc Deslauriers <email address hidden>   Fri, 14 Sep 2012 12:50:12 -0400

Available diffs

175 of 125 results