isc-dhcp 4.4.3-P1-1ubuntu1 source package in Ubuntu

Changelog

isc-dhcp (4.4.3-P1-1ubuntu1) lunar; urgency=medium

  * Merge from Debian unstable, remaining changes:
    - debian/control: Add libcap-dev build dependency.
    - Apparmor profiles for dhclient and dhcpd.
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - Add systemd units for -server and -relay.
    - If /etc/ltsp/dhcpd.conf exists, use that instead of
      /etc/dhcp/dhcpd.conf.
    - Create user/group dhcpd and make isc-dhcp-server depend on adduser.
    - isc-dhcp-server: Suggest policycoreutils instead of recommending it.
    - Create /etc/dhcp/ddns-keys/ for DDNS updates.
    - Increase the timeout to 300 seconds for dhclient.conf (following the
      default added by dhclient-safer-timeout).
    - Sanitize environment in dhclient-script.linux.
    - add IPv6 initramfs support.
    - Separate default file for isc-dhcp-relay6.
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - dhclient-script.linux: handle empty case also when waiting for ipv6 link
      local DAD.
    - debian/initramfs-tools/lib/etc/dhcp/dhclient-enter-hooks.d/config: fix
      the logic for handling search domains to also write it to the output
      file when only the domain name is provided by the DHCP server. Copied
      code from debian/dhclient-script.linux.
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + revert-next-server
      + multi-ip-addr-per-if
      + dhclient-safer-timeout
      + onetry_retry_after_initial_success
      + dhcp-lpf-ib.patch
      + dhcp-improved-xid.patch
      + dhcp-gpxe-cid.patch
      + dhcp-improved-xid-correct-byte-order.patch
      + dhcp-4.2.4-dhclient-options-changed.patch
      + ubuntu-dhcpd-conf.patch
    - Apply patch from Alkis Georgopoulos to generate correct
      net{,6}-${iface}.conf files when DHCP supplies multiple DNS servers.
    - Write pidfile before informing parent of success.
    - Ship dhcp exit hook to push DNS information to resolved. LP #1889068
    - debian/apparmor/usr.sbin.dhcpd: also allow r+w on /proc/*/comm and
    /proc/*/task/*/comm (LP #1870729)
    - debian/apparmor/sbin.dhclient: also properly confine /usr/sbin/dhclient
    (LP #1850820)
    - debian/rules: build with -fno-strict-aliasing.
    - debian/rules: Build with -O2 instead on -O3 on ppc64el
    - Fix env variable for INTERFACES
      + d/isc-dhcp-server.isc-dhcp-server{,6}.service: Replace $INTERFACES
        variable with $INTERFACEv4 and $INTERFACESv6, respectively, for
        respective services file.
    - Stop building the udeb on request.
    - debian/resolved: chown $statedir to systemd-resolve
    - d/apparmor/sbin.dhclient: fix apparmor="DENIED" errors
    - Disable make_resolv_conf() if systemd-resolved is in use.
    - Include /etc/dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes in
      the initramfs.
    - debian/rules: update to use dh_installsystemd.
    - debian/control: add Pre-Depends: ${misc:Pre-Depends} for
      init-system-helpers.
    - drop shebang line from apport hooks; these are sourced not executed
      and /usr/bin/python as an interpreter just confuses things.
    - debian/isc-dhcp-server.postinst: dhcpd user home directory on new
      installs should be /run, not /var/run.  No handling of migration at this
      time.
    - debian/patches/bind-outdated-config.guess.patch: run autoreconf in
      the bind directory.
    - Reorder the initramfs hook so that all files end up in the right
      directories.
  * Dropped patches, included upstream:
    - debian/patches/CVE-2022-2928.patch
    - debian/patches/CVE-2022-2929.patch

isc-dhcp (4.4.3-P1-1) unstable; urgency=low

  * New upstream version 4.4.3-P1
  * Remove no longer needed CVE-2022-2928.patch and CVE-2022-2929.patch

isc-dhcp (4.4.3-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * An option refcount overflow exists in dhcpd (CVE-2022-2928)
    (Closes: #1021320)
  * DHCP memory leak (CVE-2022-2929) (Closes: #1021320)

 -- Graham Inggs <email address hidden>  Mon, 28 Nov 2022 14:34:02 +0000

Upload details

Uploaded by:
Graham Inggs
Uploaded to:
Lunar
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Lunar release main net

Downloads

File Size SHA-256 Checksum
isc-dhcp_4.4.3-P1.orig.tar.gz 9.6 MiB 0ac416bb55997ca8632174fd10737fd61cdb8dba2752160a335775bc21dc73c7
isc-dhcp_4.4.3-P1.orig.tar.gz.asc 874 bytes 66dd53dc74df0b02f1672158f1e35c61d4d8c6cf61940fcb0d0b2ee9b60cbc98
isc-dhcp_4.4.3-P1-1ubuntu1.debian.tar.xz 125.5 KiB ed9a04fae40479d2f46d58eeee6c65266a30f7181a33a4d4557b653aa9fe03b7
isc-dhcp_4.4.3-P1-1ubuntu1.dsc 2.9 KiB f602b0cd8322314e1fece2c5720d644fa6cc0550577abeabad84503854b9ff5a

View changes file

Binary packages built by this source

isc-dhcp-client: DHCP client for automatically obtaining an IP address

 This is the Internet Software Consortium's DHCP client.
 .
 Dynamic Host Configuration Protocol (DHCP) is a protocol like BOOTP
 (actually dhcpd includes much of the functionality of bootpd). It
 gives client machines "leases" for IP addresses and can
 automatically set their network configuration. If your machine
 depends on DHCP (especially likely if it's a workstation on a large
 network, or a laptop, or attached to a cable modem), keep this or
 another DHCP client installed.
 .
 Extra documentation can be found in the package isc-dhcp-common.

isc-dhcp-client-dbgsym: debug symbols for isc-dhcp-client
isc-dhcp-client-ddns: Dynamic DNS (DDNS) enabled DHCP client

 This a Dynamic DNS enabled version of the DHCP client.
 .
 Dynamic Host Configuration Protocol (DHCP) is a protocol like BOOTP
 (actually dhcpd includes much of the functionality of bootpd). It
 gives client machines "leases" for IP addresses and can
 automatically set their network configuration. If your machine
 depends on DHCP (especially likely if it's a workstation on a large
 network, or a laptop, or attached to a cable modem), keep this or
 another DHCP client installed.
 .
 Extra documentation can be found in the package isc-dhcp-common.

isc-dhcp-client-ddns-dbgsym: debug symbols for isc-dhcp-client-ddns
isc-dhcp-common: common manpages relevant to all of the isc-dhcp packages

 This package includes manpages that are relevant to the various ISC DHCP
 packages.
 .
 The dhcp-options manpage describes available options for dhcpd and dhclient.
 The dhcp-eval manpage describes evaluation of conditional expressions.

isc-dhcp-dev: API for accessing and modifying the DHCP server and client state

 This package provides support for OMAPI (Object Management Application
 Programming Interface), which is an API for accessing and modifying the DHCP
 server and client state.

isc-dhcp-relay: ISC DHCP relay daemon

 This is the Internet Software Consortium's DHCP relay.
 .
 Installing this package will make the machine a DHCP relay, which
 requires a reachable DHCP or BOOTP server in order to function.
 .
 Extra documentation can be found in the package isc-dhcp-common.

isc-dhcp-relay-dbgsym: debug symbols for isc-dhcp-relay
isc-dhcp-server: ISC DHCP server for automatic IP address assignment

 This is the Internet Software Consortium's DHCP server.
 .
 Dynamic Host Configuration Protocol (DHCP) is a protocol like BOOTP
 (actually dhcpd includes much of the functionality of bootpd). It
 gives client machines "leases" for IP addresses and can
 automatically set their network configuration.
 .
 This server can handle multiple ethernet interfaces.

isc-dhcp-server-dbgsym: debug symbols for isc-dhcp-server
isc-dhcp-server-ldap: DHCP server that uses LDAP as its backend

 This is the server from the Internet Software Consortium's implementation of
 DHCP.
 .
 Dynamic Host Configuration Protocol (DHCP) is a protocol like BOOTP
 (actually dhcpd includes much of the functionality of bootpd). It
 gives client machines "leases" for IP addresses and can
 automatically set their network configuration.
 .
 This is the DHCP server with LDAP patches applied to it.

isc-dhcp-server-ldap-dbgsym: debug symbols for isc-dhcp-server-ldap