[ubuntu/raring-proposed] isc-dhcp 4.2.4-2ubuntu1 (Accepted)

[Stephane Graber]

isc-dhcp (4.2.4-2ubuntu1) raring; urgency=low

  * Merge from Debian, remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6. (LP: #944849)
    - Separate default file for isc-dhcp-relay6. (LP: #944849)
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - dhcient.conf: Set for IPv6 (fqdn.fqdn and dhcp6.*) (LP: #770324)
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Create user/group dhcpd (LP: #727837)
    - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user
      (LP: #727837)
    - Add IPv6 support to dhclient-script.linux.udeb
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
      (LP: #856984)
    - Sanitize environment in dhclient-script.linux. (LP: #1045986)
    - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + dhclient-more-debug (LP: #35265)
      + dhclient-onetry-call-clientscript
      + dhclient-safer-timeout (LP: #838968)
      + dhcpd.conf-subnet-examples (LP: #26661)
      + multi-ip-addr-per-if (LP: #717166)
      + onetry_retry_after_initial_success (LP: #974284)
      + revert-next-server

isc-dhcp (4.2.4-2) unstable; urgency=low

  * Fix multiple security issues (closes: #686174)
    - cve-2012-3570: buffer overflow via lanrge hardware address length.
    - cve-2012-3571: denial-of-service via zero-length packets.
    - cve-2012-3954: two potential memory leaks.
    - cve-2012-3955: server abort due to certain lease time changes.

Date: Thu, 25 Oct 2012 13:53:57 +0200
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/raring/+source/isc-dhcp/4.2.4-2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 25 Oct 2012 13:53:57 +0200
Source: isc-dhcp
Binary: isc-dhcp-server isc-dhcp-server-dbg isc-dhcp-server-ldap isc-dhcp-common isc-dhcp-dev isc-dhcp-client isc-dhcp-client-dbg isc-dhcp-client-udeb isc-dhcp-relay isc-dhcp-relay-dbg
Architecture: source
Version: 4.2.4-2ubuntu1
Distribution: raring
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Description: 
 isc-dhcp-client - ISC DHCP client
 isc-dhcp-client-dbg - ISC DHCP client (debugging symbols)
 isc-dhcp-client-udeb - ISC DHCP Client for debian-installer (udeb)
 isc-dhcp-common - common files used by all the isc-dhcp* packages
 isc-dhcp-dev - API for accessing and modifying the DHCP server and client state
 isc-dhcp-relay - ISC DHCP relay daemon
 isc-dhcp-relay-dbg - DHCP relay daemon (debugging symbols)
 isc-dhcp-server - ISC DHCP server for automatic IP address assignment
 isc-dhcp-server-dbg - ISC DHCP server for automatic IP address assignment (debug)
 isc-dhcp-server-ldap - DHCP server able to use LDAP as backend
Closes: 686174
Launchpad-Bugs-Fixed: 26661 35265 341817 717166 727837 770324 838968 856984 944849 974284 1023174 1045986
Changes: 
 isc-dhcp (4.2.4-2ubuntu1) raring; urgency=low
 .
   * Merge from Debian, remaining changes:
     - Apparmor profiles for dhclient and dhcpd.
     - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
       isc-dhcp-relay6. (LP: #944849)
     - Separate default file for isc-dhcp-relay6. (LP: #944849)
     - Apport hook for isc-dhcp-client and isc-dhcp-server.
     - dhcient.conf: Set for IPv6 (fqdn.fqdn and dhcp6.*) (LP: #770324)
     - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
     - Drop isc-dhcp-server/new_auth_behavior question from high to medium
     - Create user/group dhcpd (LP: #727837)
     - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
     - Build with extra hardening and use --enable-paranoia to run dhcpd as user
       (LP: #727837)
     - Add IPv6 support to dhclient-script.linux.udeb
     - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
       (LP: #856984)
     - Sanitize environment in dhclient-script.linux. (LP: #1045986)
     - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
     - Remaining Ubuntu patches:
       + dhclient-fix-backoff
       + dhclient-more-debug (LP: #35265)
       + dhclient-onetry-call-clientscript
       + dhclient-safer-timeout (LP: #838968)
       + dhcpd.conf-subnet-examples (LP: #26661)
       + multi-ip-addr-per-if (LP: #717166)
       + onetry_retry_after_initial_success (LP: #974284)
       + revert-next-server
 .
 isc-dhcp (4.2.4-2) unstable; urgency=low
 .
   * Fix multiple security issues (closes: #686174)
     - cve-2012-3570: buffer overflow via lanrge hardware address length.
     - cve-2012-3571: denial-of-service via zero-length packets.
     - cve-2012-3954: two potential memory leaks.
     - cve-2012-3955: server abort due to certain lease time changes.
Checksums-Sha1: 
 adef839a8df062ccb66ad9aaf770e98c340d219c 2703 isc-dhcp_4.2.4-2ubuntu1.dsc
 78a6fc3e5cecdf9a283e068eafd582fa00c4b121 113383 isc-dhcp_4.2.4-2ubuntu1.debian.tar.gz
Checksums-Sha256: 
 870ce2792ec642e815ed8bb0af1dcb62c43c9c50b2db423106c26cf05f864d87 2703 isc-dhcp_4.2.4-2ubuntu1.dsc
 3ae700ce9c031b87e58b0aa818ef61ceb74ea447dad6d5a3f18b5f81e2c17c83 113383 isc-dhcp_4.2.4-2ubuntu1.debian.tar.gz
Files: 
 2d832a8e339b729bbc791ec49ed9d897 2703 net important isc-dhcp_4.2.4-2ubuntu1.dsc
 c086d35a0f8f13a58dbcd330a0547c66 113383 net important isc-dhcp_4.2.4-2ubuntu1.debian.tar.gz
Original-Maintainer: Debian ISC DHCP maintainers <pkg-dhcp-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=3nM8
-----END PGP SIGNATURE-----