[ubuntu/raring-proposed] isc-dhcp 4.2.4-3ubuntu1 (Accepted)

Stephane Graber stgraber at ubuntu.com
Wed Oct 31 08:40:19 UTC 2012 

isc-dhcp (4.2.4-3ubuntu1) raring; urgency=low

  * Merge from Debian, remaining changes:
    - Apparmor profiles for dhclient and dhcpd.
    - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
      isc-dhcp-relay6. (LP: #944849)
    - Separate default file for isc-dhcp-relay6. (LP: #944849)
    - Apport hook for isc-dhcp-client and isc-dhcp-server.
    - dhcient.conf: Set for IPv6 (fqdn.fqdn and dhcp6.*) (LP: #770324)
    - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
    - Drop isc-dhcp-server/new_auth_behavior question from high to medium
    - Create user/group dhcpd (LP: #727837)
    - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
    - Build with extra hardening and use --enable-paranoia to run dhcpd as user
      (LP: #727837)
    - Add IPv6 support to dhclient-script.linux.udeb
    - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
      (LP: #856984)
    - Sanitize environment in dhclient-script.linux. (LP: #1045986)
    - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
    - Remaining Ubuntu patches:
      + dhclient-fix-backoff
      + dhclient-more-debug (LP: #35265)
      + dhclient-onetry-call-clientscript
      + dhclient-safer-timeout (LP: #838968)
      + dhcpd.conf-subnet-examples (LP: #26661)
      + multi-ip-addr-per-if (LP: #717166)
      + onetry_retry_after_initial_success (LP: #974284)
      + revert-next-server

isc-dhcp (4.2.4-3) unstable; urgency=high

  * Maintainer security upload.
  * Fix cve-2012-2248: as of 4.2.x the build system prefix now gets included
    in CLIENT_PATH.  This has security implications since the build system's
    source path is now included in dhclient's search PATH on users' systems,
    so sanitize the prefix to not include build system paths (closes: #690532)
    - Patch thanks to Raphael Geissert

Date: Wed, 31 Oct 2012 09:31:00 +0100
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/raring/+source/isc-dhcp/4.2.4-3ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 31 Oct 2012 09:31:00 +0100
Source: isc-dhcp
Binary: isc-dhcp-server isc-dhcp-server-dbg isc-dhcp-server-ldap isc-dhcp-common isc-dhcp-dev isc-dhcp-client isc-dhcp-client-dbg isc-dhcp-client-udeb isc-dhcp-relay isc-dhcp-relay-dbg
Architecture: source
Version: 4.2.4-3ubuntu1
Distribution: raring
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Description: 
 isc-dhcp-client - ISC DHCP client
 isc-dhcp-client-dbg - ISC DHCP client (debugging symbols)
 isc-dhcp-client-udeb - ISC DHCP Client for debian-installer (udeb)
 isc-dhcp-common - common files used by all the isc-dhcp* packages
 isc-dhcp-dev - API for accessing and modifying the DHCP server and client state
 isc-dhcp-relay - ISC DHCP relay daemon
 isc-dhcp-relay-dbg - DHCP relay daemon (debugging symbols)
 isc-dhcp-server - ISC DHCP server for automatic IP address assignment
 isc-dhcp-server-dbg - ISC DHCP server for automatic IP address assignment (debug)
 isc-dhcp-server-ldap - DHCP server able to use LDAP as backend
Closes: 690532
Launchpad-Bugs-Fixed: 26661 35265 341817 717166 727837 770324 838968 856984 944849 974284 1023174 1045986
Changes: 
 isc-dhcp (4.2.4-3ubuntu1) raring; urgency=low
 .
   * Merge from Debian, remaining changes:
     - Apparmor profiles for dhclient and dhcpd.
     - Upstart jobs for isc-dhcp-server, isc-dhcp-server6, isc-dhcp-relay and
       isc-dhcp-relay6. (LP: #944849)
     - Separate default file for isc-dhcp-relay6. (LP: #944849)
     - Apport hook for isc-dhcp-client and isc-dhcp-server.
     - dhcient.conf: Set for IPv6 (fqdn.fqdn and dhcp6.*) (LP: #770324)
     - If /etc/ltsp/dhcpd.conf exists, use that instead of /etc/dhcp/dhcpd.conf
     - Drop isc-dhcp-server/new_auth_behavior question from high to medium
     - Create user/group dhcpd (LP: #727837)
     - Create /etc/dhcp/ddns-keys/ for DDNS updates (LP: #341817)
     - Build with extra hardening and use --enable-paranoia to run dhcpd as user
       (LP: #727837)
     - Add IPv6 support to dhclient-script.linux.udeb
     - Wait for /etc/resolv.conf to be writable in dhclient-script.linux.
       (LP: #856984)
     - Sanitize environment in dhclient-script.linux. (LP: #1045986)
     - Don't call 'ip addr flush' as it breaks IPv6 networking. (LP: #1023174)
     - Remaining Ubuntu patches:
       + dhclient-fix-backoff
       + dhclient-more-debug (LP: #35265)
       + dhclient-onetry-call-clientscript
       + dhclient-safer-timeout (LP: #838968)
       + dhcpd.conf-subnet-examples (LP: #26661)
       + multi-ip-addr-per-if (LP: #717166)
       + onetry_retry_after_initial_success (LP: #974284)
       + revert-next-server
 .
 isc-dhcp (4.2.4-3) unstable; urgency=high
 .
   * Maintainer security upload.
   * Fix cve-2012-2248: as of 4.2.x the build system prefix now gets included
     in CLIENT_PATH.  This has security implications since the build system's
     source path is now included in dhclient's search PATH on users' systems,
     so sanitize the prefix to not include build system paths (closes: #690532)
     - Patch thanks to Raphael Geissert
Checksums-Sha1: 
 0521976c7661bb55cfeaa501b8904e6bbe5c445d 2703 isc-dhcp_4.2.4-3ubuntu1.dsc
 47a1f53b87a7daa7da9f3b23ec33b09b9ffc6547 113724 isc-dhcp_4.2.4-3ubuntu1.debian.tar.gz
Checksums-Sha256: 
 06aea029f0c0ce1db7ff0eeee8f7713b213a24f8c536ca405a09e90c5c5b9a62 2703 isc-dhcp_4.2.4-3ubuntu1.dsc
 71605b343110f2140b1c42a87a88158b60f0b08262af3e18062e605dd8e86791 113724 isc-dhcp_4.2.4-3ubuntu1.debian.tar.gz
Files: 
 aa30acb0d2471c8c26aaae52f3c609f5 2703 net important isc-dhcp_4.2.4-3ubuntu1.dsc
 2cc887589ff51f1b67825bb6c748db39 113724 net important isc-dhcp_4.2.4-3ubuntu1.debian.tar.gz
Original-Maintainer: Debian ISC DHCP maintainers <pkg-dhcp-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=P6zf
-----END PGP SIGNATURE-----

More information about the Raring-changes mailing list