lp://staging/ubuntu/natty-security/isc-dhcp

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

25. By Marc Deslauriers on 2012-07-25

* SECURITY UPDATE: denial of service via malformed client identifiers
  - debian/patches/CVE-2012-3571.dpatch: validate packets in
    common/options.{c,h}.
  - CVE-2012-3571.dpatch
* SECURITY UPDATE: denial of service via memory leaks
  - debian/patches/CVE-2012-3954.dpatch: properly manage memory in
    common/options.c and server/dhcpv6.c.
  - CVE-2012-3954

24. By Marc Deslauriers on 2011-12-14

* SECURITY UPDATE: denial of service via regular expressions
  - debian/patches/CVE-2011-4539.dpatch: add check for null pointer in
    common/tree.c.
  - CVE-2011-4539
* This update does _not_ contain the changes from 4.1.1-P1-15ubuntu9.2
  that is currently in -proposed.

23. By Marc Deslauriers on 2011-08-11

* SECURITY UPDATE: denial of service via specially crafted packets
  - debian/patches/CVE-2011-2748-2749.dpatch: tighten up restriction in
    common/discover.c, properly calculate length in common/options.c,
    validate packet->options in server/dhcp.c.
  - CVE-2011-2748
  - CVE-2011-2749

22. By Marc Deslauriers on 2011-04-19

* SECURITY UPDATE: arbitrary code execution via crafted hostname
  - Patch for CVE-2011-0997 was getting reverted during the build
    because of special quilt handling in debian/rules for the ldap
    patches.
  - debian/patches/00list: move CVE-2011-0997 patch before the ldap
    patches, and add comment.
  - CVE-2011-0997

21. By Jamie Strandboge on 2011-04-11

apparmor-profile.dhclient: update to also allow leases in /var/lib/dhcp3
(LP: #755724)

20. By Marc Deslauriers on 2011-04-08

* SECURITY UPDATE: arbitrary code execution via crafted hostname
  - debian/patches/CVE-2011-0997.dpatch: filter strings in
    client/dhclient.c, common/options.c.
  - CVE-2011-0997

19. By Dave Walker on 2011-03-16

debian/patches/multi-ip-addr-per-if.dpatch: Resolve issue of interfaces
not being able to have more than one IP address assigned. Patch courtesy
of Daniel Nurmi, Eucalyptus Systems. (LP: #717166)

18. By Kees Cook on 2011-02-24

debian/isc-dhcp-client.links: fix symlink ordering for new ISC package
(LP: #724556).

17. By Kees Cook on 2011-02-24

debian/rules: add call to dh_link to get package symlinks back
(Closes: #614992).

16. By Dustin Kirkland  on 2011-02-17

releasing version 4.1.1-P1-15ubuntu3