CVS log for pkgsrc/net/isc-dhcp4/PLIST

Up to [cvs.NetBSD.org] / pkgsrc / net / isc-dhcp4

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

net/isc-dhcp4: update to 4.4.1

The areas of focus for ISC DHCP 4.4 were:

1. Dynamic DNS additions
2. dhclient improvements
3. Support for dynamic shared libraries

Dynamic DNS Improvements:

- We added three new server configuration parameters which influence DDNS
  conflict resolution:

    1. ddns-dual-stack-mixed-mode - alters DNS conflict resolution behavior
    to mitigate issues with non-compliant clients in dual stack environments.

    2. ddns-guard-id-must-match - relaxes the DHCID RR client id matching
    requirement of DNS conflict resolution.

    3. ddns-other-guard-is-dynamic - alters dual-stack-mixed-mode behavior to
    allow unguarded DNS entries to be overwritten in certain cases

- The server now honors update-static-leases parameter for static DHCPv6
  hosts.

dhclient Improvements:

  - We've added three command line parameters to dhclient:

    1. --prefix-len-hint - directs dhclient to use the given length as
    the prefix length hint when requesting prefixes

    2. --decline-wait-time - instructs the client to wait the given number
    of seconds after declining an IPv4 address before issuing a discover

    3. --address-prefix-len - specifies the prefix length passed by dhclient
    into the client script (via the environment variable ip6_prefixlen) with
    each IPv6 address.  We added this parameter because we have changed the
    default value from 64 to 128 in order to be compliant with RFC3315bis
    draft (-09, page 64) and RFC5942, Section 4, point 1.
    **WARNING**: The new default value of 128 may not be backwardly compatible
    with your environment. If you are operating without a router, such as
    between VMs on a host, you may find they cannot see each other with prefix
    length of 128. In such cases, you'll need to either provide routing or use
    the command line parameter to set the value to 64. Alternatively you may
    change the default at compile time by setting DHCLIENT_DEFAULT_PREFIX_LEN
    in includes/site.h.

  - dhclient will now generate a DHCPv6 DECLINE message when the client script
    indicates a DAD failure

Dynamic shared library support:

  Configure script, configure.ac+lt, which supports libtool is now provided
  with the source tar ball.  This script can be used to configure ISC DHCP
  to build with libtool and thus use dynamic shared libraries.

Other Highlights:

 - The server now supports dhcp-cache-threshold for DHCPv6 operations
 - The server now supports DHPv6 address allocation based on EUI-64 DUIDs
 - Experimental support for alternate relay port in the both the server
   and relay for IPv4, IPv6 and 4o6 (see: draft-ietf-dhc-relay-port-10.txt)

For information on how to install, configure and run this software, as
well as how to find documentation and report bugs, please consult the
README file.

ISC DHCP uses standard GNU configure for installation. Please review the
output of "./configure --help" to see what options are available.

The system has only been tested on Linux, FreeBSD, and Solaris, and may not
work on other platforms. Please report any problems and suggested fixes to
<dhcp-users@isc.org>.

ISC DHCP is open source software maintained by Internet Systems
Consortium.  This product includes cryptographic software written
by Eric Young (eay@cryptsoft.com).

                Changes since 4.4.0 (New Features)
- none
		Changes since 4.4.0 (Bug Fixes)

- A delayed-ack value of 0 (the default), now correctly disables the delayed
  feature.  A change in 4.4.0 prohibited lease updates marking leases active
  from be written to the lease file when delayed-ack is 0. This in turn,
  caused servers to lose active lease assignments upon restart.
  [ISC-Bugs #47141]

! Option reference count was not correctly decremented in error path
  when parsing buffer for options. Reported by Felix Wilhelm, Google
  Security Team.
  [ISC-Bugs #47140]
  CVE: CVE-2018-5733

! Corrected an issue where large sized 'X/x' format options were causing
  option handling logic to overwrite memory when expanding them to human
  readable form. Reported by Felix Wilhelm, Google Security Team.
  [ISC-Bugs #47139]
  CVE: CVE-2018-5732

Update isc-dhcp4 to 4.3.6.

This is mainly bug fix release and changes from 4.3.4 are too many to write
here, please refer RELNOTES in detail.

Pullup ticket #3407 - requested by taca
net/isc-dhclient4: security update
net/isc-dhcp4: security update
net/isc-dhcpd4: security update
net/isc-dhcrelay4: security update

Revisions pulled up:
- net/isc-dhclient4/Makefile                                    1.5
- net/isc-dhcp4/Makefile                                        1.7
- net/isc-dhcp4/Makefile.common                                 1.9
- net/isc-dhcp4/PLIST                                           1.4
- net/isc-dhcp4/distinfo                                        1.6
- net/isc-dhcp4/patches/patch-aa                                1.4
- net/isc-dhcp4/patches/patch-ab                                1.4
- net/isc-dhcp4/patches/patch-ac                                1.2
- net/isc-dhcp4/patches/patch-includes_Makefile.in              1.1
- net/isc-dhcpd4/Makefile                                       1.5
- net/isc-dhcrelay4/Makefile                                    1.5

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Apr  8 14:09:24 UTC 2011

   Modified Files:
   	pkgsrc/net/isc-dhclient4: Makefile
   	pkgsrc/net/isc-dhcp4: Makefile Makefile.common PLIST distinfo
   	pkgsrc/net/isc-dhcp4/patches: patch-aa patch-ab patch-ac
   	pkgsrc/net/isc-dhcpd4: Makefile
   	pkgsrc/net/isc-dhcrelay4: Makefile
   Added Files:
   	pkgsrc/net/isc-dhcp4/patches: patch-includes_Makefile.in

   Log Message:
   Update ISC DHCP package to 4.2.1p1 (4.2.1-P1), fixes a few security
   problems.  For more detail, please refer:

   	http://ftp.isc.org/isc/dhcp/dhcp-4.2.1-P1-RELNOTES

Update ISC DHCP package to 4.2.1p1 (4.2.1-P1), fixes a few security
problems.  For more detail, please refer:

	http://ftp.isc.org/isc/dhcp/dhcp-4.2.1-P1-RELNOTES

Remove @dirrm entries from PLISTs

Update to 4.1.0

ISC DHCP 4.1.x will have several new DHCPv6 features that were not in DHCP 4.0.x. These new features include:

* Support for the rapid-commit option on the client side
* Prefix Delegation support
* IA_TA address support
* A basic DHCPv6 relay agent
* basic DHCPv6 Leasequery support

ISC's Dynamic Host Configuration Protocol Distribution provides a
freely redistributable reference implementation of all aspects of
DHCP, through a suite of DHCP tools:

* A DHCP server
* A DHCP client
* A DHCP relay agent

These tools all use a modular API which is designed to be sufficiently
general that it can easily be made to work on POSIX-compliant
operating systems and also non-POSIX systems like Windows NT and
MacOS.

The DHCP server, client and relay agent are provided both as
reference implementations of the protocol and as working, fully-featured
sample implementations. Both the client and the server provide
functionality that, while not strictly required by the protocol,
is very useful in practice. The DHCP server also makes allowances
for non-compliant clients which one might still like to support.

This package contains the Base component.

Initial revision