Pre-announcement of an ISC DHCP security issue scheduled for disclosure 26 May 2021

Michael McNally mcnally at
Fri May 21 19:44:19 UTC 2021

Hello, dhcp-announce list subscribers,

It has been a while since our last post to this list.

Since the last time we posted news of a new release of ISC DHCP,
Internet Systems Consortium has adopted a practice of pre-announcing
expected security disclosures in order to give operators who use our
products a little advance warning and planning time.

For that reason, I am writing you today to let you know that a vulnerability
in ISC DHCP will be publicly announced next week on Wednesday, 26 May 2021.

Further details about that vulnerability will be publicly disclosed next
week, and new releases of ISC DHCP that correct the vulnerability will be
made available at that time.  It is our hope that this pre-announcement will
aid DHCP operators in preparing for that disclosure when it occurs.

Yours sincerely,

Michael McNally
(writing for ISC Security Officer)

More information about the dhcp-announce mailing list