<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">ISC DHCP 4.3.4 is now available for download.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">This is the release of ISC DHCP 4.3.4, a maintenance</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">release which contains a number of bug fixes and two</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">fixes for previously released security issues.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">Field testing is an important part of our quality process.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">Please report bugs to <a href="mailto:dhcp-bugs@isc.org" class="">dhcp-bugs@isc.org</a>.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">A list of the changes in this release has been appended to the end</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">of this message. For a complete list of changes from any previous</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">release, please consult the RELNOTES file within the source distribution.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">They can also be found at:</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="https://kb.isc.org/article/AA-01364/0/DHCP-4.3.4-Release-Notes.html" class="">https://kb.isc.org/article/AA-01364/0/DHCP-4.3.4-Release-Notes.html</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">Knowledge base articles about various features can be found starting from:</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="https://kb.isc.org/category/201/0/10/Software-Products/DHCP/Features/" class="">https://kb.isc.org/category/201/0/10/Software-Products/DHCP/Features/</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">Webinars can be found here:</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="http://www.youtube.com/user/ISCdotorg" class="">http://www.youtube.com/user/ISCdotorg</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">This release, and its OpenPGP-signatures are available now from:</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="https://www.isc.org/downloads/DHCP/" class="">https://www.isc.org/downloads/DHCP/</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="ftp://ftp.isc.org/isc/dhcp/4.3.4/dhcp-4.3.4.tar.gz" class="">ftp://ftp.isc.org/isc/dhcp/4.3.4/dhcp-4.3.4.tar.gz</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="ftp://ftp.isc.org/isc/dhcp/4.3.4/dhcp-4.3.4.tar.gz.sha512.asc" class="">ftp://ftp.isc.org/isc/dhcp/4.3.4/dhcp-4.3.4.tar.gz.sha512.asc</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="ftp://ftp.isc.org/isc/dhcp/4.3.4/dhcp-4.3.4.tar.gz.sha256.asc" class="">ftp://ftp.isc.org/isc/dhcp/4.3.4/dhcp-4.3.4.tar.gz.sha256.asc</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="ftp://ftp.isc.org/isc/dhcp/4.3.4/dhcp-4.3.4.tar.gz.sha1.asc" class="">ftp://ftp.isc.org/isc/dhcp/4.3.4/dhcp-4.3.4.tar.gz.sha1.asc</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">ISC's Release Signing Key can be obtained at:</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> <a href="http://www.isc.org/about/openpgp/" class="">http://www.isc.org/about/openpgp/</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">The following are changes that may be more interesting and require</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">a bit more explanation.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">We have changed the default set-up for choosing a program name for</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">use in logging. Previously we used a hardcoded name for the client,</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">relay and server. We have changed to using the base name of the program.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">This is intended to help differentiate syslog entries when using both v4</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">& v6 clients or servers. We don't expect anybody to need the old style</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">but if you do it is available via modifying includes/site.h </div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">and defining OLD_LOG_NAME. [ISC-Bugs #38692]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">We have added a new parameter, authoring-byte-order, to the lease file.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">This value is used to allow a lease file written in one byte order</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">to be read on a machine with a different byte order. If you have</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">a program to process a lease file you may need to update it to</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">handle this string. [ISC-Bugs #38396]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">We have modified the configuration and Makefiles in order to make</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">it easier to cross compile ISC DHCP with Bind. See the release</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">note entries for [ISC-Bugs #39210], [ISC-Bugs #38836], [ISC-Bugs #41536]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">and [ISC-Bugs #33835] for more information.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">The IETF determined that there were problems with the processing</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">required for IA_NAs (RFC3315) and IA_PDs (RFC3633). The issues</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">are described in RFC7550. As part of updating the client code to</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">the new RFC we also re-arranged how it chooses between different</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">servers by changing the weights used when scoring an advertise.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">The new weighting will prefer more bindings (IAs) over more addresses</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">within a binding. As most users will get a single address in</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">as single binding and only get an advertise from a single server</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">there won't be any difference. If you do need the old weighting</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">for some reason you can edit includes/site.h and define</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">USE_ORIGINAL_CLIENT_LEASE_WEIGHTS. [ISC-Bugs #40190]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">We have modified the error reporting in the client, relay and server</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">to better indicate which command line option caused an error. As</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">we don't expect this to be an issue we have made it the default.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">If you you need the old error messages you can edit includes/site.h</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">and undefine PRINT_SPECIFIC_CL_ERRORS. [ISC-Bugs #40321]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">We have added support for DHCPv4 over DHCPv6 (RFC 7341). This is a</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">transition strategy that allows a set of co-operating programs to</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">encapsulate a DHCPv4 request into a DHCPv6 request and transmit</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">it over an IPv6 network, thus allowing a "v4 island" to get DHCP</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">service. It is still somewhat experimental and by default most of</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">the changes are not included. In order to enable it you will need</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">to add the option "--enable-dhcpv4o6" to your configuration command</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">before compiling the code. You would also need to use the </div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">"-4o6 <port>" argument on the command line. More information can be</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">found in the release at doc/DHCPv4-over-DHCPv6 or on our web site at</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""><a href="https://kb.isc.org/article/AA-01359/0/DHCPv4-Over-DHCPv6-RFC7341.html" class="">https://kb.isc.org/article/AA-01359/0/DHCPv4-Over-DHCPv6-RFC7341.html</a></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">[ISC-Bugs #35711]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">We have added a new parameter, "lease-id-format" for both dhcpd</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">and dhclient. This parameter controls the format in which some</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">values are written to lease files. This is to allow values such</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">as DUIDs to be written in hex which is more natural than octal.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">In order to avoid disturbing current users the default is to output</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">the information as we have done before. [ISC-Bugs #26378]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">As mentioned in the recent security announcement we found an issue</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">with our handling of excessive numbers of connections. While we</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">believe the best idea is for people to properly secure their DHCP</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">severs (disable OMAPI if not in use, use firewalls to limit access</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">to OMAPI and failover ports and use process limits to restrict the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">resources the servers can use) we have added code to limit the number</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">of connections a server will allow. We have chosen 200 as the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">default number which should be large enough for most configurations.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">You may adjust this value by editing includes/site.h and changing</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">the value of MAX_FD_VALUE. A value of 0 means unlimited. We will</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">be evaluating the connection code in more detail in the future and</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">may change how this works. [ISC-Bugs #41845]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">The following is the list of all changes for this release.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Changes since 4.3.4b1</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- None</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Changes since 4.3.3</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Corrected a static analyzer warning in common/execute.c</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40374]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- ISC DHCP now follows the common convention to use the base name a</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> program is invoked with (aka argv[0], vs. a builtin name) for</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> logs. This should help differentiate syslog entries for DHCPv4 and</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> DHCPv6 servers. You can define OLD_LOG_NAME in includes/site.h to</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> keep the previous behavior.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #38692]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- The Linux packet filter code now correctly treats only the least significant</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> 12 bits in an inbound packet's TCI value as the VLAN id (per IEEE 802.1Q).</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Prior to this it was using the entire 16 bit value as the VLAN id and</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> incorrectly discarding packets. Thanks to Jiri Popelka at Red Hat for</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> reporting this issue and supplying its patch.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40591]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Fixed several static analysis issues such as potential null</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> references, unchecked strdup returns. Thanks to Bill Parker (wp02855 at</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> gmail dot com) who identified these issues and supplied patches to</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> address them.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40754]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40823]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Corrected compilation errors that prohibited building the server</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> and its ATF unit tests when failover is disabled.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40372]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Added the lease address to the end of the debug level log message</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> emitted when an existing lease is renewed within the dhcp-cache-threshold.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Thanks to Nathan Neulinger at Missouri S&T for suggesting the change.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40598]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Added dhcpv6 and delayed-ack to settings listed in the "Features:"</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> section of the configure script output. Additionally, all of the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> features reported on will now always show either a "yes" or "no"</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> value. Prior to this features left to their default setting would</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> not show a value.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40381]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Added a parameter, authoring-byte-order, to the lease file. This value</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> is automatically added to the top of new lease files by the server and</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> indicates the internal byte order (big endian or little endian) of the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> server. This permits lease files generated on a server with one form of</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> byte order to be used on a server with the opposite form. Our thanks to</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Timothe Litt for calling this to our attention and for the suggestions</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> he provided.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #38396]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Fixed a small memory leak in the DHCPv6 version of the client code.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> This is unlikely to cause significant issues in actual use.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40990]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Corrected a few minor memory leaks in omapi's dereferencing of</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> host objects. Thanks to Jiri Popelka at Red Hat for reporting</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> the issue and supplying the patches.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #33990]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41325]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Cleaned up some of the Make infrastructure to make --with-libbind</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> work better. Though it still only works with an absolute path.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #39210]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Made the embedded bind libraries able to be cross compiled</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> (please refer to the bind9 documentation to learn how to cross</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> compile DHCP and its bind library dependency).</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #38836]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Update the client code to better support getting IA_NAs and IA_PDs</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> in the same packet, see RFC7550 for some discussion.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40190]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">! Update the bounds checking when receiving a packet.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Thanks to Sebastian Poehn from Sophos for the bug report and a suggested</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> patch.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41267]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> CVE: CVE-2015-8605</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- When handling an incorrect command line for dhcpd, dhclient or dhcrelay</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> print out a specific error message about the first error in addition</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> to the usage string. This may be disabled by editing includes/site.h.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40321]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41454]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- The configure script will now exit with an error message if it cannot find</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> a GNU-style make tool (needed when building BIND libraries) or pkg-config</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> (needed to locate ATF used for building unit tests). Prior to this the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> script would exit indicating success causing subsequent attempts to build</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> the software to fail.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40371]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Properly terminate strings before passing them to regex and fix</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> a boundary error when creating certain new data strings.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Thanks to Andrey Jr. Melnikov for the bug report.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41217]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Option expressions, such as prepend and append, are now supported when</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> running dhclient for IPv6. Prior to this such statements in the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> client configuration file would be parsed but have no affect. Thanks</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> to Jiri Popelka at Red Hat for reporting the issue.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #39952]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- A failover primary server will now accept a binding status update from the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> secondary which transitions a lease from ACTIVE to ABANDONED. This accounts</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> for instances in which a client declines a lease and only the secondary</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> server receives it. Prior to this the primary server would reject such an</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> update as an "invalid state transition".</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC_BUGS #25189]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Properly allocate memory for a bpf filter.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Thanks to Bill Parker (wp02855 at gmail dot com) who identified this issue.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41485]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Updated contrib/dhcp-lease-list.pl to handle garbage in the oui file better</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> and to print out the hostnames a bit better.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Thanks to Antoine Beaupré from Debian for the suggested patch.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41288]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- The DHCPv6 server now handles long valid and preferred lease times better.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Values that would cause the internal end time of the lease to wrap are</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> modified to work as infinite.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40773]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Updated support for cross compiling by allowing the library archiver</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> to be set at configure time via the environment variable 'AR'.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41536]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- The server will now match DHCPv6 relayed clients to host declarations</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> which include the "hardware" statement, if the relay connected to the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> client supplies the client's hardware address via client-linklayer-address</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> option as per RFC 6939.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40334]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Allow a filename to be specified instead of /dev/random during</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> configuration. This is passed to the BIND configuration to allow</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> for cross compilation.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #33835]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Add more option definitions.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40562]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Correct outputting of long lines in the lease file when writing</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> a lease that includes long strings in an execute statement.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40994]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- The server will now correctly treat a lease as reserved when the client</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> requests an infinite lease time (i.e. OxFFFFFFFF) and "infinite-is-reserved"</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> is enabled. Prior to this the server would halt. In addition, corrections</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> were made to the server to allow a lease's flags field to be set via omapi.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Prior to this, the server, depending on the host architecture, would</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> incorrectly parse the new flags value from the omapi message.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #31179]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- ISC DHCP can now be configured and built from a directory other than</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> the top level source directory. Note that "make distcheck" uses this</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> feature.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #39262]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Add support for RFC 3527 to dhcrelay. A new, dhcrelay command line argument,</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> "-U <interface>" enables the addition of a RFC 3527 compliant link selection</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> suboption to the agent option added for clients directly connected to the</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> relay.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #34875]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41708]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Add a new global DHCPv6 option, dhcpv6-set-tee-times, which when enabled</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> instructs the server to calculate T1 and T2 as recommended in RFC 3315,</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Section 22.4.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #25687]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Corrected minor Coverity issues.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #35144]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Add support for RFC 7341 DHCPv4 over DHCPv6 with a new configuration</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> option "--enable-dhcpv4o6". Note this feature requires DHCPv6 support</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> and is not compatible with delayed-ack. Both client and server use 2</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> processes which communicate over UDP on a pair of sockets. The new</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> "-4o6 <port>" command line argument enables DHCPv4 over DHCPv6 support</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> and specifies the consecutive ports to use for inter-process communication.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Please look at doc/DHCPv4-over-DHCPv6 for more details.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #35711]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Correct interface name formation when using DLPI under Solaris 11. As of</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Solaris 11, ethernet device files are located in "/dev/net". The configure</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> script has been modified to detect this situation and adjust the directory</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> used accordingly. Thanks to Jarkko Torppa for reporting this issue and</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> submitting a patch </div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #37954]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #40752]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Add a dereference call when handling an error condition while</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> decoding a packet.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41774]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">- Add a new parameter, lease-id-format, to both dhcpd and dhclient. The</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> parameter controls the format in which certain values are written to lease</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> files. Formats supported are octal - quoted string containing octal</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> escapes, and hex - unquoted, colon separated hex digits. Thanks to</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> Jay Ford, University of Iowa for bringing the issue to our attention.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #26378]</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">! Add an option in site.h to limit the number of failover and control</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> connections the server will accept. By default this is 200.</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""> [ISC-Bugs #41845]</div><div class=""><br class=""></div></body></html>