Hi,
I uploaded an NMU of your package.
Please see this as help to get the package into a releaseable condition for
etch.
Please find the used diff below.
Cheers,
Andi
diff -Nur ../dhcp-2.0pl5~/debian/changelog ../dhcp-2.0pl5/debian/changelog
--- ../dhcp-2.0pl5~/debian/changelog 2006-12-04 15:14:36.000000000 +0000
+++ ../dhcp-2.0pl5/debian/changelog 2006-12-04 15:40:22.000000000 +0000
@@ -1,3 +1,13 @@
+dhcp (2.0pl5-19.5) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Add 117_fix_CVE-2006-3122 to fix remote DOS, CVE-2006-3122.
+ Thanks to Andrew Steets for detecting and the patch. Closes: #380273
+ * Update 202_script_resolvconf-support to not break resolv.conf even if
+ domain_name is empty/undefined. Closes: #322860
+
+ -- Andreas Barth <[EMAIL PROTECTED]> Mon, 4 Dec 2006 15:15:00 +0000
+
dhcp (2.0pl5-19.4) unstable; urgency=low
* Non-maintainer upload.
diff -Nur ../dhcp-2.0pl5~/debian/patches/117_fix_CVE-2006-3122.patch
../dhcp-2.0pl5/debian/patches/117_fix_CVE-2006-3122.patch
--- ../dhcp-2.0pl5~/debian/patches/117_fix_CVE-2006-3122.patch 1970-01-01
00:00:00.000000000 +0000
+++ ../dhcp-2.0pl5/debian/patches/117_fix_CVE-2006-3122.patch 2006-12-04
15:34:17.000000000 +0000
@@ -0,0 +1,12 @@
+diff -ur dhcp-2.0pl5~/common/memory.c dhcp-2.0pl5/common/memory.c
+--- dhcp-2.0pl5~/common/memory.c 1999-05-27 17:47:43.000000000 +0000
++++ dhcp-2.0pl5/common/memory.c 2006-12-04 15:17:05.000000000 +0000
+@@ -528,7 +528,7 @@
+ /* Copy the data files, but not the linkages. */
+ comp -> starts = lease -> starts;
+ if (lease -> uid) {
+- if (lease -> uid_len < sizeof (lease -> uid_buf)) {
++ if (lease -> uid_len <= sizeof (lease -> uid_buf)) {
+ memcpy (comp -> uid_buf,
+ lease -> uid, lease -> uid_len);
+ comp -> uid = &comp -> uid_buf [0];
diff -Nur ../dhcp-2.0pl5~/debian/patches/202_script_resolvconf-support.patch
../dhcp-2.0pl5/debian/patches/202_script_resolvconf-support.patch
--- ../dhcp-2.0pl5~/debian/patches/202_script_resolvconf-support.patch
2006-12-04 15:14:36.000000000 +0000
+++ ../dhcp-2.0pl5/debian/patches/202_script_resolvconf-support.patch
2006-12-04 15:40:03.000000000 +0000
@@ -8,7 +8,7 @@
# Notes:
-@@ -32,12 +33,32 @@
+@@ -32,12 +33,35 @@
exit $exit_status
}
@@ -34,7 +34,10 @@
+ }
+else
+ make_resolv_conf() {
-+ echo search $new_domain_name >/etc/resolv.conf
++ : >/etc/resolv.conf
++ if [ "$new_domain_name" ]; then
++ echo search $new_domain_name >>/etc/resolv.conf
++ fi
+ for nameserver in $new_domain_name_servers; do
+ echo nameserver $nameserver >>/etc/resolv.conf
+ done
--
http://home.arcor.de/andreas-barth/
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
