On Sun, Jul 19, 2009 at 4:06 PM, Daniel Isenmann wrote:

On Sun, 19 Jul 2009 21:08:21 +0200 Thomas Bächler wrote:

...

Daniel Isenmann schrieb:

...

Please signoff both architectures. The new version fixes CVE-2009-0692 (https://www.isc.org/node/468).

I have cleaned up the PKGBUILD and removes our patches. So please test it carefully and report any issue to the bugtracker or the ML. On works here on my PC, but it needs definitely more testing.

Daniel

Did you remove the patch to dhclient-script? I added a patch in there ages ago to kill all the "down" on the ifconfig lines. If you reverted that patch, mac80211 wireless cards will fail to work with dhclient, as bringing the interface down on a DHCPNAK will render the wireless connection unusable.

Yes I have removed. I have asked before on the dev-public but nobody answered. I will release a new pkgrel with added patch soon.

Any other things about the patches I should know?

It conflicts with dhcp: error: could not prepare transaction error: failed to commit transaction (conflicting files) dhclient: /usr/include/isc-dhcp/boolean.h exists in filesystem dhclient: /usr/include/isc-dhcp/dst.h exists in filesystem dhclient: /usr/include/isc-dhcp/int.h exists in filesystem dhclient: /usr/include/isc-dhcp/lang.h exists in filesystem dhclient: /usr/include/isc-dhcp/list.h exists in filesystem dhclient: /usr/include/isc-dhcp/result.h exists in filesystem dhclient: /usr/include/isc-dhcp/types.h exists in filesystem dhclient: /usr/include/omapip/alloc.h exists in filesystem dhclient: /usr/include/omapip/buffer.h exists in filesystem dhclient: /usr/include/omapip/omapip.h exists in filesystem dhclient: /usr/lib/libomapi.a exists in filesystem Errors occurred, no packages were upgraded.

On Sun, 19 Jul 2009 16:27:20 -0400 Eric Bélanger wrote:

On Sun, Jul 19, 2009 at 4:06 PM, Daniel Isenmann wrote:

...

On Sun, 19 Jul 2009 21:08:21 +0200 Thomas Bächler wrote:

...

Daniel Isenmann schrieb:

...

Please signoff both architectures. The new version fixes CVE-2009-0692 (https://www.isc.org/node/468).

I have cleaned up the PKGBUILD and removes our patches. So please test it carefully and report any issue to the bugtracker or the ML. On works here on my PC, but it needs definitely more testing.

Daniel

Did you remove the patch to dhclient-script? I added a patch in there ages ago to kill all the "down" on the ifconfig lines. If you reverted that patch, mac80211 wireless cards will fail to work with dhclient, as bringing the interface down on a DHCPNAK will render the wireless connection unusable.

Yes I have removed. I have asked before on the dev-public but nobody answered. I will release a new pkgrel with added patch soon.

Any other things about the patches I should know?

It conflicts with dhcp:

error: could not prepare transaction error: failed to commit transaction (conflicting files) dhclient: /usr/include/isc-dhcp/boolean.h exists in filesystem dhclient: /usr/include/isc-dhcp/dst.h exists in filesystem dhclient: /usr/include/isc-dhcp/int.h exists in filesystem dhclient: /usr/include/isc-dhcp/lang.h exists in filesystem dhclient: /usr/include/isc-dhcp/list.h exists in filesystem dhclient: /usr/include/isc-dhcp/result.h exists in filesystem dhclient: /usr/include/isc-dhcp/types.h exists in filesystem dhclient: /usr/include/omapip/alloc.h exists in filesystem dhclient: /usr/include/omapip/buffer.h exists in filesystem dhclient: /usr/include/omapip/omapip.h exists in filesystem dhclient: /usr/lib/libomapi.a exists in filesystem Errors occurred, no packages were upgraded.

Fixed in pkgrel 2. Please test and signoff. Daniel

On Sun, 19 Jul 2009 22:38:00 +0200 Thomas Bächler wrote:

Daniel Isenmann schrieb:

...

Yes I have removed. I have asked before on the dev-public but nobody answered. I will release a new pkgrel with added patch soon.

Any other things about the patches I should know?

I must have missed that. Isn't the 3.X version out of date anyway? Hasn't there been a dhcp 4 release for years?

Yes, there is a dhcp 4 release, but it doesn't work here. The 3.1.2p1 release is also marked as a productive stable release, so it's ok to use this release for fixing the security issue. I will have a look at the dhcp 4 release later.

On Sun, 19 Jul 2009 23:10:06 +0200 Thomas Bächler wrote:

Daniel Isenmann schrieb:

...

...

...

Yes I have removed. I have asked before on the dev-public but nobody answered. I will release a new pkgrel with added patch soon.

Any other things about the patches I should know?

I must have missed that. Isn't the 3.X version out of date anyway? Hasn't there been a dhcp 4 release for years?

Yes, there is a dhcp 4 release, but it doesn't work here. The 3.1.2p1 release is also marked as a productive stable release, so it's ok to use this release for fixing the security issue.

I will have a look at the dhcp 4 release later.

Great. Tell me when you get the package with the fixed dhclient-script up, as I'd like to use a secure dhclient with autowifi (but as I mentioned, the fact that it brings the interface down on very weird occasions breaks mac80211).

Fixed in pkgrel 2. Please test and signoff. Daniel