dhcpcd-discuss

dhcpcd-6.6.3 released

Roy Marples

Wed Nov 26 13:11:27 2014

Hi List

dhcpcd-6.6.3 has been released with the following changes:
  *  Log which IP address we are ARPing.
  *  Only free other ARP states if not assinging an IPv4LL address.
  *  Reload global config when running per interface commands.
     This matches the signal behaviour.
  *  If we don't have a hardware address, fallback to creating a default
     IAID from the interface name and index as we used to.
  *  Loopback interfaces have routes scoped to the host only.
  *  If we don't have a hwlen and no clientid has been set, force a DUID
     based ClientID.
* Disable IPv6RS if a loopback, pointopoint or not a multicast interface. * If allowinterfaces is not specified, allow all configured interfaces
     to work, such as loopback and ppp.
  *  When not daemonising, don't exit on timeout.
  *  Zero length UDP packets are not an error condition on the socket.
     Thanks to Michał Kępień.
  *  If the IP address is still on the interface when reading a lease,
fake add the address and routes so the lease can be cleaned up if needed.

From dhcpcd-6.3.3 to 6.6.2, dhcpcd was vulnerable to a zero length UDP packet which would cause the socket to close resulting in a DoS. For IPv4 sockets, triggering a carrier reset would be enough to re-open the socket.
For IPv6 sockets, dhcpcd would have to be restarted.
All users dhcpcd-6.3.3 and upwards are encouraged to upgrade or apply this patch:
http://roy.marples.name/projects/dhcpcd/ci/521d8b4896e0b92f9d6eebaceb18fc129c1732f7?sbs=0

Thanks

Roy

Archive administrator: postmaster@marples.name