Your message dated Wed, 05 Aug 2026 17:31:09 +0000 with message-id <[email protected]> and subject line Bug#1143544: Removed package(s) from unstable has caused the Debian Bug report #1024208, regarding rfc3442-classless-routes exit hook doesn't handle TIMEOUT to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 1024208: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1024208 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: isc-dhcp-client Version: 4.4.1-2.3+deb11u1 Severity: important Hello, summary: a temporary or permanent lack of DHCP when bringing a network interface up may result in a DoS via a partially-applied network configuration to the interface. In detail: - When a DHCP lease relies upon the DHCP Classless Static Route Option 121 (RFC 3442), the dhclient-script sets up no routes at all by itself, relying on the exit hook called rfc3442-classless-routes for the functionality. - The hook correctly handles the invocations of dhclient-script when the reason is set to either BOUND or REBOOT, properly applying the static routes specified via the DHCP option 121. - However, when no DHCP servers respond, dhclient may also try a previously recorded lease by calling dhclient-script with the reason set to TIMEOUT, which the hook doesn't handle. - When such a lease uses the DHCP option 121, the end result is a partially-applied and likely broken interface configuration: no static routes applied, including the default route, if any. - That appears worse than if the configuration wasn't applied at all if, e.g., DHCP is only temporarily down. With no lease applied at all, dhclient would keep retrying and pick up a lease as soon as it can. The partially-applied lease may persist for much longer, prolonging the likely DoS situation. The fix is trivial: --- /etc/dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes.distrib 2018-03-03 16:27:05.000000000 +0000 +++ /etc/dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes 2022-11-16 01:41:45.000000000 +0000 @@ -10,7 +10,8 @@ if [ "$RUN" = "yes" ]; then if [ -n "$new_rfc3442_classless_static_routes" ]; then - if [ "$reason" = "BOUND" ] || [ "$reason" = "REBOOT" ]; then + if [ "$reason" = "BOUND" ] || [ "$reason" = "REBOOT" ] || + [ "$reason" = "TIMEOUT" ]; then set -- $new_rfc3442_classless_static_routes Hope this helps, -- /Dennis Vshivkov
--- End Message ---
--- Begin Message ---Version: 4.4.3-P1-8+rm Dear submitter, as the package isc-dhcp has just been removed from the Debian archive unstable we hereby close the associated bug reports. We are sorry that we couldn't deal with your issue properly. For details on the removal, please see https://bugs.debian.org/1143544 The version of this package that was in Debian prior to this removal can still be found using https://snapshot.debian.org/. Please note that the changes have been done on the master archive and will not propagate to any mirrors until the next dinstall run at the earliest. This message was generated automatically; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]. Debian distribution maintenance software pp. Thorsten Alteholz (the ftpmaster behind the curtain)
--- End Message ---
