[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#995189: RFH: isc-dhcp



Hi Philipp,

El 08/03/23 a las 10:45, Philipp Hahn escribió:
> Hello Ansgar,
> 
> Am 07.03.23 um 20:26 schrieb Ansgar:
> > On Tue, 2023-03-07 at 11:55 +0100, Marco d'Itri wrote:
> > > On Mar 07, Philipp Hahn <pmhahn@pmhahn.de> wrote:
> > > > Is it a good idea to keep it alive for another 2+ years in
> > > > Debian-12-Bookworm or should it be removed now?
> > > > https://packages.debian.org/source/bookworm/isc-dhcp
> >>
> > > I do not think that it should be removed at this point, since there is
> > > a need for the complex features that isc-dhcpd can provide and there are
> > > is no obvious replacement: Kea is super complex (and I do not know if it
> > > has all the features) and everything else is too much simple.
> > 
> > Only the client and relay are no longer maintained upstream. The server
> > is still maintained and there is no need to drop it from Debian.
> 
> Are you sure the *server* is still maintained? Sadly my quote from
> <https://www.isc.org/dhcp/> got dropped, so here again:

From README:

                RELEASE STATUS

Version 4.4.3-P1 is a maintenance release of the DHCP client, relay and
server. It is the final release for the client and relay components,
which have reached end-of-life and will no longer be maintained.


> 
> > ISC has announced the end of life for ISC DHCP as of the end of 2022. ISC will continue providing professional support services for existing subscribers, but does not intend to issue any further maintenance releases.

You can still read an equivalent sentence from the dhcp upstream url:

"DHCP is available for free download under the terms of the MPL 2.0
license. The client and relay portions of ISC DHCP are no longer
maintained."

> 
> Previously ISC announced EoL *only for client and relay*, but — at least for
> my reading of the above statement ­— they no longer do and *ended all of
> DHCP*. Or do we (Debian) have access to that "professional support services"
> to get future patches we can apply?
> 
> Do we do our users a service by keeping that dead horse alive for another 2+
> years? While being quite stable it had a steady stream of security issues:
> <https://security-tracker.debian.org/tracker/source-package/isc-dhcp>
> 
> Philipp
> 

 -- Santiago

Attachment: signature.asc
Description: PGP signature


Reply to: