[pkg-dhcp-devel] Bug#762923: dhclient-script uses bash, allowing remote bash exploits

Yves-Alexis Perez corsac at debian.org
Fri Sep 26 16:33:23 UTC 2014


On ven., 2014-09-26 at 18:06 +0200, Goswin von Brederlow wrote:
> Feel free to patch dhclient to sanitize the stgrings before passing
> them to the dhclient-script.

In case you missed it, I'm not the dhcp maintainer, it's just my pov as
security team member (remember you tagged the bug “security”).
-- 
Yves-Alexis Perez - Debian Security


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-dhcp-devel/attachments/20140926/49fca721/attachment.sig>


More information about the pkg-dhcp-devel mailing list