Page MenuHomeVyOS Platform
Create Task
Maniphest T39

DSA-3534-1
Closed, InvalidPublic
Actions

Description

Package : dhcpcd
CVE ID : CVE-2012-6698 CVE-2012-6699 CVE-2012-6700

Guido Vranken discovered several vulnerabilities in dhcpcd, a DHCP
client, which may result in denial of service.

For the oldstable distribution (wheezy), these problems have been fixed
in version 1:3.2.3-11+deb7u1.

We recommend that you upgrade your dhcpcd packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Not applicable to vyos, sorry.

Details

Difficulty level
Easy (less than an hour)

Event Timeline

mickvav created this task.Mar 31 2016, 7:06 PM
syncer triaged this task as Unbreak Now! priority.Mar 31 2016, 7:24 PM
syncer added subscribers: UnicronNL, higebu, dmbaturin.
Boltsie added a subscriber: Boltsie.Apr 1 2016, 12:12 AM
UnicronNL added a comment.Apr 13 2016, 6:05 AM

Do we even use this package?

squeeze-lts also has the patches applied.

https://archive.debian.net/source/squeeze-lts/dhcpcd

mickvav closed this task as Invalid.Apr 13 2016, 6:32 AM
mickvav lowered the priority of this task from Unbreak Now! to Low.
mickvav updated the task description. (Show Details)
syncer edited projects, added Invalid; removed VyOS 1.1.x.Oct 15 2018, 6:22 AM