Ubuntu
dhcpcd package

  1. Bug #2019191
  2. Comment #12

Comment 12 for bug 2019191

Revision history for this message
Tobias Heider (tobhe) wrote : Re: [MIR] dhcpcd5

I found that we can use libmd instead of the bundled compat/ sha implementations and opened a Debian PR here: https://salsa.debian.org/debian/dhcpcd/-/merge_requests/2
libmd is not currently cerified but it is included in main and thus gets the full security team CVE treatment. Besides, when it comes to cryptography we want to have as few different implementations as possible.

With 10.0.1-1 from Debian the configure script also seems to pick up arc4random from libc, which is another huge improvement.