Activity log for bug #931036

Date Who What changed Old value New value Message
2012-02-12 16:40:04 Zubin Mithra bug added bug
2012-02-12 16:40:27 Zubin Mithra cve linked 2011-0996
2012-02-12 16:42:35 Zubin Mithra description dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message. CVE-2011-0996. This is how opensuse patches it => https://build.opensuse.org/package/rdiff?linkrev=base&package=dhcpcd&project=network:dhcp&rev=31 Requires patch/debdiff for Ubuntu Maverick. dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message. CVE-2011-0996. This is how opensuse patches it(check out dhcpcd-3.2.3-option-checks.diff) in the following link :- https://build.opensuse.org/package/rdiff?linkrev=base&package=dhcpcd&project=network:dhcp&rev=31 Requires patch/debdiff for Ubuntu Maverick.
2012-02-13 08:33:20 Zubin Mithra dhcpcd (Ubuntu): status New Confirmed
2012-02-13 12:26:26 Zubin Mithra attachment added dhcpcd_3.2.3-7ubuntu1.debdiff https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/931036/+attachment/2735728/+files/dhcpcd_3.2.3-7ubuntu1.debdiff
2012-02-13 12:26:58 Zubin Mithra bug added subscriber Ubuntu Security Sponsors Team
2012-02-13 12:27:17 Zubin Mithra dhcpcd (Ubuntu): status Confirmed New
2012-02-13 18:22:50 Marc Deslauriers nominated for series Ubuntu Lucid
2012-02-13 18:22:50 Marc Deslauriers bug task added dhcpcd (Ubuntu Lucid)
2012-02-13 18:22:50 Marc Deslauriers nominated for series Ubuntu Maverick
2012-02-13 18:22:50 Marc Deslauriers bug task added dhcpcd (Ubuntu Maverick)
2012-02-13 18:23:03 Marc Deslauriers dhcpcd (Ubuntu): status New Fix Released
2012-02-13 18:23:07 Marc Deslauriers dhcpcd (Ubuntu Lucid): status New Confirmed
2012-02-13 18:23:10 Marc Deslauriers dhcpcd (Ubuntu Maverick): status New Confirmed
2012-02-13 18:23:21 Marc Deslauriers bug task added dhcpcd5 (Ubuntu)
2012-02-13 18:23:39 Marc Deslauriers nominated for series Ubuntu Natty
2012-02-13 18:23:39 Marc Deslauriers bug task added dhcpcd (Ubuntu Natty)
2012-02-13 18:23:39 Marc Deslauriers bug task added dhcpcd5 (Ubuntu Natty)
2012-02-13 18:23:39 Marc Deslauriers nominated for series Ubuntu Oneiric
2012-02-13 18:23:39 Marc Deslauriers bug task added dhcpcd (Ubuntu Oneiric)
2012-02-13 18:23:39 Marc Deslauriers bug task added dhcpcd5 (Ubuntu Oneiric)
2012-02-13 18:23:39 Marc Deslauriers nominated for series Ubuntu Precise
2012-02-13 18:23:39 Marc Deslauriers bug task added dhcpcd (Ubuntu Precise)
2012-02-13 18:23:39 Marc Deslauriers bug task added dhcpcd5 (Ubuntu Precise)
2012-02-13 18:23:55 Marc Deslauriers dhcpcd5 (Ubuntu Oneiric): status New Fix Released
2012-02-13 18:24:05 Marc Deslauriers dhcpcd5 (Ubuntu Precise): status New Fix Released
2012-02-13 18:24:29 Marc Deslauriers dhcpcd (Ubuntu Natty): status New Confirmed
2012-02-13 18:24:58 Marc Deslauriers dhcpcd (Ubuntu Precise): status Fix Released Confirmed
2012-02-13 18:25:24 Marc Deslauriers dhcpcd (Ubuntu Oneiric): status New Confirmed
2012-02-13 18:25:53 Marc Deslauriers dhcpcd5 (Ubuntu Lucid): status New Invalid
2012-02-13 18:26:13 Marc Deslauriers dhcpcd5 (Ubuntu Maverick): status New Invalid
2012-02-13 18:26:30 Marc Deslauriers dhcpcd5 (Ubuntu Natty): status New Confirmed
2012-02-13 19:03:03 Marc Deslauriers dhcpcd (Ubuntu Maverick): status Confirmed Incomplete
2012-02-13 19:03:40 Marc Deslauriers tags patch-needswork
2012-02-13 19:04:01 Marc Deslauriers dhcpcd (Ubuntu Maverick): assignee Zubin Mithra (zubin-mithra)
2012-02-13 19:04:32 Marc Deslauriers removed subscriber Ubuntu Security Sponsors Team
2012-02-14 08:19:17 Zubin Mithra attachment added dhcpcd_3.2.3-7ubuntu1.debdiff https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/931036/+attachment/2737711/+files/dhcpcd_3.2.3-7ubuntu1.debdiff
2012-02-14 08:21:35 Zubin Mithra bug added subscriber Ubuntu Security Sponsors Team
2012-02-15 05:06:06 Zubin Mithra attachment added dhcpcd_3.2.3-7ubuntu1.debdiff https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/931036/+attachment/2740798/+files/dhcpcd_3.2.3-7ubuntu1.debdiff
2012-02-15 05:07:55 Zubin Mithra attachment added ktsuss_1.4-1ubuntu1.debdiff https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/931036/+attachment/2740805/+files/ktsuss_1.4-1ubuntu1.debdiff
2012-02-15 05:17:25 Zubin Mithra attachment removed ktsuss_1.4-1ubuntu1.debdiff https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/931036/+attachment/2740805/+files/ktsuss_1.4-1ubuntu1.debdiff
2012-02-15 14:23:56 Marc Deslauriers dhcpcd (Ubuntu Precise): status Confirmed Fix Released
2012-02-15 14:33:57 Marc Deslauriers bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659983
2012-02-15 14:33:57 Marc Deslauriers bug task added dhcpcd (Debian)
2012-02-15 14:34:59 Marc Deslauriers dhcpcd (Ubuntu Lucid): status Confirmed Fix Committed
2012-02-15 14:35:13 Marc Deslauriers dhcpcd (Ubuntu Maverick): status Incomplete Fix Committed
2012-02-15 14:35:13 Marc Deslauriers dhcpcd (Ubuntu Maverick): assignee Zubin Mithra (zubin-mithra)
2012-02-15 14:35:25 Marc Deslauriers dhcpcd (Ubuntu Natty): status Confirmed Fix Committed
2012-02-15 14:35:39 Marc Deslauriers dhcpcd (Ubuntu Oneiric): status Confirmed Fix Committed
2012-02-15 14:39:20 Launchpad Janitor branch linked lp:ubuntu/dhcpcd
2012-02-15 15:22:34 Bug Watch Updater dhcpcd (Debian): status Unknown New
2012-02-15 16:04:24 Launchpad Janitor dhcpcd (Ubuntu Oneiric): status Fix Committed Fix Released
2012-02-15 16:04:24 Launchpad Janitor dhcpcd (Ubuntu Natty): status Fix Committed Fix Released
2012-02-15 16:04:24 Launchpad Janitor dhcpcd (Ubuntu Maverick): status Fix Committed Fix Released
2012-02-15 16:04:24 Launchpad Janitor dhcpcd (Ubuntu Lucid): status Fix Committed Fix Released
2012-02-15 16:20:38 Launchpad Janitor branch linked lp:ubuntu/lucid-security/dhcpcd
2012-02-15 16:20:41 Launchpad Janitor branch linked lp:ubuntu/natty-security/dhcpcd
2012-02-15 16:20:49 Launchpad Janitor branch linked lp:ubuntu/maverick-security/dhcpcd
2012-02-15 16:21:22 Launchpad Janitor branch linked lp:ubuntu/oneiric-security/dhcpcd
2012-02-17 03:38:08 Marc Deslauriers removed subscriber Ubuntu Security Sponsors Team
2012-10-04 14:39:25 Bug Watch Updater dhcpcd (Debian): status New Fix Released
2014-12-03 09:03:31 Rolf Leggewie dhcpcd5 (Ubuntu Natty): status Confirmed Won't Fix