* Florian Weimer: > * Simon Kelley: > >> I plan to keep this very old dhcpcd version around for wheezy, to give >> a one-release overlap with the current, but incompatible, dhcpcd5. > > Uhm, what's the source package name? I assumed that ISC DHCP 3.x had > already been dropped in squeeze.
Forget what I wrote, there's an additional "c" in the name. Funny how the version numbers and vulnerabilities are alike. The old shell quoting (cleanmetas in info.c) appears to be sound, too. (If it were broken, it would lead to code execution independently of the script logic due to the way the hostinfo file is sourced by the script.) I don't think there is any action required for the old code base. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
