Commit Graph

95 Commits

Author SHA1 Message Date
21401f4846 [notify] dhcpcd: update to 6.4.7
includes the following addition:

   *  Sanitise the following characters using svis(3) with VIS_CTYLE and
      VIS_OCTAL:
          | ^ & ; < > ( ) $ ` \ " ' <tab> <newline>
      This allows a non buggy unvis(1) to decode it 100% and stays compatible
      with how dhcpcd used to handle encoding on most platforms.
      For systems that supply svis(3) there is a code reduction, for systems
      that do not, a slight code increase. This change mitigates systems
      affected by bash CVE-2014-6271 and CVE-2014-7169.

Obviously the last one is quite important as DHCP/RA is one of the attack
vectors the "shellshock" bug.
As dhcpcd cannot know if /bin/sh is vulnerable (and as of now, bash is *still*
vulnerable), it sanitises all the important shell characters as noted in IEEE
Std 1003.1, 2004 Edition, 2. Shell Command Language, 2.2 Quoting with the
exception of the space character.

Full change log:
http://roy.marples.name/archives/dhcpcd-discuss/2014/0811.html
2014-09-27 11:48:05 +02:00
a05dd53940 dhcpcd: update to 6.4.5 2014-09-19 10:55:45 +02:00
5db0adfc51 dhcpcd: update to 6.4.3 2014-08-10 14:29:20 +02:00
Fredrik Rinnestam
b1c63c0f9c [notify] dhcpcd: updated to 6.4.2.
Resolves a DoS vulnerability. Details:
http://www.openwall.com/lists/oss-security/2014/07/30/5
2014-07-30 21:50:54 +02:00
b1547d7879 Merge branch '3.0' into 3.1
Conflicts:
	traceroute/.md5sum
	traceroute/Pkgfile
2014-06-15 18:42:00 +02:00
f6fc54c305 dhcpcd: update to 6.4.0 2014-06-15 18:39:30 +02:00
ea37c6eda9 Merge branch '3.0' into 3.1 2014-03-17 13:10:29 +01:00
5144724151 dhcpcd: update to 6.3.2 2014-03-17 13:07:40 +01:00
524cf59183 Merge branch '3.0' into 3.1 2014-03-01 15:02:19 +01:00
3cd7db64cb dhcpcd: update to 6.3.1 2014-03-01 14:59:58 +01:00
71710777c7 dhcpcd: update to 6.3.0 2014-02-27 11:21:26 +01:00
Matt Housh
572a59b79d dhcpcd, libdevmapper, libusb: replaced udev dependency with eudev 2014-02-24 21:34:17 -06:00
e99d379262 dhcpcd: update to 6.2.1 2014-01-17 13:53:17 +01:00
a368639939 [notify] dhcpcd: update to 6.2.0
after the dhcpcd update your client will get a new ip address
because the client id send by dhcpcd has changed.

See my bug report here:
http://roy.marples.name/projects/dhcpcd/info/8293a965fb
2014-01-11 10:54:55 +01:00
8dd67ad798 dhcpcd: temporary switch source URL to crux.nu 2013-11-01 09:31:41 +01:00
faeb8ab4a1 dhcpcd: update to 6.1.0 2013-09-28 10:33:12 +02:00
c081b07f9d dhcpcd: update to 6.0.5 2013-08-03 10:20:58 +02:00
876ef10f62 dhcpcd: update to 6.0.4 2013-08-01 12:09:12 +02:00
9ccbf699e2 dhcpcd: update to 6.0.3 2013-07-20 09:20:46 +02:00
cbfd4efc46 dhcpcd: fixed project URL, thanks Romster 2013-06-25 13:07:43 +02:00
240c6508ed dhcpcd: fixed md5sum 2013-06-25 12:47:34 +02:00
ca233dbcb0 dhcpcd: update to 6.0.2 2013-06-25 11:31:01 +02:00
809b8f1ab3 dhcpcd: update to 6.0.1 2013-06-24 08:04:08 +02:00
d2e1d7a0fa dhcpcd: update to 5.6.8 2013-04-05 12:08:30 +02:00
4129cb3212 dhcpcd: update to 5.6.7 2013-01-30 17:47:11 +01:00
19b6447ccc dhcpcd: update to 5.6.6 2012-12-20 12:21:55 +01:00
7b6f6f49ce dhcpcd: update to 5.6.4 2012-12-06 17:48:04 +01:00
Fredrik Rinnestam
f1b0b07343 dhcpcd: updated to 5.6.3 2012-11-17 13:28:58 +01:00
d7342d9fb4 dhcpcd: update to 5.6.2 2012-09-03 18:20:10 +02:00
4f8a93d129 dhcpcd: update to 5.6.1 2012-07-13 13:08:42 +02:00
d38e334026 dhcpcd: update to 5.6.0 2012-07-08 10:11:15 +02:00
96ff0d72a5 dhcpcd: update to 5.5.6 2012-04-02 14:47:59 +02:00
490616bdda dhcpcd: update to 5.5.5 2012-03-24 10:47:42 +01:00
e0fe6cca10 dhcpcd: update to 5.5.4 2012-02-06 13:11:57 +01:00
9b43057802 dhcpcd: update to 5.5.3 2012-02-03 12:02:18 +01:00
76d8d6bfa1 dhcpcd: update to 5.5.1 2012-01-31 12:42:29 +01:00
456f15de8b [notify] dhcpcd: update to 5.2.12
Security fix, see
http://roy.marples.name/archives/dhcpcd-discuss/2011/0326.html
2011-04-06 17:12:25 +02:00
2b7e5847a4 dhcpcd: update to 5.2.11 2011-02-05 10:22:09 +01:00
3811a60482 dhcpcd: update to 5.2.10 2011-01-06 11:03:44 +01:00
b545671b2f dhcpcd: update to 5.2.9 2010-11-22 17:59:48 +01:00
de4e3876a9 dhcpcd: update to 5.2.8 2010-10-07 18:18:15 +02:00
Tilman Sauerbeck
7f499ddcf8 dhcpcd: updated to 5.2.7. 2010-08-04 19:01:14 +02:00
c0def628f0 dhcpcd: update to 5.2.6 2010-07-10 10:31:03 +02:00
b845b3bf51 dhcpcd: update to 5.2.5 2010-06-11 10:57:59 +02:00
e929ddffe3 dhcpcd: update to 5.2.4 2010-06-05 09:09:03 +02:00
702540a7c2 dhcpcd: update to 5.2.3 2010-05-27 12:03:02 +02:00
eca679bc2f dhcpcd: update to 5.2.2 2010-04-01 13:50:23 +02:00
5b3eb2e40a dhcpcd: update to 5.2.1 2010-03-04 10:07:20 +01:00
dfa58f6e88 dhcpcd: update to 5.1.5 2010-02-02 09:13:57 +01:00
b42eff8731 dhcpcd: update to 5.1.4 2009-12-28 10:49:07 +01:00