DHCPCD Character Expansion Remote Command Execution Vulnerability

DHCPCD Character Expansion Remote Command Execution Vulnerability

Solution:
Conectiva has released a security advisory. Fixes are available.

It is recommended that all Gentoo Linux users who are running
net-misc/dhcpcd-1.3.20_p0-r1 or earlier update their systems as
follows:

emerge rsync
emerge dhcpcd
emerge clean

The vendor has addressed the issue in the latest dhcpcd release.

Fixes:

Phystech dhcpcd 1.3.17 -pl2

Phystech dhcpcd 1.3.22 -pl1

Conectiva dhcpcd-1.3.22pl3-1U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/dhcpcd-1.3.22pl3-1U60_2cl .i386.rpm

Conectiva dhcpcd-1.3.22pl3-1U60_2cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/dhcpcd-1.3.22pl3-1U60_2c l.src.rpm

Conectiva dhcpcd-1.3.22pl3-1U70_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/dhcpcd-1.3.22pl3-1U70_1c l.src.rpm

Conectiva dhcpcd-1.3.22pl3-1U80_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/dhcpcd-1.3.22pl3-1U80_1cl.i 386.rpm

Conectiva dhcpcd-1.3.22pl3-1U80_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/8/SRPMS/dhcpcd-1.3.22pl3-1U80_1cl. src.rpm

MandrakeSoft dhcpcd-1.3.22pl4-1.1mdk.i586.rpm
Linux-Mandrake 7.2
http://www.mandrakesecure.net/en/ftp.php

MandrakeSoft dhcpcd-1.3.22pl4-1.1mdk.i586.rpm
Mandrake Linux 8.0
http://www.mandrakesecure.net/en/ftp.php

MandrakeSoft dhcpcd-1.3.22pl4-1.1mdk.i586.rpm
Mandrake Linux 9.0
http://www.mandrakesecure.net/en/ftp.php

MandrakeSoft dhcpcd-1.3.22pl4-1.1mdk.i586.rpm
Multi Network Firewall 8.2
http://www.mandrakesecure.net/en/ftp.php

MandrakeSoft dhcpcd-1.3.22pl4-1.1mdk.i586.rpm
Single Network Firewall 7.2
http://www.mandrakesecure.net/en/ftp.php

MandrakeSoft dhcpcd-1.3.22pl4-1.1mdk.ppc.rpm
Mandrake Linux 8.2/PPC
http://www.mandrakesecure.net/en/ftp.php

Phystech dhcpcd-1.3.22-pl2
http://www.phystech.com/download/

Phystech dhcpcd-1.3.22-pl3
http://www.phystech.com/download/