Your message dated Sat, 27 Sep 2014 22:49:25 +0000 with message-id <[email protected]> and subject line Bug#762923: fixed in isc-dhcp 4.3.1-2 has caused the Debian Bug report #762923, regarding dhclient-script uses bash, allowing remote bash exploits to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 762923: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762923 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: isc-dhcp-client Version: 4.2.4-7 Severity: normal File: /sbin/dhclient-script Tags: security dhclient puts unchecked strings into environment variables for the dhclient-script and dhclient-script uses #!/bin/bash. This allows the recently found bash bugs to be exploited from remote. There seem to be 2 places where dhclient-script uses bashism: % checkbashisms /sbin/dhclient-script possible bashism in /sbin/dhclient-script line 58 (sourced script with arguments): . $script "$@" possible bashism in /sbin/dhclient-script line 181 (should be 'b = a'): if [ "$new_subnet_mask" == "255.255.255.255" ]; then The second one is trivial to fix leaving a single bashism. Would it be possible to rewrite that in a POSIX sh compatible way? That would leave the dhclient hook scripts to worry about: possible bashism in /etc/dhcp3/dhclient-enter-hooks.d/debug line 24 (${!name}): echo $i=\'${!i}\' >> /tmp/dhclient-script.debug possible bashism in /etc/dhcp3/dhclient-exit-hooks.d/debug line 23 (${!name}): echo $i=\'${!i}\' >> /tmp/dhclient-script.debug possible bashism in /etc/dhcp3/dhclient-exit-hooks.d/rfc3442-classless-routes line 8 (should be 'b = a'): if [ x"$reason" == x"BOUND" ]; then possible bashism in /etc/dhcp3/dhclient-exit-hooks.d/rfc3442-classless-routes line 11 (bash arrays, ${name[0|*|@]}): for(( i=0; i < ${#rfc_routes[@]}; )); do +10 more array uses Given the many eyes now turning towards findings bugs in bash and building exploits with them it might be safer to fix those bashisms and switch dhclient-script over to #!/bin/sh. What do you think? MfG Goswin -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.14-1-amd64 (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=de_DE (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/dash Versions of packages isc-dhcp-client depends on: ii debianutils 4.4 ii iproute 1:3.14.0-1 ii isc-dhcp-common 4.2.4-7 ii libc6 2.19-1 isc-dhcp-client recommends no packages. Versions of packages isc-dhcp-client suggests: pn avahi-autoipd <none> pn resolvconf <none> -- no debconf information
--- End Message ---
--- Begin Message ---Source: isc-dhcp Source-Version: 4.3.1-2 We believe that the bug you reported is fixed in the latest version of isc-dhcp, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Michael Gilbert <[email protected]> (supplier of updated isc-dhcp package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 27 Sep 2014 21:57:28 +0000 Source: isc-dhcp Binary: isc-dhcp-server isc-dhcp-server-dbg isc-dhcp-dbg isc-dhcp-server-ldap isc-dhcp-common isc-dhcp-dev isc-dhcp-client isc-dhcp-client-dbg isc-dhcp-client-udeb isc-dhcp-relay isc-dhcp-relay-dbg Architecture: source Version: 4.3.1-2 Distribution: unstable Urgency: medium Maintainer: Debian ISC DHCP maintainers <[email protected]> Changed-By: Michael Gilbert <[email protected]> Description: isc-dhcp-client - ISC DHCP client isc-dhcp-client-dbg - ISC DHCP server for automatic IP address assignment (client debug isc-dhcp-client-udeb - ISC DHCP Client for debian-installer (udeb) isc-dhcp-common - common files used by all of the isc-dhcp packages isc-dhcp-dbg - ISC DHCP server for automatic IP address assignment (debuging sym isc-dhcp-dev - API for accessing and modifying the DHCP server and client state isc-dhcp-relay - ISC DHCP relay daemon isc-dhcp-relay-dbg - ISC DHCP server for automatic IP address assignment (relay debug) isc-dhcp-server - ISC DHCP server for automatic IP address assignment isc-dhcp-server-dbg - ISC DHCP server for automatic IP address assignment (server debug isc-dhcp-server-ldap - DHCP server that uses LDAP as its backend Closes: 762923 Changes: isc-dhcp (4.3.1-2) unstable; urgency=medium . * Use /bin/sh instead of /bin/bash for dhclient scripts (closes: #762923). Checksums-Sha1: b483c068d3b8f499ca3a37b2556462349255448a 3365 isc-dhcp_4.3.1-2.dsc f3f6cbcf90835e95cd25ac883b5d8f825983016b 77776 isc-dhcp_4.3.1-2.debian.tar.xz Checksums-Sha256: 80c060e6b54e200df07443e2d24b6c1774d6b3fc524f7c6d0cee540146a01443 3365 isc-dhcp_4.3.1-2.dsc 9c96cd48ba1e8ecd5e08ec3c90d7389e392e104bebb2cdda760a1dd32bc02fe3 77776 isc-dhcp_4.3.1-2.debian.tar.xz Files: 2bdde8df00b2c437588f9efcb5ba417f 3365 net important isc-dhcp_4.3.1-2.dsc 39a0d1999271d9552d71322c70cbe38a 77776 net important isc-dhcp_4.3.1-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQQcBAEBCgAGBQJUJztVAAoJELjWss0C1vRzkPogAI3K0qid3NdT5jTxBcdgz2OG TZKU0BeGnARl38P0K+CY5VvXD3IjlxmOtFMOAMQmAKZytQ+ZuEmoVfQoymU4Kj6w utmgz2tZdS1OImc++DetI9TiRHDt/4M5fVQ6oz9aoQdZHnvdtNafLjHJfaORY6qZ VvT1lyqnONQzyK2ZyWByHENJvDfj5FGeEmUdbD6M1ojevB1Bm0eRUelxLVuJ2mdV HGHOotkrkjQ8M1F3e4aEt42SwWN9jN2lK0knFRJHFdZIpHlDPE02KwYDBBYBHObX lgqqFn0WgYYMTgT6hLgs4PuJYiGls6IQa9yaqZZ/OokjMG0m9Ylw8TsryLwlyKS0 z7PEXiTeT2UsThADD6nBg52z2UJ0Wpxo3WKHVb5B9nv7ytKxQEdNvaEbEg9xm+Bo Cnq1edGnRKzfH6VvwULKJxqnJTtM9DfSQJ7aFzqss2N2PW9bk5DFZ32fx10IrUYj R9JphWkFRKV6CnFBV5alUApJDnMUCToNbOfeYmoz74YeHTs+zMZGJHFkSZuHfH4o aVHMIID2XOJHUAgjIbR3TnBjy9LnNxZ56gk2nYJ3MXo1E+lZX2FWPwvNXF1tsMAt 2822escZ1aB5EnHPyNih/Q30QV7rkiOZ74OefmgxbbyF3S+qQoLUB8kWuhC4WS3p gypkTVBANeD/MGWR7ETi6cLXN1mYHa2YV0en4c6vKL8XHUuDlT5t6624hI29eeqI SXxtej76NfD0TuvI7Z9vVNigzCQlKuoUc6SuiKcb5cfvRkuDnk+No47jprr/QyYe pwaiMsaJOOBAgZL9kmGO3tzzmZYsHfDfvS4YnQeNw90R43r4y9ywAhL6SPKsZctI crNARtVRe9QOd8jNE0dhGOjiQmy0W7/Fr3BJZ/6F8Gh2toHxWhteVvooZQ9xDQzf ZoLDeBYtHmhog1QGSl9uBXgmjC1W4yfQFB1AWXWI9UGKdNXnT74gLw8GPac/hhlT /Eiz3CoaoZLrn4Rl9pU9l65lFAbxozryEwKTcYCW3b9jCx0fVI/KZE/ifLMZH8YM wjPhBSqjdFcIgnHscBxf6fzlh8SzPFw62D0zf6mJ22sm9ZgfNAifoySSeeFAGkz+ 6AFrfwXAIx0TdH+6zDXbmz7cFgsjDCgTbD+d4FolKMb3aDFI/dmnYvdIqsTshFLX qQgyss7W107Kz49u894LYsrpXLBKuStNEkf5ofpl8HTJ20NKjKbKaNzRLhzfi4KI GoK+SyvHGtVtps1sChI3Ao82Ab9sMQ89ojRtXpbWgHak9ZN6oiNGH53AXOv4DSHq 1pWdzrXa/0Tr8P8R0pecbb+/4ON4I3YQl/ehoAlG/Pe8z0V0ARkZjgRxU/AdRH0= =T8bL -----END PGP SIGNATURE-----
--- End Message ---
