For previous releases, I think the attached patch should do the trick. security-team: any problem with that patch? do you want to have this issued as a security fix for previous releases?
** Patch added: "Call initgroups() when dropping capabilities" https://bugs.launchpad.net/ubuntu/+source/isc-dhcp/+bug/727837/+attachment/3206891/+files/fix-bug727837.diff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/727837 Title: dhcp3-server fails to drop privileges properly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dhcp3/+bug/727837/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
