Hi, looking at the above CVEs concerning dhcpcd, you wrote # Remove not-affected tags for squeeze. By simple code inspection we # cannot say that the issue is not present in squeeze's / wheezy's version # of dhcpcd. Further actions: try exploit, ask upstream, second opinion. did you contact upstream about that alread? I don't want to bother them again. Cheers, -- Guido