gpp_maybe Security update for dracut
SUSE-SLE-Micro-6.0-772


This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.609.g1a2492e: * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893) * fix(network-legacy): add input validation to RFC 3442 route parser

  • Release Date
    Jun 29 2026
  • References
    Bugzilla: 1268322
    CVEs: CVE-2026-6893
  • Type
    security
  • Severity
    important

cloud_download Downloads

SUSE Linux Micro 6.0 s390x
  • Packages
    dracut
    Event driven initramfs infrastructure
    059+suse.609.g1a2492e-1.1 lock rpm
    dracut-fips
    Dracut modules to build a dracut initramfs with an integrity check
    059+suse.609.g1a2492e-1.1 lock rpm
SUSE Linux Micro 6.0 x86_64
  • Packages
    dracut
    Event driven initramfs infrastructure
    059+suse.609.g1a2492e-1.1 lock rpm
    dracut-fips
    Dracut modules to build a dracut initramfs with an integrity check
    059+suse.609.g1a2492e-1.1 lock rpm
SUSE Linux Micro 6.0 aarch64
  • Packages
    dracut
    Event driven initramfs infrastructure
    059+suse.609.g1a2492e-1.1 lock rpm
    dracut-fips
    Dracut modules to build a dracut initramfs with an integrity check
    059+suse.609.g1a2492e-1.1 lock rpm