< back to search

gpp_maybe Security update for wicked
SUSE-SLE-Module-Basesystem-15-SP7-2026-2349

This update for wicked fixes the following issue - CVE-2026-44932: indirect remote shell command injection via unsanitized DHCP options (bsc#1265221). Changes for wicked: - Update to version 0.6.79 - Fix to escape single-quotes in leaseinfo dump output used by the `wicked test dhcp4` and `wicked test dhcp6` and written to the /run/wicked/leaseinfo.* files, e.g. to pass them to netconfig. A netconfig modify filtered for strict key='value' lines without any escaped quotes and discarded these lines already before. - Fix posix-tz-dbname and tz-string option processing checks to permit only valid characters according to RFC4833. - Discard string values containing single-quotes in other options. - Trigger to regenerate initrd that may contain wicked binaries on updates from wicked versions <= 0.6.78.

  • Release Date
    Jun 10 2026
  • References
    Bugzilla: 1265221
    CVEs: CVE-2026-44932
  • Type
    security
  • Severity
    important

cloud_download Downloads

Basesystem Module 15.7 s390x
  • Packages
    wicked
    Network configuration infrastructure
    0.6.79-150700.3.3.1 lock rpm lock src
    wicked-nbft
    Network configuration infrastructure - nbft support
    0.6.79-150700.3.3.1 lock rpm
    wicked-service
    Network configuration infrastructure - systemd service
    0.6.79-150700.3.3.1 lock rpm
Basesystem Module 15.7 ppc64le
  • Packages
    wicked
    Network configuration infrastructure
    0.6.79-150700.3.3.1 lock rpm lock src
    wicked-nbft
    Network configuration infrastructure - nbft support
    0.6.79-150700.3.3.1 lock rpm
    wicked-service
    Network configuration infrastructure - systemd service
    0.6.79-150700.3.3.1 lock rpm
Basesystem Module 15.7 aarch64
  • Packages
    wicked
    Network configuration infrastructure
    0.6.79-150700.3.3.1 lock rpm lock src
    wicked-nbft
    Network configuration infrastructure - nbft support
    0.6.79-150700.3.3.1 lock rpm
    wicked-service
    Network configuration infrastructure - systemd service
    0.6.79-150700.3.3.1 lock rpm
Basesystem Module 15.7 x86_64
  • Packages
    wicked
    Network configuration infrastructure
    0.6.79-150700.3.3.1 lock rpm lock src
    wicked-nbft
    Network configuration infrastructure - nbft support
    0.6.79-150700.3.3.1 lock rpm
    wicked-service
    Network configuration infrastructure - systemd service
    0.6.79-150700.3.3.1 lock rpm