gpp_maybe
Security update for wicked
SUSE-SLE-SERVER-12-SP5-2020-351
This update for wicked fixes the following issues: Security issues fixed: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 (bsc#1160905). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906). Non-security issue fixed: - dhcp4: Fixed an intermittent hang during network setup by cleaning up the defer timer pointer (bsc#1142214).
-
Release DateFeb 6 2020
-
ReferencesBugzilla: 1142214, 1160903, 1160904, 1160905, 1160906
CVEs: CVE-2019-18902, CVE-2019-18903, CVE-2020-7216, CVE-2020-7217 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server 12.5 x86_64
-
Packageswicked
Network configuration infrastructurewicked-service0.6.60-3.5.1lock rpmlock src
Network configuration infrastructure - systemd service0.6.60-3.5.1lock rpm
SUSE Linux Enterprise Server 12.5 aarch64
-
Packageswicked
Network configuration infrastructurewicked-service0.6.60-3.5.1lock rpmlock src0.6.60-3.5.1lock rpmlock src
Network configuration infrastructure - systemd service0.6.60-3.5.1lock rpm
SUSE Linux Enterprise Server 12.5 s390x
-
Packageswicked
Network configuration infrastructurewicked-service0.6.60-3.5.1lock rpmlock src
Network configuration infrastructure - systemd service0.6.60-3.5.1lock rpm
SUSE Linux Enterprise Server 12.5 ppc64le
-
Packageswicked
Network configuration infrastructurewicked-service0.6.60-3.5.1lock rpmlock src
Network configuration infrastructure - systemd service0.6.60-3.5.1lock rpm