shield Security update for dhcpcd

SUSE-SLES-16.0-1147

This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL dereferenced * DHCP: Don't run double EXPIRE hooks on carrier loss * DHCP: free the state when dropping on state NONE * BSD: don't send uninitialised memory using ps_root_indirectioctl * Fix fallback_time option * IPv4: Ignore DHCP state when building routes * route: Routes may not have an interface assinged * options: Ensure that an overly long bitflag string does not crash * options: Don't assume vsio options have an argument * common: Cast via uintptr_t rather than unsigned long in UNCONST * privsep: Ensure we recv for real after a successful recv MSG_PEEK * DHCP: Add parentheses to macro definitions * ipv6nd: empty IPV6RA_EXPIRE eloop queue when dropping * privsep: enforce message boundaries with MSG_EOR on our messages * Protocols will notify when dhcpcd can exit * DHCP: Don't request T1 and T2 * DHCP: Don't request a lease time * DHCP6: Don't exit if using DHCP4 INFORM in non manager mode * ND: Route Information Option prefix is optional * ipv6: respect slaac hwaddr to really use the hwaddr * When stopping all interfaces at exit and releasing, remove persistance * NetBSD: Delete RTF_CONNECTED route when changing it * privsep: Drain the log when the root process is exiting * eloop: vastly reworked, kqueue and epoll support on by default

• Release Date
  Jul 6 2026
• References
  Bugzilla: 1268761
  CVEs: CVE-2025-70102
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  dhcpcd
  Minimal DHCPv4 and DHCPv6 client

  10.3.2-160000.1.2 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  dhcpcd
  Minimal DHCPv4 and DHCPv6 client

  10.3.2-160000.1.2 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  dhcpcd
  Minimal DHCPv4 and DHCPv6 client

  10.3.2-160000.1.2 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  dhcpcd
  Minimal DHCPv4 and DHCPv6 client

  10.3.2-160000.1.2 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  dhcpcd
  Minimal DHCPv4 and DHCPv6 client

  10.3.2-160000.1.2 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  dhcpcd
  Minimal DHCPv4 and DHCPv6 client

  10.3.2-160000.1.2 lock rpm