Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges
This update for lldpd fixes the following issues:
Changes in lldpd:
- Update to version 1.0.22
* Fix CVE-2026-46433, out-of-bound read access when removing
VLAN tag (#787).
* Reject 0-length management address in LLDP.
* Fix race condition when creating the control socket.
* Fix FDP MAC address.
* Fix memory leak in the BSD bridge query path.
* Fix duplicate management addresses when merging EDP VLAN
frames.
- Update to version 1.0.21
Changes:
* Add "configure lldp portdescription-source" to choose how to
populate port description.
Fix:
* Fix path traversal vulnerabilities in the privileged process.
* Fix arbitrary file deletion in the privileged process.
* Fix accuracy of Dot3 MAU types advertised and add support for
200G and 400G.
* Fix detection of wireless interfaces.
- Update to version 1.0.20
Changes:
* Enable fast start unconditionally (and move its configuration
in "configure lldp").
* Make VLAN advertisements...
Read the Full Advisory- openSUSE Leap 16.0:
liblldpctl4-1.0.22-bp160.1.1
lldpd-1.0.22-bp160.1.1
lldpd-devel-1.0.22-bp160.1.1
* https://www.suse.com/security/cve/CVE-2026-46433.html
Get the latest Linux and open source security news straight to your inbox.