Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 4 articles for you...
100
security advisorySuSEimportantSUSE Wicked Critical Command Injection Repair Notice 2026-2349-1
An update that solves one vulnerability can now be installed.. # Security update for wicked Announcement ID: SUSE-SU-2026:2349-1 Release Date: 2026-06-10T14:53:51Z Rating: important References: * bsc#1265221 Cross-References: * CVE-2026-44932 CVSS scores: * CVE-2026-44932 ( SUSE ): 5.8 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H * CVE-2026-44932 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for wicked fixes the following issue * CVE-2026-44932: indirect remote shell command injection via unsanitized DHCP options (bsc#1265221). Changes for wicked: * Update to version 0.6.79 * Fix to escape single-quotes in leaseinfo dump output used by the `wicked test dhcp4` and `wicked test dhcp6` and written to the /run/wicked/leaseinfo.* files, e.g. to pass them to netconfig. A netconfig modify filtered for strict key='value' lines without any escaped quotes and discarded these lines already before. * Fix posix-tz-dbname and tz-string option processing checks to permit only valid characters according to RFC4833. * Discard string values containing single-quotes in other options. * Trigger to regenerate initrd that may contain wicked binaries on updates from wicked versions
Jun 10, 2026
•Important
SuSE
100
security advisorySuSEremote code executionSUSE Linux 12 SP5 Important Update for wicked CVE-2026-44932
An update that solves one vulnerability and contains one feature can now be installed.. # Security update for wicked Announcement ID: SUSE-SU-2026:2350-1 Release Date: 2026-06-10T14:54:01Z Rating: important References: * bsc#1265221 * jsc#PED-1942 Cross-References: * CVE-2026-44932 CVSS scores: * CVE-2026-44932 ( SUSE ): 5.8 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H * CVE-2026-44932 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for wicked fixes the following issues: * CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-2350=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2350=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * wicked-0.6.79-3.56.1 * wicked-debuginfo-0.6.79-3.56.1 * wicked-service-0.6.79-3.56.1 * wicked-debugsource-0.6.79-3.56.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * wicked-0.6.79-3.56.1 * wicked-debuginfo-0.6.79-3.56.1 * wicked-service-0.6.79-3.56.1 * wicked-debugsource-0.6.79-3.56.1 ## References: *https://www.suse.com/security/cve/CVE-2026-44932.html * https://bugzilla.suse.com/show_bug.cgi?id=1265221 * https://jira.suse.com/browse/PED-1942 . SUSE Linux update fixes indirect shell command injection vulnerability in wicked with important severity rating.. SUSE Linux, wicked update, command injection, security patch. . Severity: Important. LinuxSecurity.com Team
Jun 10, 2026
•Important
SuSE
202
security advisoryremote accessimportantopenSUSE Wicked Important Remote Command Injection Vuln 2026-2354-1
An update that solves one vulnerability and contains one feature can now be installed.. # Security update for wicked Announcement ID: SUSE-SU-2026:2354-1 Release Date: 2026-06-10T14:56:00Z Rating: important References: * bsc#1265221 * jsc#PED-1942 Cross-References: * CVE-2026-44932 CVSS scores: * CVE-2026-44932 ( SUSE ): 5.8 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H * CVE-2026-44932 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for wicked fixes the following issues: * CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2354=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2354=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2354=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2354=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2354=1 * SUSE Linux Enterprise High PerformanceComputing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2354=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2354=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2354=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2354=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * wicked-debugsource-0.6.79-150400.3.39.1 * wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.79-150400.3.39.1 * wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.79-150400.3.39.1 * wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.79-150400.3.39.1 * wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.79-150400.3.39.1 * wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * wicked-debugsource-0.6.79-150400.3.39.1 * wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * wicked-debugsource-0.6.79-150400.3.39.1 *wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * wicked-debugsource-0.6.79-150400.3.39.1 * wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * wicked-debugsource-0.6.79-150400.3.39.1 * wicked-0.6.79-150400.3.39.1 * wicked-debuginfo-0.6.79-150400.3.39.1 * wicked-service-0.6.79-150400.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44932.html * https://bugzilla.suse.com/show_bug.cgi?id=1265221 * https://jira.suse.com/browse/PED-1942 . An important security advisory for openSUSE addressing a command injection risk in wicked. Update recommended for affected users.. openSUSE security update, wicked patch, remote command injection. . Severity: Important. LinuxSecurity.com Team
Jun 10, 2026
•Important
OpenSUSE
100
security advisorydenial of servicecriticalSUSE: 2020:0410-1 Important: Wicked Memory Leak and DoS Fix
An update that fixes four vulnerabilities is now available. . SUSE Security Update: Security update for wicked ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:0410-1 Rating: important References: #1160903 #1160904 #1160905 #1160906 Cross-References: CVE-2019-18902 CVE-2019-18903 CVE-2020-7216 CVE-2020-7217 Affected Products: SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 7 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server for SAP 12-SP2 SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP2-LTSS SUSE Linux Enterprise Server 12-SP2-BCL SUSE Enterprise Storage 5 SUSE CaaS Platform 3.0 HPE Helion Openstack 8 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 (bsc#1160905). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2020-410=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2020-410=1 - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2020-410=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2020-410=1 - SUSE Linux Enterprise Server for SAP 12-SP2: zypper in -t patch SUSE-SLE-SAP-12-SP2-2020-410=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2020-410=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2020-410=1 - SUSE Linux Enterprise Server 12-SP2-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2020-410=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2020-410=1 - SUSE Enterprise Storage 5: zypper in -t patch SUSE-Storage-5-2020-410=1 - SUSE CaaS Platform 3.0: To install this update, use the SUSE CaaS Platform Velum dashboard. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2020-410=1 Package List: - SUSE OpenStack Cloud Crowbar 8 (x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE OpenStack Cloud 8 (x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE OpenStack Cloud 7 (s390x x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE Enterprise Storage 5 (aarch64 x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - SUSE CaaS Platform 3.0 (x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 - HPE Helion Openstack 8 (x86_64): wicked-0.6.60-38.27.1 wicked-debuginfo-0.6.60-38.27.1 wicked-debugsource-0.6.60-38.27.1 wicked-service-0.6.60-38.27.1 References: https://www.suse.com/security/cve/CVE-2019-18902.html https://www.suse.com/security/cve/CVE-2019-18903.html https://www.suse.com/security/cve/CVE-2020-7216.html https://www.suse.com/security/cve/CVE-2020-7217.html https://bugzilla.suse.com/1160903 https://bugzilla.suse.com/1160904 https://bugzilla.suse.com/1160905 https://bugzilla.suse.com/1160906 _______________________________________________ sle-security-updates mailing list
Feb 19, 2020
•Important
SuSE
202
security advisoryimportantmemory leakopenSUSE: 2020:0207-1 Important: Wicked Security Update
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0207-1 Rating: important References: #1160904 #1160906 Cross-References: CVE-2019-18903 CVE-2020-7217 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wicked fixes the following issues: - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-207=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): wicked-0.6.60-lp151.2.9.1 wicked-debuginfo-0.6.60-lp151.2.9.1 wicked-debugsource-0.6.60-lp151.2.9.1 wicked-service-0.6.60-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-18903.html https://www.suse.com/security/cve/CVE-2020-7217.html https://bugzilla.suse.com/1160904 https://bugzilla.suse.com/1160906 -- . Crucial announcement for wicked in openSUSE tackles various security flaws efficiently.. openSUSE, wicked, security update, memory leak, DHCP. . Severity: Important. LinuxSecurity.com Team
Feb 11, 2020
•Important
OpenSUSE
100
security advisoryimportantmemory leakSUSE: 2020:0370-1 Important: Wicked Memory Leak and Use-After-Free Issues
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for wicked ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:0370-1 Rating: important References: #1160904 #1160906 Cross-References: CVE-2019-18903 CVE-2020-7217 Affected Products: SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wicked fixes the following issues: - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2020-370=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2020-370=1 - SUSE Linux Enterprise Module for Basesystem 15: zypper in -t patch SUSE-SLE-Module-Basesystem-15-2020-370=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2020-370=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2020-370=1 Package List: - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): wicked-0.6.60-3.24.1 wicked-debuginfo-0.6.60-3.24.1 wicked-debugsource-0.6.60-3.24.1 wicked-service-0.6.60-3.24.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): wicked-0.6.60-3.24.1 wicked-debuginfo-0.6.60-3.24.1 wicked-debugsource-0.6.60-3.24.1 wicked-service-0.6.60-3.24.1 - SUSE Linux Enterprise Module for Basesystem 15 (aarch64 ppc64le s390x x86_64): wicked-0.6.60-3.24.1 wicked-debuginfo-0.6.60-3.24.1 wicked-debugsource-0.6.60-3.24.1 wicked-service-0.6.60-3.24.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): wicked-0.6.60-3.24.1 wicked-debuginfo-0.6.60-3.24.1 wicked-debugsource-0.6.60-3.24.1 wicked-service-0.6.60-3.24.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): wicked-0.6.60-3.24.1 wicked-debuginfo-0.6.60-3.24.1 wicked-debugsource-0.6.60-3.24.1 wicked-service-0.6.60-3.24.1 References: https://www.suse.com/security/cve/CVE-2019-18903.html https://www.suse.com/security/cve/CVE-2020-7217.html https://bugzilla.suse.com/1160904 https://bugzilla.suse.com/1160906 _______________________________________________ sle-security-updates mailing list
Feb 07, 2020
•Important
SuSE
100
security advisoryDoSimportantSUSE Linux Enterprise 12-SP4: SUSE-SU-2020:0369-1 Severe: Wicked DoS
An update that fixes four vulnerabilities is now available. . SUSE Security Update: Security update for wicked ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:0369-1 Rating: important References: #1160903 #1160904 #1160905 #1160906 Cross-References: CVE-2019-18902 CVE-2019-18903 CVE-2020-7216 CVE-2020-7217 Affected Products: SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Desktop 12-SP4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 (bsc#1160905). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP4: zypper in -t patch SUSE-SLE-SERVER-12-SP4-2020-369=1 - SUSE Linux Enterprise Desktop 12-SP4: zypper in -t patch SUSE-SLE-DESKTOP-12-SP4-2020-369=1 Package List: - SUSE Linux Enterprise Server 12-SP4 (aarch64 ppc64le s390x x86_64): wicked-0.6.60-2.18.1 wicked-debuginfo-0.6.60-2.18.1 wicked-debugsource-0.6.60-2.18.1 wicked-service-0.6.60-2.18.1 - SUSE Linux Enterprise Desktop 12-SP4 (x86_64): wicked-0.6.60-2.18.1 wicked-debuginfo-0.6.60-2.18.1 wicked-debugsource-0.6.60-2.18.1 wicked-service-0.6.60-2.18.1 References: https://www.suse.com/security/cve/CVE-2019-18902.html https://www.suse.com/security/cve/CVE-2019-18903.html https://www.suse.com/security/cve/CVE-2020-7216.html https://www.suse.com/security/cve/CVE-2020-7217.html https://bugzilla.suse.com/1160903 https://bugzilla.suse.com/1160904 https://bugzilla.suse.com/1160905 https://bugzilla.suse.com/1160906 _______________________________________________ sle-security-updates mailing list
Feb 07, 2020
•Important
SuSE
100
security advisorydenial of serviceimportantSUSE Linux Enterprise 12-SP1: SUSE-SU-2020:0358-1 Critical Wicked DoS Bugs
An update that solves four vulnerabilities and has one errata is now available. . SUSE Security Update: Security update for wicked ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:0358-1 Rating: important References: #1142214 #1160903 #1160904 #1160905 #1160906 Cross-References: CVE-2019-18902 CVE-2019-18903 CVE-2020-7216 CVE-2020-7217 Affected Products: SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP1-LTSS ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 (bsc#1160905). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2020-358=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2020-358=1 Package List: - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): wicked-0.6.60-28.26.1 wicked-debuginfo-0.6.60-28.26.1 wicked-debugsource-0.6.60-28.26.1 wicked-service-0.6.60-28.26.1 - SUSE Linux Enterprise Server12-SP1-LTSS (ppc64le s390x x86_64): wicked-0.6.60-28.26.1 wicked-debuginfo-0.6.60-28.26.1 wicked-debugsource-0.6.60-28.26.1 wicked-service-0.6.60-28.26.1 References: https://www.suse.com/security/cve/CVE-2019-18902.html https://www.suse.com/security/cve/CVE-2019-18903.html https://www.suse.com/security/cve/CVE-2020-7216.html https://www.suse.com/security/cve/CVE-2020-7217.html https://bugzilla.suse.com/1142214 https://bugzilla.suse.com/1160903 https://bugzilla.suse.com/1160904 https://bugzilla.suse.com/1160905 https://bugzilla.suse.com/1160906 _______________________________________________ sle-security-updates mailing list
Feb 07, 2020
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!