SUSE-SU-2026:2354-1

Опубликовано: 10 июн. 2026

Источник: suse-cvrf

Описание

Security update for wicked

This update for wicked fixes the following issues:

CVE-2026-44932: Fixed indirect remote shell command injection via unsanitized DHCP options (bsc#1265221).

Список пакетов

Image SLES15-SP4-BYOS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-BYOS-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-BYOS-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-BYOS-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-CHOST-BYOS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-CHOST-BYOS-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-CHOST-BYOS-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-CHOST-BYOS-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-HPC-BYOS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-HPC-BYOS-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-HPC-BYOS-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-HPC-BYOS-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-HPC-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-HPC-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-Hardened-BYOS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-Hardened-BYOS-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-Hardened-BYOS-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-Hardened-BYOS-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-BYOS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-BYOS-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-BYOS-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-BYOS-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-Hardened

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-Hardened-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-Hardened-BYOS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAP-Hardened-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAPCAL

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAPCAL-Azure

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAPCAL-EC2

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-SAPCAL-GCE

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

SUSE Linux Enterprise Micro 5.3

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

SUSE Linux Enterprise Micro 5.4

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

SUSE Linux Enterprise Server 15 SP4-LTSS

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

wicked-0.6.79-150400.3.39.1

wicked-service-0.6.79-150400.3.39.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20262354-1/
Link for SUSE-SU-2026:2354-1
https://lists.suse.com/pipermail/sle-security-updates/2026-June/026688.html
E-Mail link for SUSE-SU-2026:2354-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1265221
SUSE Bug 1265221
https://www.suse.com/security/cve/CVE-2026-44932/
SUSE CVE CVE-2026-44932 page

Описание

Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:wicked-0.6.79-150400.3.39.1

Image SLES15-SP4-BYOS-Azure:wicked-service-0.6.79-150400.3.39.1

Image SLES15-SP4-BYOS-EC2:wicked-0.6.79-150400.3.39.1

Image SLES15-SP4-BYOS-EC2:wicked-service-0.6.79-150400.3.39.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-44932.html
CVE-2026-44932
https://bugzilla.suse.com/1265221
SUSE Bug 1265221

SUSE-SU-2026:2354-1

Описание

Список пакетов

Image SLES15-SP4-BYOS

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-BYOS-GCE

Image SLES15-SP4-CHOST-BYOS

Image SLES15-SP4-CHOST-BYOS-Aliyun

Image SLES15-SP4-CHOST-BYOS-Azure

Image SLES15-SP4-CHOST-BYOS-EC2

Image SLES15-SP4-CHOST-BYOS-GCE

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-BYOS-GCE

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-HPC-GCE

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-GCE

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-GCE

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP4-SAPCAL-GCE

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

Ссылки

Уязвимость: CVE-2026-44932

Описание

Затронутые продукты

Ссылки