Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3611-1

Опубликовано: 13 авг. 2026
Источник: suse-cvrf

Описание

Security update for dracut

This update for dracut fixes the following issue:

Update to version 055+suse.404.gc96044c.

Securitys issue fixed:

  • CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die() (bsc#1274432).

Other updates and bugfixes:

  • Fix(base): sanitize message written by die() to the emergency hook.
  • Feat(base): add escape function implementing printf %q.

Список пакетов

Container suse/sle-micro/5.5:latest
dracut-055+suse.404.gc96044c-150500.3.44.1
Container suse/sle-micro/base-5.5:latest
dracut-055+suse.404.gc96044c-150500.3.44.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
dracut-055+suse.404.gc96044c-150500.3.44.1
dracut-fips-055+suse.404.gc96044c-150500.3.44.1
dracut-ima-055+suse.404.gc96044c-150500.3.44.1
dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
dracut-055+suse.404.gc96044c-150500.3.44.1
dracut-fips-055+suse.404.gc96044c-150500.3.44.1
dracut-ima-055+suse.404.gc96044c-150500.3.44.1
dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1
SUSE Linux Enterprise Micro 5.5
dracut-055+suse.404.gc96044c-150500.3.44.1
dracut-fips-055+suse.404.gc96044c-150500.3.44.1
SUSE Linux Enterprise Server 15 SP5-LTSS
dracut-055+suse.404.gc96044c-150500.3.44.1
dracut-fips-055+suse.404.gc96044c-150500.3.44.1
dracut-ima-055+suse.404.gc96044c-150500.3.44.1
dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
dracut-055+suse.404.gc96044c-150500.3.44.1
dracut-fips-055+suse.404.gc96044c-150500.3.44.1
dracut-ima-055+suse.404.gc96044c-150500.3.44.1
dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1

Ссылки

Описание

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.

Затронутые продукты
Container suse/sle-micro/5.5:latest:dracut-055+suse.404.gc96044c-150500.3.44.1
Container suse/sle-micro/base-5.5:latest:dracut-055+suse.404.gc96044c-150500.3.44.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dracut-055+suse.404.gc96044c-150500.3.44.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dracut-fips-055+suse.404.gc96044c-150500.3.44.1
Ссылки