openSUSE-SU-2026:21220-1

Описание

This update for dhcpcd fixes the following issue

Update to 10.3.2:

• CVE-2025-70102: NULL pointer dereference in parse_option() when processing a specially crafted configuration input (bsc#1268761).

Changes for dhcpcd:

• options: Ensure ldop is not NULL dereferenced
• DHCP: Don't run double EXPIRE hooks on carrier loss
• DHCP: free the state when dropping on state NONE
• BSD: don't send uninitialised memory using ps_root_indirectioctl
• Fix fallback_time option
• IPv4: Ignore DHCP state when building routes
• route: Routes may not have an interface assinged
• options: Ensure that an overly long bitflag string does not crash
• options: Don't assume vsio options have an argument
• common: Cast via uintptr_t rather than unsigned long in UNCONST
• privsep: Ensure we recv for real after a successful recv MSG_PEEK
• DHCP: Add parentheses to macro definitions
• ipv6nd: empty IPV6RA_EXPIRE eloop queue when dropping
• privsep: enforce message boundaries with MSG_EOR on our messages
• Protocols will notify when dhcpcd can exit
• DHCP: Don't request T1 and T2
• DHCP: Don't request a lease time
• DHCP6: Don't exit if using DHCP4 INFORM in non manager mode
• ND: Route Information Option prefix is optional
• ipv6: respect slaac hwaddr to really use the hwaddr
• When stopping all interfaces at exit and releasing, remove persistance
• NetBSD: Delete RTF_CONNECTED route when changing it
• privsep: Drain the log when the root process is exiting
• eloop: vastly reworked, kqueue and epoll support on by default