SUSE-SU-2026:22561-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202622561-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22561-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:22561-1
- Upstream
- CVE-2025-70102
- Related
- Published
- 2026-07-06T20:10:18Z
- Modified
- 2026-07-15T18:24:11Z
- Summary
- Security update for dhcpcd
- Details
-
This update for dhcpcd fixes the following issue
Update to 10.3.2:
- CVE-2025-70102: NULL pointer dereference in
parse_option()when processing a specially crafted configuration input (bsc#1268761).
Changes for dhcpcd:
- options: Ensure ldop is not NULL dereferenced
- DHCP: Don't run double EXPIRE hooks on carrier loss
- DHCP: free the state when dropping on state NONE
- BSD: don't send uninitialised memory using ps_root_indirectioctl
- Fix fallback_time option
- IPv4: Ignore DHCP state when building routes
- route: Routes may not have an interface assinged
- options: Ensure that an overly long bitflag string does not crash
- options: Don't assume vsio options have an argument
- common: Cast via uintptr_t rather than unsigned long in UNCONST
- privsep: Ensure we recv for real after a successful recv MSG_PEEK
- DHCP: Add parentheses to macro definitions
- ipv6nd: empty IPV6RA_EXPIRE eloop queue when dropping
- privsep: enforce message boundaries with MSG_EOR on our messages
- Protocols will notify when dhcpcd can exit
- DHCP: Don't request T1 and T2
- DHCP: Don't request a lease time
- DHCP6: Don't exit if using DHCP4 INFORM in non manager mode
- ND: Route Information Option prefix is optional
- ipv6: respect slaac hwaddr to really use the hwaddr
- When stopping all interfaces at exit and releasing, remove persistance
- NetBSD: Delete RTF_CONNECTED route when changing it
- privsep: Drain the log when the root process is exiting
- eloop: vastly reworked, kqueue and epoll support on by default
- CVE-2025-70102: NULL pointer dereference in
- References
Affected packages
SUSE:Linux Enterprise Server 16.0 / dhcpcd
Package
- Name
- dhcpcd
- Purl
- pkg:rpm/suse/dhcpcd&distro=SUSE%20Linux%20Enterprise%20Server%2016.0