Branch: refs/heads/master
Home: https://github.com/openSUSE/wicked
Commit: 9c1a64fdb77772169f7b28550978534c125b7e40
https://github.com/openSUSE/wicked/commit/9c1a64fdb77772169f7b28550978534c12...
Author: Marius Tomaschewski
Date: 2020-02-24 (Mon, 24 Feb 2020)
Changed paths:
M src/dhcp6/fsm.c
Log Message:
-----------
dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
ni_dhcp6_fsm_parse_client_options() frees msg->lease without clearing
it to NULL, leading to UAF.
Commit: b5d618de07819d60ace7b2741f62d83d011be3f8
https://github.com/openSUSE/wicked/commit/b5d618de07819d60ace7b2741f62d83d01...
Author: Rubén Torrero Marijnissen
Date: 2020-02-24 (Mon, 24 Feb 2020)
Changed paths:
M src/dhcp4/protocol.c
Log Message:
-----------
dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
Commit: 127876d452e44045f6470c1e44b1c95b48437f81
https://github.com/openSUSE/wicked/commit/127876d452e44045f6470c1e44b1c95b48...
Author: Rubén Torrero Marijnissen
Date: 2020-02-24 (Mon, 24 Feb 2020)
Changed paths:
M src/dhcp6/protocol.c
Log Message:
-----------
dhcp6: don't add free'd IA to ia_pd_list on T1>T2 (CVE-2019-18903,bsc#1160904)
Commit: e94fb47a5e578842bb305a8c232e3df718e8794d
https://github.com/openSUSE/wicked/commit/e94fb47a5e578842bb305a8c232e3df718...
Author: Rubén Torrero Marijnissen
Date: 2020-02-24 (Mon, 24 Feb 2020)
Changed paths:
M src/dhcp4/fsm.c
Log Message:
-----------
dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
Commit: 0699d59048f2e67d6e29f5cd8b017903d061e216
https://github.com/openSUSE/wicked/commit/0699d59048f2e67d6e29f5cd8b017903d0...
Author: Marius Tomaschewski
Date: 2020-02-26 (Wed, 26 Feb 2020)
Changed paths:
M src/dhcp4/fsm.c
M src/dhcp4/protocol.c
M src/dhcp6/fsm.c
M src/dhcp6/protocol.c
Log Message:
-----------
Merge pull request #828 from rtorrero/security-1
security: memory usage errors in DHCPv4 and DHCPv6 handling
Compare: https://github.com/openSUSE/wicked/compare/f62ab04162fd...0699d59048f2
