[wicked-commit] [openSUSE/wicked] 9c1a64: dhcp6: fix use-after-free on option parsing failur...
Branch: refs/heads/testing Home: https://github.com/openSUSE/wicked Commit: 9c1a64fdb77772169f7b28550978534c125b7e40 https://github.com/openSUSE/wicked/commit/9c1a64fdb77772169f7b28550978534c12... Author: Marius Tomaschewski <mt@suse.de> Date: 2020-02-24 (Mon, 24 Feb 2020) Changed paths: M src/dhcp6/fsm.c Log Message: ----------- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903) ni_dhcp6_fsm_parse_client_options() frees msg->lease without clearing it to NULL, leading to UAF. Commit: b5d618de07819d60ace7b2741f62d83d011be3f8 https://github.com/openSUSE/wicked/commit/b5d618de07819d60ace7b2741f62d83d01... Author: Rubén Torrero Marijnissen <rtorreromarijnissen@suse.com> Date: 2020-02-24 (Mon, 24 Feb 2020) Changed paths: M src/dhcp4/protocol.c Log Message: ----------- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905) Commit: 127876d452e44045f6470c1e44b1c95b48437f81 https://github.com/openSUSE/wicked/commit/127876d452e44045f6470c1e44b1c95b48... Author: Rubén Torrero Marijnissen <rtorreromarijnissen@suse.com> Date: 2020-02-24 (Mon, 24 Feb 2020) Changed paths: M src/dhcp6/protocol.c Log Message: ----------- dhcp6: don't add free'd IA to ia_pd_list on T1>T2 (CVE-2019-18903,bsc#1160904) Commit: e94fb47a5e578842bb305a8c232e3df718e8794d https://github.com/openSUSE/wicked/commit/e94fb47a5e578842bb305a8c232e3df718... Author: Rubén Torrero Marijnissen <rtorreromarijnissen@suse.com> Date: 2020-02-24 (Mon, 24 Feb 2020) Changed paths: M src/dhcp4/fsm.c Log Message: ----------- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906) Commit: 0699d59048f2e67d6e29f5cd8b017903d061e216 https://github.com/openSUSE/wicked/commit/0699d59048f2e67d6e29f5cd8b017903d0... Author: Marius Tomaschewski <mt@suse.com> Date: 2020-02-26 (Wed, 26 Feb 2020) Changed paths: M src/dhcp4/fsm.c M src/dhcp4/protocol.c M src/dhcp6/fsm.c M src/dhcp6/protocol.c Log Message: ----------- Merge pull request #828 from rtorrero/security-1 security: memory usage errors in DHCPv4 and DHCPv6 handling Commit: 082b635cd1ae7c893e91d221d24dd36817ab0350 https://github.com/openSUSE/wicked/commit/082b635cd1ae7c893e91d221d24dd36817... Author: Marius Tomaschewski <mt@suse.de> Date: 2020-02-26 (Wed, 26 Feb 2020) Changed paths: M wicked.spec.in Log Message: ----------- spec: adjust rpm spec file licenses and url tags Commit: d539bba071c5837bec94a0cdf1c44060ad643e1e https://github.com/openSUSE/wicked/commit/d539bba071c5837bec94a0cdf1c44060ad... Author: Marius Tomaschewski <mt@suse.de> Date: 2020-02-26 (Wed, 26 Feb 2020) Changed paths: M VERSION Log Message: ----------- version 0.6.62 Commit: 1244bccb12fdc412ccfd1360bd892c77ccd38d65 https://github.com/openSUSE/wicked/commit/1244bccb12fdc412ccfd1360bd892c77cc... Author: Rubén Torrero Marijnissen <rtorreromarijnissen@suse.com> Date: 2020-02-26 (Wed, 26 Feb 2020) Changed paths: M VERSION M wicked.spec.in Log Message: ----------- Merge pull request #829 from mtomaschewski/release-0.6.62 release 0.6.62 Compare: https://github.com/openSUSE/wicked/compare/f62ab04162fd...1244bccb12fd
participants (1)
-
Rubén Torrero Marijnissen