Branch: refs/heads/master Home: https://github.com/openSUSE/wicked Commit: 9c1a64fdb77772169f7b28550978534c125b7e40 https://github.com/openSUSE/wicked/commit/9c1a64fdb77772169f7b28550978534c12... Author: Marius Tomaschewski Date: 2020-02-24 (Mon, 24 Feb 2020) Changed paths: M src/dhcp6/fsm.c Log Message: ----------- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903) ni_dhcp6_fsm_parse_client_options() frees msg->lease without clearing it to NULL, leading to UAF. Commit: b5d618de07819d60ace7b2741f62d83d011be3f8 https://github.com/openSUSE/wicked/commit/b5d618de07819d60ace7b2741f62d83d01... Author: Rubén Torrero Marijnissen Date: 2020-02-24 (Mon, 24 Feb 2020) Changed paths: M src/dhcp4/protocol.c Log Message: ----------- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905) Commit: 127876d452e44045f6470c1e44b1c95b48437f81 https://github.com/openSUSE/wicked/commit/127876d452e44045f6470c1e44b1c95b48... Author: Rubén Torrero Marijnissen Date: 2020-02-24 (Mon, 24 Feb 2020) Changed paths: M src/dhcp6/protocol.c Log Message: ----------- dhcp6: don't add free'd IA to ia_pd_list on T1>T2 (CVE-2019-18903,bsc#1160904) Commit: e94fb47a5e578842bb305a8c232e3df718e8794d https://github.com/openSUSE/wicked/commit/e94fb47a5e578842bb305a8c232e3df718... Author: Rubén Torrero Marijnissen Date: 2020-02-24 (Mon, 24 Feb 2020) Changed paths: M src/dhcp4/fsm.c Log Message: ----------- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906) Commit: 0699d59048f2e67d6e29f5cd8b017903d061e216 https://github.com/openSUSE/wicked/commit/0699d59048f2e67d6e29f5cd8b017903d0... Author: Marius Tomaschewski Date: 2020-02-26 (Wed, 26 Feb 2020) Changed paths: M src/dhcp4/fsm.c M src/dhcp4/protocol.c M src/dhcp6/fsm.c M src/dhcp6/protocol.c Log Message: ----------- Merge pull request #828 from rtorrero/security-1 security: memory usage errors in DHCPv4 and DHCPv6 handling Compare: https://github.com/openSUSE/wicked/compare/f62ab04162fd...0699d59048f2