Updated dhcpcd packages fix security vulnerabilities

Attackers can send a crafted DHCPv6 ADVERTISE message containing an IAPD IAPREFIX /0 with a valid OPTIONPDEXCLUDE using an exclude prefix length of /121 through /128 to trigger the out-of-bounds write and potentially corrupt adjacent stack memory CVE: CVE-2026-56114. Attackers can repeatedly send...

RLSA-2026:54210 Moderate: dhcpcd security update

The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery through NDP, DHCPv4 and DHCPv6 protocols. Security Fixes: dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Route...

dhcpcd security update

An update is available for dhcpcd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dhcpcd package provides a minimalistic network configuration daemon that...

RHSA-2026:54210 Red Hat Security Advisory: dhcpcd security update

Bulletin has no description...

AlmaLinux 10 : dhcpcd (ALSA-2026:54210)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:54210 advisory. dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Router Advertisement handling CVE-2026-14258 Tenable has extracted the...

dhcpcd security update

10.0.6-11 - Fix CVE-2026-14258...

RockyLinux 10 : dhcpcd (RLSA-2026:54210)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:54210 advisory. dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Router Advertisement handling CVE-2026-14258 Tenable has extracted the...

Moderate: Red Hat Security Advisory: dhcpcd security update

An update for dhcpcd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Router Advertisement handling

A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser ...

ALSA-2026:54210 Moderate: dhcpcd security update

The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery through NDP, DHCPv4 and DHCPv6 protocols. Security Fixes: dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Route...

RHEL 10 : dhcpcd (RHSA-2026:54210)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54210 advisory. The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery...

dhcpcd-10.5.0-1.1 on GA media (moderate)

dhcpcd-10.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11473-1 Rating: moderate Cross-References: CVE-2026-56113 CVE-2026-56115 CVE-2026-56116 CVE-2026-56117 CVSS scores: CVE-2026-56113 SUSE : 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56113 SUSE : 6...

OPENSUSE-SU-2026:11473-1 dhcpcd-10.5.0-1.1 on GA media

These are all security issues fixed in the dhcpcd-10.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-56117 affecting package dhcpcd for versions less than 10.0.8-2

CVE-2026-56117 affecting package dhcpcd for versions less than 10.0.8-2. A patched version of the package is available...

CVE-2026-56113 affecting package dhcpcd for versions less than 10.0.8-4

CVE-2026-56113 affecting package dhcpcd for versions less than 10.0.8-4. A patched version of the package is available...

CVE-2026-56116 affecting package dhcpcd for versions less than 10.0.8-2

CVE-2026-56116 affecting package dhcpcd for versions less than 10.0.8-2. A patched version of the package is available...

CVE-2026-14258 affecting package dhcpcd for versions less than 10.0.8-4

CVE-2026-14258 affecting package dhcpcd for versions less than 10.0.8-4. A patched version of the package is available...

SUSE-SU-2026:22561-1 Security update for dhcpcd

This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in parseoption when processing a specially crafted configuration input bsc1268761. Changes for dhcpcd: options: Ensure ldop is not NULL dereferenced DHCP: Don't run double EXPIRE hooks on...

SUSE-SU-2026:22542-1 Security update for dhcpcd

This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in parseoption when processing a specially crafted configuration input bsc1268761. Changes for dhcpcd: options: Ensure ldop is not NULL dereferenced DHCP: Don't run double EXPIRE hooks on...

OPENSUSE-SU-2026:21220-1 Security update for dhcpcd

This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in parseoption when processing a specially crafted configuration input bsc1268761. Changes for dhcpcd: options: Ensure ldop is not NULL dereferenced DHCP: Don't run double EXPIRE hooks on...