This bug was fixed in the package dracut - 112-1
---------------
dracut (112-1) unstable; urgency=medium
* New upstream release:
- security fixes (CVE-2026-6893 and CVE-2026-16445, closes: #1139725):
+ network-legacy: sanitize DHCP values in dhclient-script.sh
+ overlayfs-crypt: prevent eval injection in parse_overlay_opts()
+ dracut-lib: sanitize variable assignments using eval
+ systemd-networkd: escape values from DHCP options
+ iscsi: normalize initiator and target names
+ net-lib: validate iSCSI LUN parameters
- dracut: default to hostonly_cmdline=no in chroot (Closes: #1132794)
- resume: include in hostonly sloppy mode if supported by kernel
(LP: #2158694)
* Drop patches applied upstream
* dracut-core: add new qcom-adsp module
* dracut-network: add new chrony module
* Add upstream signing key
-- Benjamin Drung <[email protected]> Mon, 03 Aug 2026 02:06:07 +0200
** Changed in: dracut (Ubuntu)
Status: In Progress => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-16445
** CVE added: https://cve.org/CVERecord?id=CVE-2026-6893
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2158694
Title:
dracut required resume module to perform S4 hibernation gracefully.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dracut/+bug/2158694/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
