[Deepin Integration]~[v25-Release] fix: CVE-2026-6893 - DHCP command injection via printf %q escaping by deepin-ci-robot@deepin-community/dracut by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
dracut	103-1deepin2

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4280/testing/ ./

Changelog | 更新信息

dracut (103-1deepin2) unstable; urgency=medium

• Fix CVE-2026-16445: DHCP command injection in NetworkManager-based initrd
  • Backport upstream commit to fix improper shell escaping in nm-run.sh
  • CVE-2026-16445: remote attacker on adjacent network can exploit
    specially crafted DHCP options for root code execution

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#4280