{"id":"openSUSE-SU-2026:22075-1","summary":"Security update for agama","details":"This update for agama fixes the following issues:\n\nChanges in agama:\n\n- Added support for the \"inst.listen_on\" boot parameter\n\n  - The \"inst.remote=0\" option disables remote access\n    (needed for CC compliant installation jsc#PED-16702)\n  - It is possible to specify IP address (both IPv4 and IPv6)\n    or network interface, accepts comma separated list\n  - agama-web-server --address2 option removed, --address can now be repeated (jsc#AGM-153)\n\nUpdate runtime dependencies to:\n\n  - tracing-subscriber 0.3.20, CVE-2025-58160 (bsc#1249014)\n  - bytes 1.12.1, CVE-2026-25541 (bsc#1274203)\n  - serde_with 3.21.0, GHSA-7gcf-g7xr-8hxj (bsc#1271854)\n\n- Clear the IP configuration (dns-search, addresses, gateway, ...)\n  for disabled IP protocols, including values kept from the\n  existing connection, to avoid errors in NetworkManager\n  (bsc#1271644).\n\n- Handle VLAN flags properly, using the kernel default value\n  of VLAN_FLAG_REORDER_HDR when not specified\n  (bsc#1271079).\n\n- Rename the network device match settings attribute to \"match\"\n  (bsc#1271235).\n","modified":"2026-10-19T17:24:28.638870552Z","published":"2026-10-12T16:20:27Z","related":["CVE-2025-58160","CVE-2026-25541"],"upstream":["CVE-2025-58160","CVE-2026-25541"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1249014"},{"type":"REPORT","url":"https://bugzilla.suse.com/1271079"},{"type":"REPORT","url":"https://bugzilla.suse.com/1271235"},{"type":"REPORT","url":"https://bugzilla.suse.com/1271644"},{"type":"REPORT","url":"https://bugzilla.suse.com/1271854"},{"type":"REPORT","url":"https://bugzilla.suse.com/1274203"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-58160"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-25541"}],"affected":[{"package":{"name":"agama","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/agama&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17+699.92879916c-160000.13.1"}]}],"ecosystem_specific":{"binaries":[{"agama-cli-zsh-completion":"17+699.92879916c-160000.13.1","agama-openapi":"17+699.92879916c-160000.13.1","agama-scripts":"17+699.92879916c-160000.13.1","agama":"17+699.92879916c-160000.13.1","agama-autoinstall":"17+699.92879916c-160000.13.1","agama-cli":"17+699.92879916c-160000.13.1","agama-cli-bash-completion":"17+699.92879916c-160000.13.1","agama-cli-fish-completion":"17+699.92879916c-160000.13.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22075-1.json"}}],"schema_version":"1.9.0"}