Threats affecting pkg:rpm/suse/wicked

A security update for wicked addresses an indirect remote shell command injection vulnerability via unsanitized DHCP strings and leaseinfo dump. The update fixes escaping of single-quotes in leaseinfo dump output used by wicked test commands and written to leaseinfo files, restricts allowed characters in timezone options per RFC4833, and discards string values containing single-quotes in other options. The update also triggers regeneration of initrd containing wicked binaries when upgrading from versions 0.6.78 or earlier.