[Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-32366/connman

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue May 13 08:16:33 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
336e1c9d by Salvatore Bonaccorso at 2025-05-13T09:15:56+02:00
Update status for CVE-2025-32366/connman

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11551,9 +11551,9 @@ CVE-2025-32369 (Kentico Xperience before 13.0.181 allows authenticated users to
 	NOT-FOR-US: Kentico Xperience
 CVE-2025-32366 (In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length th ...)
 	- connman <unfixed> (bug #1102193)
-	[trixie] - connman <no-dsa> (Minor issue)
 	[bookworm] - connman <no-dsa> (Minor issue)
 	[bullseye] - connman <postponed> (Minor issue)
+	NOTE: Fixed by: https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=8d3be0285f1d4667bfe85dba555c663eb3d704b4
 CVE-2025-32365 (Poppler before 25.04.0 allows crafted input files to trigger out-of-bo ...)
 	{DLA-4141-1}
 	- poppler 25.03.0-3 (bug #1102191)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/336e1c9d2e32e4a73591ada489be1de3dd20752a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/336e1c9d2e32e4a73591ada489be1de3dd20752a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250513/8e4f935f/attachment.htm>


More information about the debian-security-tracker-commits mailing list