[Git][security-tracker-team/security-tracker][master] Add CVE-2025-70102/dhcpcd

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c5b12afa by Salvatore Bonaccorso at 2026-06-19T22:34:19+02:00
Add CVE-2025-70102/dhcpcd

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3572,7 +3572,9 @@ CVE-2026-10780 (The Static Block plugin for WordPress is vulnerable to Insecure
 CVE-2026-10635 (On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the pag ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2025-70102 (A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/ ...)
-	TODO: check
+	- dhcpcd 1:10.3.1-1
+	NOTE: https://github.com/NetworkConfiguration/dhcpcd/issues/567
+	NOTE: Fixed by: https://github.com/NetworkConfiguration/dhcpcd/commit/117742d755b591764036dd4218f314f748a3d2b7 (v10.3.1)
 CVE-2025-69332 (Subscriber Broken Access Control in Bookify <= 1.1.1 versions.)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-68872 (Unauthenticated Cross Site Scripting (XSS) in Eli's WordCents adS ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5b12afa5445371fc24a278386198df0ab7dcc01

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5b12afa5445371fc24a278386198df0ab7dcc01
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260619/847be4de/attachment.htm>