[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for dhcpcd issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jun 26 05:26:11 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
78765c8f by Salvatore Bonaccorso at 2026-06-26T06:25:49+02:00
Add Debian bug reference for dhcpcd issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3389,23 +3389,23 @@ CVE-2026-56225 (Capgo before 12.128.2 contains an authorization bypass vulnerabi
 CVE-2026-56222 (Capgo before 12.128.2 contains an authorization bypass vulnerability i ...)
 	NOT-FOR-US: Cap-go
 CVE-2026-56117 (dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-af ...)
-	- dhcpcd <unfixed>
+	- dhcpcd <unfixed> (bug #1140767)
 	[trixie] - dhcpcd <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/NetworkConfiguration/dhcpcd/commit/78ea09ed1633a583dbcde6e7bab9df4639ec8a34
 CVE-2026-56116 (dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak ...)
-	- dhcpcd <unfixed>
+	- dhcpcd <unfixed> (bug #1140767)
 	[trixie] - dhcpcd <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/NetworkConfiguration/dhcpcd/commit/708b4a56bae080a5b18c2e0c4c6fbe103131a2b0
 CVE-2026-56115 (Bootimus through 0.1.70 contains a broken access control vulnerability ...)
-	- dhcpcd <unfixed>
+	- dhcpcd <unfixed> (bug #1140767)
 	[trixie] - dhcpcd <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/NetworkConfiguration/dhcpcd/commit/2f00c7bfc408b6582d331932dfa47829c4819029
 CVE-2026-56114 (dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte st ...)
-	- dhcpcd <unfixed>
+	- dhcpcd <unfixed> (bug #1140767)
 	[trixie] - dhcpcd <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/NetworkConfiguration/dhcpcd/commit/2f00c7bfc408b6582d331932dfa47829c4819029
 CVE-2026-56113 (dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-af ...)
-	- dhcpcd <unfixed>
+	- dhcpcd <unfixed> (bug #1140767)
 	[trixie] - dhcpcd <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/NetworkConfiguration/dhcpcd/commit/5733d3c59a5651f64357ac11c98b4f39895c8d25
 CVE-2026-55736 (Improperly Controlled Modification of Dynamically-Determined Object At ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/78765c8f389a449049d41199d13d7096dc932483

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/78765c8f389a449049d41199d13d7096dc932483
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260626/6e0bb604/attachment.htm>


More information about the debian-security-tracker-commits mailing list