[Git][security-tracker-team/security-tracker][master] Add CVE-2026-115863/connman

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5ca1ee94 by Salvatore Bonaccorso at 2026-10-24T12:36:17+02:00
Add CVE-2026-115863/connman

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -264,7 +264,9 @@ CVE-2026-115877 (Twisted is an event-based framework for internet applications,
 	NOTE: Fixed by: https://github.com/twisted/twisted/commit/022b6f7feb5980166c71f54e2c0d8f4f21ff6e1a (twisted-26.10.0rc1)
 	NOTE: Fixed by: https://github.com/twisted/twisted/commit/1616f702d36eda8990a5a5b22ad70fab140a7eb1 (twisted-26.10.0rc1)
 CVE-2026-115863 (ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Rep ...)
-	TODO: check
+	- connman <unfixed>
+	NOTE: Introduced with: https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=bb06c47101ca243fa5c04fb4b03fe2a12420d280
+	NOTE: https://lore.kernel.org/connman/179274561161.81299.4579745057858200074@pm.me/
 CVE-2026-115845 (An incomplete list of disallowed inputs in the Python code validator o ...)
 	NOT-FOR-US: Amazon
 CVE-2026-115813 (Server-side request forgery in the model download path in Amazon Web S ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5ca1ee94ef7889bd2645efcf3bb8fdf565faeaa6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5ca1ee94ef7889bd2645efcf3bb8fdf565faeaa6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/c8eaf4e9/attachment.htm>