Debian Patches

Status for connman/1.41-3

Patch Description Author Forwarded Bugs Origin Last update
01-init-script-lsb-headers.patch connman: Missing LSB header in init.d script Petter Reinholdtsen <pere@hungry.com> no debian
systemd-service-file-shutdown-problems.patch Prevent systemd service file shutdown problems Silence lintian warnings about, read more at
https://lintian.debian.org/tags/systemd-service-file-shutdown-problems.html
no 2019-05-01
wispr-Add-reference-counter-to-portal-context.patch [PATCH 1/4] wispr: Add reference counter to portal context
Track the connman_wispr_portal_context live time via a
refcounter. This only adds the infrastructure to do proper reference
counting.
Daniel Wagner <wagi@monom.org> no 2022-07-05
wispr-Update-portal-context-references.patch [PATCH 2/4] wispr: Update portal context references
Maintain proper portal context references to avoid UAF.
Daniel Wagner <wagi@monom.org> no 2022-07-05
gweb-Fix-OOB-write-in-received_data.patch [PATCH 3/4] gweb: Fix OOB write in received_data()
There is a mismatch of handling binary vs. C-string data with memchr
and strlen, resulting in pos, count, and bytes_read to become out of
sync and result in a heap overflow. Instead, do not treat the buffer
as an ASCII C-string. We calculate the count based on the return value
of memchr, instead of strlen.
Nathan Crandall <ncrandall@tesla.com> no 2022-07-12
gdhcp-Verify-and-sanitize-packet-length-first.patch [PATCH] gdhcp: Verify and sanitize packet length first
Avoid overwriting the read packet length after the initial test. Thus
move all the length checks which depends on the total length first
and do not use the total lenght from the IP packet afterwards.

Fixes CVE-2023-28488

Reported by Polina Smirnova <moe.hwr@gmail.com>
Daniel Wagner <wagi@monom.org> no 2023-04-11

All known versions for source package 'connman'

Links