Debian alert DLA-2552-1 (connman)

From:
             
 
Thorsten Alteholz <debian@alteholz.de>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2552-1] connman security update
Date:
             
 
Tue, 09 Feb 2021 21:00:02 +0000
Message-ID:
             
 
<alpine.DEB.2.21.2102092058570.7933@postfach.intern.alteholz.me>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2552-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
February 09, 2021                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : connman
Version        : 1.33-3+deb9u2
CVE ID         : CVE-2021-26675 CVE-2021-26676


A remote information leak vulnerability and a remote buffer overflow
vulnerability were discovered in ConnMan, a network manager for embedded
devices, which could result in denial of service or the execution of
arbitrary code.


For Debian 9 stretch, these problems have been fixed in version
1.33-3+deb9u2.

We recommend that you upgrade your connman packages.

For the detailed security status of connman please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/connman

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=XYk2
-----END PGP SIGNATURE-----