connman - Debian Package Tracker

general

source: connman (main)
version: 2.0-2
maintainer: Dylan Aïssi (DMD) (LowNMU)
uploaders: Alexander Sack (DMD) – Alf Gaida (DMD) – Vignesh Raman (DMD)
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.36-2.2+deb11u2
o-o-sec: 1.36-2.2+deb11u2
oldstable: 1.41-3
stable: 1.44-3
testing: 2.0-2
unstable: 2.0-2

versioned links

1.36-2.2+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.41-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.44-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

connman (23 bugs: 0, 23, 0, 0)
connman-doc
connman-tests
connman-vpn

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-115863: ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (option 24) value into a 1026-byte stack buffer dns_name regardless of the actual option length, then walks DNS labels with an unbounded "c += jump + 1" loop. A crafted DHCPv6 REPLY with a DOMAIN_LIST option of >= 1025 non-zero bytes makes the label walk leave the buffer and read/write '.' past its end in attacker-chosen strides. An on-link attacker can trigger this without authentication via a forged Router Advertisement (O=1) and a forged DHCPv6 REPLY matching xid/CLIENTID with a long DOMAIN_LIST. The impact is unauthenticated on-link crash of connmand (runs as root). This was introduced in bb06c47.

Created: 2026-10-24 Last update: 2026-11-03 11:30

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-115863: ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (option 24) value into a 1026-byte stack buffer dns_name regardless of the actual option length, then walks DNS labels with an unbounded "c += jump + 1" loop. A crafted DHCPv6 REPLY with a DOMAIN_LIST option of >= 1025 non-zero bytes makes the label walk leave the buffer and read/write '.' past its end in attacker-chosen strides. An on-link attacker can trigger this without authentication via a forged Router Advertisement (O=1) and a forged DHCPv6 REPLY matching xid/CLIENTID with a long DOMAIN_LIST. The impact is unauthenticated on-link crash of connmand (runs as root). This was introduced in bb06c47.

Created: 2026-10-24 Last update: 2026-11-03 11:30

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.0-3, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit f0f23fd9184cd31d56d5c37450f85216c335c1cd
Author: Dylan Aïssi <dylan.aissi@collabora.com>
Date:   Tue Jun 16 14:53:49 2026 +0200

    Updating the connman Uploaders list (Closes: #1139859)
    
    Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

https://salsa.debian.org/api/v4/projects/debian%2Fconnman API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2026-06-16 Last update: 2026-10-29 15:02

lintian reports 4 warnings normal

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2025-08-11 Last update: 2025-08-12 00:00

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2026-115863: (needs triaging) ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (option 24) value into a 1026-byte stack buffer dns_name regardless of the actual option length, then walks DNS labels with an unbounded "c += jump + 1" loop. A crafted DHCPv6 REPLY with a DOMAIN_LIST option of >= 1025 non-zero bytes makes the label walk leave the buffer and read/write '.' past its end in attacker-chosen strides. An on-link attacker can trigger this without authentication via a forged Router Advertisement (O=1) and a forged DHCPv6 REPLY matching xid/CLIENTID with a long DOMAIN_LIST. The impact is unauthenticated on-link crash of connmand (runs as root). This was introduced in bb06c47.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-10-24 Last update: 2026-11-03 11:30

news

[rss feed]

[2026-05-20] connman 2.0-2 MIGRATED to testing (Debian testing watch)
[2026-05-13] Accepted connman 2.0-2 (source) into unstable (Dylan Aïssi)
[2026-04-17] Accepted connman 2.0-1 (source) into experimental (Dylan Aïssi)
[2025-12-18] connman 1.45-3 MIGRATED to testing (Debian testing watch)
[2025-12-12] Accepted connman 1.45-3 (source) into unstable (Dylan Aïssi)
[2025-08-17] connman 1.45-2 MIGRATED to testing (Debian testing watch)
[2025-08-11] Accepted connman 1.45-2 (source) into unstable (Dylan Aïssi)
[2025-08-01] Accepted connman 1.45-1 (source) into experimental (Dylan Aïssi)
[2025-05-20] connman 1.44-3 MIGRATED to testing (Debian testing watch)
[2025-05-13] Accepted connman 1.44-3 (source) into unstable (Dylan Aïssi)
[2025-05-06] Accepted connman 1.44-2 (source) into unstable (Dylan Aïssi)
[2025-04-24] connman 1.44-1 MIGRATED to testing (Debian testing watch)
[2025-04-12] Accepted connman 1.44-1 (source) into unstable (Dylan Aïssi)
[2024-09-21] connman 1.43-1 MIGRATED to testing (Debian testing watch)
[2024-09-16] Accepted connman 1.43-1 (source) into unstable (Dylan Aïssi)
[2024-06-06] connman 1.42-5 MIGRATED to testing (Debian testing watch)
[2024-06-05] connman REMOVED from testing (Debian testing watch)
[2024-01-11] connman 1.42-5 MIGRATED to testing (Debian testing watch)
[2024-01-05] Accepted connman 1.42-5 (source) into unstable (Dylan Aïssi)
[2023-12-21] Accepted connman 1.42-4 (source) into experimental (Dylan Aïssi)
[2023-12-09] connman 1.42-3 MIGRATED to testing (Debian testing watch)
[2023-12-04] Accepted connman 1.42-3 (source) into unstable (Dylan Aïssi)
[2023-12-03] Accepted connman 1.42-2 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Dylan Aïssi)
[2023-11-20] connman 1.42-1 MIGRATED to testing (Debian testing watch)
[2023-11-14] Accepted connman 1.42-1 (source) into unstable (Vignesh Raman) (signed by: Dylan Aïssi)
[2023-06-08] Accepted connman 1.36-2.2+deb11u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Aron Xu)
[2023-05-30] Accepted connman 1.36-2.2+deb11u2 (source) into stable-security (Debian FTP Masters) (signed by: Aron Xu)
[2023-04-21] Accepted connman 1.36-2.1~deb10u5 (source amd64 all) into oldstable (Chris Lamb)
[2023-04-19] connman 1.41-3 MIGRATED to testing (Debian testing watch)
[2023-04-14] Accepted connman 1.41-3 (source) into unstable (Vignesh Raman) (signed by: bage@debian.org)

bugs [bug history graph]

all: 27
RC: 0
I&N: 24
M&W: 2
F&P: 1
patch: 0

links

homepage
lintian (0, 4)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.0-2
1 bug