• Bug#1106043: unblock: connman/1.44-3

    From =?UTF-8?Q?Dylan_A=C3=AFssi?=@21:1/5 to All on Mon May 19 10:20:01 2025
    XPost: linux.debian.devel.release

    This is a multi-part message in MIME format.
    Package: release.debian.org
    Severity: normal
    X-Debbugs-Cc: connman@packages.debian.org
    Control: affects -1 + src:connman
    User: release.debian.org@packages.debian.org
    Usertags: unblock

    Please unblock package connman

    [ Reason ]

    To fix two security issues CVE-2025-32366 (Closes: #1102193) and
    CVE-2025-32743 (Closes: #1103530). Patches are cherry-picked from
    upstream and are fairly trivial.


    [ Impact ]
    Less security issues to Trixie's release that would need to be fixed
    latter by security or LTS teams.

    [ Tests ]
    The package builds fine and is in unstable/Ubuntu since ~ a week without
    any complain.

    [ Risks ]
    The risks are low since these patches come from upstream and are trivial.

    [ Checklist ]
    [x] all changes are documented in the d/changelog
    [x] I reviewed all changes and I approve them
    [x] attach debdiff against the package in testing




    unblock connman/1.44-3 ZGlmZiAtTnJ1IGNvbm5tYW4tMS40NC9kZWJpYW4vY2hhbmdlbG9nIGNvbm5tYW4tMS40NC9k ZWJpYW4vY2hhbmdlbG9nCi0tLSBjb25ubWFuLTEuNDQvZGViaWFuL2NoYW5nZWxvZwkyMDI1 LTA0LTEyIDE3OjQwOjIxLjAwMDAwMDAwMCArMDIwMAorKysgY29ubm1hbi0xLjQ0L2RlYmlh bi9jaGFuZ2Vsb2cJMjAyNS0wNS0xMyAwOTowNjo1Ny4wMDAwMDAwMDAgKzAyMDAKQEAgLTEs MyArMSwxOCBAQAorY29ubm1hbiAoMS40NC0zKSB1bnN0YWJsZTsgdXJnZW5jeT1tZWRpdW0K KworICAqIENoZXJyeS1waWNrIHVwc3RyZWFtIHBhdGNoIGZpeGluZyBDVkUtMjAyNS0zMjM2 NiAoQ2xvc2VzOiAjMTEwMjE5MykKKyAgKiBTZXQgbXlzZWxmIGFzIE1haW50YWluZXIuCisg ICogSW1wcm92ZSBERVAzIGhlYWRlcnMgb2Ygb3RoZXIgcGF0Y2hlcy4KKworIC0tIER5bGFu IEHDr3NzaSA8ZGFpc3NpQGRlYmlhbi5vcmc+ICBUdWUsIDEzIE1heSAyMDI1IDA5OjA2OjU3 ICswMjAwCisKK2Nvbm5tYW4gKDEuNDQtMikgdW5zdGFibGU7IHVyZ2VuY3k9bWVkaXVtCisK KyAgKiBUZWFtIHVwbG9hZC4KKyAgKiBDaGVycnktcGljayB1cHN0cmVhbSBwYXRjaCBmaXhp bmcgQ1ZFLTIwMjUtMzI3NDMgKENsb3NlczogIzExMDM1MzApCisKKyAtLSBEeWxhbiBBw69z c2kgPGRhaXNzaUBkZWJpYW4ub3JnPiAgVHVlLCAwNiBNYXkgMjAyNSAyMjo0Nzo1NCArMDIw MAorCiBjb25ubWFuICgxLjQ0LTEpIHVuc3RhYmxlOyB1cmdlbmN5PW1lZGl1bQogCiAgICog VGVhbSB1cGxvYWQuCmRpZmYgLU5ydSBjb25ubWFuLTEuNDQvZGViaWFuL2NvbnRyb2wgY29u bm1hbi0xLjQ0L2RlYmlhbi9jb250cm9sCi0tLSBjb25ubWFuLTEuNDQvZGViaWFuL2NvbnRy b2wJMjAyNS0wNC0xMiAxNzo0MDoyMS4wMDAwMDAwMDAgKzAyMDAKKysrIGNvbm5tYW4tMS40 NC9kZWJpYW4vY29udHJvbAkyMDI1LTA1LTEzIDA5OjA2OjU3LjAwMDAwMDAwMCArMDIwMApA QCAtMSw3ICsxLDggQEAKIFNvdXJjZTogY29ubm1hbgotTWFpbnRhaW5lcjogVmlnbmVzaCBS YW1hbiA8dmlnbmVzaC5yYW1hbkBjb2xsYWJvcmEuY29tPgorTWFpbnRhaW5lcjogRHlsYW4g QcOvc3NpIDxkYWlzc2lAZGViaWFuLm9yZz4KIFVwbG9hZGVyczogQWxleGFuZGVyIFNhY2sg PGFzYWNAZGViaWFuLm9yZz4sCi0gICAgICAgICAgIEFsZiBHYWlkYSA8YWdhaWRhQHNpZHVj dGlvbi5vcmc+CisgICAgICAgICAgIEFsZiBHYWlkYSA8YWdhaWRhQHNpZHVjdGlvbi5vcmc+ LAorICAgICAgICAgICBWaWduZXNoIFJhbWFuIDx2aWduZXNoLnJhbWFuQGNvbGxhYm9yYS5j b20+CiBTZWN0aW9uOiBuZXQKIFByaW9yaXR5OiBvcHRpb25hbAogQnVpbGQtRGVwZW5kczog ZGViaGVscGVyLWNvbXBhdCAoPSAxMyksCmRpZmYgLU5ydSBjb25ubWFuLTEuNDQvZGViaWFu L3BhdGNoZXMvMDItc3lzdGVtZC1zZXJ2aWNlLWZpbGUtc2h1dGRvd24tcHJvYmxlbXMucGF0 Y2ggY29ubm1hbi0xLjQ0L2RlYmlhbi9wYXRjaGVzLzAyLXN5c3RlbWQtc2VydmljZS1maWxl LXNodXRkb3duLXByb2JsZW1zLnBhdGNoCi0tLSBjb25ubWFuLTEuNDQvZGViaWFuL3BhdGNo ZXMvMDItc3lzdGVtZC1zZXJ2aWNlLWZpbGUtc2h1dGRvd24tcHJvYmxlbXMucGF0Y2gJMjAy NS0wNC0xMiAxNzo0MDoyMS4wMDAwMDAwMDAgKzAyMDAKKysrIGNvbm5tYW4tMS40NC9kZWJp YW4vcGF0Y2hlcy8wMi1zeXN0ZW1kLXNlcnZpY2UtZmlsZS1zaHV0ZG93bi1wcm9ibGVtcy5w YXRjaAkyMDI1LTA1LTEzIDA5OjA2OjU3LjAwMDAwMDAwMCArMDIwMApAQCAtMyw2ICszLDcg QEAKICBodHRwczovL2xpbnRpYW4uZGViaWFuLm9yZy90YWdzL3N5c3RlbWQtc2VydmljZS1m aWxlLXNodXRkb3duLXByb2JsZW1zLmh0bWwKIEZvcndhcmRlZDogbm90IG5lZWRlZAogTGFz dC1VcGRhdGU6IDIwMTktMDUtMDEKK0F1dGhvcjogQWxmIEdhaWRhIDxhZ2FpZGFAc2lkdWN0 aW9uLm9yZz4KIAogLS0tIGEvc3JjL2Nvbm5tYW4td2FpdC1vbmxpbmUuc2VydmljZS5pbgog KysrIGIvc3JjL2Nvbm5tYW4td2FpdC1vbmxpbmUuc2VydmljZS5pbgpkaWZmIC1OcnUgY29u bm1hbi0xLjQ0L2RlYmlhbi9wYXRjaGVzL0NWRS0yMDI1LTMyMzY2LnBhdGNoIGNvbm5tYW4t MS40NC9kZWJpYW4vcGF0Y2hlcy9DVkUtMjAyNS0zMjM2Ni5wYXRjaAotLS0gY29ubm1hbi0x LjQ0L2RlYmlhbi9wYXRjaGVzL0NWRS0yMDI1LTMyMzY2LnBhdGNoCTE5NzAtMDEtMDEgMDE6 MDA6MDAuMDAwMDAwMDAwICswMTAwCisrKyBjb25ubWFuLTEuNDQvZGViaWFuL3BhdGNoZXMv Q1ZFLTIwMjUtMzIzNjYucGF0Y2gJMjAyNS0wNS0xMyAwOTowNjo1Ny4wMDAwMDAwMDAgKzAy MDAKQEAgLTAsMCArMSw0MSBAQAorRnJvbSA4ZDNiZTAyODVmMWQ0NjY3YmZlODVkYmE1NTVj NjYzZWIzZDcwNGI0IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogIuyLoOycpOyg nCjtlZnrtoDsg50t7IaM7ZSE7Yq47Juo7Ja07KCE6rO1KSIgPGlvZXJ0c0Brb29rbWluLmFj LmtyPgorRGF0ZTogTW9uLCAxMiBNYXkgMjAyNSAxMDo0ODoxOCArMDIwMAorU3ViamVjdDog ZG5zcHJveHk6IEFkZHJlc3MgQ1ZFLTIwMjUtMzIzNjYgdnVsbmVyYWJpbGl0eQorCitJbiBD b25ubWFuIHBhcnNlX3JyIGluIGRuc3Byb3h5LmMgaGFzIGEgbWVtY3B5IGxlbmd0aAordGhh dCBkZXBlbmRzIG9uIGFuIFJSIFJETEVOR1RIIHZhbHVlIChpLmUuLCAqcmRsZW49bnRvaHMo cnItPnJkbGVuKQorYW5kIG1lbWNweShyZXNwb25zZStvZmZzZXQsKmVuZCwqcmRsZW4pKS4g SGVyZSwgcmRsZW4gbWF5IGJlIGxhcmdlcgordGhhbiB0aGUgYW1vdW50IG9mIHJlbWFpbmlu ZyBwYWNrZXQgZGF0YSBpbiB0aGUgY3VycmVudCBzdGF0ZSBvZgorcGFyc2luZy4gQXMgYSBy ZXN1bHQsIHZhbHVlcyBvZiBzdGFjayBtZW1vcnkgbG9jYXRpb25zIG1heSBiZSBzZW50Citv dmVyIHRoZSBuZXR3b3JrIGluIGEgcmVzcG9uc2UuCisKK1RoaXMgcGF0Y2ggYWRkcyBhIGNo ZWNrIHRvIGVuc3VyZSB0aGF0ICgqZW5kICsgKnJkbGVuKSBkb2VzIG5vdCBleGNlZWQKK3Ro ZSB2YWxpZCByYW5nZS4gSWYgdGhlIGNvbmRpdGlvbiBpcyB2aW9sYXRlZCwgdGhlIGZ1bmN0 aW9uIHJldHVybnMKKy1FSU5WQUwuCisKK0ZpeGVzOiBDVkUtMjAyNS0zMjM2NgorQnVnLURl YmlhbjogaHR0cHM6Ly9idWdzLmRlYmlhbi5vcmcvMTEwMjE5MworT3JpZ2luOiB1cHN0cmVh bSwgaHR0cHM6Ly9naXQua2VybmVsLm9yZy9wdWIvc2NtL25ldHdvcmsvY29ubm1hbi9jb25u bWFuLmdpdC9jb21taXQvP2lkPThkM2JlMDI4NWYxZDQ2NjdiZmU4NWRiYTU1NWM2NjNlYjNk NzA0YjQKK0ZvcndhcmRlZDogbm90LW5lZWRlZAorLS0tCisgc3JjL2Ruc3Byb3h5LmMgfCAz ICsrKworIDEgZmlsZSBjaGFuZ2VkLCAzIGluc2VydGlvbnMoKykKKworZGlmZiAtLWdpdCBh L3NyYy9kbnNwcm94eS5jIGIvc3JjL2Ruc3Byb3h5LmMKK2luZGV4IDdlZTI2ZDlmZi4uMWRk MmY3ZjVkIDEwMDY0NAorLS0tIGEvc3JjL2Ruc3Byb3h5LmMKKysrKyBiL3NyYy9kbnNwcm94 eS5jCitAQCAtOTk4LDYgKzk5OCw5IEBAIHN0YXRpYyBpbnQgcGFyc2VfcnIoY29uc3QgdW5z aWduZWQgY2hhciAqYnVmLCBjb25zdCB1bnNpZ25lZCBjaGFyICpzdGFydCwKKyAJaWYgKChv ZmZzZXQgKyAqcmRsZW4pID4gKnJlc3BvbnNlX3NpemUpCisgCQlyZXR1cm4gLUVOT0JVRlM7 CisgCisrCWlmICgoKmVuZCArICpyZGxlbikgPiBtYXgpCisrCQlyZXR1cm4gLUVJTlZBTDsK KysKKyAJbWVtY3B5KHJlc3BvbnNlICsgb2Zmc2V0LCAqZW5kLCAqcmRsZW4pOworIAorIAkq ZW5kICs9ICpyZGxlbjsKKy0tIAorY2dpdCAxLjIuMy1rb3JnCisKZGlmZiAtTnJ1IGNvbm5t YW4tMS40NC9kZWJpYW4vcGF0Y2hlcy9DVkUtMjAyNS0zMjc0My5wYXRjaCBjb25ubWFuLTEu NDQvZGViaWFuL3BhdGNoZXMvQ1ZFLTIwMjUtMzI3NDMucGF0Y2gKLS0tIGNvbm5tYW4tMS40 NC9kZWJpYW4vcGF0Y2hlcy9DVkUtMjAyNS0zMjc0My5wYXRjaAkxOTcwLTAxLTAxIDAxOjAw OjAwLjAwMDAwMDAwMCArMDEwMAorKysgY29ubm1hbi0xLjQ0L2RlYmlhbi9wYXRjaGVzL0NW RS0yMDI1LTMyNzQzLnBhdGNoCTIwMjUtMDUtMTMgMDk6MDY6NTcuMDAwMDAwMDAwICswMjAw CkBAIC0wLDAgKzEsNDYgQEAKK0Zyb20gZDkwYjkxMWY2NzYwOTU5YmRmMTM5M2MzOWZlOGQx MTE4MzE1NDkwZiBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFByYXZlZW4gS3Vt YXIgPHByYXZlZW4ua3VtYXJAd2luZHJpdmVyLmNvbT4KK0RhdGU6IFRodSwgMjQgQXByIDIw MjUgMTE6Mzk6MjkgKzAwMDAKK1N1YmplY3Q6IGRuc3Byb3h5OiBGaXggTlVMTC9lbXB0eSBs b29rdXAgY2F1c2luZyBwb3RlbnRpYWwgY3Jhc2gKKworSW4gQ29ubk1hbiB0aHJvdWdoIDEu NDQsIHRoZSBsb29rdXAgc3RyaW5nIGluIG5zX3Jlc29sdiBpbiBkbnNwcm94eS5jCitjYW4g YmUgTlVMTCBvciBhbiBlbXB0eSBzdHJpbmcgd2hlbiB0aGUgVEMgKFRydW5jYXRlZCkgYml0 IGlzIHNldCBpbgorYSBETlMgcmVzcG9uc2UuIFRoaXMgYWxsb3dzIGF0dGFja2VycyB0byBj YXVzZSBhIGRlbmlhbCBvZiBzZXJ2aWNlCisoYXBwbGljYXRpb24gY3Jhc2gpIG9yIHBvc3Np Ymx5IGV4ZWN1dGUgYXJiaXRyYXJ5IGNvZGUsIGJlY2F1c2UgdGhvc2UKK2xvb2t1cCB2YWx1 ZXMgbGVhZCB0byBpbmNvcnJlY3QgbGVuZ3RoIGNhbGN1bGF0aW9ucyBhbmQgaW5jb3JyZWN0 CittZW1jcHkgb3BlcmF0aW9ucy4KKworVGhpcyBwYXRjaCBpbmNsdWRlcyBhIGNoZWNrIHRv IG1ha2Ugc3VyZSBsb29va3VwIHZhbHVlIGlzIHZhbGlkIGJlZm9yZQordXNpbmcgaXQuIFRo aXMgaGVscHMgYXZvaWQgdW5leHBlY3RlZCB2YWx1ZSB3aGVuIHRoZSBpbnB1dCBpcyBlbXB0 eSBvcgoraW5jb3JyZWN0LgorCitGaXhlczogQ1ZFLTIwMjUtMzI3NDMKK0J1Zy1EZWJpYW46 IGh0dHBzOi8vYnVncy5kZWJpYW4ub3JnLzExMDM1MzAKK09yaWdpbjogdXBzdHJlYW0sIGh0 dHBzOi8vZ2l0Lmtlcm5lbC5vcmcvcHViL3NjbS9uZXR3b3JrL2Nvbm5tYW4vY29ubm1hbi5n aXQvY29tbWl0Lz9pZD1kOTBiOTExZjY3NjA5NTliZGYxMzkzYzM5ZmU4ZDExMTgzMTU0OTBm CitGb3J3YXJkZWQ6IG5vdC1uZWVkZWQKKy0tLQorIHNyYy9kbnNwcm94eS5jIHwgNyArKysr KystCisgMSBmaWxlIGNoYW5nZWQsIDYgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQor CitkaWZmIC0tZ2l0IGEvc3JjL2Ruc3Byb3h5LmMgYi9zcmMvZG5zcHJveHkuYworaW5kZXgg ZjI4YTVkNzU1Li43ZWUyNmQ5ZmYgMTAwNjQ0CistLS0gYS9zcmMvZG5zcHJveHkuYworKysr IGIvc3JjL2Ruc3Byb3h5LmMKK0BAIC0xNjg1LDggKzE2ODUsMTMgQEAgc3RhdGljIGludCBu c19yZXNvbHYoc3RydWN0IHNlcnZlcl9kYXRhICpzZXJ2ZXIsIHN0cnVjdCByZXF1ZXN0X2Rh dGEgKnJlcSwKKyAJCQkJZ3BvaW50ZXIgcmVxdWVzdCwgZ3BvaW50ZXIgbmFtZSkKKyB7Cisg CWludCBzayA9IC0xOworKwlpbnQgZXJyOworIAljb25zdCBjaGFyICpsb29rdXAgPSAoY29u c3QgY2hhciAqKW5hbWU7CistCWludCBlcnIgPSBuc190cnlfcmVzb2x2X2Zyb21fY2FjaGUo cmVxLCByZXF1ZXN0LCBsb29rdXApOworKworKwlpZiAoIWxvb2t1cCB8fCBzdHJsZW4obG9v a3VwKSA9PSAwKQorKwkJcmV0dXJuIC1FSU5WQUw7CisrCisrCWVyciA9IG5zX3RyeV9yZXNv bHZfZnJvbV9jYWNoZShyZXEsIHJlcXVlc3QsIGxvb2t1cCk7CisgCisgCWlmIChlcnIgPiAw KQorIAkJLyogY2FjaGUgaGl0ICovCistLSAKK2NnaXQgMS4yLjMta29yZworCmRpZmYgLU5y dSBjb25ubWFuLTEuNDQvZGViaWFuL3BhdGNoZXMvc2VyaWVzIGNvbm5tYW4tMS40NC9kZWJp YW4vcGF0Y2hlcy9zZXJpZXMKLS0tIGNvbm5tYW4tMS40NC9kZWJpYW4vcGF0Y2hlcy9zZXJp ZXMJMjAyNS0wNC0xMiAxNzo0MDoyMS4wMDAwMDAwMDAgKzAyMDAKKysrIGNvbm5tYW4tMS40 NC9kZWJpYW4vcGF0Y2hlcy9zZXJpZXMJMjAyNS0wNS0xMyAwOTowNjo1Ny4wMDAwMDAwMDAg KzAyMDAKQEAgLTEsMiArMSw0IEBACiAwMS1pbml0LXNjcmlwdC1sc2ItaGVhZGVycy5wYXRj aAogMDItc3lzdGVtZC1zZXJ2aWNlLWZpbGUtc2h1dGRvd24tcHJvYmxlbXMucGF0Y2gKK0NW RS0yMDI1LTMyNzQzLnBhdGNoCitDVkUtMjAyNS0zMjM2Ni5wYXRjaAo=

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)