Your message dated Thu, 3 Sep 2026 06:55:03 +0200
with message-id <[email protected]>
and subject line Re: Accepted network-manager 1.58.1-1 (source) into unstable
has caused the Debian Bug report #1145199,
regarding network-manager: CVE-2026-19685
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1145199: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1145199
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: network-manager
Version: 1.58.0-2
Severity: important
Tags: security upstream
Forwarded:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2513
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi,
The following vulnerability was published for network-manager.
CVE-2026-19685[0]:
| core: 802.1x: reject ca-path for private connections
Note this relates to the CVE-2025-9615 fix as the introducing commit
is part of the series.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-19685
https://www.cve.org/CVERecord?id=CVE-2026-19685
[1]
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2513
[2]
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/a8e87381a3e70060abd721d9a347f42b2ba68e6e
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: network-manager
Source-Version: 1.58.1-1
Hi Michael,
I think this fixes as well CVE-2026-19685 / #1145199 as it got a
backport in the 1.58 branch:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/15aa1a8963ee014f5eb8306b305b158293c10643
So closing this one along as well.
Regards,
Salvatore
On Wed, Sep 02, 2026 at 02:39:23PM +0000, Debian FTP Masters wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Format: 1.8
> Date: Wed, 02 Sep 2026 14:46:44 +0200
> Source: network-manager
> Architecture: source
> Version: 1.58.1-1
> Distribution: unstable
> Urgency: medium
> Maintainer: Utopia Maintenance Team
> <[email protected]>
> Changed-By: Michael Biebl <[email protected]>
> Closes: 1145004 1145695
> Changes:
> network-manager (1.58.1-1) unstable; urgency=medium
> .
> * New upstream version 1.58.1
> * Fix test suite failure with glib 2.89.
> Thanks to Simon McVittie (Closes: #1145695)
> * Fix clat/eBPF compilation on ppc64 and sparc64 (Closes: #1145004)
> Checksums-Sha1:
> 2cd168e87bf40cbc7ee2b630ddfeb735acd17606 3573 network-manager_1.58.1-1.dsc
> 53e8c870acd3c0ee88bd9af5cfab15ece9d1bd7f 8812900
> network-manager_1.58.1.orig.tar.bz2
> 6847996f77bc7d7dd04f5b6e787c167d29e6f860 61988
> network-manager_1.58.1-1.debian.tar.xz
> b097eff2ee76dc9fe7b4f49fc65c04ffb4b876cb 11925
> network-manager_1.58.1-1_source.buildinfo
> Checksums-Sha256:
> 4019446cd3e731da0fe8e45aecde9da2113666072d4d6f80f080dd2cb5135ade 3573
> network-manager_1.58.1-1.dsc
> 50f0beefa02ff16159177e88379d7819edf6527b2cc25639ab4e62d8a15ca127 8812900
> network-manager_1.58.1.orig.tar.bz2
> 4580cb366a62c68d04df14a23cf4d4deaddff4187bfb299dc24f209429e16da4 61988
> network-manager_1.58.1-1.debian.tar.xz
> af604eb567bffc9747c181945cf2e65e1f26a1f0d97d139e9645ca8555678911 11925
> network-manager_1.58.1-1_source.buildinfo
> Files:
> dcb41b85829fa30e8aa96c47c873c81c 3573 net optional
> network-manager_1.58.1-1.dsc
> 8c931014bc87be60c81f9fca98c46c30 8812900 net optional
> network-manager_1.58.1.orig.tar.bz2
> 6353eb253d35229a273857b7166cf7ec 61988 net optional
> network-manager_1.58.1-1.debian.tar.xz
> 5d22b5cb04b305b32b5763f1013061ce 11925 net optional
> network-manager_1.58.1-1_source.buildinfo
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAEBCgAdFiEECbOsLssWnJBDRcxUauHfDWCPItwFAmqYKJAACgkQauHfDWCP
> ItzkTA/9HJ6VWlCtpxrtZI2pwveuK/aATU7bTFkU9jB6L+EifCcqDLns/TzDL/Dj
> 2L+VMha3bWBmHcDfv7qcaqevThdOR5EghNJkbA2W8FAJO6zjRQr9+R2mkFXJ7qrF
> RR5aP3a54BKut2/FYZTUXg4b+XIMaTWmHDukmFdEuwKVEWozR9t/AcNwlYpfJLl3
> dGzBPcbbhvSZBVuzpe2KVAvJblkD6dsGZf+s8jZvDDQ4po1TPJijFZIAzaJN1lNw
> YeawUbEfLj8xb6xEBbU4zcwbWvCPFAdkYF2O9Z1JRRXHZNNtn4KnVomZhWjgGLaz
> i27AultoKZ29ibwzO8HkKkpJi5khnH/o78+U8pOfvpMLx9nJUqnXakj4NPczI6OJ
> grpDRCIETLhTEjBbune4wjMVEtEkRAtDsWxPNS4rFTjDVarZ0cngHMMnammfTf0C
> HRaoczap/Wn+dMgJ8WuXX+9cV7AbEzFtUQNUcS4GE5HuTxN19p3APtcq9yK6KSpV
> 2pN/ozOGbLK+tcw08dUOQeEypdZIEKQVMM9dhSPif53US1Y69lcgqMoakoUM7rGu
> stQ0NWS495rHennctMJRqOUEc09yqEywbtNAxAteRSyM4CSxn5qIFVfEgNdcYUfO
> +x3xfqyZn2AjGV6tnZme0sEKEq9wUutl8rU0YPTcxTr9NGxEScs=
> =8jTX
> -----END PGP SIGNATURE-----
--- End Message ---
