Debian/kdeconnect: medium 4.7
The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.3
Action: Upgrade kdeconnect to 25.04.2-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 25.04.2-1+deb13u1 | - |
Fixed versions
| 25.04.2-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-66270#Debian:13/kdeconnect
- https://security-tracker.debian.org/tracker/CVE-2025-66270
published · modified · JSON