Debian/kdeconnect: medium 4.7
The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.3
Action: Upgrade kdeconnect to 25.11.80+git20251121.7090b106-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 25.11.80+git20251121.7090b106-1 | - |
Fixed versions
| 25.11.80+git20251121.7090b106-1 |
Sources
- osv: DEBIAN-CVE-2025-66270#Debian:14/kdeconnect
- https://security-tracker.debian.org/tracker/CVE-2025-66270
published · modified · JSON