#1140795 trixie-pu: package dhcpcd/10.1.0-11+deb13u3

#1140795#5
Date:
2026-06-26 15:49:27 UTC
From:
To:
[ Reason ]
Backporting fixes for 5 minor CVEs reported by DSA today.

CVE-2025-70102 was fixed in 10.3.1 (Sid has 10.3.2) but never backported until now.

Meanwhile, the fix for these four CVEs has long been sitting in upstream Git:

CVE-2026-56113,
CVE-2026-56114,
CVE-2026-56116,
CVE-2026-56117.

All four patches have just been applied to Sid/Forky pending a new upstream release.

[ Impact ]
Minor.

[ Tests ]
Verified to boot on a host running Trixie.

[ Risks ]
Minor. Most of the patches are one-line fixes. Two of the patches are slightly more involved.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in (old)stable
  [*] the issue is verified as fixed in unstable

[ Changes ]
* Imported patches for 5 CVEs.
* Defuzzed all patches.