#1152780 kdeconnect: CVE-2026-111426

Package:
src:kdeconnect
Source:
src:kdeconnect
Submitter:
Salvatore Bonaccorso
Date:
2026-11-01 16:03:02 UTC
Severity:
normal
Tags:
#1152780#5
Date:
2026-11-01 16:00:16 UTC
From:
To:
Hi,

The following vulnerability was published for kdeconnect.

CVE-2026-111426[0]:
| Malformed packets can flood D-Bus and freeze the desktop

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-111426
https://www.cve.org/CVERecord?id=CVE-2026-111426
[1] https://kde.org/info/security/advisory-20261030-2.txt
[2] https://invent.kde.org/network/kdeconnect-kde/-/commit/71c63c47b51047533f5d9533f27be4375778b21d

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore