You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mynewt.apache.org by ja...@apache.org on 2026/07/24 12:26:48 UTC
(mynewt-site) branch master updated (f748ce97e4 -> f28bcf3c80)
This is an automated email from the ASF dual-hosted git repository.
sjanc pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/mynewt-site.git
from f748ce97e4 build(deps): bump sh from 2.2.2 to 2.2.4
new 1c178d7c7d Add new public CVEs
new f28bcf3c80 Sort CVEs
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
docs/cve.md | 18 ++++++++++++------
1 file changed, 12 insertions(+), 6 deletions(-)
(mynewt-site) 02/02: Sort CVEs
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
sjanc pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mynewt-site.git
commit f28bcf3c80cab5e612fb5599c5a6f42e8fbb20be
Author: Szymon Janc <sz...@codecoup.pl>
AuthorDate: Fri Jul 24 13:15:42 2026 +0200
Sort CVEs
---
docs/cve.md | 22 +++++++++++-----------
1 file changed, 11 insertions(+), 11 deletions(-)
diff --git a/docs/cve.md b/docs/cve.md
index bcba329ada..aee5035878 100644
--- a/docs/cve.md
+++ b/docs/cve.md
@@ -5,18 +5,18 @@ in Apache Mynewt.
| CVE-ID | Description | Releases Affected | Release Fixed |
|-------------------------------------------------------------------------------|--------------------------------------|----------------------|---------------|
-| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45811">CVE-2026-45811 </a> | Buffer overflow in socket HCI transport | NimBLE through 1.9.0 | NimBLE 1.10.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45812">CVE-2026-45812 </a> | OOB Read via sizeof(pointer) in Legacy Advertising Report Handler | NimBLE through 1.9.0 | NimBLE 1.10.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45813">CVE-2026-45813 </a> | Incorrect data validation in BASS add/modify source operation READY | NimBLE through 1.9.0 | NimBLE 1.10.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45815">CVE-2026-45815 </a> | Remote reachable assertion in ATT Read Multiple Variable Response handler | NimBLE through 1.9.0 | NimBLE 1.10.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45816">CVE-2026-45816 </a> | NULL pointer dereference vulnerability in SMP LTK request | NimBLE through 1.9.0 | NimBLE 1.10.0 |
| <a href="https://www.cve.org/CVERecord?id=CVE-2026-46452">CVE-2026-46452 </a> | Mesh Proxy SAR reassembly unbounded append and unchecked failure | NimBLE through 1.9.0 | NimBLE 1.10.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2025-52435">CVE-2025-52435 </a> | Invalid error handling in pause encryption procedure in NimBLE controller | NimBLE through 1.8.0 | NimBLE 1.9.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53470">CVE-2025-53470 </a> | Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver | NimBLE through 1.8.0 | NimBLE 1.9.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53477">CVE-2025-53477 </a> | NULL Pointer Dereference in NimBLE host HCI layer | NimBLE through 1.8.0 | NimBLE 1.9.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45816">CVE-2026-45816 </a> | NULL pointer dereference vulnerability in SMP LTK request | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45815">CVE-2026-45815 </a> | Remote reachable assertion in ATT Read Multiple Variable Response handler | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45813">CVE-2026-45813 </a> | Incorrect data validation in BASS add/modify source operation READY | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45812">CVE-2026-45812 </a> | OOB Read via sizeof(pointer) in Legacy Advertising Report Handler | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45811">CVE-2026-45811 </a> | Buffer overflow in socket HCI transport | NimBLE through 1.9.0 | NimBLE 1.10.0 |
| <a href="https://www.cve.org/CVERecord?id=CVE-2025-62235">CVE-2025-62235 </a> | Incorrect handling of SMP Security Request could lead to undesirable pairing | NimBLE through 1.8.0 | NimBLE 1.9.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47248">CVE-2024-47248 </a> | Buffer overflow in NimBLE MESH Bluetooth stack | NimBLE through 1.7.0 | NimBLE 1.8.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47249">CVE-2024-47249 </a> | Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler | NimBLE through 1.7.0 | NimBLE 1.8.0 |
-| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47250">CVE-2024-47250 </a> | Lack of input validation in HCI advertising report could lead to potential out-of-bound access | NimBLE through 1.7.0 | NimBLE 1.8.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53477">CVE-2025-53477 </a> | NULL Pointer Dereference in NimBLE host HCI layer | NimBLE through 1.8.0 | NimBLE 1.9.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53470">CVE-2025-53470 </a> | Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver | NimBLE through 1.8.0 | NimBLE 1.9.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2025-52435">CVE-2025-52435 </a> | Invalid error handling in pause encryption procedure in NimBLE controller | NimBLE through 1.8.0 | NimBLE 1.9.0 |
| <a href="https://www.cve.org/CVERecord?id=CVE-2024-51569">CVE-2024-51569 </a> | Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler | NimBLE through 1.7.0 | NimBLE 1.8.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47250">CVE-2024-47250 </a> | Lack of input validation in HCI advertising report could lead to potential out-of-bound access | NimBLE through 1.7.0 | NimBLE 1.8.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47249">CVE-2024-47249 </a> | Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler | NimBLE through 1.7.0 | NimBLE 1.8.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47248">CVE-2024-47248 </a> | Buffer overflow in NimBLE MESH Bluetooth stack | NimBLE through 1.7.0 | NimBLE 1.8.0 |
| <a href="https://www.cve.org/CVERecord?id=CVE-2024-24746">CVE-2024-24746 </a> | Loop with Unreachable Exit Condition | NimBLE through 1.6.0 | NimBLE 1.7.0 |
(mynewt-site) 01/02: Add new public CVEs
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
sjanc pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mynewt-site.git
commit 1c178d7c7d219001d60323c351a0d2b2ee02880b
Author: Szymon Janc <sz...@codecoup.pl>
AuthorDate: Fri Jul 24 13:14:26 2026 +0200
Add new public CVEs
---
docs/cve.md | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/docs/cve.md b/docs/cve.md
index ec80dcce9a..bcba329ada 100644
--- a/docs/cve.md
+++ b/docs/cve.md
@@ -5,6 +5,12 @@ in Apache Mynewt.
| CVE-ID | Description | Releases Affected | Release Fixed |
|-------------------------------------------------------------------------------|--------------------------------------|----------------------|---------------|
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45811">CVE-2026-45811 </a> | Buffer overflow in socket HCI transport | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45812">CVE-2026-45812 </a> | OOB Read via sizeof(pointer) in Legacy Advertising Report Handler | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45813">CVE-2026-45813 </a> | Incorrect data validation in BASS add/modify source operation READY | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45815">CVE-2026-45815 </a> | Remote reachable assertion in ATT Read Multiple Variable Response handler | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45816">CVE-2026-45816 </a> | NULL pointer dereference vulnerability in SMP LTK request | NimBLE through 1.9.0 | NimBLE 1.10.0 |
+| <a href="https://www.cve.org/CVERecord?id=CVE-2026-46452">CVE-2026-46452 </a> | Mesh Proxy SAR reassembly unbounded append and unchecked failure | NimBLE through 1.9.0 | NimBLE 1.10.0 |
| <a href="https://www.cve.org/CVERecord?id=CVE-2025-52435">CVE-2025-52435 </a> | Invalid error handling in pause encryption procedure in NimBLE controller | NimBLE through 1.8.0 | NimBLE 1.9.0 |
| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53470">CVE-2025-53470 </a> | Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver | NimBLE through 1.8.0 | NimBLE 1.9.0 |
| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53477">CVE-2025-53477 </a> | NULL Pointer Dereference in NimBLE host HCI layer | NimBLE through 1.8.0 | NimBLE 1.9.0 |