Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fda7e716 by Salvatore Bonaccorso at 2026-08-25T15:15:05+02:00
Add upstream tag information for two openssl issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3428,10 +3428,10 @@ CVE-2026-XXXX [OSSN-0103]
CVE-2026-75803 [Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs]
- openssl <unfixed> (bug #1145172)
[trixie] - openssl <postponed> (Minor issue, fix along with future
update)
- NOTE:
https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a
(openssl-4.0)
- NOTE:
https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b
(openssl-3.6)
- NOTE:
https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34
(openssl-3.5)
- NOTE:
https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42
(openssl-3.0)
+ NOTE:
https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a
(openssl-4.0.2)
+ NOTE:
https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b
(openssl-3.6.4)
+ NOTE:
https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34
(openssl-3.5.8)
+ NOTE:
https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42
(openssl-3.0.22)
CVE-2026-8619 (An unauthenticated denial-of-service vulnerability was
identified in T ...)
NOT-FOR-US: TPLink
CVE-2026-76957 (libexpat before 2.8.4 lacks handler call depth tracking with
custom en ...)
@@ -15679,9 +15679,9 @@ CVE-2026-14456 (Issue summary: When an OpenSSL QUIC
server (Listener SSL object)
- openssl <unfixed> (bug #1144615)
[trixie] - openssl <postponed> (Minor issue, fix along with future
update)
NOTE: https://openssl-library.org/news/secadv/20260813.txt
- NOTE:
https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139
(openssl-4.0)
- NOTE:
https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b
(openssl-3.6)
- NOTE:
https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9
(openssl-3.5)
+ NOTE:
https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139
(openssl-4.0.2)
+ NOTE:
https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b
(openssl-3.6.4)
+ NOTE:
https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9
(openssl-3.5.8)
CVE-2026-14332 (The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress
plugin befor ...)
NOT-FOR-US: WordPress plugin
CVE-2026-14298 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x
<= 11.7 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fda7e7167b85e838aff0c62056c7115e1803bbbf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fda7e7167b85e838aff0c62056c7115e1803bbbf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
