Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8fde98c8 by Salvatore Bonaccorso at 2026-09-29T22:57:03+02:00
Track fixes for openssl via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -773,52 +773,52 @@ CVE-2026-100832 (Use-after-free in the Graphics: Canvas2D
component. This vulner
- firefox-esr <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
CVE-2026-84782 (Issue summary: The DTLS retransmission logic does not
correctly handle ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-84783 (Issue summary: The first concurrent use of the same X.509
certificate ...)
- openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-35189 (Issue summary: A certificate with many nameRelativeToCRLIssuer
CRL dis ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-35191 (Issue summary: The OpenSSL QUIC server, when configured to not
preform ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-42772 (Issue summary: The QUIC stream reassembly algorithm
performance deteri ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-54872 (Issue summary: The generic elliptic-curve scalar
multiplication used f ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-54873 (Issue summary: QUIC process may keep memory for QUIC packet
buffer for ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-54875 (Issue summary: A non-constant-time optimized implementation of
scalar ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-72897 (Issue summary: A TLS server that calls SSL_set_SSL_CTX() to
switch a c ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-75804 (Issue summary: OpenSSL QUIC stack does not enforce connection
level fl ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-75805 (Issue summary: A CMP client that requests certificate
revocation on th ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-75806 (Issue summary: An established DTLS 1.2 association using an
AEAD ciphe ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-77696 (Issue summary: SM2 signature generation uses non-constant-time
arithme ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-84784 (Issue summary: A malicious remote peer may flood the local
QUIC stack ...)
- - openssl <unfixed>
+ - openssl 3.6.5-1
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-XXXX [groff issues]
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8fde98c85a1288468672126f1efc4d4385926c49
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8fde98c85a1288468672126f1efc4d4385926c49
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
