Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bffa47e1 by Salvatore Bonaccorso at 2026-10-11T19:21:20+02:00
Some wolfssl issues fixed via unstable upload
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15642,22 +15642,22 @@ CVE-2026-94418 (Under WOLFSSL_SMALL_CERT_VERIFY,
ProcessPeerCertParse() runs the
NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
NOTE: WOLFSSL_SMALL_CERT_VERIFY not built
CVE-2026-94417 (When an application enables both OCSP and CRL revocation
checking on o ...)
- - wolfssl <unfixed> (bug #1150338)
+ - wolfssl 5.9.2-1.1 (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
CVE-2026-93304 (A (D)TLS 1.2 client can accept a ChangeCipherSpec message
before it ha ...)
- - wolfssl <unfixed> (bug #1150338)
+ - wolfssl 5.9.2-1.1 (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11458 (v5.9.4-stable)
CVE-2026-93302 (MatchTrustedPeer ignores the public key used, leading to
forged CA clo ...)
- - wolfssl <unfixed> (bug #1150338)
+ - wolfssl 5.9.2-1.1 (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: Fixed by:
https://github.com/wolfSSL/wolfssl/commit/22bcd51d553eaac1de37bee91fdac80cc47961e1
(v5.9.4-stable)
CVE-2026-89136 (When using RPK (Raw Public Key), the client side of a TLS 1.2,
1.3 and ...)
- - wolfssl <unfixed> (bug #1150338)
+ - wolfssl 5.9.2-1.1 (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <not-affected> (RPK not in 5.5.4)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
@@ -15667,17 +15667,17 @@ CVE-2026-89135 (A failed X509_verify_cert call
permanently plants an unverified
[bookworm] - wolfssl <not-affected> (no WOLFSSL_TEMP_CA path)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
CVE-2026-89134 (A certificate with no dNSName SAN but another SAN type present
(e.g. r ...)
- - wolfssl <unfixed> (bug #1150338)
+ - wolfssl 5.9.2-1.1 (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10837 (v5.9.4-stable)
CVE-2026-89133 (wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509
certifi ...)
- - wolfssl <unfixed> (bug #1150338)
+ - wolfssl 5.9.2-1.1 (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <postponed> (Minor issue; upstream fix changes the
layout of the installed struct Signer)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10687 (v5.9.4-stable)
CVE-2026-89102 (In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side
impleme ...)
- - wolfssl <unfixed> (bug #1150338)
+ - wolfssl 5.9.2-1.1 (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <not-affected> (no status_request_v2 pending-CA
code in 5.5.4)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11027 (v5.9.4-stable)
@@ -15698,7 +15698,7 @@ CVE-2026-88772 (Vulnerability in Citrix NetScaler ADC
and Citrix NetScaler Gatew
CVE-2026-88771 (Improper input validation vulnerability in Citrix NetScaler
ADC and Ci ...)
NOT-FOR-US: NetScaler
CVE-2026-15442 (In all builds that make use of (D)TLS, including default
builds, there ...)
- - wolfssl <unfixed> (bug #1150338)
+ - wolfssl 5.9.2-1.1 (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10863 (v5.9.4-stable)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bffa47e16352e0a2d5405f25025a13537b3e8497
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bffa47e16352e0a2d5405f25025a13537b3e8497
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
