[Git][security-tracker-team/security-tracker][master] Track fixes via experimental for openssl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0badc43c by Salvatore Bonaccorso at 2022-05-07T10:11:40+02:00
Track fixes via experimental for openssl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1585,7 +1585,7 @@ CVE-2022-1475 (An integer overflow vulnerability was found in FFmpeg 5.0.1 and i
 CVE-2022-1474
 	RESERVED
 CVE-2022-1473 (The OPENSSL_LH_flush() function, which empties a hash table, contains  ...)
-	[experimental] - openssl <unfixed>
+	[experimental] - openssl 3.0.3-1
 	- openssl <not-affected> (Only affects OpenSSL 3.0)
 	NOTE: https://www.openssl.org/news/secadv/20220503.txt
 	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=64c85430f95200b6b51fe9475bd5203f7c19daf1 (openssl-3.0.3)
@@ -2163,7 +2163,7 @@ CVE-2022-1436
 CVE-2022-1435
 	RESERVED
 CVE-2022-1434 (The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly  ...)
-	[experimental] - openssl <unfixed>
+	[experimental] - openssl 3.0.3-1
 	- openssl <not-affected> (Only affects OpenSSL 3.0)
 	NOTE: https://www.openssl.org/news/secadv/20220503.txt
 	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=7d56a74a96828985db7354a55227a511615f732b (openssl-3.0.3)
@@ -3279,7 +3279,7 @@ CVE-2022-29158
 CVE-2022-1344 (Stored XSS due to no sanitization in the filename in GitHub repository ...)
 	NOT-FOR-US: organizr
 CVE-2022-1343 (The function `OCSP_basic_verify` verifies the signer certificate on an ...)
-	[experimental] - openssl <unfixed>
+	[experimental] - openssl 3.0.3-1
 	- openssl <not-affected> (Only affects OpenSSL 3.0)
 	NOTE: https://www.openssl.org/news/secadv/20220503.txt
 	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a (openssl-3.0.3)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0badc43c4813590ece7f1f98fc7b0b94f95ea5a6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0badc43c4813590ece7f1f98fc7b0b94f95ea5a6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220507/81479d3f/attachment.htm>