[Git][security-tracker-team/security-tracker][master] Add CVE-2023-2975/openssl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9bdb3eed by Salvatore Bonaccorso at 2023-07-14T23:02:26+02:00
Add CVE-2023-2975/openssl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -61,7 +61,10 @@ CVE-2023-32760 (An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 an
 CVE-2023-32759 (An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6. ...)
 	NOT-FOR-US: Archer
 CVE-2023-2975 (Issue summary: The AES-SIV cipher implementation contains a bug that c ...)
-	TODO: check
+	- openssl <unfixed>
+	NOTE: https://www.openssl.org/news/secadv/20230714.txt
+	NOTE: Fixed by: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598 (openssl-3.0 branch)
+	TODO: check details for older versions once 20230714.txt is public
 CVE-2023-3668 (Improper Encoding or Escaping of Output in GitHub repository froxlor/f ...)
 	- froxlor <itp> (bug #581792)
 CVE-2023-3649 (iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of ser ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9bdb3eed94d0f6451e4539fb367310df65ebf1b0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9bdb3eed94d0f6451e4539fb367310df65ebf1b0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230714/1534617d/attachment.htm>