[Git][security-tracker-team/security-tracker][master] Track fixes for CVE-2025-9230/openssl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7a62869c by Salvatore Bonaccorso at 2025-10-01T19:32:56+02:00
Track fixes for CVE-2025-9230/openssl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -335,6 +335,10 @@ CVE-2025-10725 (A flaw was found in Red Hat Openshift AI Service. A low-privileg
 CVE-2025-9230 (Issue summary: An application trying to decrypt CMS messages encrypted ...)
 	- openssl 3.5.4-1
 	NOTE: https://openssl-library.org/news/secadv/20250930.txt
+	NOTE: Fixed by: https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45 (openssl-3.3.5)
+	NOTE: Fixed by: https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280 (openssl-3.4.3)
+	NOTE: Fixed by: https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd (openssl-3.2.6)
+	NOTE: Fixed by: https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def (openssl-3.0.18)
 CVE-2025-9231 (Issue summary: A timing side-channel which could potentially allow rem ...)
 	- openssl 3.5.4-1
 	[trixie] - openssl 3.5.1-1+deb13u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a62869c99c5270ea5de6df8a2d14e741f7f7a61

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a62869c99c5270ea5de6df8a2d14e741f7f7a61
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251001/c075b8b4/attachment.htm>