[Git][security-tracker-team/security-tracker][master] Track fixed version for libreswan issues fixed via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
df9027f6 by Salvatore Bonaccorso at 2026-08-08T17:06:44+02:00
Track fixed version for libreswan issues fixed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9855,7 +9855,7 @@ CVE-2026-16566
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2506113
 	TODO: check upstream report and status on fix
 CVE-2026-14957
-	- libreswan <unfixed> (bug #1143067)
+	- libreswan 5.2-2.5 (bug #1143067)
 	[trixie] - libreswan <no-dsa> (Minor issue; can be fixed via point release)
 	[bullseye] - libreswan <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2501764
@@ -30165,13 +30165,13 @@ CVE-2026-52188 (Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-21091
 CVE-2026-52187 (Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-1613 ...)
 	NOT-FOR-US: UTT
 CVE-2026-50722 (Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_ ...)
-	- libreswan <unfixed> (bug #1141390)
+	- libreswan 5.2-2.5 (bug #1141390)
 	[trixie] - libreswan <no-dsa> (Minor issue)
 	[bullseye] - libreswan <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://libreswan.org/security/CVE-2026-50722/CVE-2026-50722.txt
 	NOTE: Patches: https://libreswan.org/security/CVE-2026-50722/
 CVE-2026-50721 (Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), ...)
-	- libreswan <unfixed> (bug #1141390)
+	- libreswan 5.2-2.5 (bug #1141390)
 	[trixie] - libreswan <no-dsa> (Minor issue)
 	[bullseye] - libreswan <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://libreswan.org/security/CVE-2026-50721/CVE-2026-50721.txt
@@ -30249,7 +30249,7 @@ CVE-2026-12729 (The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki
 CVE-2026-12557 (The Ninja Forms - File Uploads plugin for WordPress is vulnerable to a ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-12413 (An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemo ...)
-	- libreswan <unfixed> (bug #1141390)
+	- libreswan 5.2-2.5 (bug #1141390)
 	[trixie] - libreswan <no-dsa> (Minor issue)
 	[bullseye] - libreswan <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://libreswan.org/security/CVE-2026-12413/CVE-2026-12413.txt



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df9027f69467bec5a8a8479d9e9f0d36230d5bdf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df9027f69467bec5a8a8479d9e9f0d36230d5bdf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260808/a769dedc/attachment.htm>