[Git][security-tracker-team/security-tracker][master] Add CVE-2026-75803/openssl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2498a68b by Salvatore Bonaccorso at 2026-08-20T13:53:52+02:00
Add CVE-2026-75803/openssl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2026-75803 [Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs]
+	- openssl <unfixed>
+	NOTE: https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a (openssl-4.0)
+	NOTE: https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b (openssl-3.6)
+	NOTE: https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34 (openssl-3.5)
+	NOTE: https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42 (openssl-3.0)
 CVE-2026-8619 (An unauthenticated denial-of-service vulnerability was identified in T ...)
 	NOT-FOR-US: TPLink
 CVE-2026-76957 (libexpat before 2.8.4 lacks handler call depth tracking with custom en ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2498a68bc34873ff9948a19bd84ee8210fc9fed0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2498a68bc34873ff9948a19bd84ee8210fc9fed0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260820/eccb962b/attachment-0001.htm>