[Git][security-tracker-team/security-tracker][master] Add upstream tag information for two openssl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fda7e716 by Salvatore Bonaccorso at 2026-08-25T15:15:05+02:00
Add upstream tag information for two openssl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3428,10 +3428,10 @@ CVE-2026-XXXX [OSSN-0103]
 CVE-2026-75803 [Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs]
 	- openssl <unfixed> (bug #1145172)
 	[trixie] - openssl <postponed> (Minor issue, fix along with future update)
-	NOTE: https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a (openssl-4.0)
-	NOTE: https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b (openssl-3.6)
-	NOTE: https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34 (openssl-3.5)
-	NOTE: https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42 (openssl-3.0)
+	NOTE: https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a (openssl-4.0.2)
+	NOTE: https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b (openssl-3.6.4)
+	NOTE: https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34 (openssl-3.5.8)
+	NOTE: https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42 (openssl-3.0.22)
 CVE-2026-8619 (An unauthenticated denial-of-service vulnerability was identified in T ...)
 	NOT-FOR-US: TPLink
 CVE-2026-76957 (libexpat before 2.8.4 lacks handler call depth tracking with custom en ...)
@@ -15679,9 +15679,9 @@ CVE-2026-14456 (Issue summary: When an OpenSSL QUIC server (Listener SSL object)
 	- openssl <unfixed> (bug #1144615)
 	[trixie] - openssl <postponed> (Minor issue, fix along with future update)
 	NOTE: https://openssl-library.org/news/secadv/20260813.txt
-	NOTE: https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139 (openssl-4.0)
-	NOTE: https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b (openssl-3.6)
-	NOTE: https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9 (openssl-3.5)
+	NOTE: https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139 (openssl-4.0.2)
+	NOTE: https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b (openssl-3.6.4)
+	NOTE: https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9 (openssl-3.5.8)
 CVE-2026-14332 (The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin befor ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-14298 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fda7e7167b85e838aff0c62056c7115e1803bbbf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fda7e7167b85e838aff0c62056c7115e1803bbbf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260825/0551eaa8/attachment-0001.htm>