[Git][security-tracker-team/security-tracker][master] Add new openssl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
18a0c917 by Salvatore Bonaccorso at 2026-08-25T16:32:58+02:00
Add new openssl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,35 @@
+CVE-2026-18798
+	- openssl <unfixed>
+	[bookworm] - openssl <not-affected> (Vulnerable code not present)
+	[bullseye] - openssl <not-affected> (Vulnerable code not present)
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
+CVE-2026-63072
+	- openssl <unfixed>
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
+CVE-2026-63076
+	- openssl <unfixed>
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
+CVE-2026-14457
+	- openssl <unfixed>
+	[bookworm] - openssl <not-affected> (Vulnerable code not present)
+	[bullseye] - openssl <not-affected> (Vulnerable code not present)
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
+CVE-2026-54874
+	- openssl <unfixed>
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
+CVE-2026-63073
+	- openssl <unfixed>
+	[bookworm] - openssl <not-affected> (Vulnerable code not present)
+	[bullseye] - openssl <not-affected> (Vulnerable code not present)
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
+CVE-2026-63074
+	- openssl <unfixed>
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
+CVE-2026-63075
+	- openssl <unfixed>
+	[bookworm] - openssl <not-affected> (Vulnerable code not present)
+	[bullseye] - openssl <not-affected> (Vulnerable code not present)
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
 CVE-2026-19953
 	- liburi-perl <unfixed>
 	NOTE: Fixed by: https://github.com/libwww-perl/URI/commit/8c213ff92fdae45d0fabb7bc16f6a6f27e911395 (v5.36)
@@ -3460,6 +3492,7 @@ CVE-2026-75803 [Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs]
 	NOTE: https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b (openssl-3.6.4)
 	NOTE: https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34 (openssl-3.5.8)
 	NOTE: https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42 (openssl-3.0.22)
+	NOTE: https://openssl-library.org/news/secadv/20260825.txt
 CVE-2026-8619 (An unauthenticated denial-of-service vulnerability was identified in T ...)
 	NOT-FOR-US: TPLink
 CVE-2026-76957 (libexpat before 2.8.4 lacks handler call depth tracking with custom en ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/18a0c9173fdf10597ee600533f212e40d0770f42

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/18a0c9173fdf10597ee600533f212e40d0770f42
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260825/50fc2b16/attachment.htm>