[Git][security-tracker-team/security-tracker][master] Add commit references for openssl issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Aug 25 15:55:57 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
df5b1042 by Salvatore Bonaccorso at 2026-08-25T16:51:25+02:00
Add commit references for openssl issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2,33 +2,62 @@ CVE-2026-18798
- openssl <unfixed>
[bookworm] - openssl <not-affected> (Vulnerable code not present)
[bullseye] - openssl <not-affected> (Vulnerable code not present)
+ NOTE: https://github.com/openssl/openssl/commit/a14a1deac403522fbeafabcb198503cf6caa7dc4 (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af (openssl-3.6.4)
+ NOTE: https://github.com/openssl/openssl/commit/967582d5037f01a26b6d19beae19af62a1b15c3c (oepnssl-3.5.8)
NOTE: https://openssl-library.org/news/secadv/20260825.txt
CVE-2026-63072
- openssl <unfixed>
+ NOTE: https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335 (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756 (openssl-3.6.4)
+ NOTE: https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42 (openssl-3.5.8)
+ NOTE: https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382 (openssl-3.0.22)
NOTE: https://openssl-library.org/news/secadv/20260825.txt
CVE-2026-63076
- openssl <unfixed>
+ NOTE: https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226 (openssl-3.6.4)
+ NOTE: https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c (openssl-3.5.8)
+ NOTE: https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b (openssl-3.0.22)
NOTE: https://openssl-library.org/news/secadv/20260825.txt
CVE-2026-14457
- openssl <unfixed>
[bookworm] - openssl <not-affected> (Vulnerable code not present)
[bullseye] - openssl <not-affected> (Vulnerable code not present)
+ NOTE: https://github.com/openssl/openssl/commit/dad836b071da6579510c968615848ba03cac593b (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/581aaa0f0a35d214740f0fe1f5283ec41f1212e1 (openssl-3.6.4)
+ NOTE: https://github.com/openssl/openssl/commit/d0af20478688a6aa2f59d61caa3f82136b181d7f (openssl-3.5.8)
NOTE: https://openssl-library.org/news/secadv/20260825.txt
CVE-2026-54874
- openssl <unfixed>
+ NOTE: https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107 (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c (openssl-3.6.4)
+ NOTE: https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23 (openssl-3.5.8)
+ NOTE: https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382 (openssl-3.0.22)
NOTE: https://openssl-library.org/news/secadv/20260825.txt
CVE-2026-63073
- openssl <unfixed>
[bookworm] - openssl <not-affected> (Vulnerable code not present)
[bullseye] - openssl <not-affected> (Vulnerable code not present)
+ NOTE: https://github.com/openssl/openssl/commit/7eb2e3ec9d1d4f35c8022fccd4b03398b3f33e21 (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/6a0acc072b4d37a7cac1252a29c1ce1f00c5ec29 (openssl-3.6.4)
+ NOTE: https://github.com/openssl/openssl/commit/0cc20b322639919aa423e90799d9a57c3b4b76ca (openssl-3.5.8)
NOTE: https://openssl-library.org/news/secadv/20260825.txt
CVE-2026-63074
- openssl <unfixed>
+ NOTE: https://github.com/openssl/openssl/commit/74ae7f6df47a5767c1010b88c47507dfc5b32c46 (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/01e567978a55fba18142a230380c31296049fae7 (openssl-3.6.4)
+ NOTE: https://github.com/openssl/openssl/commit/75360af9650d4e0c82ba0050c5c9912cd79e54af (openssl-3.5.8)
+ NOTE: https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f (openssl-3.0.22)
NOTE: https://openssl-library.org/news/secadv/20260825.txt
CVE-2026-63075
- openssl <unfixed>
[bookworm] - openssl <not-affected> (Vulnerable code not present)
[bullseye] - openssl <not-affected> (Vulnerable code not present)
+ NOTE: https://github.com/openssl/openssl/commit/7308946576b12e64b8be53bcf0a120354b2b42bc (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/bf84721c2548351176e367e6de505792f0118dc6 (openssl-3.6.4)
+ NOTE: https://github.com/openssl/openssl/commit/7c98d79738549df92868e7dd9be4bbf061eed709 (openssl-3.5.8)
+ NOTE: https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393 (openssl-3.4.7)
NOTE: https://openssl-library.org/news/secadv/20260825.txt
CVE-2026-19953
- liburi-perl 5.36-1
@@ -25383,6 +25412,8 @@ CVE-2026-54876 (Issue summary: A malicious TLS server can cause a memory leak in
[trixie] - openssl <not-affected> (Vulnerable code not present)
[bookworm] - openssl <not-affected> (Vulnerable code not present)
[bullseye] - openssl <not-affected> (Vulnerable code not present)
+ NOTE: https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638 (openssl-4.0.2)
+ NOTE: https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12 (openssl-3.6.4)
NOTE: https://openssl-library.org/news/secadv/20260805.txt
CVE-2026-64582 (In the Linux kernel, the following vulnerability has been resolved: R ...)
{DLA-4724-1}
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df5b1042bf37b2365df7cddb980e7c1c8c68645d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df5b1042bf37b2365df7cddb980e7c1c8c68645d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260825/93684acc/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list