[Git][security-tracker-team/security-tracker][master] Track fixed version for wolfssl issues fixed via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Jul 4 20:02:43 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9f15b597 by Salvatore Bonaccorso at 2026-07-04T21:01:47+02:00
Track fixed version for wolfssl issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5721,7 +5721,7 @@ CVE-2026-9219 (Setracker2 Android Companion App com.tgelec.setracker versions 3.
CVE-2026-8797 (An access control deficiency vulnerability exists in ExpressUpdate Age ...)
NOT-FOR-US: ExpressUpdate Agent for Windows
CVE-2026-8720 (wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when t ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10447 (v5.9.2-stable)
CVE-2026-8661 (Server-Side Cross-Site Scripting and Server-Side Request Forgery vulne ...)
@@ -5729,59 +5729,59 @@ CVE-2026-8661 (Server-Side Cross-Site Scripting and Server-Side Request Forgery
CVE-2026-8380 (The Frontend File Manager Plugin WordPress plugin through 23.6 does no ...)
NOT-FOR-US: WordPress plugin
CVE-2026-7532 (iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defi ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10354 (v5.9.2-stable)
CVE-2026-7531 (Use-after-free in PQC hybrid key-share handling. This is an incomplete ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10327 (v5.9.2-stable)
CVE-2026-7511 (PKCS7_verify signer confusion allows forged signatures, where the sign ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10203 (v5.9.2-stable)
CVE-2026-6731 (X.509 name constraint bypass via the Subject Common Name when treated ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10223 (v5.9.2-stable)
CVE-2026-6681 (The PKCS#7 decode path ignores the caller-supplied output buffer size ...)
- - wolfssl 5.9.1-0.1
+ - wolfssl 5.9.2-1
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10116 (v5.9.1-stable)
CVE-2026-6679 (A heap buffer overflow could occur in the DTLS 1.3 ACK serialization p ...)
- - wolfssl 5.9.1-0.1
+ - wolfssl 5.9.2-1
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10116 (v5.9.1-stable)
CVE-2026-6678 (Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other R ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10203 (v5.9.2-stable)
CVE-2026-6450 (A CRL critical extension bypass exists in ParseCRL_Extensions where cr ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10239 (v5.9.2-stable)
CVE-2026-6412 (Certificate policy and RFC 8446 compliance concerns regarding the cont ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10222 (v5.9.2-stable)
CVE-2026-6331 (HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-le ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10192 (v5.9.2-stable)
CVE-2026-6330 (The ML-KEM ARM64 NEON ciphertext comparison only compares half of the ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10192 (v5.9.2-stable)
CVE-2026-6329 (PKCS#12 MAC verification uses an attacker-controlled comparison length ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10192 (v5.9.2-stable)
CVE-2026-6325 (Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversiz ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10204 (v5.9.2-stable)
CVE-2026-6092 (When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fal ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10167 (v5.9.2-stable)
CVE-2026-57522 (Bitwarden Server before 2026.5.0 contains a JSON injection vulnerabili ...)
@@ -5793,19 +5793,19 @@ CVE-2026-57520 (Bitwarden Server before 2026.5.0 contains a privilege escalation
CVE-2026-56445 (The qrscp application's C-STORE handler uses a specific instance from ...)
NOT-FOR-US: pynetdicom (different from src:pydicom)
CVE-2026-55964 (Chain intermediate CA:TRUE without keyCertSign accepted as a signing C ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10702 (v5.9.2-stable)
CVE-2026-55962 (TLS 1.3 post-handshake authentication (PHA) issue where a server could ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10702 (v5.9.2-stable)
CVE-2026-55960 (Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10702 (v5.9.2-stable)
CVE-2026-55958 (Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In ...)
- - wolfssl <unfixed> (bug #1140815)
+ - wolfssl 5.9.2-1 (bug #1140815)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10705 (v5.9.2-stable)
CVE-2026-54479 (The WebSocket backend uses charging station identifiers to uniquely as ...)
@@ -6046,13 +6046,13 @@ CVE-2026-9083 (A flaw was found in Keycloak. A realm administrator with the "man
CVE-2026-6432 (Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier ...)
NOT-FOR-US: Silicon Labs
CVE-2026-6291 (Bleichenbacher padding oracle in PKCS#7 KTRI decryption. When decrypti ...)
- - wolfssl <unfixed> (bug #1140765)
+ - wolfssl 5.9.2-1 (bug #1140765)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10203 (v5.9.2-stable)
CVE-2026-6094 (Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing craf ...)
- - wolfssl <unfixed> (bug #1140765)
+ - wolfssl 5.9.2-1 (bug #1140765)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10128 (v5.9.2-stable)
CVE-2026-6091 (Partial-chain certificate verification may accept chains that terminat ...)
- - wolfssl <unfixed> (bug #1140765)
+ - wolfssl 5.9.2-1 (bug #1140765)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10170 (v5.9.2-stable)
CVE-2026-57700 (Unrestricted Upload of File with Dangerous Type vulnerability in Daan. ...)
NOT-FOR-US: WordPress plugin or theme
@@ -6205,11 +6205,11 @@ CVE-2026-56006 (Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 vers
CVE-2026-56005 (Subscriber Cross Site Scripting (XSS) in WP Activity Log <= 5.6.3.1 ve ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-55967 (AES-GCM encryption/decryption with extremely large cumulative single m ...)
- - wolfssl <unfixed> (bug #1140765)
+ - wolfssl 5.9.2-1 (bug #1140765)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10709 (v5.9.2-stable)
CVE-2026-55961 (wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) ...)
- - wolfssl <unfixed> (bug #1140765)
+ - wolfssl 5.9.2-1 (bug #1140765)
[trixie] - wolfssl <no-dsa> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10702 (v5.9.2-stable)
CVE-2026-55895 (Vim is an open source, command line text editor. Prior to 9.2.0663, a ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9f15b5977002336fcb22ba9161168ec6210439ea
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9f15b5977002336fcb22ba9161168ec6210439ea
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260704/b56537e4/attachment.htm>
More information about the debian-security-tracker-commits
mailing list