[Git][security-tracker-team/security-tracker][master] Add Debian bug references for wolfssl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
43907d5e by Salvatore Bonaccorso at 2026-06-26T06:23:58+02:00
Add Debian bug references for wolfssl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32,13 +32,13 @@ CVE-2026-9083 (A flaw was found in Keycloak. A realm administrator with the "man
 CVE-2026-6432 (Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier ...)
 	NOT-FOR-US: Silicon Labs
 CVE-2026-6291 (Bleichenbacher padding oracle in PKCS#7 KTRI decryption. When decrypti ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1140765)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/10203 (v5.9.2-stable)
 CVE-2026-6094 (Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing craf ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1140765)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/10128 (v5.9.2-stable)
 CVE-2026-6091 (Partial-chain certificate verification may accept chains that terminat ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1140765)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/10170 (v5.9.2-stable)
 CVE-2026-57700 (Unrestricted Upload of File with Dangerous Type vulnerability in Daan. ...)
 	NOT-FOR-US: WordPress plugin or theme
@@ -182,10 +182,10 @@ CVE-2026-56006 (Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 vers
 CVE-2026-56005 (Subscriber Cross Site Scripting (XSS) in WP Activity Log <= 5.6.3.1 ve ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-55967 (AES-GCM encryption/decryption with extremely large cumulative single m ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1140765)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/10709 (v5.9.2-stable)
 CVE-2026-55961 (wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1140765)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/10702 (v5.9.2-stable)
 CVE-2026-55895 (Vim is an open source, command line text editor. Prior to 9.2.0663, a  ...)
 	- vim <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43907d5e7df9cf0542835f35b1e8dbf5b7185cbc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43907d5e7df9cf0542835f35b1e8dbf5b7185cbc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260626/924b9b8d/attachment.htm>