[Git][security-tracker-team/security-tracker][master] Add new batch of wolfssl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
18995963 by Salvatore Bonaccorso at 2026-06-26T09:37:34+02:00
Add new batch of wolfssl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,33 +9,45 @@ CVE-2026-9219 (Setracker2 Android Companion App com.tgelec.setracker versions 3.
 CVE-2026-8797 (An access control deficiency vulnerability exists in ExpressUpdate Age ...)
 	TODO: check
 CVE-2026-8720 (wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when t ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10447 (v5.9.2-stable)
 CVE-2026-8661 (Server-Side Cross-Site Scripting and Server-Side Request Forgery vulne ...)
 	TODO: check
 CVE-2026-8380 (The Frontend File Manager Plugin WordPress plugin through 23.6 does no ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7532 (iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defi ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10354 (v5.9.2-stable)
 CVE-2026-7531 (Use-after-free in PQC hybrid key-share handling. This is an incomplete ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10327 (v5.9.2-stable)
 CVE-2026-7511 (PKCS7_verify signer confusion allows forged signatures, where the sign ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10203 (v5.9.2-stable)
 CVE-2026-6731 (X.509 name constraint bypass via the Subject Common Name when treated  ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10223 (v5.9.2-stable)
 CVE-2026-6681 (The PKCS#7 decode path ignores the caller-supplied output buffer size  ...)
-	TODO: check
+	- wolfssl 5.9.1-0.1
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10116 (v5.9.1-stable)
 CVE-2026-6679 (A heap buffer overflow could occur in the DTLS 1.3 ACK serialization p ...)
-	TODO: check
+	- wolfssl 5.9.1-0.1
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10116 (v5.9.1-stable)
 CVE-2026-6678 (Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other R ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10203 (v5.9.2-stable)
 CVE-2026-6450 (A CRL critical extension bypass exists in ParseCRL_Extensions where cr ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10239 (v5.9.2-stable)
 CVE-2026-6412 (Certificate policy and RFC 8446 compliance concerns regarding the cont ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10222 (v5.9.2-stable)
 CVE-2026-6331 (HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-le ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10192 (v5.9.2-stable)
 CVE-2026-6330 (The ML-KEM ARM64 NEON ciphertext comparison only compares half of the  ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10192 (v5.9.2-stable)
 CVE-2026-6329 (PKCS#12 MAC verification uses an attacker-controlled comparison length ...)
 	TODO: check
 CVE-2026-6325 (Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversiz ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/189959636e0cc7e5325647cf78481237241b346d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/189959636e0cc7e5325647cf78481237241b346d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260626/488a564e/attachment.htm>