[Git][security-tracker-team/security-tracker][master] Add new wolfssh issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ccf387f by Salvatore Bonaccorso at 2026-10-07T09:32:38+02:00
Add new wolfssh issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -83,17 +83,17 @@ CVE-2026-86816 (The WPCafe  WordPress plugin before 3.0.21 does not restrict acc
 CVE-2026-86684 (The Gitea push mirror API checked whether the repository owner, instea ...)
 	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-84897 (src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-c ...)
-	TODO: check
+	- wolfssh <itp> (bug #983449)
 CVE-2026-83742 (Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolf ...)
-	TODO: check
+	- wolfssh <itp> (bug #983449)
 CVE-2026-83540 (When password or public key authentication is used with the Windows po ...)
-	TODO: check
+	- wolfssh <itp> (bug #983449)
 CVE-2026-82212 (The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-82211 (The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-81535 (In wolfSSH through 1.5.0 built with--enable-fwd,DoChannelOpen()insrc/i ...)
-	TODO: check
+	- wolfssh <itp> (bug #983449)
 CVE-2026-80048 (A flaw was found in `sssd-kcm`. A local user or process able to connec ...)
 	TODO: check
 CVE-2026-79960 (When a push was authenticated with a deploy key, Gitea recorded the re ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ccf387fbae76d964f5eb6d386acdfca8b8251d3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ccf387fbae76d964f5eb6d386acdfca8b8251d3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/1806e955/attachment.htm>