[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-77205

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b50f923f by Salvatore Bonaccorso at 2026-10-17T08:43:12+02:00
Update status for CVE-2026-77205

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5634,6 +5634,8 @@ CVE-2026-77206 (Libreswan's IKEv2 state machine has a null pointer dereference b
 	NOTE: https://libreswan.org/security/CVE-2026-77206/
 CVE-2026-77205 (Libreswan in FIPS mode has a vulnerability where badly formed received ...)
 	- libreswan <unfixed> (bug #1150899)
+	[trixie] - libreswan <not-affected> (Incomplete fix for CVE-2026-14957 not applied)
+	[bookworm] - libreswan <not-affected> (Incomplete fix for CVE-2026-14957 not applied)
 	NOTE: https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt
 	NOTE: https://libreswan.org/security/CVE-2026-77205/
 CVE-2026-77114 (The Document Gallery plugin for WordPress is vulnerable to Stored Cros ...)
@@ -106832,6 +106834,7 @@ CVE-2026-14957 (In FIPS mode, Libreswan's add_decoded_cert() function calls CERT
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2501764
 	NOTE: https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt
 	NOTE: Patch: https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.patch
+	NOTE: When fixing this issue make the fix complete to not open up CVE-2026-77205
 CVE-2026-XXXX [GHSA-68ff-gq39-pqjm: relay: authentication bypass with the "plain" password hash algorithm]
 	- weechat 4.9.4-1 (bug #1142597)
 	NOTE: https://github.com/weechat/weechat/security/advisories/GHSA-68ff-gq39-pqjm



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b50f923fbe96bfcb3df1c33eb906643cc73ee67a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b50f923fbe96bfcb3df1c33eb906643cc73ee67a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/a839b8da/attachment.htm>