[Git][security-tracker-team/security-tracker][master] Add new wolfssl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0755a80d by Salvatore Bonaccorso at 2026-09-27T21:39:17+02:00
Add new wolfssl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,25 +3,35 @@ CVE-2026-97165 (Joomla Extension - svenbluege.de - Reflected XSS and open redire
 CVE-2026-97164 (Joomla Extension - svenbluege.de - Authenticated arbitrary path deleti ...)
 	NOT-FOR-US: Joomla
 CVE-2026-94419 (Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a  ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
 CVE-2026-94418 (Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certi ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
 CVE-2026-94417 (When an application enables both OCSP and CRL revocation checking on o ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
 CVE-2026-93304 (A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it ha ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/11458 (v5.9.4-stable)
 CVE-2026-93302 (MatchTrustedPeer ignores the public key used, leading to forged CA clo ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: Fixed by: https://github.com/wolfSSL/wolfssl/commit/22bcd51d553eaac1de37bee91fdac80cc47961e1 (v5.9.4-stable)
 CVE-2026-89136 (When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
 CVE-2026-89135 (A failed X509_verify_cert call permanently plants an unverified attack ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
 CVE-2026-89134 (A certificate with no dNSName SAN but another SAN type present (e.g. r ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10837 (v5.9.4-stable)
 CVE-2026-89133 (wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certifi ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10687 (v5.9.4-stable)
 CVE-2026-89102 (In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side impleme ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/11027 (v5.9.4-stable)
 CVE-2026-88778 (Predictable exact value from previous values vulnerability in Citrix N ...)
 	NOT-FOR-US: NetScaler
 CVE-2026-88777 (Memory overflow vulnerability vulnerability in Citrix NetScaler ADC an ...)
@@ -39,7 +49,8 @@ CVE-2026-88772 (Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gatew
 CVE-2026-88771 (Improper input validation vulnerability in Citrix NetScaler ADC and Ci ...)
 	NOT-FOR-US: NetScaler
 CVE-2026-15442 (In all builds that make use of (D)TLS, including default builds, there ...)
-	TODO: check
+	- wolfssl <unfixed>
+	NOTE: https://github.com/wolfSSL/wolfssl/pull/10863 (v5.9.4-stable)
 CVE-2026-101061 (utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-s ...)
 	TODO: check
 CVE-2026-101060 (python-utcp versions before 1.1.4 contain a server-side request forger ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0755a80d0014016724abf98b8ad053376feb2141

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0755a80d0014016724abf98b8ad053376feb2141
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260927/e51c7cd7/attachment.htm>