[Git][security-tracker-team/security-tracker][master] Track fixes for openssl via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8fde98c8 by Salvatore Bonaccorso at 2026-09-29T22:57:03+02:00
Track fixes for openssl via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -773,52 +773,52 @@ CVE-2026-100832 (Use-after-free in the Graphics: Canvas2D component. This vulner
 	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
 CVE-2026-84782 (Issue summary: The DTLS retransmission logic does not correctly handle ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-84783 (Issue summary: The first concurrent use of the same X.509 certificate  ...)
 	- openssl <not-affected> (Vulnerable code not present)
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-35189 (Issue summary: A certificate with many nameRelativeToCRLIssuer CRL dis ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-35191 (Issue summary: The OpenSSL QUIC server, when configured to not preform ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	[bookworm] - openssl <not-affected> (Vulnerable code not present)
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-42772 (Issue summary: The QUIC stream reassembly algorithm performance deteri ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	[bookworm] - openssl <not-affected> (Vulnerable code not present)
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-54872 (Issue summary: The generic elliptic-curve scalar multiplication used f ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-54873 (Issue summary: QUIC process may keep memory for QUIC packet buffer for ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	[bookworm] - openssl <not-affected> (Vulnerable code not present)
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-54875 (Issue summary: A non-constant-time optimized implementation of scalar  ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	[bookworm] - openssl <not-affected> (Vulnerable code not present)
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-72897 (Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a c ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	[bookworm] - openssl <not-affected> (Vulnerable code not present)
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-75804 (Issue summary: OpenSSL QUIC stack does not enforce connection level fl ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	[bookworm] - openssl <not-affected> (Vulnerable code not present)
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-75805 (Issue summary: A CMP client that requests certificate revocation on th ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-75806 (Issue summary: An established DTLS 1.2 association using an AEAD ciphe ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-77696 (Issue summary: SM2 signature generation uses non-constant-time arithme ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-84784 (Issue summary: A malicious remote peer may flood the local QUIC stack  ...)
-	- openssl <unfixed>
+	- openssl 3.6.5-1
 	[bookworm] - openssl <not-affected> (Vulnerable code not present)
 	NOTE: https://openssl-library.org/news/secadv/20260929.txt
 CVE-2026-XXXX [groff issues]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8fde98c85a1288468672126f1efc4d4385926c49

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8fde98c85a1288468672126f1efc4d4385926c49
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/602c47ae/attachment.htm>