Debian Patches

Status for wolfssl/5.9.2-1.2

Patch Description Author Forwarded Bugs Origin Last update
multi-arch.patch Make header files multi-arch compatible Exclude architecture dependent option HAVE___UINT128 from config.h Felix Lechner no debian
dfsg.patch Strike references to removed non-DFSG sources from build files=================================================================== Felix Lechner <felix.lechner@lease-up.com> not-needed
fix-hurd-i386-flags.patch Fix type definition for socklen_t on hurd-i386 Based on http://bugs.mysql.com/bug.php?id=22326 Felix Lechner <felix.lechner@lease-up.com> not-needed 2017-04-22
handle-debian-files.patch Handling existing debian directory=================================================================== Jacob Barthelmeh no other
configure-ac-rules.patch =================================================================== no
CVE-2026-15442.patch Backport for CVE-2026-15442 for (D)TLS shutdown during buffered reads Josh Holtrop <josh@wolfssl.com> not-needed debian upstream, https://github.com/wolfSSL/wolfssl/commit/07d41740de70c56a45295446e1cd2b48124c6819
CVE-2026-93304.patch Backport for CVE-2026-93304 for TLS 1.2/DTLS client ChangeCipherSpec ordering Kareem <kareem@wolfssl.com> not-needed debian upstream, https://github.com/wolfSSL/wolfssl/commit/caaedc578f0d3feb1cfce420267936382afcf98d
CVE-2026-89136.patch Backport for CVE-2026-89136 for Raw Public Key (RPK) use, enabled with --enable-distro Kareem <kareem@wolfssl.com> not-needed debian upstream, https://github.com/wolfSSL/wolfssl/commit/7493d84e3b9b4039c07a1cd45a751bd13f70a611
CVE-2026-89133.patch walk cert chain to apply ancestor name constraints
- Ancestor walk added to ParseCertRelative
- FindSignerByAkidOrName helper: AKID->SKID with name-hash
validation, name-only fallback only when AKID is absent
- Signer fields: authKeyIdSet, authKeyIdHash
- issuerNameHash ifdef widened to include !IGNORE_NAME_CONSTRAINTS
- WOLFSSL_MAX_CHAIN_DEPTH macro (default 20)
- Self-loop and A->B->A cycle termination
- CN-as-DNS fallback in ConfirmNameConstraints gated on !cert->isCA		 Ruby Martin <ruby@wolfssl.com> no 2026-06-10
CVE-2026-89134.patch Backport for CVE-2026-89134 for X.509 DNS name-constraint checking on the Subject CN Ruby Martin <ruby@wolfssl.com> not-needed debian backport, https://github.com/wolfSSL/wolfssl/commit/9a0a01ae87476462d3b58a7627bdb539da670ea9
CVE-2026-94417.patch Backport for CVE-2026-94417 for combined OCSP and CRL revocation checking, enabled with --enable-distro Tobias Frauenschläger <tobias@wolfssl.com> not-needed debian backport, https://github.com/wolfSSL/wolfssl/commit/faec5fd3d3e0826d71a8082c615db366b77c83e9
CVE-2026-93302.patch Backport for CVE-2026-93302 for WOLFSSL_TRUST_PEER_CERT use, enabled with --enable-distro Juliusz Sosinowicz <juliusz@wolfssl.com> not-needed debian backport, https://github.com/wolfSSL/wolfssl/commit/22bcd51d553eaac1de37bee91fdac80cc47961e1
CVE-2026-89102.patch Backport for CVE-2026-89102 for OCSP multi-stapling (status_request_v2) use Tobias Frauenschläger <tobias@wolfssl.com> not-needed debian backport, https://github.com/wolfSSL/wolfssl/commit/525f52bd57d4055ae1ee4c9307d5413a8e9dd83f

All known versions for source package 'wolfssl'

Links