Package: release.debian.org Severity: normal Tags: bookworm X-Debbugs-Cc: [email protected], [email protected] Control: affects -1 + src:wolfssl User: [email protected] Usertags: pu
[ Reason ]
wolfSSL 5.9.4 (uploaded to unstable as 5.9.4-1) fixes a new batch of
CVEs. I would like to fix the ones affecting bookworm through a point release.
[ Impact ]
Without the update bookworm users remain vulnerable to
CVE-2026-93302 (High) trusted peer match ignores the public key
CVE-2026-93304 (Med) TLS 1.2 client accepts early ChangeCipherSpec
CVE-2026-89134 (Med) Subject CN name constraint skipped with non-DNS SAN
(introduced by the CVE-2026-6731 fix in deb12u3)
CVE-2026-15442 (Low) use-after-free in shutdown/read sequence
CVE-2026-94417 (Low) CRL check skipped when no OCSP responder is named
Checked and not affected in the bookworm build: CVE-2026-89102 (no
status_request_v2 pending-CA code in 5.5.4), CVE-2026-89136 (RPK not in
5.5.4), CVE-2026-89135 (no WOLFSSL_TEMP_CA path), CVE-2026-94418
(WOLFSSL_SMALL_CERT_VERIFY not built), CVE-2026-94419 (built with
NO_SESSION_CACHE_REF). CVE-2026-89133 is affected but deferred: its
upstream fix changes the layout of the installed struct Signer.
[ Tests ]
- Built with sbuild in a clean bookworm chroot (bookworm +
bookworm-security).
- ABI unchanged: soname libwolfssl.so.35 and the exported symbol set of
the new library are identical to 5.5.4-2+deb12u3 (3180 symbols);
debian/libwolfssl35.symbols is unchanged.
- testwolfcrypt passes.
- --enable-all API test suite (785 tests), each test run individually
against the unpatched deb12u3 source and the patched source: identical
pass/fail results for every test (the existing failures are
environmental and occur without these patches too).
[ Risks ]
Minimal backports of upstream fixes, no upstream version or ABI change.
Two fixes had to be adapted to 5.5.4 without the upstream refactors they
build on (noted in each patch's DEP-3 header):
- CVE-2026-93302: upstream replaces the TrustedPeerCert fields with a
certificate hash; to keep the installed struct layout this stores the
whole certificate DER in the existing sig buffer and requires an exact
match instead.
- CVE-2026-94417: 5.5.4 has no OCSP_NO_URL/OcspNoUrlPolicy(), so the
no-responder case is detected from the certificate's AIA field.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in oldstable
[x] the issue is verified as fixed in unstable
[ Changes ]
* CVE-2026-93302: require trusted peer certificates to match byte for
byte.
* CVE-2026-93304: reject ChangeCipherSpec before ClientKeyExchange is
sent.
* CVE-2026-15442: fix use-after-free in TLS shutdown/ReceiveData
sequences.
* CVE-2026-94417: check the CRL when a certificate names no OCSP
responder.
* CVE-2026-89134: apply Subject CN name constraints unless a dNSName
SAN is present.
Attachment: wolfssl_5.5.4-2+deb12u4.debdiff
wolfssl_5.5.4-2+deb12u4.debdiff
Description: Binary data
