CVE catalog
CVE-2009-3560
cadaver: CVE-2009-3560
- Severity
- Low
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 24.31% · Oct 25, 2026
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | tla | bookworm | 1.3.5+dfsg1-2.1 | fixed |
| Debian | gdcm | sid | 3.0.24-14 | fixed |
| Debian | gdcm | forky | 3.0.24-14 | fixed |
| Debian | gdcm | trixie | 3.0.24-5 | fixed |
| Debian | gdcm | bookworm | 3.0.21-1 | fixed |
| Debian | poco | sid | 1.14.2-6 | fixed |
| Debian | poco | forky | 1.14.2-6 | fixed |
| Debian | poco | trixie | 1.13.0-6+deb13u1 | fixed |
| Debian | poco | bookworm | 1.11.0-3+deb12u1 | fixed |
| Debian | tdom | sid | 0.9.6-3 | fixed |
| Debian | tdom | forky | 0.9.6-3 | fixed |
| Debian | tdom | trixie | 0.9.5.1-3 | fixed |
| Debian | tdom | bookworm | 0.9.3-1 | fixed |
| Debian | cmake | sid | 4.3.4-1 | fixed |
| Debian | cmake | forky | 4.3.4-1 | fixed |
| Debian | cmake | trixie | 3.31.6-2 | fixed |
| Debian | cmake | bookworm | 3.25.1-1 | fixed |
| Debian | coin3 | sid | 4.0.7+ds-1 | fixed |
| Debian | coin3 | forky | 4.0.7+ds-1 | fixed |
| Debian | coin3 | trixie | 4.0.3+ds-2 | fixed |
| Debian | coin3 | bookworm | 4.0.0+ds-3 | fixed |
| Debian | expat | sid | 2.9.0-1 | fixed |
| Debian | expat | forky | 2.9.0-1 | fixed |
| Debian | expat | trixie | 2.8.3-1~deb13u1 | fixed |
| Debian | expat | trixie-security | 2.9.0-1~deb13u1 | fixed |
| Debian | expat | bookworm | 2.5.0-1+deb12u2 | fixed |
| Debian | expat | bookworm-security | 2.5.0-1+deb12u5 | fixed |
| Debian | xotcl | sid | 1.6.8-6 | not affected |
| Debian | xotcl | forky | 1.6.8-6 | not affected |
| Debian | xotcl | trixie | 1.6.8-6 | not affected |
| Debian | xotcl | bookworm | 1.6.8-5 | not affected |
| Debian | cadaver | sid | 0.28+dfsg-2 | vulnerable |
| Debian | cadaver | forky | 0.28+dfsg-2 | vulnerable |
| Debian | cadaver | trixie | 0.26+dfsg-2 | vulnerable |
| Debian | cadaver | bookworm | 0.24+dfsg-1 | vulnerable |
| Debian | matanza | sid | 0.13+ds2-2 | vulnerable |
| Debian | matanza | forky | 0.13+ds2-2 | vulnerable |
| Debian | matanza | trixie | 0.13+ds2-2 | vulnerable |
| Debian | matanza | bookworm | 0.13+ds2-1 | vulnerable |
| Debian | mcabber | sid | 1.1.2-2.1 | fixed |
| Debian | mcabber | trixie | 1.1.2-2 | fixed |
| Debian | mcabber | bookworm | 1.1.2-2 | fixed |
| Debian | simgear | sid | 1:2024.1.5+dfsg-1 | fixed |
| Debian | simgear | forky | 1:2024.1.5+dfsg-1 | fixed |
| Debian | simgear | trixie | 1:2020.3.19+dfsg-1 | fixed |
| Debian | simgear | bookworm | 1:2020.3.16+dfsg-1+deb12u1 | fixed |
| Debian | udunits | sid | 2.2.28-8 | fixed |
| Debian | udunits | forky | 2.2.28-8 | fixed |
| Debian | udunits | trixie | 2.2.28-7 | fixed |
| Debian | udunits | bookworm | 2.2.28-5 | fixed |
| Debian | audacity | sid | 4.0.1+dfsg-2 | fixed |
| Debian | audacity | forky | 4.0.1+dfsg-2 | fixed |
| Debian | audacity | trixie | 3.7.3+dfsg-1 | fixed |
| Debian | audacity | bookworm | 3.2.4+dfsg-1 | fixed |
| Debian | paraview | sid | 6.1.1+dfsg1-3 | fixed |
| Debian | paraview | forky | 6.1.1+dfsg1-3 | fixed |
| Debian | paraview | trixie | 5.13.2+dfsg-3 | fixed |
| Debian | paraview | bookworm | 5.11.0+dfsg-1 | fixed |
| Debian | xmlrpc-c | sid | 1.60.05-1 | fixed |
| Debian | xmlrpc-c | forky | 1.60.05-1 | fixed |
| Debian | xmlrpc-c | trixie | 1.59.03-10 | fixed |
| Debian | xmlrpc-c | bookworm | 1.33.14-11 | fixed |
| Debian | libxmltok | bookworm | 1.2-4 | vulnerable |
| Debian | ghostscript | sid | 10.08.0~dfsg-2 | fixed |
| Debian | ghostscript | forky | 10.08.0~dfsg-2 | fixed |
| Debian | ghostscript | trixie | 10.05.1~dfsg-1+deb13u1 | fixed |
| Debian | ghostscript | trixie-security | 10.05.1~dfsg-1+deb13u3 | fixed |
| Debian | ghostscript | bookworm | 10.0.0~dfsg-11+deb12u8 | fixed |
| Debian | ghostscript | bookworm-security | 10.0.0~dfsg-11+deb12u8 | fixed |
| Debian | texlive-bin | sid | 2026.20260303.78225+ds-5 | not affected |
| Debian | texlive-bin | forky | 2026.20260303.78225+ds-5 | not affected |
| Debian | texlive-bin | trixie | 2024.20240313.70630+ds-6 | not affected |
| Debian | texlive-bin | bookworm | 2022.20220321.62855-5.1+deb12u2 | not affected |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | tla | source | bookworm | 1.3.5+dfsg-15 | unimportant | Not reported | [560940] |
| Debian | gdcm | source | sid | 2.0.14-2 | low | Not reported | [560929] |
| Debian | gdcm | source | forky | 2.0.14-2 | low | Not reported | [560929] |
| Debian | gdcm | source | trixie | 2.0.14-2 | low | Not reported | [560929] |
| Debian | gdcm | source | bookworm | 2.0.14-2 | low | Not reported | [560929] |
| Debian | poco | source | sid | 1.3.6p1-1 | unimportant | Not reported | [560936] |
| Debian | poco | source | forky | 1.3.6p1-1 | unimportant | Not reported | [560936] |
| Debian | poco | source | trixie | 1.3.6p1-1 | unimportant | Not reported | [560936] |
| Debian | poco | source | bookworm | 1.3.6p1-1 | unimportant | Not reported | [560936] |
| Debian | tdom | source | sid | 0.8.3~20080525-1 | low | Not reported | [560921] |
| Debian | tdom | source | forky | 0.8.3~20080525-1 | low | Not reported | [560921] |
| Debian | tdom | source | trixie | 0.8.3~20080525-1 | low | Not reported | [560921] |
| Debian | tdom | source | bookworm | 0.8.3~20080525-1 | low | Not reported | [560921] |
| Debian | cmake | source | sid | 2.6.0-6 | unimportant | Not reported | [560927] |
| Debian | cmake | source | forky | 2.6.0-6 | unimportant | Not reported | [560927] |
| Debian | cmake | source | trixie | 2.6.0-6 | unimportant | Not reported | [560927] |
| Debian | cmake | source | bookworm | 2.6.0-6 | unimportant | Not reported | [560927] |
| Debian | coin3 | source | sid | 4.0.0~CMake~6f54f1602475+ds1-1 | unimportant | Not reported | [560928] |
| Debian | coin3 | source | forky | 4.0.0~CMake~6f54f1602475+ds1-1 | unimportant | Not reported | [560928] |
| Debian | coin3 | source | trixie | 4.0.0~CMake~6f54f1602475+ds1-1 | unimportant | Not reported | [560928] |
| Debian | coin3 | source | bookworm | 4.0.0~CMake~6f54f1602475+ds1-1 | unimportant | Not reported | [560928] |
| Debian | expat | source | sid | 2.0.1-6 | low | Not reported | [560901] |
| Debian | expat | source | forky | 2.0.1-6 | low | Not reported | [560901] |
| Debian | expat | source | trixie | 2.0.1-6 | low | Not reported | [560901] |
| Debian | expat | source | bookworm | 2.0.1-6 | low | Not reported | [560901] |
| Debian | xotcl | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | xotcl | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | xotcl | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | xotcl | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Debian | cadaver | source | sid | (unfixed) | unimportant | Not reported | [560926] |
| Debian | cadaver | source | forky | (unfixed) | unimportant | Not reported | [560926] |
| Debian | cadaver | source | trixie | (unfixed) | unimportant | Not reported | [560926] |
| Debian | cadaver | source | bookworm | (unfixed) | unimportant | Not reported | [560926] |
| Debian | matanza | source | sid | (unfixed) | unimportant | Not reported | [560920] |
| Debian | matanza | source | forky | (unfixed) | unimportant | Not reported | [560920] |
| Debian | matanza | source | trixie | (unfixed) | unimportant | Not reported | [560920] |
| Debian | matanza | source | bookworm | (unfixed) | unimportant | Not reported | [560920] |
| Debian | mcabber | source | sid | 0.10.0-1 | low | Not reported | [601053] |
| Debian | mcabber | source | trixie | 0.10.0-1 | low | Not reported | [601053] |
| Debian | mcabber | source | bookworm | 0.10.0-1 | low | Not reported | [601053] |
| Debian | simgear | source | sid | 2.10.0-1 | unimportant | Not reported | [560937] |
| Debian | simgear | source | forky | 2.10.0-1 | unimportant | Not reported | [560937] |
| Debian | simgear | source | trixie | 2.10.0-1 | unimportant | Not reported | [560937] |
| Debian | simgear | source | bookworm | 2.10.0-1 | unimportant | Not reported | [560937] |
| Debian | udunits | source | sid | 2.1.8-4 | unimportant | Not reported | [560922] |
| Debian | udunits | source | forky | 2.1.8-4 | unimportant | Not reported | [560922] |
| Debian | udunits | source | trixie | 2.1.8-4 | unimportant | Not reported | [560922] |
| Debian | udunits | source | bookworm | 2.1.8-4 | unimportant | Not reported | [560922] |
| Debian | audacity | source | sid | 1.3.2-1 | unimportant | Not reported | [560919] |
| Debian | audacity | source | forky | 1.3.2-1 | unimportant | Not reported | [560919] |
| Debian | audacity | source | trixie | 1.3.2-1 | unimportant | Not reported | [560919] |
| Debian | audacity | source | bookworm | 1.3.2-1 | unimportant | Not reported | [560919] |
| Debian | paraview | source | sid | 3.6.2-1 | unimportant | Not reported | [560935] |
| Debian | paraview | source | forky | 3.6.2-1 | unimportant | Not reported | [560935] |
| Debian | paraview | source | trixie | 3.6.2-1 | unimportant | Not reported | [560935] |
| Debian | paraview | source | bookworm | 3.6.2-1 | unimportant | Not reported | [560935] |
| Debian | xmlrpc-c | source | sid | 1.06.27-1.1 | low | Not reported | [560942] |
| Debian | xmlrpc-c | source | forky | 1.06.27-1.1 | low | Not reported | [560942] |
| Debian | xmlrpc-c | source | trixie | 1.06.27-1.1 | low | Not reported | [560942] |
| Debian | xmlrpc-c | source | bookworm | 1.06.27-1.1 | low | Not reported | [560942] |
| Debian | libxmltok | source | bookworm | (unfixed) | not yet assigned | Not reported | Not reported |
| Debian | ghostscript | source | sid | 8.71~dfsg-2 | unimportant | Not reported | [560930] |
| Debian | ghostscript | source | forky | 8.71~dfsg-2 | unimportant | Not reported | [560930] |
| Debian | ghostscript | source | trixie | 8.71~dfsg-2 | unimportant | Not reported | [560930] |
| Debian | ghostscript | source | bookworm | 8.71~dfsg-2 | unimportant | Not reported | [560930] |
| Debian | texlive-bin | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | bookworm | Not affected | unimportant | Not reported | Not reported |
[Debian bug #560940][Debian bug #560929][Debian bug #560936][Debian bug #560921][Debian bug #560927][Debian bug #560928][Debian bug #560901][Debian bug #560926][Debian bug #560920][Debian bug #601053][Debian bug #560937][Debian bug #560922][Debian bug #560919][Debian bug #560935][Debian bug #560942][Debian bug #560930]
Notes
[bookworm] libxmltok: Minor issue, no runtime dependencies left
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [audacity]Unknown
Details (2)
3.2.4+dfsg-1· amd64 · bookwormFixed · Fixed:
1.3.2-1dsa · audacity · debian · bookworm; dsa · audacity · debian · 12
3.2.4+dfsg-1· arm64 · bookwormFixed · Fixed:
1.3.2-1dsa · audacity · debian · bookworm; dsa · audacity · debian · 12
- [audacity-data]Unknown
Source package: [audacity]
Details (2)
3.2.4+dfsg-1· all · bookwormFixed · Fixed:
1.3.2-1dsa · audacity · debian · bookworm; dsa · audacity · debian · 12
3.2.4+dfsg-1· all · bookwormFixed · Fixed:
1.3.2-1dsa · audacity · debian · bookworm; dsa · audacity · debian · 12
- [cadaver]Unknown
Details (2)
0.24+dfsg-1· amd64 · bookwormAffected
dsa · cadaver · debian · bookworm; dsa · cadaver · debian · 12
0.24+dfsg-1· arm64 · bookwormAffected
dsa · cadaver · debian · bookworm; dsa · cadaver · debian · 12
- [cmake]Unknown
Details (4)
3.25.1-1· amd64 · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.25.1-1· arm64 · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
- [cmake-curses-gui]Unknown
Source package: [cmake]
Details (4)
3.25.1-1· amd64 · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.25.1-1· arm64 · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
- [cmake-data]Unknown
Source package: [cmake]
Details (4)
3.25.1-1· all · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.25.1-1· all · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
- [cmake-doc]Unknown
Source package: [cmake]
Details (4)
3.25.1-1· all · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.25.1-1· all · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
- [cmake-qt-gui]Unknown
Source package: [cmake]
Details (4)
3.25.1-1· amd64 · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.25.1-1· arm64 · bookwormFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
3.31.6-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.6.0-6dsa · cmake · debian · bookworm; dsa · cmake · debian · 12
- [expat]Unknown
Details (4)
2.5.0-1+deb12u2· amd64 · bookwormFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u2· arm64 · bookwormFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u3· amd64 · bookworm-securityFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u3· arm64 · bookworm-securityFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
- [gdcm-doc]Unknown
Source package: [gdcm]
Details (2)
3.0.21-1· all · bookwormFixed · Fixed:
2.0.14-2dsa · gdcm · debian · bookworm; dsa · gdcm · debian · 12
3.0.21-1· all · bookwormFixed · Fixed:
2.0.14-2dsa · gdcm · debian · bookworm; dsa · gdcm · debian · 12
- [ghostscript]Unknown
Details (4)
10.0.0~dfsg-11+deb12u8· amd64 · bookwormFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· arm64 · bookwormFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· amd64 · bookworm-securityFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· arm64 · bookworm-securityFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
- [ghostscript-doc]Unknown
Source package: [ghostscript]
Details (4)
10.0.0~dfsg-11+deb12u8· all · bookwormFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· all · bookwormFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· all · bookworm-securityFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· all · bookworm-securityFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
- [ghostscript-x]Unknown
Source package: [ghostscript]
Details (4)
10.0.0~dfsg-11+deb12u8· amd64 · bookwormFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· arm64 · bookwormFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· amd64 · bookworm-securityFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
10.0.0~dfsg-11+deb12u8· arm64 · bookworm-securityFixed · Fixed:
8.71~dfsg-2dsa · ghostscript · debian · bookworm; dsa · ghostscript · debian · 12
- [libcoin80c]Unknown
Source package: [coin3]
Details (2)
4.0.0+ds-3· amd64 · bookwormFixed · Fixed:
4.0.0~CMake~6f54f1602475+ds1-1dsa · coin3 · debian · bookworm; dsa · coin3 · debian · 12
4.0.0+ds-3· arm64 · bookwormFixed · Fixed:
4.0.0~CMake~6f54f1602475+ds1-1dsa · coin3 · debian · bookworm; dsa · coin3 · debian · 12
- [libcoin-dev]Unknown
Source package: [coin3]
Details (2)
4.0.0+ds-3· amd64 · bookwormFixed · Fixed:
4.0.0~CMake~6f54f1602475+ds1-1dsa · coin3 · debian · bookworm; dsa · coin3 · debian · 12
4.0.0+ds-3· arm64 · bookwormFixed · Fixed:
4.0.0~CMake~6f54f1602475+ds1-1dsa · coin3 · debian · bookworm; dsa · coin3 · debian · 12
- [libcoin-doc]Unknown
Source package: [coin3]
Details (2)
4.0.0+ds-3· all · bookwormFixed · Fixed:
4.0.0~CMake~6f54f1602475+ds1-1dsa · coin3 · debian · bookworm; dsa · coin3 · debian · 12
4.0.0+ds-3· all · bookwormFixed · Fixed:
4.0.0~CMake~6f54f1602475+ds1-1dsa · coin3 · debian · bookworm; dsa · coin3 · debian · 12
- [libcoin-runtime]Unknown
Source package: [coin3]
Details (2)
4.0.0+ds-3· all · bookwormFixed · Fixed:
4.0.0~CMake~6f54f1602475+ds1-1dsa · coin3 · debian · bookworm; dsa · coin3 · debian · 12
4.0.0+ds-3· all · bookwormFixed · Fixed:
4.0.0~CMake~6f54f1602475+ds1-1dsa · coin3 · debian · bookworm; dsa · coin3 · debian · 12
- [libexpat1]Unknown
Source package: [expat]
Details (4)
2.5.0-1+deb12u2· amd64 · bookwormFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u2· arm64 · bookwormFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u3· amd64 · bookworm-securityFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u3· arm64 · bookworm-securityFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
- [libexpat1-dev]Unknown
Source package: [expat]
Details (4)
2.5.0-1+deb12u2· amd64 · bookwormFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u2· arm64 · bookwormFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u3· amd64 · bookworm-securityFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
2.5.0-1+deb12u3· arm64 · bookworm-securityFixed · Fixed:
2.0.1-6dsa · expat · debian · bookworm; dsa · expat · debian · 12
- [libgdcm3.0]Unknown
Source package: [gdcm]
Details (2)
3.0.21-1· amd64 · bookwormFixed · Fixed:
2.0.14-2dsa · gdcm · debian · bookworm; dsa · gdcm · debian · 12
3.0.21-1· arm64 · bookwormFixed · Fixed:
2.0.14-2dsa · gdcm · debian · bookworm; dsa · gdcm · debian · 12
Observed:
References
- [https://access.redhat.com/errata/RHSA-2009:1625]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10268-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2009-3560]
- [https://osv.dev/vulnerability/DSA-1953-1]
- [https://osv.dev/vulnerability/DSA-1953-2]
- [https://osv.dev/vulnerability/DSA-1977-1]
- [https://security-tracker.debian.org/tracker/CVE-2009-3560]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]