Packages / Debian 12 (Bookworm) / Source / utils / ausweisapp2

Source Package: ausweisapp2 (2.0.1-1~bpo12+1)

Official authentication app for German ID cards and residence permits

The following binary packages are built from this source package:

  • ausweisapp

    Official authentication app for German ID cards and residence permits

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-90848]

Published:

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage

Medium(5.3)Affected
Details (2)

  • 2.0.1-1~bpo12+1 · amd64 · bookworm-backports

    Affected

    nvd · ausweisapp2 · debian · bookworm; nvd · ausweisapp2 · debian · 12

  • 2.0.1-1~bpo12+1 · arm64 · bookworm-backports

    Affected

    nvd · ausweisapp2 · debian · bookworm; nvd · ausweisapp2 · debian · 12

Last synced:

[CVE catalog]

Sources

  • Debian 12 (Bookworm) backports main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6

    Repository-signature verification record
    Signed-object SHA-256
    43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
    Observed SHA-256
    b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
    Result
    match verified
  • Debian 12 (Bookworm) backports main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5

    Repository-signature verification record
    Signed-object SHA-256
    43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
    Observed SHA-256
    9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
    Result
    match verified