Packages / Debian 12 (Bookworm) / Source / libs / swupdate
Library for controlling the swupdate framework
Development files for swupdate framework
swupdate bindings for the Lua language
Documentation for swupdate framework
Web Application for swupdate
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-109399] Published: SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for cha | Critical(9.2) | AffectedDetails (20)
|
| [CVE-2025-41259] Published: SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a | High(7.3) | AffectedDetails (20)
|
| [CVE-2026-6985] Published: A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of the component TCP Option Handler. This manipulation | Medium(5.5) | AffectedDetails (20)
|
| [CVE-2026-6986] Published: A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /src/tls_aes128.c of the component GCM Authentication Tag Hand | Low(3.7) | AffectedDetails (20)
|
| [CVE-2026-5246] Published: A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the file mongoose.c of the component P-384 Public Key Handler. Executing a manip | Medium(5.6) | AffectedDetails (20)
|
| [CVE-2026-5245] Published: A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS Record Handler. Performing a manipulation of the arg | High(8.1) | AffectedDetails (20)
|
| [CVE-2026-5244] Published: A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS 1.3 Handler. Such manipulation of the argument pub | High(8.2) | AffectedDetails (20)
|
| [CVE-2026-2968] Published: A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of the file /src/tls_chacha20.c of the component Poly1305 Authentication Tag Handler | Medium(6.3) | AffectedDetails (20)
|
| [CVE-2026-2967] Published: A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/net_builtin.c of the component TCP Sequence Number Handler. The manipulati | Medium(6.3) | AffectedDetails (20)
|
| [CVE-2026-2966] Published: A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipul | Medium(6.3) | AffectedDetails (20)
|
| [CVE-2025-65502] Published: swupdate: CVE-2025-65502 | Medium | AffectedDetails (20)
|
| [CVE-2025-51495] Published: swupdate: CVE-2025-51495 | High(7.5) | AffectedDetails (20)
|
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-28525] Published: SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of service by sending a crafted HTTP | High(8.2) | FixedDetails (20)
|
| [CVE-2020-25887] Published: swupdate: CVE-2020-25887 | Medium | FixedDetails (20)
|
| [CVE-2021-26530] Published: swupdate: CVE-2021-26530 | Medium | FixedDetails (20)
|
| [CVE-2021-26529] Published: swupdate: CVE-2021-26529 | Medium | FixedDetails (20)
|
| [CVE-2021-26528] Published: swupdate: CVE-2021-26528 | Medium | FixedDetails (20)
|
| [CVE-2020-25756] Published: swupdate: CVE-2020-25756 | Medium | FixedDetails (20)
|
| [CVE-2019-19307] Published: swupdate: CVE-2019-19307 | Medium | FixedDetails (20)
|
| [CVE-2019-13503] Published: swupdate: CVE-2019-13503 | Medium | FixedDetails (20)
|
Last synced:
Authoritative source; repository metadata signature verified
bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Authoritative source; repository metadata signature verified
bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00