Packages / Debian 12 (Bookworm) / Source / libs / swupdate

Source Package: swupdate (2024.12.1+dfsg-3~bpo12+1)

Library for controlling the swupdate framework

The following binary packages are built from this source package:

libswupdate0.1
Library for controlling the swupdate framework
libswupdate-dev
Development files for swupdate framework
lua-swupdate
swupdate bindings for the Lua language
swupdate-doc
Documentation for swupdate framework
swupdate-www
Web Application for swupdate

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-6985] Published: Apr 25, 2026, 5:16:33 PM UTC A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of the component TCP Option Handler. This manipulation	Medium(5.5)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2026-6986] Published: Apr 25, 2026, 4:30:13 PM UTC A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /src/tls_aes128.c of the component GCM Authentication Tag Hand	Low(3.7)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2026-5246] Published: Apr 2, 2026, 9:45:11 AM UTC A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the file mongoose.c of the component P-384 Public Key Handler. Executing a manip	Medium(5.6)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2026-5245] Published: Apr 2, 2026, 9:00:19 AM UTC A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS Record Handler. Performing a manipulation of the arg	High(8.1)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2026-5244] Published: Apr 2, 2026, 8:00:19 AM UTC A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS 1.3 Handler. Such manipulation of the argument pub	High(8.2)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2026-2968] Published: Feb 23, 2026, 3:02:07 AM UTC A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of the file /src/tls_chacha20.c of the component Poly1305 Authentication Tag Handler	Medium(6.3)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2026-2967] Published: Feb 23, 2026, 2:32:07 AM UTC A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/net_builtin.c of the component TCP Sequence Number Handler. The manipulati	Medium(6.3)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2026-2966] Published: Feb 23, 2026, 2:02:08 AM UTC A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipul	Medium(6.3)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2025-65502] Published: Nov 24, 2025, 2:15:48 PM UTC swupdate: CVE-2025-65502	Medium	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12
[CVE-2025-51495] Published: Sep 29, 2025, 12:00:00 AM UTC swupdate: CVE-2025-51495	High(7.5)	Affected Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Affected dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12

Fixed and unaffected versions (10)

CVE	Severity	Version impact
[CVE-2026-109399] Published: Oct 12, 2026, 3:16:44 PM UTC SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for cha	Critical(9.2)	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2025-41259] Published: Jun 3, 2026, 1:16:18 PM UTC SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a	High(7.3)	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u3` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2026-28525] Published: Apr 23, 2026, 9:16:05 PM UTC SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of service by sending a crafted HTTP	High(8.2)	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-4+deb12u2` nvd · swupdate · debian · bookworm; nvd · swupdate · debian · 12
[CVE-2020-25887] Published: Aug 22, 2023, 7:16:19 PM UTC swupdate: CVE-2020-25887	Medium	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12
[CVE-2021-26530] Published: Feb 8, 2021, 9:15:13 PM UTC swupdate: CVE-2021-26530	Medium	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12
[CVE-2021-26529] Published: Feb 8, 2021, 9:15:13 PM UTC swupdate: CVE-2021-26529	Medium	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12
[CVE-2021-26528] Published: Feb 8, 2021, 9:15:13 PM UTC swupdate: CVE-2021-26528	Medium	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12
[CVE-2020-25756] Published: Sep 18, 2020, 5:15:13 AM UTC swupdate: CVE-2020-25756	Medium	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12
[CVE-2019-19307] Published: Nov 26, 2019, 4:15:13 PM UTC swupdate: CVE-2019-19307	Medium	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12
[CVE-2019-13503] Published: Jul 11, 2019, 2:15:10 AM UTC swupdate: CVE-2019-13503	Medium	Fixed Details (10) `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · all · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · amd64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12 `2024.12.1+dfsg-3~bpo12+1` · arm64 · bookworm-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · bookworm; dsa · swupdate · debian · 12

[Next results]

Last synced: Oct 28, 2026, 2:27:30 AM UTC

[CVE catalog]

Sources

Debian 12 (Bookworm) backports main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Signed-object SHA-256
43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Observed SHA-256
b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Result
match verified
Debian 12 (Bookworm) backports main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Signed-object SHA-256
43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Observed SHA-256
9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Result
match verified
Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified