Packages / Debian 13 (Trixie) / interpreters / erlang-xmerl

[Source: erlang]

Package: erlang-xmerl (1:27.3.4.1+dfsg-1+deb13u2)

Strumenti XML Erlang/OTP

Other Packages Related to erlang-xmerl:

  • dep: [erlang-base] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Macchina virtuale Erlang/OTP e applicazioni di base

  • sug: [erlang]

    Linguaggio funzionale concorrente, in tempo reale e distribuito

  • sug: [erlang-doc]

    Documentazione HTML di Erlang/OTP

Download erlang-xmerl

ArchitecturePackage sizeInstalled sizeFilesPackage
amd641.3 MiB2.0 MiBlist of filesDownload
arm641.3 MiB2.0 MiBlist of filesDownload

Percorsi file del pacchetto (40)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl.app
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl.appup
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_b64Bin.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_b64Bin_scan.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_eventp.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_html.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_lib.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_otpsgml.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_regexp.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sax_old_dom.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sax_parser.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sax_parser_latin1.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sax_parser_list.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sax_parser_utf16be.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sax_parser_utf16le.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sax_parser_utf8.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sax_simple_dom.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_scan.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_sgml.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_simple.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_text.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_ucs.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_uri.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_validate.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xlate.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xml.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xml_indent.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xpath.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xpath_lib.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xpath_parse.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xpath_pred.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xpath_scan.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xs.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xsd.beam
  • /usr/lib/erlang/lib/xmerl-2.1.3.1/ebin/xmerl_xsd_type.beam
  • /usr/share/doc/erlang-xmerl/AUTHORS.gz
  • /usr/share/doc/erlang-xmerl/changelog.Debian.gz
  • /usr/share/doc/erlang-xmerl/copyright
  • /usr/share/doc/erlang-xmerl/README.Debian

Field source: Debian 13 (Trixie) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 13 (Trixie) nel browserCrea un'immagine che include erlang-xmerl

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:27.3.4.1+dfsg-1+deb13u2trixie / mainamd64Debian 13 · main · amd641.3 MiB2.0 MiBpool/main/e/erlang/erlang-xmerl_27.3.4.1+dfsg-1+deb13u2_amd64.deb
1:27.3.4.1+dfsg-1+deb13u2trixie / mainarm64Debian 13 · main · arm641.3 MiB2.0 MiBpool/main/e/erlang/erlang-xmerl_27.3.4.1+dfsg-1+deb13u2_arm64.deb
1:27.3.4.1+dfsg-1+deb13u4trixie-security / mainamd64Debian 13 security · main · amd641.3 MiB2.0 MiBpool/updates/main/e/erlang/erlang-xmerl_27.3.4.1+dfsg-1+deb13u4_amd64.deb
1:27.3.4.1+dfsg-1+deb13u3trixie-security / mainarm64Debian 13 security · main · arm641.3 MiB2.0 MiBpool/updates/main/e/erlang/erlang-xmerl_27.3.4.1+dfsg-1+deb13u3_arm64.deb
1:27.3.4.1+dfsg-1+deb13u3 (withdrawn)trixie-security / mainamd64Debian 13 security · main · amd641.3 MiB2.0 MiBpool/updates/main/e/erlang/erlang-xmerl_27.3.4.1+dfsg-1+deb13u3_amd64.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVEGravitàImpatto per versione
[CVE-2026-105236]

Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host

Medium(6.3)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-94200]

Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a deni

High(8.2)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-65634]

Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshak

High(8.2)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-68956]

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are neve

High(7.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-89422]

Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A pre_shared_key extension in the

Critical(9.3)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-59696]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of dig

Medium(6.9)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-70405]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length fi

Medium(6.3)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-70409]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port compon

Medium(6.3)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-74994]

The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single s

Medium(6.5)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-55951]

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc_response:parse_headers

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-59250]

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denia

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

[CVE-2026-59251]

Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate c

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

[CVE-2026-66357]

httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines). Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature beca

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-66835]

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path with an extra slash.

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-69664]

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked bo

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-70399]

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and holding open a large nu

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-71380]

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-73270]

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by requesting them with diffe

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-73276]

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OT

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[CVE-2026-73812]

httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_bod

Critical(9.1)Interessata
Dettagli (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Interessata

    nvd · erlang · debian · 13

[Altri risultati]

Ultima sincronizzazione:

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:27.3.4.1+dfsg-1+deb13u2 / amd64Osservato Sep 1, 2026sha256 37f1b7036b0a…a155aac9Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 37f1b7036b0a68d19fa8fee29835d8b81d1258d6afdf19d2cdeffdc1a155aac9

Verifica download

printf '%s %s\n' '37f1b7036b0a68d19fa8fee29835d8b81d1258d6afdf19d2cdeffdc1a155aac9' 'erlang-xmerl_27.3.4.1+dfsg-1+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:27.3.4.1+dfsg-1+deb13u2 / arm64Osservato Sep 1, 2026sha256 82f9e3865942…22bd20e5Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 82f9e38659424b68580e0ff937c9d496cb69f2d2186a320f5625a3a922bd20e5

Verifica download

printf '%s %s\n' '82f9e38659424b68580e0ff937c9d496cb69f2d2186a320f5625a3a922bd20e5' 'erlang-xmerl_27.3.4.1+dfsg-1+deb13u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

1:27.3.4.1+dfsg-1+deb13u4 / amd64Osservato Oct 23, 2026 – Oct 24, 2026sha256 cac70cd8eda4…2239613dImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): cac70cd8eda4c46ef4440709399c7a6ffab843026867fad0299a75ce2239613d

Verifica download

printf '%s %s\n' 'cac70cd8eda4c46ef4440709399c7a6ffab843026867fad0299a75ce2239613d' 'erlang-xmerl_27.3.4.1+dfsg-1+deb13u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

1:27.3.4.1+dfsg-1+deb13u3 / arm64Osservato Sep 1, 2026sha256 ef00aeb6f8d5…40bfdd2dImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): ef00aeb6f8d50899c294f50ba82af45d32e1c8f39227bd7cbadcccdb40bfdd2d

Verifica download

printf '%s %s\n' 'ef00aeb6f8d50899c294f50ba82af45d32e1c8f39227bd7cbadcccdb40bfdd2d' 'erlang-xmerl_27.3.4.1+dfsg-1+deb13u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

1:27.3.4.1+dfsg-1+deb13u3 / amd64Osservato Aug 25, 2026 – Oct 22, 2026sha256 b72719a5873d…42c1a955Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): b72719a5873d2d865a1fb88dfaf757463704cc3e55f833a52945668d42c1a955

Verifica download

printf '%s %s\n' 'b72719a5873d2d865a1fb88dfaf757463704cc3e55f833a52945668d42c1a955' 'erlang-xmerl_27.3.4.1+dfsg-1+deb13u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

Fonti

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 22, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-security-main-amd64:b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9

    Repository-signature verification record
    Signed-object SHA-256
    f439c50d207c42e50abd7db7804b0afa16eb57b67775cfa0996234176aeb26a1
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 23, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9
    Observed SHA-256
    b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-security-main-amd64:c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb

    Repository-signature verification record
    Signed-object SHA-256
    91d37059a95d845e2eabb95c1797194ba92ce678abb790bf16c7a785c470246a
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Observed SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Result
    match verified