Packages / Debian 13 (Trixie) / Source / libs / swupdate

Source Package: swupdate (2026.05.1+dfsg-1~bpo13+1)

Library for controlling the swupdate framework

The following binary packages are built from this source package:

libswupdate0.1
Library for controlling the swupdate framework
libswupdate-dev
Development files for swupdate framework
lua-swupdate
swupdate bindings for the Lua language
swupdate-doc
Documentation for swupdate framework
swupdate-www
Web Application for swupdate

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2025-41259] Published: Jun 3, 2026, 1:16:18 PM UTC SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a	High(7.3)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2026-6985] Published: Apr 25, 2026, 5:16:33 PM UTC A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of the component TCP Option Handler. This manipulation	Medium(5.5)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2026-6986] Published: Apr 25, 2026, 4:30:13 PM UTC A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /src/tls_aes128.c of the component GCM Authentication Tag Hand	Low(3.7)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2026-5246] Published: Apr 2, 2026, 9:45:11 AM UTC A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the file mongoose.c of the component P-384 Public Key Handler. Executing a manip	Medium(5.6)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2026-5245] Published: Apr 2, 2026, 9:00:19 AM UTC A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS Record Handler. Performing a manipulation of the arg	High(8.1)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2026-5244] Published: Apr 2, 2026, 8:00:19 AM UTC A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS 1.3 Handler. Such manipulation of the argument pub	High(8.2)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2026-2968] Published: Feb 23, 2026, 3:02:07 AM UTC A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of the file /src/tls_chacha20.c of the component Poly1305 Authentication Tag Handler	Medium(6.3)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2026-2967] Published: Feb 23, 2026, 2:32:07 AM UTC A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/net_builtin.c of the component TCP Sequence Number Handler. The manipulati	Medium(6.3)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2026-2966] Published: Feb 23, 2026, 2:02:08 AM UTC A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipul	Medium(6.3)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected nvd · swupdate · debian · 13
[CVE-2025-65502] Published: Nov 24, 2025, 2:15:48 PM UTC swupdate: CVE-2025-65502	Medium	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected dsa · swupdate · debian · 13
[CVE-2025-51495] Published: Sep 29, 2025, 12:00:00 AM UTC swupdate: CVE-2025-51495	High(7.5)	Affected Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Affected dsa · swupdate · debian · 13

Fixed and unaffected versions (9)

CVE	Severity	Version impact
[CVE-2026-28525] Published: Apr 23, 2026, 9:16:05 PM UTC SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of service by sending a crafted HTTP	High(8.2)	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2024.12.1+dfsg-3+deb13u2` nvd · swupdate · debian · 13
[CVE-2020-25887] Published: Aug 22, 2023, 7:16:19 PM UTC swupdate: CVE-2020-25887	Medium	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13
[CVE-2021-26530] Published: Feb 8, 2021, 9:15:13 PM UTC swupdate: CVE-2021-26530	Medium	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13
[CVE-2021-26529] Published: Feb 8, 2021, 9:15:13 PM UTC swupdate: CVE-2021-26529	Medium	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13
[CVE-2021-26528] Published: Feb 8, 2021, 9:15:13 PM UTC swupdate: CVE-2021-26528	Medium	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13
[CVE-2020-25756] Published: Sep 18, 2020, 5:15:13 AM UTC swupdate: CVE-2020-25756	Medium	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2022.12+dfsg-1` dsa · swupdate · debian · 13
[CVE-2019-19307] Published: Nov 26, 2019, 4:15:13 PM UTC swupdate: CVE-2019-19307	Medium	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13
[CVE-2019-13503] Published: Jul 11, 2019, 2:15:10 AM UTC swupdate: CVE-2019-13503	Medium	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13
[CVE-2019-12951] Published: Jun 24, 2019, 11:15:00 PM UTC swupdate: CVE-2019-12951	Medium	Fixed Details (10) `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · amd64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · arm64 · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13 `2026.05.1+dfsg-1~bpo13+1` · all · trixie-backports Fixed · Fixed: `2021.04-1` dsa · swupdate · debian · 13

Last synced: Oct 28, 2026, 1:40:02 AM UTC

[CVE catalog]

Sources

Debian 13 (Trixie) backports main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie-backports/InRelease
Signed-object SHA-256
d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
Observed SHA-256
d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
Result
match verified
Debian 13 (Trixie) backports main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie-backports/InRelease
Signed-object SHA-256
d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
Observed SHA-256
acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
Result
match verified
Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified