Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/xml-security-c@1.4.0-4?distro=trixie
purl pkg:deb/debian/xml-security-c@1.4.0-4?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-z7ht-bq8z-3qgd XML signature HMAC truncation authentication bypass This package uses a parameter that defines an HMAC truncation length (`HMACOutputLength`) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits. CVE-2009-0217
GHSA-8hfm-837h-hjg5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T08:44:53.576556+00:00 Debian Importer Fixing VCID-z7ht-bq8z-3qgd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T17:52:38.649360+00:00 Debian Importer Fixing VCID-z7ht-bq8z-3qgd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:58:44.164496+00:00 Debian Importer Fixing VCID-z7ht-bq8z-3qgd https://security-tracker.debian.org/tracker/data/json 38.1.0