Search for packages
Package details: pkg:deb/debian/tla@1.3.5%2Bdfsg-14%2Blenny1
purl pkg:deb/debian/tla@1.3.5%2Bdfsg-14%2Blenny1
Next non-vulnerable version 1.3.5+dfsg-16
Latest non-vulnerable version 1.3.5+dfsg-16
Risk 1.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-cjbk-v93c-hyav
Aliases:
CVE-2009-3560
A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM.
1.3.5+dfsg-16
Affected by 0 other vulnerabilities.
VCID-decx-ng47-vfcr
Aliases:
CVE-2009-3720
A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM.
1.3.5+dfsg-16
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T15:08:20.752366+00:00 Debian Oval Importer Affected by VCID-decx-ng47-vfcr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:25:15.298001+00:00 Debian Oval Importer Affected by VCID-cjbk-v93c-hyav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0