| Release | Version |
|---|---|
| bookworm | 6.5.0-2 |
| trixie | 6.10.0-1 |
| forky | 6.10.0-1 |
| sid | 6.10.0-1 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-105111 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | Improper neutralization of input during web page generation ('cross-si ... |
| CVE-2026-94114 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | Symbolic name not mapping to correct class. BCEL caches attacker-co ... |
| Bug | Description |
|---|---|
| CVE-2022-42920 | Apache Commons BCEL has a number of APIs that would normally only allo ... |
| CVE-2022-34169 | The Apache Xalan Java XSLT library is vulnerable to an integer truncat ... |
| DSA / DLA | Description |
|---|---|
| DSA-5256-1 | bcel - security update |
| DLA-3155-1 | bcel - security update |