| Release | Version |
|---|---|
| bullseye | 4.4.14-1 |
| bookworm | 4.4.16-1 |
| trixie | 4.4.16-1 |
| forky | 4.4.16-1 |
| sid | 4.4.16-1 |
| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2026-54428 | fixed | fixed | vulnerable (no DSA) | vulnerable | vulnerable | Allocation of resources without limits or throttling in the HTTP/2 HPA ... |
| CVE-2026-54399 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 messag ... |