[From nobody Sat Aug 8 05:35:08 2026 Received: (at submit) by bugs.debian.org; 3 Jul 2026 19:06:23 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-9.9 required=4.0 tests=BAYES_00, FOURLA, FROMDEVELOPER, NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 19; hammy, 140; neutral, 39; spammy, 1. spammytokens:0.941-+--H*r:bugs.debian.org hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking Return-path: <carnil@debian.org> Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1wfjDS-001mpX-2d for submit@bugs.debian.org; Fri, 03 Jul 2026 19:06:23 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: httpcomponents-core5: CVE-2026-54428 CVE-2026-54399 Message-ID: <178310558166.2134176.5876242071825200212.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0+nmu1 Date: Fri, 03 Jul 2026 21:06:21 +0200 Delivered-To: submit@bugs.debian.org U291cmNlOiBodHRwY29tcG9uZW50cy1jb3JlNQpWZXJzaW9uOiA1LjQuMi0xLjEKU2V2ZXJpdHk6 IGltcG9ydGFudApUYWdzOiBzZWN1cml0eSB1cHN0cmVhbQpYLURlYmJ1Z3MtQ2M6IGNhcm5pbEBk ZWJpYW4ub3JnLCBEZWJpYW4gU2VjdXJpdHkgVGVhbSA8dGVhbUBzZWN1cml0eS5kZWJpYW4ub3Jn PgoKSGksCgpUaGUgZm9sbG93aW5nIHZ1bG5lcmFiaWxpdGllcyB3ZXJlIHB1Ymxpc2hlZCBmb3Ig aHR0cGNvbXBvbmVudHMtY29yZTUuCgpDVkUtMjAyNi01NDQyOFswXToKfCBBbGxvY2F0aW9uIG9m IHJlc291cmNlcyB3aXRob3V0IGxpbWl0cyBvciB0aHJvdHRsaW5nIGluIHRoZSBIVFRQLzIKfCBI UEFDSyBkZWNvZGVyIGluIEFwYWNoZSBIdHRwQ29tcG9uZW50cyBDb3JlICg1LjQuMiBhbmQgZWFy bGllciwKfCA1LjUtYmV0YTEgYW5kIGVhcmxpZXIpIGFsbG93cyBhbiByZW1vdGUgYXR0YWNrZXIg dG8gY2F1c2UgYSBkZW5pYWwKfCBvZiBzZXJ2aWNlIHRocm91Z2ggbWVtb3J5IGV4aGF1c3Rpb24g Ynkgc2VuZGluZyBvdmVyc2l6ZWQgY29tcHJlc3NlZAp8IGhlYWRlciBibG9ja3MgYmVmb3JlIHRo ZSBIVFRQLzIgU0VUVElOR1MgYWNrbm93bGVkZ2VtZW50IGNhdXNlcyB0aGUKfCBjb25maWd1cmVk IGhlYWRlciBsaXN0IHNpemUgbGltaXQgdG8gYmUgYXBwbGllZC4KCgpDVkUtMjAyNi01NDM5OVsx XToKfCBVbmNvbnRyb2xsZWQgUmVzb3VyY2UgQ29uc3VtcHRpb24gdnVsbmVyYWJpbGl0eSBpbiB0 aGUgSFRUUC8xLjEKfCBtZXNzYWdlIHBhcnNlcsKgaW4gQXBhY2hlIEh0dHBDb21wb25lbnRzIENv cmUgKDUuNC4yIGFuZCBlYXJsaWVyLAp8IDUuNS1iZXRhMSBhbmQgZWFybGllcikgYWxsb3dzwqBh biByZW1vdGUgYXR0YWNrZXIgdG8gY2F1c2UgYSBkZW5pYWwKfCBvZiBzZXJ2aWNlIHRocm91Z2gg bWVtb3J5IGV4aGF1c3Rpb24gYnkgc2VuZGluZyBtZXNzYWdlcyB3aXRoCnwgZXhjZXNzaXZlIG51 bWJlciBvZiBoZWFkZXJzIC8gZXhjZXNzaXZlIGhlYWRlciBsZW5ndGgKCgpJZiB5b3UgZml4IHRo ZSB2dWxuZXJhYmlsaXRpZXMgcGxlYXNlIGFsc28gbWFrZSBzdXJlIHRvIGluY2x1ZGUgdGhlCkNW RSAoQ29tbW9uIFZ1bG5lcmFiaWxpdGllcyAmIEV4cG9zdXJlcykgaWRzIGluIHlvdXIgY2hhbmdl bG9nIGVudHJ5LgoKRm9yIGZ1cnRoZXIgaW5mb3JtYXRpb24gc2VlOgoKWzBdIGh0dHBzOi8vc2Vj dXJpdHktdHJhY2tlci5kZWJpYW4ub3JnL3RyYWNrZXIvQ1ZFLTIwMjYtNTQ0MjgKICAgIGh0dHBz Oi8vd3d3LmN2ZS5vcmcvQ1ZFUmVjb3JkP2lkPUNWRS0yMDI2LTU0NDI4ClsxXSBodHRwczovL3Nl Y3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2VyL0NWRS0yMDI2LTU0Mzk5CiAgICBodHRw czovL3d3dy5jdmUub3JnL0NWRVJlY29yZD9pZD1DVkUtMjAyNi01NDM5OQoKUmVnYXJkcywKU2Fs dmF0b3JlCg== ]