CVE-2026-11853

The Debusine software suite, used for building and maintaining Debian-based distributions, contains a vulnerability in its parser for .dsc (source packages) and .changes (upload artifacts) manifest files. The parser accepts arbitrary fully user-controlled paths , which allows an attacker to explo...

CVE-2026-11853

Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source packages .dsc and upload artifacts .changes are manifest files that name the files that make up the artifact. The parser used to read these files in Debusine accepted arbitrary fully...

CVE-2026-11853

Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source packages .dsc and upload artifacts .changes are manifest files that name the files that make up the artifact. The parser used to read these files in Debusine accepted arbitrary fully...