Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 11: DLA-4125-1 moderate: XSS in twitter-bootstrap4 carousel

debian lts
Calendar Grey April 13, 2025
Dist Debian Esm H88
Bolster protection by applying the most recent Debian LTS upgrade for bootstrap-4, which fixes XSS vulnerabilities present in the carousel module.
Bootstrap (formerly Twitter Bootstrap), a free and open-source CSS framework, was affected by a XSS vulnerability in the carousel component

Summary

If you use bootstrap through a module bundler, you may need to rebuild your
application.

For Debian 11 bullseye, this problem has been fixed in version
4.5.2+dfsg1-8~deb11u2.

We recommend that you upgrade your twitter-bootstrap4 packages.

For the detailed security status of twitter-bootstrap4 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/twitter-bootstrap4

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
important
Lowest
Low
Medium
High
Critical

Package: twitter-bootstrap4
Version: 4.5.2+dfsg1-8~deb11u2
CVE ID: CVE-2024-6531
Debian Bug: 1084059

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here