{
  "SchemaVersion": 2,
  "Trivy": {
    "Version": "0.70.0"
  },
  "ReportID": "01a1b919-8113-7880-8cc9-0fc228a0a0a4",
  "CreatedAt": "2026-11-08T04:00:18.835559303+01:00",
  "ArtifactID": "sha256:7909965aa8c32eca560edcf5b50ff9ac210f6aa02f040755881ff98b8c927c63",
  "ArtifactName": "2fe3d0dc6f0a",
  "ArtifactType": "container_image",
  "Metadata": {
    "Size": 1503877120,
    "OS": {
      "Family": "debian",
      "Name": "13.7"
    },
    "ImageID": "sha256:2fe3d0dc6f0ad2310bdb700f3b50d826189154cec33caee97b31ffe78efe21da",
    "DiffIDs": [
      "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7",
      "sha256:64fad3ff7ffbedbaabf3a9a3f11ee583457016884550d1801e8f49c323bcfc35",
      "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f",
      "sha256:0bcb2a5628297b1f18a7096a1d82e53952908e78d8e6132811ec045e8dcd5fb5",
      "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64",
      "sha256:6fa5ab7fe4c00774036548b62734d7eae4eb6a91ac166f9657a49baea532bab1",
      "sha256:c91d65d83dfaafd0ebbf0e942493c3b3acdaabab7e0dd092d28fbd55d9c74a5f",
      "sha256:71258935da9f622320501db2ea39235305a25767133faeb30763825087316bd5",
      "sha256:5ab910b79c22ca1f357ca6642c1f9df60aa9ce4ab9ddd56df23917737e464b20",
      "sha256:83cc9b31906fa96474ec2d6137375a26b1fc9f1050e092277613b0f193686e96",
      "sha256:38d5c1bf297eb932dfb5b0aa87a8e0f3d83e4c9088d404b78d007b92a16a82c7",
      "sha256:ecc800dab4ded480d09139bfb51c229c19f36c8c9d91294aed14ba60267e7625",
      "sha256:199d3cf54ec0d49e6be369385e696b472822440113ac51cd8439306e1414c4b1",
      "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
      "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663",
      "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d",
      "sha256:2db3bdfdf01f5918cff35389902aa1118f31502308eeac043b6e45f127d65f19",
      "sha256:62c40a1dd05c66254b5cdf1fdc3221b0eada7fcd3927fe5c78510e5ab601da83",
      "sha256:1ba6b61d0aac5efbc1a577645be0f0cb3e498252e453bfed9f3a5a7dd07ac7cb",
      "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b",
      "sha256:70a691bff3f61ce7de22ad1c6cccf299d1ea309d4af35daef75040b2ae891298",
      "sha256:5db30187527511aa6b88f5437d9089c4f3d53a7f757e3800f65dada5364dce2c"
    ],
    "RepoDigests": [
      "nextcloud@sha256:5cd0788a5c7e0374256939dd86fefa34160ae03730cb28246d16939eacfd4c08"
    ],
    "Reference": "nextcloud@sha256:5cd0788a5c7e0374256939dd86fefa34160ae03730cb28246d16939eacfd4c08",
    "ImageConfig": {
      "architecture": "amd64",
      "created": "2026-10-21T18:01:40.456340196Z",
      "history": [
        {
          "created": "2026-10-20T21:32:55Z",
          "created_by": "# debian.sh --arch 'amd64' out/ 'trixie' '@1792531975'",
          "comment": "debuerreotype 0.17"
        },
        {
          "created": "2026-10-21T15:47:38Z",
          "created_by": "RUN /bin/sh -c set -eux; \t{ \t\techo 'Package: php*'; \t\techo 'Pin: release *'; \t\techo 'Pin-Priority: -1'; \t} \u003e /etc/apt/preferences.d/no-debian-php # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:47:53Z",
          "created_by": "ENV PHPIZE_DEPS=autoconf \t\tdpkg-dev \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkg-config \t\tre2c",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:53Z",
          "created_by": "RUN /bin/sh -c set -eux; \tapt-get update; \tapt-get install -y --no-install-recommends \t\t$PHPIZE_DEPS \t\tca-certificates \t\tcurl \t\txz-utils \t; \tapt-get dist-clean # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:47:53Z",
          "created_by": "ENV PHP_INI_DIR=/usr/local/etc/php",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:53Z",
          "created_by": "RUN /bin/sh -c set -eux; \tmkdir -p \"$PHP_INI_DIR/conf.d\"; \t[ ! -d /var/www/html ]; \tmkdir -p /var/www/html; \tchown www-data:www-data /var/www/html; \tchmod 1777 /var/www/html # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:47:53Z",
          "created_by": "ENV APACHE_CONFDIR=/etc/apache2",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:53Z",
          "created_by": "ENV APACHE_ENVVARS=/etc/apache2/envvars",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "RUN /bin/sh -c set -eux; \tapt-get update; \tapt-get install -y --no-install-recommends apache2; \tapt-get dist-clean; \t\tsed -ri 's/^export ([^=]+)=(.*)$/: ${\\1:=\\2}\\nexport \\1/' \"$APACHE_ENVVARS\"; \t\t. \"$APACHE_ENVVARS\"; \tfor dir in \t\t\"$APACHE_LOCK_DIR\" \t\t\"$APACHE_RUN_DIR\" \t\t\"$APACHE_LOG_DIR\" \t\t\"$APACHE_RUN_DIR/socks\" \t; do \t\trm -rvf \"$dir\"; \t\tmkdir -p \"$dir\"; \t\tchown \"$APACHE_RUN_USER:$APACHE_RUN_GROUP\" \"$dir\"; \t\tchmod 1777 \"$dir\"; \tdone; \t\trm -rvf /var/www/html/*; \t\tln -sfT /dev/stderr \"$APACHE_LOG_DIR/error.log\"; \tln -sfT /dev/stdout \"$APACHE_LOG_DIR/access.log\"; \tln -sfT /dev/stdout \"$APACHE_LOG_DIR/other_vhosts_access.log\"; \tchown -R --no-dereference \"$APACHE_RUN_USER:$APACHE_RUN_GROUP\" \"$APACHE_LOG_DIR\" # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "RUN /bin/sh -c a2dismod mpm_event \u0026\u0026 a2enmod mpm_prefork # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "RUN /bin/sh -c { \t\techo '\u003cFilesMatch \\.php$\u003e'; \t\techo '\\tSetHandler application/x-httpd-php'; \t\techo '\u003c/FilesMatch\u003e'; \t\techo; \t\techo 'DirectoryIndex disabled'; \t\techo 'DirectoryIndex index.php index.html'; \t\techo; \t\techo '\u003cDirectory /var/www/\u003e'; \t\techo '\\tOptions -Indexes'; \t\techo '\\tAllowOverride All'; \t\techo '\u003c/Directory\u003e'; \t} | tee \"$APACHE_CONFDIR/conf-available/docker-php.conf\" \t\u0026\u0026 a2enconf docker-php # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "ENV PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "ENV PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "ENV PHP_LDFLAGS=-Wl,-O1 -pie",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "ENV GPG_KEYS=1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "ENV PHP_VERSION=8.5.12",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "ENV PHP_URL=https://www.php.net/distributions/php-8.5.12.tar.xz PHP_ASC_URL=https://www.php.net/distributions/php-8.5.12.tar.xz.asc",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:47:58Z",
          "created_by": "ENV PHP_SHA256=08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:48:06Z",
          "created_by": "RUN /bin/sh -c set -eux; \t\tsavedAptMark=\"$(apt-mark showmanual)\"; \tapt-get update; \tapt-get install -y --no-install-recommends gnupg; \tapt-get dist-clean; \t\tmkdir -p /usr/src; \tcd /usr/src; \t\tcurl -fsSL -o php.tar.xz \"$PHP_URL\"; \t\tif [ -n \"$PHP_SHA256\" ]; then \t\techo \"$PHP_SHA256 *php.tar.xz\" | sha256sum -c -; \tfi; \t\tcurl -fsSL -o php.tar.xz.asc \"$PHP_ASC_URL\"; \texport GNUPGHOME=\"$(mktemp -d)\"; \tfor key in $GPG_KEYS; do \t\tgpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\"; \tdone; \tgpg --batch --verify php.tar.xz.asc php.tar.xz; \tgpgconf --kill all; \trm -rf \"$GNUPGHOME\"; \t\tapt-mark auto '.*' \u003e /dev/null; \tapt-mark manual $savedAptMark \u003e /dev/null; \tapt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:48:06Z",
          "created_by": "COPY docker-php-source /usr/local/bin/ # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "RUN /bin/sh -c set -eux; \t\tsavedAptMark=\"$(apt-mark showmanual)\"; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tapache2-dev \t\tlibargon2-dev \t\tlibcurl4-openssl-dev \t\tlibonig-dev \t\tlibreadline-dev \t\tlibsodium-dev \t\tlibsqlite3-dev \t\tlibssl-dev \t\tlibxml2-dev \t\tzlib1g-dev \t; \t\texport \t\tCFLAGS=\"$PHP_CFLAGS\" \t\tCPPFLAGS=\"$PHP_CPPFLAGS\" \t\tLDFLAGS=\"$PHP_LDFLAGS\" \t\tPHP_BUILD_PROVIDER='https://github.com/docker-library/php' \t\tPHP_UNAME='Linux - Docker' \t; \tdocker-php-source extract; \tcd /usr/src/php; \tgnuArch=\"$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)\"; \tdebMultiarch=\"$(dpkg-architecture --query DEB_BUILD_MULTIARCH)\"; \tif [ ! -d /usr/include/curl ]; then \t\tln -sT \"/usr/include/$debMultiarch/curl\" /usr/local/include/curl; \tfi; \tcase \"$gnuArch\" in \t\t'i686-linux-'*) \t\t\texport \t\t\t\tCFLAGS=\"$CFLAGS -msse2 -mfpmath=sse\" \t\t\t\tCPPFLAGS=\"$CPPFLAGS -msse2 -mfpmath=sse\" \t\t\t; \t\t\t;; \tesac; \ttest \"$PHP_INI_DIR\" != \"${PHP_INI_DIR%/php}\"; \t./configure \t\t--build=\"$gnuArch\" \t\t--sysconfdir=\"${PHP_INI_DIR%/php}\" \t\t--with-config-file-path=\"$PHP_INI_DIR\" \t\t--with-config-file-scan-dir=\"$PHP_INI_DIR/conf.d\" \t\t\t\t--enable-option-checking=fatal \t\t\t\t--with-mhash \t\t\t\t--with-pic \t\t\t\t--enable-mbstring \t\t--enable-mysqlnd \t\t--with-password-argon2 \t\t--with-sodium=shared \t\t--with-pdo-sqlite=/usr \t\t--with-sqlite3=/usr \t\t\t\t--with-curl \t\t--with-iconv \t\t--with-openssl \t\t--with-readline \t\t--with-zlib \t\t\t\t--disable-phpdbg \t\t\t\t--with-pear \t\t\t\t--with-libdir=\"lib/$debMultiarch\" \t\t\t\t--disable-cgi \t\t\t\t--with-apxs2 \t; \tmake -j \"$(nproc)\"; \tfind -type f -name '*.a' -delete; \tmake install; \tfind \t\t/usr/local \t\t-type f \t\t-perm '/0111' \t\t-exec sh -euxc ' \t\t\tstrip --strip-all \"$@\" || : \t\t' -- '{}' + \t; \tmake clean; \t\tcp -v php.ini-* \"$PHP_INI_DIR/\"; \t\tcd /; \tdocker-php-source delete; \t\tapt-mark auto '.*' \u003e /dev/null; \t[ -z \"$savedAptMark\" ] || apt-mark manual $savedAptMark; \tfind /usr/local -type f -executable -exec ldd '{}' ';' \t\t| awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); printf \"*%s\\n\", so }' \t\t| sort -u \t\t| xargs -rt dpkg-query --search \t\t| awk 'sub(\":$\", \"\", $1) { print $1 }' \t\t| sort -u \t\t| xargs -r apt-mark manual \t; \tapt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \tapt-get dist-clean; \t\tpecl update-channels; \trm -rf /tmp/pear ~/.pearrc; \t\tphp --version # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "COPY docker-php-ext-* docker-php-entrypoint /usr/local/bin/ # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "RUN /bin/sh -c docker-php-ext-enable sodium # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "ENTRYPOINT [\"docker-php-entrypoint\"]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "STOPSIGNAL SIGWINCH",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "COPY apache2-foreground /usr/local/bin/ # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "WORKDIR /var/www/html",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "EXPOSE map[80/tcp:{}]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T15:50:46Z",
          "created_by": "CMD [\"apache2-foreground\"]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T17:58:38Z",
          "created_by": "RUN /bin/sh -c set -ex;         apt-get update;     apt-get install -y --no-install-recommends         busybox-static         bzip2         libldap-common         libmagickcore-7.q16-10-extra         rsync     ;     apt-get dist-clean;         mkdir -p /var/spool/cron/crontabs;     echo '*/5 * * * * php -f /var/www/html/cron.php' \u003e /var/spool/cron/crontabs/www-data # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "ENV PHP_MEMORY_LIMIT=512M",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "ENV PHP_UPLOAD_LIMIT=512M",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "ENV PHP_OPCACHE_MEMORY_CONSUMPTION=128",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "RUN /bin/sh -c set -ex;         savedAptMark=\"$(apt-mark showmanual)\";         apt-get update;     apt-get install -y --no-install-recommends         libcurl4-openssl-dev         libevent-dev         libfreetype6-dev         libgmp-dev         libicu-dev         libjpeg-dev         libldap2-dev         liblz4-dev         libmagickwand-dev         libmemcached-dev         libpng-dev         libpq-dev         libwebp-dev         libxml2-dev         libzip-dev     ;         debMultiarch=\"$(dpkg-architecture --query DEB_BUILD_MULTIARCH)\";     docker-php-ext-configure ftp --with-ftp-ssl;     docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp;     docker-php-ext-configure ldap --with-libdir=\"lib/$debMultiarch\";     docker-php-ext-install -j \"$(nproc)\"         bcmath         exif         ftp         gd         gmp         intl         ldap         pcntl         pdo_mysql         pdo_pgsql         sysvsem         zip     ;         pecl install APCu-5.1.28;     pecl install igbinary-3.2.17RC1;     pecl install imagick-3.8.1;     pecl install --configureoptions 'enable-memcached-igbinary=\"yes\"'         memcached-3.4.0;     pecl install --configureoptions 'enable-redis-igbinary=\"yes\" enable-redis-zstd=\"yes\" enable-redis-lz4=\"yes\"'         redis-6.3.0;         docker-php-ext-enable         apcu         igbinary         imagick         memcached         redis     ;     rm -r /tmp/pear;         apt-mark auto '.*' \u003e /dev/null;     apt-mark manual $savedAptMark;     ldd \"$(php -r 'echo ini_get(\"extension_dir\");')\"/*.so         | awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); print so }'         | sort -u         | xargs -rt dpkg-query --search         | awk 'sub(\":$\", \"\", $1) { print $1 }'         | sort -u         | xargs -rt apt-mark manual;         apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false;     apt-get dist-clean # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "RUN /bin/sh -c {         echo 'opcache.enable=1';         echo 'opcache.interned_strings_buffer=32';         echo 'opcache.max_accelerated_files=10000';         echo 'opcache.memory_consumption=${PHP_OPCACHE_MEMORY_CONSUMPTION}';         echo 'opcache.save_comments=1';         echo 'opcache.revalidate_freq=60';         echo 'opcache.jit=1255';         echo 'opcache.jit_buffer_size=8M';     } \u003e \"${PHP_INI_DIR}/conf.d/opcache-recommended.ini\";         echo 'apc.enable_cli=1' \u003e\u003e \"${PHP_INI_DIR}/conf.d/docker-php-ext-apcu.ini\";         {         echo 'apc.serializer=igbinary';         echo 'session.serialize_handler=igbinary';     } \u003e\u003e \"${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini\";         {         echo 'memory_limit=${PHP_MEMORY_LIMIT}';         echo 'upload_max_filesize=${PHP_UPLOAD_LIMIT}';         echo 'post_max_size=${PHP_UPLOAD_LIMIT}';     } \u003e \"${PHP_INI_DIR}/conf.d/nextcloud.ini\";         mkdir /var/www/data;     mkdir -p /docker-entrypoint-hooks.d/pre-installation              /docker-entrypoint-hooks.d/post-installation              /docker-entrypoint-hooks.d/pre-upgrade              /docker-entrypoint-hooks.d/post-upgrade              /docker-entrypoint-hooks.d/before-starting;     chown -R www-data:root /var/www;     chmod -R g=u /var/www # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "VOLUME [/var/www/html]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "RUN /bin/sh -c a2enmod headers rewrite remoteip ;     {      echo 'RemoteIPHeader X-Real-IP';      echo 'RemoteIPInternalProxy 10.0.0.0/8';      echo 'RemoteIPInternalProxy 172.16.0.0/12';      echo 'RemoteIPInternalProxy 192.168.0.0/16';     } \u003e /etc/apache2/conf-available/remoteip.conf;     a2enconf remoteip # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "ENV APACHE_BODY_LIMIT=1073741824",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "RUN /bin/sh -c {      echo 'LimitRequestBody ${APACHE_BODY_LIMIT}';     } \u003e /etc/apache2/conf-available/apache-limits.conf;     a2enconf apache-limits # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T18:01:01Z",
          "created_by": "ENV NEXTCLOUD_VERSION=34.0.5",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T18:01:40Z",
          "created_by": "RUN /bin/sh -c set -ex;     fetchDeps=\"         gnupg         dirmngr     \";     apt-get update;     apt-get install -y --no-install-recommends $fetchDeps;         curl -fsSL -o nextcloud.tar.bz2 \"https://github.com/nextcloud-releases/server/releases/download/v34.0.5/nextcloud-34.0.5.tar.bz2\";     curl -fsSL -o nextcloud.tar.bz2.asc \"https://github.com/nextcloud-releases/server/releases/download/v34.0.5/nextcloud-34.0.5.tar.bz2.asc\";     export GNUPGHOME=\"$(mktemp -d)\";     gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 28806A878AE423A28372792ED75899B9A724937A;     gpg --batch --verify nextcloud.tar.bz2.asc nextcloud.tar.bz2;     tar -xjf nextcloud.tar.bz2 -C /usr/src/;     gpgconf --kill all;     rm nextcloud.tar.bz2.asc nextcloud.tar.bz2;     rm -rf \"$GNUPGHOME\" /usr/src/nextcloud/updater;     mkdir -p /usr/src/nextcloud/data;     mkdir -p /usr/src/nextcloud/custom_apps;     chmod +x /usr/src/nextcloud/occ;         apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false $fetchDeps;     apt-get dist-clean # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T18:01:40Z",
          "created_by": "COPY *.sh upgrade.exclude / # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T18:01:40Z",
          "created_by": "COPY config/* /usr/src/nextcloud/config/ # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-21T18:01:40Z",
          "created_by": "ENTRYPOINT [\"/entrypoint.sh\"]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-21T18:01:40Z",
          "created_by": "CMD [\"apache2-foreground\"]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        }
      ],
      "os": "linux",
      "rootfs": {
        "type": "layers",
        "diff_ids": [
          "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7",
          "sha256:64fad3ff7ffbedbaabf3a9a3f11ee583457016884550d1801e8f49c323bcfc35",
          "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f",
          "sha256:0bcb2a5628297b1f18a7096a1d82e53952908e78d8e6132811ec045e8dcd5fb5",
          "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64",
          "sha256:6fa5ab7fe4c00774036548b62734d7eae4eb6a91ac166f9657a49baea532bab1",
          "sha256:c91d65d83dfaafd0ebbf0e942493c3b3acdaabab7e0dd092d28fbd55d9c74a5f",
          "sha256:71258935da9f622320501db2ea39235305a25767133faeb30763825087316bd5",
          "sha256:5ab910b79c22ca1f357ca6642c1f9df60aa9ce4ab9ddd56df23917737e464b20",
          "sha256:83cc9b31906fa96474ec2d6137375a26b1fc9f1050e092277613b0f193686e96",
          "sha256:38d5c1bf297eb932dfb5b0aa87a8e0f3d83e4c9088d404b78d007b92a16a82c7",
          "sha256:ecc800dab4ded480d09139bfb51c229c19f36c8c9d91294aed14ba60267e7625",
          "sha256:199d3cf54ec0d49e6be369385e696b472822440113ac51cd8439306e1414c4b1",
          "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
          "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663",
          "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d",
          "sha256:2db3bdfdf01f5918cff35389902aa1118f31502308eeac043b6e45f127d65f19",
          "sha256:62c40a1dd05c66254b5cdf1fdc3221b0eada7fcd3927fe5c78510e5ab601da83",
          "sha256:1ba6b61d0aac5efbc1a577645be0f0cb3e498252e453bfed9f3a5a7dd07ac7cb",
          "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b",
          "sha256:70a691bff3f61ce7de22ad1c6cccf299d1ea309d4af35daef75040b2ae891298",
          "sha256:5db30187527511aa6b88f5437d9089c4f3d53a7f757e3800f65dada5364dce2c"
        ]
      },
      "config": {
        "Cmd": [
          "apache2-foreground"
        ],
        "Entrypoint": [
          "/entrypoint.sh"
        ],
        "Env": [
          "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
          "PHPIZE_DEPS=autoconf \t\tdpkg-dev \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkg-config \t\tre2c",
          "PHP_INI_DIR=/usr/local/etc/php",
          "APACHE_CONFDIR=/etc/apache2",
          "APACHE_ENVVARS=/etc/apache2/envvars",
          "PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
          "PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
          "PHP_LDFLAGS=-Wl,-O1 -pie",
          "GPG_KEYS=1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5",
          "PHP_VERSION=8.5.12",
          "PHP_URL=https://www.php.net/distributions/php-8.5.12.tar.xz",
          "PHP_ASC_URL=https://www.php.net/distributions/php-8.5.12.tar.xz.asc",
          "PHP_SHA256=08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209",
          "PHP_MEMORY_LIMIT=512M",
          "PHP_UPLOAD_LIMIT=512M",
          "PHP_OPCACHE_MEMORY_CONSUMPTION=128",
          "APACHE_BODY_LIMIT=1073741824",
          "NEXTCLOUD_VERSION=34.0.5"
        ],
        "Volumes": {
          "/var/www/html": {}
        },
        "WorkingDir": "/var/www/html",
        "ExposedPorts": {
          "80/tcp": {}
        },
        "StopSignal": "SIGWINCH"
      }
    },
    "Layers": [
      {
        "Size": 81254400,
        "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
      },
      {
        "Size": 3584,
        "DiffID": "sha256:64fad3ff7ffbedbaabf3a9a3f11ee583457016884550d1801e8f49c323bcfc35"
      },
      {
        "Size": 352999424,
        "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
      },
      {
        "Size": 5120,
        "DiffID": "sha256:0bcb2a5628297b1f18a7096a1d82e53952908e78d8e6132811ec045e8dcd5fb5"
      },
      {
        "Size": 12257792,
        "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
      },
      {
        "Size": 9728,
        "DiffID": "sha256:6fa5ab7fe4c00774036548b62734d7eae4eb6a91ac166f9657a49baea532bab1"
      },
      {
        "Size": 7680,
        "DiffID": "sha256:c91d65d83dfaafd0ebbf0e942493c3b3acdaabab7e0dd092d28fbd55d9c74a5f"
      },
      {
        "Size": 15235584,
        "DiffID": "sha256:71258935da9f622320501db2ea39235305a25767133faeb30763825087316bd5"
      },
      {
        "Size": 4096,
        "DiffID": "sha256:5ab910b79c22ca1f357ca6642c1f9df60aa9ce4ab9ddd56df23917737e464b20"
      },
      {
        "Size": 71663616,
        "DiffID": "sha256:83cc9b31906fa96474ec2d6137375a26b1fc9f1050e092277613b0f193686e96"
      },
      {
        "Size": 12800,
        "DiffID": "sha256:38d5c1bf297eb932dfb5b0aa87a8e0f3d83e4c9088d404b78d007b92a16a82c7"
      },
      {
        "Size": 4608,
        "DiffID": "sha256:ecc800dab4ded480d09139bfb51c229c19f36c8c9d91294aed14ba60267e7625"
      },
      {
        "Size": 4608,
        "DiffID": "sha256:199d3cf54ec0d49e6be369385e696b472822440113ac51cd8439306e1414c4b1"
      },
      {
        "Size": 1024,
        "DiffID": "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
      },
      {
        "Size": 56283136,
        "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
      },
      {
        "Size": 106882560,
        "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
      },
      {
        "Size": 12800,
        "DiffID": "sha256:2db3bdfdf01f5918cff35389902aa1118f31502308eeac043b6e45f127d65f19"
      },
      {
        "Size": 12288,
        "DiffID": "sha256:62c40a1dd05c66254b5cdf1fdc3221b0eada7fcd3927fe5c78510e5ab601da83"
      },
      {
        "Size": 7680,
        "DiffID": "sha256:1ba6b61d0aac5efbc1a577645be0f0cb3e498252e453bfed9f3a5a7dd07ac7cb"
      },
      {
        "Size": 807176704,
        "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
      },
      {
        "Size": 17408,
        "DiffID": "sha256:70a691bff3f61ce7de22ad1c6cccf299d1ea309d4af35daef75040b2ae891298"
      },
      {
        "Size": 20480,
        "DiffID": "sha256:5db30187527511aa6b88f5437d9089c4f3d53a7f757e3800f65dada5364dce2c"
      }
    ]
  },
  "Results": [
    {
      "Target": "2fe3d0dc6f0a (debian 13.7)",
      "Class": "os-pkgs",
      "Type": "debian",
      "Packages": [
        {
          "ID": "adduser@3.152",
          "Name": "adduser",
          "Identifier": {
            "PURL": "pkg:deb/debian/adduser@3.152?arch=all\u0026distro=debian-13.7",
            "UID": "17a3839c9950603e"
          },
          "Version": "3.152",
          "Arch": "all",
          "SrcName": "adduser",
          "SrcVersion": "3.152",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Adduser Developers \u003cadduser@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "passwd@1:4.17.4-2"
          ],
          "Layer": {
            "DiffID": "sha256:71258935da9f622320501db2ea39235305a25767133faeb30763825087316bd5"
          },
          "InstalledFiles": [
            "/usr/sbin/adduser",
            "/usr/sbin/deluser",
            "/usr/share/doc/adduser/NEWS.Debian.gz",
            "/usr/share/doc/adduser/README.gz",
            "/usr/share/doc/adduser/TODO",
            "/usr/share/doc/adduser/changelog.gz",
            "/usr/share/doc/adduser/copyright",
            "/usr/share/doc/adduser/examples/INSTALL",
            "/usr/share/doc/adduser/examples/README",
            "/usr/share/doc/adduser/examples/adduser.conf",
            "/usr/share/doc/adduser/examples/adduser.local",
            "/usr/share/doc/adduser/examples/adduser.local.conf",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/bash.bashrc",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/profile",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel.other/index.html",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_logout",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_profile",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bashrc",
            "/usr/share/doc/adduser/examples/deluser.conf",
            "/usr/share/man/da/man5/deluser.conf.5.gz",
            "/usr/share/man/de/man5/adduser.conf.5.gz",
            "/usr/share/man/de/man5/deluser.conf.5.gz",
            "/usr/share/man/de/man8/adduser.8.gz",
            "/usr/share/man/de/man8/adduser.local.8.gz",
            "/usr/share/man/de/man8/deluser.8.gz",
            "/usr/share/man/es/man5/deluser.conf.5.gz",
            "/usr/share/man/fr/man5/adduser.conf.5.gz",
            "/usr/share/man/fr/man5/deluser.conf.5.gz",
            "/usr/share/man/fr/man8/adduser.8.gz",
            "/usr/share/man/fr/man8/deluser.8.gz",
            "/usr/share/man/it/man5/deluser.conf.5.gz",
            "/usr/share/man/man5/adduser.conf.5.gz",
            "/usr/share/man/man5/deluser.conf.5.gz",
            "/usr/share/man/man8/adduser.8.gz",
            "/usr/share/man/man8/adduser.local.8.gz",
            "/usr/share/man/man8/deluser.8.gz",
            "/usr/share/man/nl/man5/adduser.conf.5.gz",
            "/usr/share/man/nl/man5/deluser.conf.5.gz",
            "/usr/share/man/nl/man8/adduser.8.gz",
            "/usr/share/man/nl/man8/adduser.local.8.gz",
            "/usr/share/man/nl/man8/deluser.8.gz",
            "/usr/share/man/pl/man5/deluser.conf.5.gz",
            "/usr/share/man/pt/man5/adduser.conf.5.gz",
            "/usr/share/man/pt/man5/deluser.conf.5.gz",
            "/usr/share/man/pt/man8/adduser.8.gz",
            "/usr/share/man/pt/man8/adduser.local.8.gz",
            "/usr/share/man/pt/man8/deluser.8.gz",
            "/usr/share/man/ro/man5/adduser.conf.5.gz",
            "/usr/share/man/ro/man5/deluser.conf.5.gz",
            "/usr/share/man/ro/man8/adduser.8.gz",
            "/usr/share/man/ro/man8/adduser.local.8.gz",
            "/usr/share/man/ro/man8/deluser.8.gz",
            "/usr/share/man/ru/man5/deluser.conf.5.gz",
            "/usr/share/man/sv/man5/deluser.conf.5.gz",
            "/usr/share/perl5/Debian/AdduserCommon.pm",
            "/usr/share/perl5/Debian/AdduserLogging.pm",
            "/usr/share/perl5/Debian/AdduserRetvalues.pm"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "apache2@2.4.69-1~deb13u1",
          "Name": "apache2",
          "Identifier": {
            "PURL": "pkg:deb/debian/apache2@2.4.69-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "c7b73df60203e76"
          },
          "Version": "2.4.69",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "apache2",
          "SrcVersion": "2.4.69",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "Apache-2.0",
            "BSD-3-clause-Cambridge",
            "PCRE",
            "GPL-3.0-or-later",
            "Custom",
            "BSD-3-clause-Smrgrav",
            "Cisco",
            "BSD-2-Clause-Darwin",
            "Haines",
            "MD5",
            "Zeus",
            "GPL-2.0-or-later",
            "MIT",
            "GPL-3.0-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Apache Maintainers \u003cdebian-apache@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "apache2-bin@2.4.69-1~deb13u1",
            "apache2-data@2.4.69-1~deb13u1",
            "apache2-utils@2.4.69-1~deb13u1",
            "media-types@13.0.0",
            "procps@2:4.0.4-9"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/systemd/system/apache-htcacheclean.service",
            "/usr/lib/systemd/system/apache-htcacheclean@.service",
            "/usr/lib/systemd/system/apache2.service",
            "/usr/lib/systemd/system/apache2@.service",
            "/usr/sbin/a2enmod",
            "/usr/sbin/a2query",
            "/usr/sbin/apache2ctl",
            "/usr/share/apache2/apache2-maintscript-helper",
            "/usr/share/apache2/ask-for-passphrase",
            "/usr/share/bash-completion/completions/a2enmod",
            "/usr/share/doc/apache2/NEWS.Debian.gz",
            "/usr/share/doc/apache2/NOTICE",
            "/usr/share/doc/apache2/PACKAGING.gz",
            "/usr/share/doc/apache2/README.Debian.gz",
            "/usr/share/doc/apache2/README.backtrace",
            "/usr/share/doc/apache2/README.multiple-instances",
            "/usr/share/doc/apache2/changelog.Debian.gz",
            "/usr/share/doc/apache2/changelog.gz",
            "/usr/share/doc/apache2/copyright",
            "/usr/share/doc/apache2/examples/apache2.monit",
            "/usr/share/doc/apache2/examples/secondary-init-script",
            "/usr/share/doc/apache2/examples/setup-instance",
            "/usr/share/lintian/overrides/apache2",
            "/usr/share/man/man1/a2query.1.gz",
            "/usr/share/man/man8/a2enconf.8.gz",
            "/usr/share/man/man8/a2enmod.8.gz",
            "/usr/share/man/man8/a2ensite.8.gz",
            "/usr/share/man/man8/apache2ctl.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "apache2-bin@2.4.69-1~deb13u1",
          "Name": "apache2-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/apache2-bin@2.4.69-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d6def194df27128e"
          },
          "Version": "2.4.69",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "apache2",
          "SrcVersion": "2.4.69",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "Apache-2.0",
            "BSD-3-clause-Cambridge",
            "PCRE",
            "GPL-3.0-or-later",
            "Custom",
            "BSD-3-clause-Smrgrav",
            "Cisco",
            "BSD-2-Clause-Darwin",
            "Haines",
            "MD5",
            "Zeus",
            "GPL-2.0-or-later",
            "MIT",
            "GPL-3.0-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Apache Maintainers \u003cdebian-apache@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libapr1t64@1.7.5-1",
            "libaprutil1-dbd-sqlite3@1.6.3-3+deb13u1",
            "libaprutil1-ldap@1.6.3-3+deb13u1",
            "libaprutil1t64@1.6.3-3+deb13u1",
            "libbrotli1@1.1.0-2+b7",
            "libc6@2.41-12+deb13u4",
            "libcrypt1@1:4.4.38-1",
            "libcurl4t64@8.14.1-2+deb13u7",
            "libjansson4@2.14-2+b3",
            "libldap2@2.6.10+dfsg-1",
            "liblua5.4-0@5.4.7-1+b2",
            "libnghttp2-14@1.64.0-1.1+deb13u1",
            "libpcre2-8-0@10.46-1~deb13u3",
            "libssl3t64@3.5.7-1~deb13u3",
            "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/apache2/modules/httpd.exp",
            "/usr/lib/apache2/modules/mod_access_compat.so",
            "/usr/lib/apache2/modules/mod_actions.so",
            "/usr/lib/apache2/modules/mod_alias.so",
            "/usr/lib/apache2/modules/mod_allowmethods.so",
            "/usr/lib/apache2/modules/mod_asis.so",
            "/usr/lib/apache2/modules/mod_auth_basic.so",
            "/usr/lib/apache2/modules/mod_auth_digest.so",
            "/usr/lib/apache2/modules/mod_auth_form.so",
            "/usr/lib/apache2/modules/mod_authn_anon.so",
            "/usr/lib/apache2/modules/mod_authn_core.so",
            "/usr/lib/apache2/modules/mod_authn_dbd.so",
            "/usr/lib/apache2/modules/mod_authn_dbm.so",
            "/usr/lib/apache2/modules/mod_authn_file.so",
            "/usr/lib/apache2/modules/mod_authn_socache.so",
            "/usr/lib/apache2/modules/mod_authnz_fcgi.so",
            "/usr/lib/apache2/modules/mod_authnz_ldap.so",
            "/usr/lib/apache2/modules/mod_authz_core.so",
            "/usr/lib/apache2/modules/mod_authz_dbd.so",
            "/usr/lib/apache2/modules/mod_authz_dbm.so",
            "/usr/lib/apache2/modules/mod_authz_groupfile.so",
            "/usr/lib/apache2/modules/mod_authz_host.so",
            "/usr/lib/apache2/modules/mod_authz_owner.so",
            "/usr/lib/apache2/modules/mod_authz_user.so",
            "/usr/lib/apache2/modules/mod_autoindex.so",
            "/usr/lib/apache2/modules/mod_brotli.so",
            "/usr/lib/apache2/modules/mod_bucketeer.so",
            "/usr/lib/apache2/modules/mod_buffer.so",
            "/usr/lib/apache2/modules/mod_cache.so",
            "/usr/lib/apache2/modules/mod_cache_disk.so",
            "/usr/lib/apache2/modules/mod_cache_socache.so",
            "/usr/lib/apache2/modules/mod_case_filter.so",
            "/usr/lib/apache2/modules/mod_case_filter_in.so",
            "/usr/lib/apache2/modules/mod_cern_meta.so",
            "/usr/lib/apache2/modules/mod_cgi.so",
            "/usr/lib/apache2/modules/mod_cgid.so",
            "/usr/lib/apache2/modules/mod_charset_lite.so",
            "/usr/lib/apache2/modules/mod_data.so",
            "/usr/lib/apache2/modules/mod_dav.so",
            "/usr/lib/apache2/modules/mod_dav_fs.so",
            "/usr/lib/apache2/modules/mod_dav_lock.so",
            "/usr/lib/apache2/modules/mod_dbd.so",
            "/usr/lib/apache2/modules/mod_deflate.so",
            "/usr/lib/apache2/modules/mod_dialup.so",
            "/usr/lib/apache2/modules/mod_dir.so",
            "/usr/lib/apache2/modules/mod_dumpio.so",
            "/usr/lib/apache2/modules/mod_echo.so",
            "/usr/lib/apache2/modules/mod_env.so",
            "/usr/lib/apache2/modules/mod_expires.so",
            "/usr/lib/apache2/modules/mod_ext_filter.so",
            "/usr/lib/apache2/modules/mod_file_cache.so",
            "/usr/lib/apache2/modules/mod_filter.so",
            "/usr/lib/apache2/modules/mod_headers.so",
            "/usr/lib/apache2/modules/mod_heartbeat.so",
            "/usr/lib/apache2/modules/mod_heartmonitor.so",
            "/usr/lib/apache2/modules/mod_http2.so",
            "/usr/lib/apache2/modules/mod_ident.so",
            "/usr/lib/apache2/modules/mod_imagemap.so",
            "/usr/lib/apache2/modules/mod_include.so",
            "/usr/lib/apache2/modules/mod_info.so",
            "/usr/lib/apache2/modules/mod_lbmethod_bybusyness.so",
            "/usr/lib/apache2/modules/mod_lbmethod_byrequests.so",
            "/usr/lib/apache2/modules/mod_lbmethod_bytraffic.so",
            "/usr/lib/apache2/modules/mod_lbmethod_heartbeat.so",
            "/usr/lib/apache2/modules/mod_ldap.so",
            "/usr/lib/apache2/modules/mod_log_debug.so",
            "/usr/lib/apache2/modules/mod_log_forensic.so",
            "/usr/lib/apache2/modules/mod_lua.so",
            "/usr/lib/apache2/modules/mod_macro.so",
            "/usr/lib/apache2/modules/mod_md.so",
            "/usr/lib/apache2/modules/mod_mime.so",
            "/usr/lib/apache2/modules/mod_mime_magic.so",
            "/usr/lib/apache2/modules/mod_mpm_event.so",
            "/usr/lib/apache2/modules/mod_mpm_prefork.so",
            "/usr/lib/apache2/modules/mod_mpm_worker.so",
            "/usr/lib/apache2/modules/mod_negotiation.so",
            "/usr/lib/apache2/modules/mod_proxy.so",
            "/usr/lib/apache2/modules/mod_proxy_ajp.so",
            "/usr/lib/apache2/modules/mod_proxy_balancer.so",
            "/usr/lib/apache2/modules/mod_proxy_connect.so",
            "/usr/lib/apache2/modules/mod_proxy_express.so",
            "/usr/lib/apache2/modules/mod_proxy_fcgi.so",
            "/usr/lib/apache2/modules/mod_proxy_fdpass.so",
            "/usr/lib/apache2/modules/mod_proxy_ftp.so",
            "/usr/lib/apache2/modules/mod_proxy_hcheck.so",
            "/usr/lib/apache2/modules/mod_proxy_html.so",
            "/usr/lib/apache2/modules/mod_proxy_http.so",
            "/usr/lib/apache2/modules/mod_proxy_http2.so",
            "/usr/lib/apache2/modules/mod_proxy_scgi.so",
            "/usr/lib/apache2/modules/mod_proxy_uwsgi.so",
            "/usr/lib/apache2/modules/mod_proxy_wstunnel.so",
            "/usr/lib/apache2/modules/mod_ratelimit.so",
            "/usr/lib/apache2/modules/mod_reflector.so",
            "/usr/lib/apache2/modules/mod_remoteip.so",
            "/usr/lib/apache2/modules/mod_reqtimeout.so",
            "/usr/lib/apache2/modules/mod_request.so",
            "/usr/lib/apache2/modules/mod_rewrite.so",
            "/usr/lib/apache2/modules/mod_sed.so",
            "/usr/lib/apache2/modules/mod_session.so",
            "/usr/lib/apache2/modules/mod_session_cookie.so",
            "/usr/lib/apache2/modules/mod_session_crypto.so",
            "/usr/lib/apache2/modules/mod_session_dbd.so",
            "/usr/lib/apache2/modules/mod_setenvif.so",
            "/usr/lib/apache2/modules/mod_slotmem_plain.so",
            "/usr/lib/apache2/modules/mod_slotmem_shm.so",
            "/usr/lib/apache2/modules/mod_socache_dbm.so",
            "/usr/lib/apache2/modules/mod_socache_memcache.so",
            "/usr/lib/apache2/modules/mod_socache_redis.so",
            "/usr/lib/apache2/modules/mod_socache_shmcb.so",
            "/usr/lib/apache2/modules/mod_speling.so",
            "/usr/lib/apache2/modules/mod_ssl.so",
            "/usr/lib/apache2/modules/mod_status.so",
            "/usr/lib/apache2/modules/mod_substitute.so",
            "/usr/lib/apache2/modules/mod_suexec.so",
            "/usr/lib/apache2/modules/mod_unique_id.so",
            "/usr/lib/apache2/modules/mod_userdir.so",
            "/usr/lib/apache2/modules/mod_usertrack.so",
            "/usr/lib/apache2/modules/mod_vhost_alias.so",
            "/usr/lib/apache2/modules/mod_xml2enc.so",
            "/usr/sbin/apache2",
            "/usr/share/bug/apache2-bin/control",
            "/usr/share/bug/apache2-bin/script",
            "/usr/share/doc/apache2-bin/NEWS.Debian.gz",
            "/usr/share/doc/apache2-bin/NOTICE",
            "/usr/share/doc/apache2-bin/changelog.Debian.gz",
            "/usr/share/doc/apache2-bin/changelog.gz",
            "/usr/share/doc/apache2-bin/copyright",
            "/usr/share/lintian/overrides/apache2-bin",
            "/usr/share/man/man8/apache2.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "apache2-data@2.4.69-1~deb13u1",
          "Name": "apache2-data",
          "Identifier": {
            "PURL": "pkg:deb/debian/apache2-data@2.4.69-1~deb13u1?arch=all\u0026distro=debian-13.7",
            "UID": "bf8fe9f0360913dc"
          },
          "Version": "2.4.69",
          "Release": "1~deb13u1",
          "Arch": "all",
          "SrcName": "apache2",
          "SrcVersion": "2.4.69",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "Apache-2.0",
            "BSD-3-clause-Cambridge",
            "PCRE",
            "GPL-3.0-or-later",
            "Custom",
            "BSD-3-clause-Smrgrav",
            "Cisco",
            "BSD-2-Clause-Darwin",
            "Haines",
            "MD5",
            "Zeus",
            "GPL-2.0-or-later",
            "MIT",
            "GPL-3.0-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Apache Maintainers \u003cdebian-apache@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/share/apache2/build/envvars-std",
            "/usr/share/apache2/default-site/index.html",
            "/usr/share/apache2/error/HTTP_BAD_GATEWAY.html.var",
            "/usr/share/apache2/error/HTTP_BAD_REQUEST.html.var",
            "/usr/share/apache2/error/HTTP_FORBIDDEN.html.var",
            "/usr/share/apache2/error/HTTP_GATEWAY_TIME_OUT.html.var",
            "/usr/share/apache2/error/HTTP_GONE.html.var",
            "/usr/share/apache2/error/HTTP_INTERNAL_SERVER_ERROR.html.var",
            "/usr/share/apache2/error/HTTP_LENGTH_REQUIRED.html.var",
            "/usr/share/apache2/error/HTTP_METHOD_NOT_ALLOWED.html.var",
            "/usr/share/apache2/error/HTTP_NOT_FOUND.html.var",
            "/usr/share/apache2/error/HTTP_NOT_IMPLEMENTED.html.var",
            "/usr/share/apache2/error/HTTP_PRECONDITION_FAILED.html.var",
            "/usr/share/apache2/error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var",
            "/usr/share/apache2/error/HTTP_REQUEST_TIME_OUT.html.var",
            "/usr/share/apache2/error/HTTP_REQUEST_URI_TOO_LARGE.html.var",
            "/usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var",
            "/usr/share/apache2/error/HTTP_UNAUTHORIZED.html.var",
            "/usr/share/apache2/error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var",
            "/usr/share/apache2/error/HTTP_VARIANT_ALSO_VARIES.html.var",
            "/usr/share/apache2/error/contact.html.var",
            "/usr/share/apache2/error/include/bottom.html",
            "/usr/share/apache2/error/include/spacer.html",
            "/usr/share/apache2/error/include/top.html",
            "/usr/share/apache2/icons/a.gif",
            "/usr/share/apache2/icons/a.png",
            "/usr/share/apache2/icons/alert.black.gif",
            "/usr/share/apache2/icons/alert.black.png",
            "/usr/share/apache2/icons/alert.red.gif",
            "/usr/share/apache2/icons/alert.red.png",
            "/usr/share/apache2/icons/apache_pb.gif",
            "/usr/share/apache2/icons/apache_pb.png",
            "/usr/share/apache2/icons/apache_pb.svg",
            "/usr/share/apache2/icons/apache_pb2.gif",
            "/usr/share/apache2/icons/apache_pb2.png",
            "/usr/share/apache2/icons/back.gif",
            "/usr/share/apache2/icons/back.png",
            "/usr/share/apache2/icons/ball.gray.gif",
            "/usr/share/apache2/icons/ball.gray.png",
            "/usr/share/apache2/icons/ball.red.gif",
            "/usr/share/apache2/icons/ball.red.png",
            "/usr/share/apache2/icons/binary.gif",
            "/usr/share/apache2/icons/binary.png",
            "/usr/share/apache2/icons/binhex.gif",
            "/usr/share/apache2/icons/binhex.png",
            "/usr/share/apache2/icons/blank.gif",
            "/usr/share/apache2/icons/blank.png",
            "/usr/share/apache2/icons/bomb.gif",
            "/usr/share/apache2/icons/bomb.png",
            "/usr/share/apache2/icons/box1.gif",
            "/usr/share/apache2/icons/box1.png",
            "/usr/share/apache2/icons/box2.gif",
            "/usr/share/apache2/icons/box2.png",
            "/usr/share/apache2/icons/broken.gif",
            "/usr/share/apache2/icons/broken.png",
            "/usr/share/apache2/icons/burst.gif",
            "/usr/share/apache2/icons/burst.png",
            "/usr/share/apache2/icons/c.gif",
            "/usr/share/apache2/icons/c.png",
            "/usr/share/apache2/icons/comp.blue.gif",
            "/usr/share/apache2/icons/comp.blue.png",
            "/usr/share/apache2/icons/comp.gray.gif",
            "/usr/share/apache2/icons/comp.gray.png",
            "/usr/share/apache2/icons/compressed.gif",
            "/usr/share/apache2/icons/compressed.png",
            "/usr/share/apache2/icons/continued.gif",
            "/usr/share/apache2/icons/continued.png",
            "/usr/share/apache2/icons/dir.gif",
            "/usr/share/apache2/icons/dir.png",
            "/usr/share/apache2/icons/diskimg.gif",
            "/usr/share/apache2/icons/diskimg.png",
            "/usr/share/apache2/icons/down.gif",
            "/usr/share/apache2/icons/down.png",
            "/usr/share/apache2/icons/dvi.gif",
            "/usr/share/apache2/icons/dvi.png",
            "/usr/share/apache2/icons/f.gif",
            "/usr/share/apache2/icons/f.png",
            "/usr/share/apache2/icons/folder.gif",
            "/usr/share/apache2/icons/folder.open.gif",
            "/usr/share/apache2/icons/folder.open.png",
            "/usr/share/apache2/icons/folder.png",
            "/usr/share/apache2/icons/folder.sec.gif",
            "/usr/share/apache2/icons/folder.sec.png",
            "/usr/share/apache2/icons/forward.gif",
            "/usr/share/apache2/icons/forward.png",
            "/usr/share/apache2/icons/generic.gif",
            "/usr/share/apache2/icons/generic.png",
            "/usr/share/apache2/icons/generic.red.gif",
            "/usr/share/apache2/icons/generic.red.png",
            "/usr/share/apache2/icons/generic.sec.gif",
            "/usr/share/apache2/icons/generic.sec.png",
            "/usr/share/apache2/icons/hand.right.gif",
            "/usr/share/apache2/icons/hand.right.png",
            "/usr/share/apache2/icons/hand.up.gif",
            "/usr/share/apache2/icons/hand.up.png",
            "/usr/share/apache2/icons/icon.sheet.gif",
            "/usr/share/apache2/icons/icon.sheet.png",
            "/usr/share/apache2/icons/image1.gif",
            "/usr/share/apache2/icons/image1.png",
            "/usr/share/apache2/icons/image2.gif",
            "/usr/share/apache2/icons/image2.png",
            "/usr/share/apache2/icons/image3.gif",
            "/usr/share/apache2/icons/image3.png",
            "/usr/share/apache2/icons/index.gif",
            "/usr/share/apache2/icons/index.png",
            "/usr/share/apache2/icons/layout.gif",
            "/usr/share/apache2/icons/layout.png",
            "/usr/share/apache2/icons/left.gif",
            "/usr/share/apache2/icons/left.png",
            "/usr/share/apache2/icons/link.gif",
            "/usr/share/apache2/icons/link.png",
            "/usr/share/apache2/icons/movie.gif",
            "/usr/share/apache2/icons/movie.png",
            "/usr/share/apache2/icons/odf6odb-20x22.png",
            "/usr/share/apache2/icons/odf6odb.png",
            "/usr/share/apache2/icons/odf6odc-20x22.png",
            "/usr/share/apache2/icons/odf6odc.png",
            "/usr/share/apache2/icons/odf6odf-20x22.png",
            "/usr/share/apache2/icons/odf6odf.png",
            "/usr/share/apache2/icons/odf6odg-20x22.png",
            "/usr/share/apache2/icons/odf6odg.png",
            "/usr/share/apache2/icons/odf6odi-20x22.png",
            "/usr/share/apache2/icons/odf6odi.png",
            "/usr/share/apache2/icons/odf6odm-20x22.png",
            "/usr/share/apache2/icons/odf6odm.png",
            "/usr/share/apache2/icons/odf6odp-20x22.png",
            "/usr/share/apache2/icons/odf6odp.png",
            "/usr/share/apache2/icons/odf6ods-20x22.png",
            "/usr/share/apache2/icons/odf6ods.png",
            "/usr/share/apache2/icons/odf6odt-20x22.png",
            "/usr/share/apache2/icons/odf6odt.png",
            "/usr/share/apache2/icons/odf6otc-20x22.png",
            "/usr/share/apache2/icons/odf6otc.png",
            "/usr/share/apache2/icons/odf6otf-20x22.png",
            "/usr/share/apache2/icons/odf6otf.png",
            "/usr/share/apache2/icons/odf6otg-20x22.png",
            "/usr/share/apache2/icons/odf6otg.png",
            "/usr/share/apache2/icons/odf6oth-20x22.png",
            "/usr/share/apache2/icons/odf6oth.png",
            "/usr/share/apache2/icons/odf6oti-20x22.png",
            "/usr/share/apache2/icons/odf6oti.png",
            "/usr/share/apache2/icons/odf6otp-20x22.png",
            "/usr/share/apache2/icons/odf6otp.png",
            "/usr/share/apache2/icons/odf6ots-20x22.png",
            "/usr/share/apache2/icons/odf6ots.png",
            "/usr/share/apache2/icons/odf6ott-20x22.png",
            "/usr/share/apache2/icons/odf6ott.png",
            "/usr/share/apache2/icons/openlogo-75.png",
            "/usr/share/apache2/icons/p.gif",
            "/usr/share/apache2/icons/p.png",
            "/usr/share/apache2/icons/patch.gif",
            "/usr/share/apache2/icons/patch.png",
            "/usr/share/apache2/icons/pdf.gif",
            "/usr/share/apache2/icons/pdf.png",
            "/usr/share/apache2/icons/pie0.gif",
            "/usr/share/apache2/icons/pie0.png",
            "/usr/share/apache2/icons/pie1.gif",
            "/usr/share/apache2/icons/pie1.png",
            "/usr/share/apache2/icons/pie2.gif",
            "/usr/share/apache2/icons/pie2.png",
            "/usr/share/apache2/icons/pie3.gif",
            "/usr/share/apache2/icons/pie3.png",
            "/usr/share/apache2/icons/pie4.gif",
            "/usr/share/apache2/icons/pie4.png",
            "/usr/share/apache2/icons/pie5.gif",
            "/usr/share/apache2/icons/pie5.png",
            "/usr/share/apache2/icons/pie6.gif",
            "/usr/share/apache2/icons/pie6.png",
            "/usr/share/apache2/icons/pie7.gif",
            "/usr/share/apache2/icons/pie7.png",
            "/usr/share/apache2/icons/pie8.gif",
            "/usr/share/apache2/icons/pie8.png",
            "/usr/share/apache2/icons/portal.gif",
            "/usr/share/apache2/icons/portal.png",
            "/usr/share/apache2/icons/ps.gif",
            "/usr/share/apache2/icons/ps.png",
            "/usr/share/apache2/icons/quill.gif",
            "/usr/share/apache2/icons/quill.png",
            "/usr/share/apache2/icons/right.gif",
            "/usr/share/apache2/icons/right.png",
            "/usr/share/apache2/icons/screw1.gif",
            "/usr/share/apache2/icons/screw1.png",
            "/usr/share/apache2/icons/screw2.gif",
            "/usr/share/apache2/icons/screw2.png",
            "/usr/share/apache2/icons/script.gif",
            "/usr/share/apache2/icons/script.png",
            "/usr/share/apache2/icons/small/back.gif",
            "/usr/share/apache2/icons/small/back.png",
            "/usr/share/apache2/icons/small/binary.gif",
            "/usr/share/apache2/icons/small/binary.png",
            "/usr/share/apache2/icons/small/binhex.gif",
            "/usr/share/apache2/icons/small/binhex.png",
            "/usr/share/apache2/icons/small/blank.gif",
            "/usr/share/apache2/icons/small/blank.png",
            "/usr/share/apache2/icons/small/broken.gif",
            "/usr/share/apache2/icons/small/broken.png",
            "/usr/share/apache2/icons/small/burst.gif",
            "/usr/share/apache2/icons/small/burst.png",
            "/usr/share/apache2/icons/small/comp1.gif",
            "/usr/share/apache2/icons/small/comp1.png",
            "/usr/share/apache2/icons/small/comp2.gif",
            "/usr/share/apache2/icons/small/comp2.png",
            "/usr/share/apache2/icons/small/compressed.gif",
            "/usr/share/apache2/icons/small/compressed.png",
            "/usr/share/apache2/icons/small/continued.gif",
            "/usr/share/apache2/icons/small/continued.png",
            "/usr/share/apache2/icons/small/doc.gif",
            "/usr/share/apache2/icons/small/doc.png",
            "/usr/share/apache2/icons/small/folder.gif",
            "/usr/share/apache2/icons/small/folder.png",
            "/usr/share/apache2/icons/small/folder2.gif",
            "/usr/share/apache2/icons/small/folder2.png",
            "/usr/share/apache2/icons/small/forward.gif",
            "/usr/share/apache2/icons/small/forward.png",
            "/usr/share/apache2/icons/small/generic.gif",
            "/usr/share/apache2/icons/small/generic.png",
            "/usr/share/apache2/icons/small/generic2.gif",
            "/usr/share/apache2/icons/small/generic2.png",
            "/usr/share/apache2/icons/small/generic3.gif",
            "/usr/share/apache2/icons/small/generic3.png",
            "/usr/share/apache2/icons/small/image.gif",
            "/usr/share/apache2/icons/small/image.png",
            "/usr/share/apache2/icons/small/image2.gif",
            "/usr/share/apache2/icons/small/image2.png",
            "/usr/share/apache2/icons/small/index.gif",
            "/usr/share/apache2/icons/small/index.png",
            "/usr/share/apache2/icons/small/key.gif",
            "/usr/share/apache2/icons/small/key.png",
            "/usr/share/apache2/icons/small/movie.gif",
            "/usr/share/apache2/icons/small/movie.png",
            "/usr/share/apache2/icons/small/patch.gif",
            "/usr/share/apache2/icons/small/patch.png",
            "/usr/share/apache2/icons/small/ps.gif",
            "/usr/share/apache2/icons/small/ps.png",
            "/usr/share/apache2/icons/small/rainbow.gif",
            "/usr/share/apache2/icons/small/rainbow.png",
            "/usr/share/apache2/icons/small/sound.gif",
            "/usr/share/apache2/icons/small/sound.png",
            "/usr/share/apache2/icons/small/sound2.gif",
            "/usr/share/apache2/icons/small/sound2.png",
            "/usr/share/apache2/icons/small/tar.gif",
            "/usr/share/apache2/icons/small/tar.png",
            "/usr/share/apache2/icons/small/text.gif",
            "/usr/share/apache2/icons/small/text.png",
            "/usr/share/apache2/icons/small/transfer.gif",
            "/usr/share/apache2/icons/small/transfer.png",
            "/usr/share/apache2/icons/small/unknown.gif",
            "/usr/share/apache2/icons/small/unknown.png",
            "/usr/share/apache2/icons/small/uu.gif",
            "/usr/share/apache2/icons/small/uu.png",
            "/usr/share/apache2/icons/sound1.gif",
            "/usr/share/apache2/icons/sound1.png",
            "/usr/share/apache2/icons/sound2.gif",
            "/usr/share/apache2/icons/sound2.png",
            "/usr/share/apache2/icons/sphere1.gif",
            "/usr/share/apache2/icons/sphere1.png",
            "/usr/share/apache2/icons/sphere2.gif",
            "/usr/share/apache2/icons/sphere2.png",
            "/usr/share/apache2/icons/svg.png",
            "/usr/share/apache2/icons/tar.gif",
            "/usr/share/apache2/icons/tar.png",
            "/usr/share/apache2/icons/tex.gif",
            "/usr/share/apache2/icons/tex.png",
            "/usr/share/apache2/icons/text.gif",
            "/usr/share/apache2/icons/text.png",
            "/usr/share/apache2/icons/transfer.gif",
            "/usr/share/apache2/icons/transfer.png",
            "/usr/share/apache2/icons/unknown.gif",
            "/usr/share/apache2/icons/unknown.png",
            "/usr/share/apache2/icons/up.gif",
            "/usr/share/apache2/icons/up.png",
            "/usr/share/apache2/icons/uu.gif",
            "/usr/share/apache2/icons/uu.png",
            "/usr/share/apache2/icons/uuencoded.gif",
            "/usr/share/apache2/icons/uuencoded.png",
            "/usr/share/apache2/icons/world1.gif",
            "/usr/share/apache2/icons/world1.png",
            "/usr/share/apache2/icons/world2.gif",
            "/usr/share/apache2/icons/world2.png",
            "/usr/share/apache2/icons/xml.png",
            "/usr/share/doc/apache2-data/NOTICE",
            "/usr/share/doc/apache2-data/copyright",
            "/usr/share/lintian/overrides/apache2-data"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "apache2-utils@2.4.69-1~deb13u1",
          "Name": "apache2-utils",
          "Identifier": {
            "PURL": "pkg:deb/debian/apache2-utils@2.4.69-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "8cb76f28abbdad92"
          },
          "Version": "2.4.69",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "apache2",
          "SrcVersion": "2.4.69",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "Apache-2.0",
            "BSD-3-clause-Cambridge",
            "PCRE",
            "GPL-3.0-or-later",
            "Custom",
            "BSD-3-clause-Smrgrav",
            "Cisco",
            "BSD-2-Clause-Darwin",
            "Haines",
            "MD5",
            "Zeus",
            "GPL-2.0-or-later",
            "MIT",
            "GPL-3.0-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Apache Maintainers \u003cdebian-apache@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libapr1t64@1.7.5-1",
            "libaprutil1t64@1.6.3-3+deb13u1",
            "libc6@2.41-12+deb13u4",
            "libcrypt1@1:4.4.38-1",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/bin/ab",
            "/usr/bin/checkgid",
            "/usr/bin/fcgistarter",
            "/usr/bin/htcacheclean",
            "/usr/bin/htdbm",
            "/usr/bin/htdigest",
            "/usr/bin/htpasswd",
            "/usr/bin/logresolve",
            "/usr/bin/rotatelogs",
            "/usr/sbin/check_forensic",
            "/usr/sbin/httxt2dbm",
            "/usr/sbin/split-logfile",
            "/usr/share/doc/apache2-utils/NEWS.Debian.gz",
            "/usr/share/doc/apache2-utils/NOTICE",
            "/usr/share/doc/apache2-utils/changelog.Debian.gz",
            "/usr/share/doc/apache2-utils/changelog.gz",
            "/usr/share/doc/apache2-utils/copyright",
            "/usr/share/man/man1/ab.1.gz",
            "/usr/share/man/man1/htdbm.1.gz",
            "/usr/share/man/man1/htdigest.1.gz",
            "/usr/share/man/man1/htpasswd.1.gz",
            "/usr/share/man/man1/httxt2dbm.1.gz",
            "/usr/share/man/man1/logresolve.1.gz",
            "/usr/share/man/man8/check_forensic.8.gz",
            "/usr/share/man/man8/checkgid.8.gz",
            "/usr/share/man/man8/fcgistarter.8.gz",
            "/usr/share/man/man8/htcacheclean.8.gz",
            "/usr/share/man/man8/rotatelogs.8.gz",
            "/usr/share/man/man8/split-logfile.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "apt@3.0.3",
          "Name": "apt",
          "Identifier": {
            "PURL": "pkg:deb/debian/apt@3.0.3?arch=amd64\u0026distro=debian-13.7",
            "UID": "18dd1ec95ee04059"
          },
          "Version": "3.0.3",
          "Arch": "amd64",
          "SrcName": "apt",
          "SrcVersion": "3.0.3",
          "Licenses": [
            "GPL-2.0-or-later",
            "curl",
            "BSD-3-Clause",
            "MIT",
            "GPL-2.0-only"
          ],
          "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "adduser@3.152",
            "base-passwd@3.6.7",
            "debian-archive-keyring@2025.1",
            "libapt-pkg7.0@3.0.3",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libseccomp2@2.6.0-2",
            "libssl3t64@3.5.7-1~deb13u3",
            "libstdc++6@14.2.0-19",
            "libsystemd0@257.13-1~deb13u1",
            "sqv@1.3.0-3+b2"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/apt",
            "/usr/bin/apt-cache",
            "/usr/bin/apt-cdrom",
            "/usr/bin/apt-config",
            "/usr/bin/apt-get",
            "/usr/bin/apt-mark",
            "/usr/lib/apt/apt-extracttemplates",
            "/usr/lib/apt/apt-helper",
            "/usr/lib/apt/apt.systemd.daily",
            "/usr/lib/apt/methods/cdrom",
            "/usr/lib/apt/methods/copy",
            "/usr/lib/apt/methods/file",
            "/usr/lib/apt/methods/gpgv",
            "/usr/lib/apt/methods/http",
            "/usr/lib/apt/methods/mirror",
            "/usr/lib/apt/methods/rred",
            "/usr/lib/apt/methods/sqv",
            "/usr/lib/apt/methods/store",
            "/usr/lib/apt/solvers/dump",
            "/usr/lib/dpkg/methods/apt/desc.apt",
            "/usr/lib/dpkg/methods/apt/install",
            "/usr/lib/dpkg/methods/apt/names",
            "/usr/lib/dpkg/methods/apt/setup",
            "/usr/lib/dpkg/methods/apt/update",
            "/usr/lib/systemd/system/apt-daily-upgrade.service",
            "/usr/lib/systemd/system/apt-daily-upgrade.timer",
            "/usr/lib/systemd/system/apt-daily.service",
            "/usr/lib/systemd/system/apt-daily.timer",
            "/usr/lib/x86_64-linux-gnu/libapt-private.so.0.0.0",
            "/usr/share/apt/default-sequoia.config",
            "/usr/share/bash-completion/completions/apt",
            "/usr/share/bug/apt/script",
            "/usr/share/doc/apt/NEWS.Debian.gz",
            "/usr/share/doc/apt/README.md.gz",
            "/usr/share/doc/apt/changelog.gz",
            "/usr/share/doc/apt/copyright",
            "/usr/share/doc/apt/examples/apt.conf",
            "/usr/share/doc/apt/examples/configure-index",
            "/usr/share/doc/apt/examples/debian.sources",
            "/usr/share/doc/apt/examples/preferences",
            "/usr/share/lintian/overrides/apt",
            "/usr/share/locale/ar/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ast/LC_MESSAGES/apt.mo",
            "/usr/share/locale/bg/LC_MESSAGES/apt.mo",
            "/usr/share/locale/bs/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ca/LC_MESSAGES/apt.mo",
            "/usr/share/locale/cs/LC_MESSAGES/apt.mo",
            "/usr/share/locale/cy/LC_MESSAGES/apt.mo",
            "/usr/share/locale/da/LC_MESSAGES/apt.mo",
            "/usr/share/locale/de/LC_MESSAGES/apt.mo",
            "/usr/share/locale/dz/LC_MESSAGES/apt.mo",
            "/usr/share/locale/el/LC_MESSAGES/apt.mo",
            "/usr/share/locale/es/LC_MESSAGES/apt.mo",
            "/usr/share/locale/eu/LC_MESSAGES/apt.mo",
            "/usr/share/locale/fi/LC_MESSAGES/apt.mo",
            "/usr/share/locale/fr/LC_MESSAGES/apt.mo",
            "/usr/share/locale/gl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/hu/LC_MESSAGES/apt.mo",
            "/usr/share/locale/it/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ja/LC_MESSAGES/apt.mo",
            "/usr/share/locale/km/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ko/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ku/LC_MESSAGES/apt.mo",
            "/usr/share/locale/lt/LC_MESSAGES/apt.mo",
            "/usr/share/locale/mr/LC_MESSAGES/apt.mo",
            "/usr/share/locale/nb/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ne/LC_MESSAGES/apt.mo",
            "/usr/share/locale/nl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/nn/LC_MESSAGES/apt.mo",
            "/usr/share/locale/pl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/pt/LC_MESSAGES/apt.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ro/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ru/LC_MESSAGES/apt.mo",
            "/usr/share/locale/sk/LC_MESSAGES/apt.mo",
            "/usr/share/locale/sl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/sv/LC_MESSAGES/apt.mo",
            "/usr/share/locale/th/LC_MESSAGES/apt.mo",
            "/usr/share/locale/tl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/tr/LC_MESSAGES/apt.mo",
            "/usr/share/locale/uk/LC_MESSAGES/apt.mo",
            "/usr/share/locale/vi/LC_MESSAGES/apt.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/apt.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/apt.mo",
            "/usr/share/man/de/man1/apt-transport-http.1.gz",
            "/usr/share/man/de/man1/apt-transport-https.1.gz",
            "/usr/share/man/de/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/de/man5/apt.conf.5.gz",
            "/usr/share/man/de/man5/apt_auth.conf.5.gz",
            "/usr/share/man/de/man5/apt_preferences.5.gz",
            "/usr/share/man/de/man5/sources.list.5.gz",
            "/usr/share/man/de/man7/apt-patterns.7.gz",
            "/usr/share/man/de/man8/apt-cache.8.gz",
            "/usr/share/man/de/man8/apt-cdrom.8.gz",
            "/usr/share/man/de/man8/apt-config.8.gz",
            "/usr/share/man/de/man8/apt-get.8.gz",
            "/usr/share/man/de/man8/apt-mark.8.gz",
            "/usr/share/man/de/man8/apt-secure.8.gz",
            "/usr/share/man/de/man8/apt.8.gz",
            "/usr/share/man/es/man5/apt_preferences.5.gz",
            "/usr/share/man/es/man8/apt-cache.8.gz",
            "/usr/share/man/es/man8/apt-cdrom.8.gz",
            "/usr/share/man/es/man8/apt-config.8.gz",
            "/usr/share/man/fr/man1/apt-transport-http.1.gz",
            "/usr/share/man/fr/man1/apt-transport-https.1.gz",
            "/usr/share/man/fr/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/fr/man5/apt.conf.5.gz",
            "/usr/share/man/fr/man5/apt_auth.conf.5.gz",
            "/usr/share/man/fr/man5/apt_preferences.5.gz",
            "/usr/share/man/fr/man5/sources.list.5.gz",
            "/usr/share/man/fr/man7/apt-patterns.7.gz",
            "/usr/share/man/fr/man8/apt-cache.8.gz",
            "/usr/share/man/fr/man8/apt-cdrom.8.gz",
            "/usr/share/man/fr/man8/apt-config.8.gz",
            "/usr/share/man/fr/man8/apt-get.8.gz",
            "/usr/share/man/fr/man8/apt-mark.8.gz",
            "/usr/share/man/fr/man8/apt-secure.8.gz",
            "/usr/share/man/fr/man8/apt.8.gz",
            "/usr/share/man/it/man5/apt.conf.5.gz",
            "/usr/share/man/it/man5/apt_preferences.5.gz",
            "/usr/share/man/it/man8/apt-cache.8.gz",
            "/usr/share/man/it/man8/apt-cdrom.8.gz",
            "/usr/share/man/it/man8/apt-config.8.gz",
            "/usr/share/man/it/man8/apt-mark.8.gz",
            "/usr/share/man/it/man8/apt.8.gz",
            "/usr/share/man/ja/man5/apt.conf.5.gz",
            "/usr/share/man/ja/man5/apt_preferences.5.gz",
            "/usr/share/man/ja/man8/apt-cache.8.gz",
            "/usr/share/man/ja/man8/apt-cdrom.8.gz",
            "/usr/share/man/ja/man8/apt-config.8.gz",
            "/usr/share/man/ja/man8/apt-mark.8.gz",
            "/usr/share/man/ja/man8/apt.8.gz",
            "/usr/share/man/man1/apt-transport-http.1.gz",
            "/usr/share/man/man1/apt-transport-https.1.gz",
            "/usr/share/man/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/man5/apt.conf.5.gz",
            "/usr/share/man/man5/apt_auth.conf.5.gz",
            "/usr/share/man/man5/apt_preferences.5.gz",
            "/usr/share/man/man5/sources.list.5.gz",
            "/usr/share/man/man7/apt-patterns.7.gz",
            "/usr/share/man/man8/apt-cache.8.gz",
            "/usr/share/man/man8/apt-cdrom.8.gz",
            "/usr/share/man/man8/apt-config.8.gz",
            "/usr/share/man/man8/apt-get.8.gz",
            "/usr/share/man/man8/apt-mark.8.gz",
            "/usr/share/man/man8/apt-secure.8.gz",
            "/usr/share/man/man8/apt.8.gz",
            "/usr/share/man/nl/man1/apt-transport-http.1.gz",
            "/usr/share/man/nl/man1/apt-transport-https.1.gz",
            "/usr/share/man/nl/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/nl/man5/apt.conf.5.gz",
            "/usr/share/man/nl/man5/apt_auth.conf.5.gz",
            "/usr/share/man/nl/man5/apt_preferences.5.gz",
            "/usr/share/man/nl/man5/sources.list.5.gz",
            "/usr/share/man/nl/man7/apt-patterns.7.gz",
            "/usr/share/man/nl/man8/apt-cache.8.gz",
            "/usr/share/man/nl/man8/apt-cdrom.8.gz",
            "/usr/share/man/nl/man8/apt-config.8.gz",
            "/usr/share/man/nl/man8/apt-get.8.gz",
            "/usr/share/man/nl/man8/apt-mark.8.gz",
            "/usr/share/man/nl/man8/apt-secure.8.gz",
            "/usr/share/man/nl/man8/apt.8.gz",
            "/usr/share/man/pl/man5/apt_preferences.5.gz",
            "/usr/share/man/pl/man8/apt-cache.8.gz",
            "/usr/share/man/pl/man8/apt-cdrom.8.gz",
            "/usr/share/man/pl/man8/apt-config.8.gz",
            "/usr/share/man/pt/man1/apt-transport-http.1.gz",
            "/usr/share/man/pt/man1/apt-transport-https.1.gz",
            "/usr/share/man/pt/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/pt/man5/apt.conf.5.gz",
            "/usr/share/man/pt/man5/apt_auth.conf.5.gz",
            "/usr/share/man/pt/man5/apt_preferences.5.gz",
            "/usr/share/man/pt/man5/sources.list.5.gz",
            "/usr/share/man/pt/man7/apt-patterns.7.gz",
            "/usr/share/man/pt/man8/apt-cache.8.gz",
            "/usr/share/man/pt/man8/apt-cdrom.8.gz",
            "/usr/share/man/pt/man8/apt-config.8.gz",
            "/usr/share/man/pt/man8/apt-get.8.gz",
            "/usr/share/man/pt/man8/apt-mark.8.gz",
            "/usr/share/man/pt/man8/apt-secure.8.gz",
            "/usr/share/man/pt/man8/apt.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "autoconf@2.72-3.1",
          "Name": "autoconf",
          "Identifier": {
            "PURL": "pkg:deb/debian/autoconf@2.72-3.1?arch=all\u0026distro=debian-13.7",
            "UID": "e1d2737caf717267"
          },
          "Version": "2.72",
          "Release": "3.1",
          "Arch": "all",
          "SrcName": "autoconf",
          "SrcVersion": "2.72",
          "SrcRelease": "3.1",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "GPL-3.0-with-autoconf-exception+",
            "permissive-short-disclaimer",
            "permissive-long-disclaimer",
            "permissive-without-disclaimer",
            "permissive-without-notices-or-disclaimer",
            "GPL-2.0-with-autoconf-exception+",
            "GPL-2.0-only",
            "GPL-2.0-or-later",
            "MIT-X-Consortium",
            "GPL-3+ with Texinfo exception",
            "GFDL-1.3-or-later",
            "GFDL-1.3-only",
            "no-modification",
            "permissive",
            "other"
          ],
          "Maintainer": "Alex Myczko \u003ctar@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debianutils@5.23.2",
            "m4@1.4.19-8",
            "perl@5.40.1-6+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/autoconf",
            "/usr/bin/autoheader",
            "/usr/bin/autom4te",
            "/usr/bin/autoreconf",
            "/usr/bin/autoscan",
            "/usr/bin/autoupdate",
            "/usr/bin/ifnames",
            "/usr/share/autoconf/Autom4te/C4che.pm",
            "/usr/share/autoconf/Autom4te/ChannelDefs.pm",
            "/usr/share/autoconf/Autom4te/Channels.pm",
            "/usr/share/autoconf/Autom4te/Config.pm",
            "/usr/share/autoconf/Autom4te/Configure_ac.pm",
            "/usr/share/autoconf/Autom4te/FileUtils.pm",
            "/usr/share/autoconf/Autom4te/General.pm",
            "/usr/share/autoconf/Autom4te/Getopt.pm",
            "/usr/share/autoconf/Autom4te/Request.pm",
            "/usr/share/autoconf/Autom4te/XFile.pm",
            "/usr/share/autoconf/INSTALL",
            "/usr/share/autoconf/autoconf/autoconf.m4",
            "/usr/share/autoconf/autoconf/autoconf.m4f",
            "/usr/share/autoconf/autoconf/autoheader.m4",
            "/usr/share/autoconf/autoconf/autoscan.m4",
            "/usr/share/autoconf/autoconf/autotest.m4",
            "/usr/share/autoconf/autoconf/autoupdate.m4",
            "/usr/share/autoconf/autoconf/c.m4",
            "/usr/share/autoconf/autoconf/erlang.m4",
            "/usr/share/autoconf/autoconf/fortran.m4",
            "/usr/share/autoconf/autoconf/functions.m4",
            "/usr/share/autoconf/autoconf/general.m4",
            "/usr/share/autoconf/autoconf/go.m4",
            "/usr/share/autoconf/autoconf/headers.m4",
            "/usr/share/autoconf/autoconf/lang.m4",
            "/usr/share/autoconf/autoconf/libs.m4",
            "/usr/share/autoconf/autoconf/oldnames.m4",
            "/usr/share/autoconf/autoconf/programs.m4",
            "/usr/share/autoconf/autoconf/specific.m4",
            "/usr/share/autoconf/autoconf/status.m4",
            "/usr/share/autoconf/autoconf/trailer.m4",
            "/usr/share/autoconf/autoconf/types.m4",
            "/usr/share/autoconf/autom4te.cfg",
            "/usr/share/autoconf/autoscan/autoscan.list",
            "/usr/share/autoconf/autotest/autotest.m4",
            "/usr/share/autoconf/autotest/autotest.m4f",
            "/usr/share/autoconf/autotest/general.m4",
            "/usr/share/autoconf/autotest/specific.m4",
            "/usr/share/autoconf/build-aux/config.guess",
            "/usr/share/autoconf/build-aux/config.sub",
            "/usr/share/autoconf/build-aux/install-sh",
            "/usr/share/autoconf/m4sugar/foreach.m4",
            "/usr/share/autoconf/m4sugar/m4sh.m4",
            "/usr/share/autoconf/m4sugar/m4sh.m4f",
            "/usr/share/autoconf/m4sugar/m4sugar.m4",
            "/usr/share/autoconf/m4sugar/m4sugar.m4f",
            "/usr/share/autoconf/version.m4",
            "/usr/share/doc/autoconf/NEWS.gz",
            "/usr/share/doc/autoconf/README",
            "/usr/share/doc/autoconf/README.Debian",
            "/usr/share/doc/autoconf/changelog.Debian.gz",
            "/usr/share/doc/autoconf/changelog.gz",
            "/usr/share/doc/autoconf/copyright",
            "/usr/share/emacs/site-lisp/autoconf/autotest-mode.el",
            "/usr/share/lintian/overrides/autoconf",
            "/usr/share/man/man1/autoconf.1.gz",
            "/usr/share/man/man1/autoheader.1.gz",
            "/usr/share/man/man1/autom4te.1.gz",
            "/usr/share/man/man1/autoreconf.1.gz",
            "/usr/share/man/man1/autoscan.1.gz",
            "/usr/share/man/man1/autoupdate.1.gz",
            "/usr/share/man/man1/ifnames.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "base-files@13.8+deb13u7",
          "Name": "base-files",
          "Identifier": {
            "PURL": "pkg:deb/debian/base-files@13.8%2Bdeb13u7?arch=amd64\u0026distro=debian-13.7",
            "UID": "76560355df616e3e"
          },
          "Version": "13.8+deb13u7",
          "Arch": "amd64",
          "SrcName": "base-files",
          "SrcVersion": "13.8+deb13u7",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "verbatim"
          ],
          "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/os-release",
            "/usr/share/base-files/dot.bashrc",
            "/usr/share/base-files/dot.profile",
            "/usr/share/base-files/dot.profile.md5sums",
            "/usr/share/base-files/info.dir",
            "/usr/share/base-files/motd",
            "/usr/share/base-files/profile",
            "/usr/share/base-files/profile.md5sums",
            "/usr/share/base-files/staff-group-for-usr-local",
            "/usr/share/common-licenses/AGPL-3.0",
            "/usr/share/common-licenses/Apache-2.0",
            "/usr/share/common-licenses/Artistic",
            "/usr/share/common-licenses/Artistic-2.0",
            "/usr/share/common-licenses/BSD",
            "/usr/share/common-licenses/BSL-1.0",
            "/usr/share/common-licenses/CC-BY-3.0",
            "/usr/share/common-licenses/CC-BY-4.0",
            "/usr/share/common-licenses/CC-BY-SA-3.0",
            "/usr/share/common-licenses/CC-BY-SA-4.0",
            "/usr/share/common-licenses/CC0-1.0",
            "/usr/share/common-licenses/GFDL-1.1",
            "/usr/share/common-licenses/GFDL-1.2",
            "/usr/share/common-licenses/GFDL-1.3",
            "/usr/share/common-licenses/GPL-1",
            "/usr/share/common-licenses/GPL-2",
            "/usr/share/common-licenses/GPL-3",
            "/usr/share/common-licenses/LGPL-2",
            "/usr/share/common-licenses/LGPL-2.1",
            "/usr/share/common-licenses/LGPL-3",
            "/usr/share/common-licenses/MPL-1.1",
            "/usr/share/common-licenses/MPL-2.0",
            "/usr/share/common-licenses/OFL-1.1",
            "/usr/share/doc/base-files/NEWS.Debian.gz",
            "/usr/share/doc/base-files/README",
            "/usr/share/doc/base-files/README.FHS",
            "/usr/share/doc/base-files/changelog.gz",
            "/usr/share/doc/base-files/copyright",
            "/usr/share/lintian/overrides/base-files"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "base-passwd@3.6.7",
          "Name": "base-passwd",
          "Identifier": {
            "PURL": "pkg:deb/debian/base-passwd@3.6.7?arch=amd64\u0026distro=debian-13.7",
            "UID": "1cd3add99b3d2533"
          },
          "Version": "3.6.7",
          "Arch": "amd64",
          "SrcName": "base-passwd",
          "SrcVersion": "3.6.7",
          "Licenses": [
            "GPL-2.0-only",
            "public-domain"
          ],
          "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libdebconfclient0@0.280",
            "libselinux1@3.8.1-1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/sbin/update-passwd",
            "/usr/share/base-passwd/group.master",
            "/usr/share/base-passwd/passwd.master",
            "/usr/share/doc-base/base-passwd.users-and-groups",
            "/usr/share/doc/base-passwd/README",
            "/usr/share/doc/base-passwd/changelog.gz",
            "/usr/share/doc/base-passwd/copyright",
            "/usr/share/doc/base-passwd/users-and-groups.html",
            "/usr/share/doc/base-passwd/users-and-groups.txt.gz",
            "/usr/share/lintian/overrides/base-passwd",
            "/usr/share/man/de/man8/update-passwd.8.gz",
            "/usr/share/man/es/man8/update-passwd.8.gz",
            "/usr/share/man/fr/man8/update-passwd.8.gz",
            "/usr/share/man/ja/man8/update-passwd.8.gz",
            "/usr/share/man/man8/update-passwd.8.gz",
            "/usr/share/man/pl/man8/update-passwd.8.gz",
            "/usr/share/man/ro/man8/update-passwd.8.gz",
            "/usr/share/man/ru/man8/update-passwd.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "bash@5.2.37-2+b10",
          "Name": "bash",
          "Identifier": {
            "PURL": "pkg:deb/debian/bash@5.2.37-2%2Bb10?arch=amd64\u0026distro=debian-13.7",
            "UID": "2e2ffb74d0d3e1ed"
          },
          "Version": "5.2.37",
          "Release": "2+b10",
          "Arch": "amd64",
          "SrcName": "bash",
          "SrcVersion": "5.2.37",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GFDL-1.3-no-invariants-only",
            "GFDL-1.3-only",
            "Latex2e",
            "BSD-4-Clause-UC",
            "MIT",
            "permissive"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "base-files@13.8+deb13u7",
            "debianutils@5.23.2"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/bash",
            "/usr/bin/bashbug",
            "/usr/bin/clear_console",
            "/usr/share/debianutils/shells.d/bash",
            "/usr/share/doc/bash/CHANGES.gz",
            "/usr/share/doc/bash/COMPAT.gz",
            "/usr/share/doc/bash/INTRO.gz",
            "/usr/share/doc/bash/NEWS.gz",
            "/usr/share/doc/bash/POSIX.gz",
            "/usr/share/doc/bash/RBASH",
            "/usr/share/doc/bash/README.Debian.gz",
            "/usr/share/doc/bash/README.abs-guide",
            "/usr/share/doc/bash/README.commands.gz",
            "/usr/share/doc/bash/README.gz",
            "/usr/share/doc/bash/changelog.Debian.amd64.gz",
            "/usr/share/doc/bash/changelog.Debian.gz",
            "/usr/share/doc/bash/changelog.gz",
            "/usr/share/doc/bash/copyright",
            "/usr/share/doc/bash/inputrc.arrows",
            "/usr/share/lintian/overrides/bash",
            "/usr/share/locale/af/LC_MESSAGES/bash.mo",
            "/usr/share/locale/bg/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ca/LC_MESSAGES/bash.mo",
            "/usr/share/locale/cs/LC_MESSAGES/bash.mo",
            "/usr/share/locale/da/LC_MESSAGES/bash.mo",
            "/usr/share/locale/de/LC_MESSAGES/bash.mo",
            "/usr/share/locale/el/LC_MESSAGES/bash.mo",
            "/usr/share/locale/en@boldquot/LC_MESSAGES/bash.mo",
            "/usr/share/locale/en@quot/LC_MESSAGES/bash.mo",
            "/usr/share/locale/eo/LC_MESSAGES/bash.mo",
            "/usr/share/locale/es/LC_MESSAGES/bash.mo",
            "/usr/share/locale/et/LC_MESSAGES/bash.mo",
            "/usr/share/locale/fi/LC_MESSAGES/bash.mo",
            "/usr/share/locale/fr/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ga/LC_MESSAGES/bash.mo",
            "/usr/share/locale/gl/LC_MESSAGES/bash.mo",
            "/usr/share/locale/hr/LC_MESSAGES/bash.mo",
            "/usr/share/locale/hu/LC_MESSAGES/bash.mo",
            "/usr/share/locale/id/LC_MESSAGES/bash.mo",
            "/usr/share/locale/it/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ja/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ko/LC_MESSAGES/bash.mo",
            "/usr/share/locale/lt/LC_MESSAGES/bash.mo",
            "/usr/share/locale/nb/LC_MESSAGES/bash.mo",
            "/usr/share/locale/nl/LC_MESSAGES/bash.mo",
            "/usr/share/locale/pl/LC_MESSAGES/bash.mo",
            "/usr/share/locale/pt/LC_MESSAGES/bash.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ro/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ru/LC_MESSAGES/bash.mo",
            "/usr/share/locale/sk/LC_MESSAGES/bash.mo",
            "/usr/share/locale/sl/LC_MESSAGES/bash.mo",
            "/usr/share/locale/sr/LC_MESSAGES/bash.mo",
            "/usr/share/locale/sv/LC_MESSAGES/bash.mo",
            "/usr/share/locale/tr/LC_MESSAGES/bash.mo",
            "/usr/share/locale/uk/LC_MESSAGES/bash.mo",
            "/usr/share/locale/vi/LC_MESSAGES/bash.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/bash.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/bash.mo",
            "/usr/share/man/man1/bash.1.gz",
            "/usr/share/man/man1/bashbug.1.gz",
            "/usr/share/man/man1/clear_console.1.gz",
            "/usr/share/man/man1/rbash.1.gz",
            "/usr/share/man/man7/bash-builtins.7.gz",
            "/usr/share/menu/bash"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "binutils@2.44-3",
          "Name": "binutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/binutils@2.44-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "1bdf35dbc1fac0c7"
          },
          "Version": "2.44",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "binutils",
          "SrcVersion": "2.44",
          "SrcRelease": "3",
          "Licenses": [
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "GFDL-1.3-or-later"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "binutils-common@2.44-3",
            "binutils-x86-64-linux-gnu@2.44-3",
            "libbinutils@2.44-3",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libgprofng0@2.44-3",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/etc/gprofng.rc",
            "/usr/bin/gprofng",
            "/usr/bin/gprofng-archive",
            "/usr/bin/gprofng-collect-app",
            "/usr/bin/gprofng-display-html",
            "/usr/bin/gprofng-display-src",
            "/usr/bin/gprofng-display-text",
            "/usr/share/bug/binutils/presubj",
            "/usr/share/doc/binutils/changelog.Debian.gz",
            "/usr/share/doc/binutils/copyright",
            "/usr/share/lintian/overrides/binutils",
            "/usr/share/man/man1/gprofng-archive.1.gz",
            "/usr/share/man/man1/gprofng-collect-app.1.gz",
            "/usr/share/man/man1/gprofng-display-html.1.gz",
            "/usr/share/man/man1/gprofng-display-src.1.gz",
            "/usr/share/man/man1/gprofng-display-text.1.gz",
            "/usr/share/man/man1/gprofng.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "binutils-common@2.44-3",
          "Name": "binutils-common",
          "Identifier": {
            "PURL": "pkg:deb/debian/binutils-common@2.44-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "59b31e48583d9d18"
          },
          "Version": "2.44",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "binutils",
          "SrcVersion": "2.44",
          "SrcRelease": "3",
          "Licenses": [
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "GFDL-1.3-or-later"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/doc/binutils-common/changelog.Debian.gz",
            "/usr/share/doc/binutils-common/copyright",
            "/usr/share/doc/binutils/NEWS.gz",
            "/usr/share/doc/binutils/README.cross.gz",
            "/usr/share/doc/binutils/bfd/ChangeLog.gz",
            "/usr/share/doc/binutils/bfd/PORTING.gz",
            "/usr/share/doc/binutils/bfd/TODO.gz",
            "/usr/share/doc/binutils/changelog.gz",
            "/usr/share/doc/binutils/gas/ChangeLog.gz",
            "/usr/share/doc/binutils/gas/NEWS.gz",
            "/usr/share/doc/binutils/gprof/ChangeLog.gz",
            "/usr/share/doc/binutils/gprof/TEST.gz",
            "/usr/share/doc/binutils/gprof/TODO.gz",
            "/usr/share/doc/binutils/gprof/bbconv.pl",
            "/usr/share/doc/binutils/ld/ChangeLog.gz",
            "/usr/share/doc/binutils/ld/NEWS.gz",
            "/usr/share/doc/binutils/ld/TODO.gz",
            "/usr/share/lintian/overrides/binutils-common",
            "/usr/share/locale/bg/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/bg/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/bg/LC_MESSAGES/ld.mo",
            "/usr/share/locale/ca/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/da/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/da/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/da/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/da/LC_MESSAGES/ld.mo",
            "/usr/share/locale/da/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/de/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/de/LC_MESSAGES/ld.mo",
            "/usr/share/locale/de/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/eo/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/es/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/es/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/es/LC_MESSAGES/gas.mo",
            "/usr/share/locale/es/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/es/LC_MESSAGES/ld.mo",
            "/usr/share/locale/es/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/fi/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/fi/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/fi/LC_MESSAGES/gas.mo",
            "/usr/share/locale/fi/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/fi/LC_MESSAGES/ld.mo",
            "/usr/share/locale/fi/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/fr/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/fr/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/fr/LC_MESSAGES/gas.mo",
            "/usr/share/locale/fr/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/fr/LC_MESSAGES/ld.mo",
            "/usr/share/locale/fr/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/ga/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/ga/LC_MESSAGES/ld.mo",
            "/usr/share/locale/ga/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/hr/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/hr/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/hu/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/id/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/id/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/id/LC_MESSAGES/gas.mo",
            "/usr/share/locale/id/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/id/LC_MESSAGES/ld.mo",
            "/usr/share/locale/id/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/it/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/it/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/it/LC_MESSAGES/ld.mo",
            "/usr/share/locale/it/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/ja/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/ja/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/ja/LC_MESSAGES/gas.mo",
            "/usr/share/locale/ja/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/ja/LC_MESSAGES/ld.mo",
            "/usr/share/locale/ka/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/ka/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/ka/LC_MESSAGES/ld.mo",
            "/usr/share/locale/ms/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/ms/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/nl/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/nl/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/pt/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/pt/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/ld.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/ro/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/ro/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/ro/LC_MESSAGES/gas.mo",
            "/usr/share/locale/ro/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/ro/LC_MESSAGES/ld.mo",
            "/usr/share/locale/ro/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/ru/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/ru/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/ru/LC_MESSAGES/gas.mo",
            "/usr/share/locale/ru/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/ru/LC_MESSAGES/ld.mo",
            "/usr/share/locale/rw/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/rw/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/rw/LC_MESSAGES/gas.mo",
            "/usr/share/locale/rw/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/sk/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/sr/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/sr/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/sr/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/sr/LC_MESSAGES/ld.mo",
            "/usr/share/locale/sr/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/sv/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/sv/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/sv/LC_MESSAGES/gas.mo",
            "/usr/share/locale/sv/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/sv/LC_MESSAGES/ld.mo",
            "/usr/share/locale/sv/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/tr/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/tr/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/tr/LC_MESSAGES/gas.mo",
            "/usr/share/locale/tr/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/tr/LC_MESSAGES/ld.mo",
            "/usr/share/locale/tr/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/uk/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/uk/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/uk/LC_MESSAGES/gas.mo",
            "/usr/share/locale/uk/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/uk/LC_MESSAGES/ld.mo",
            "/usr/share/locale/uk/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/vi/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/vi/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/vi/LC_MESSAGES/gprof.mo",
            "/usr/share/locale/vi/LC_MESSAGES/ld.mo",
            "/usr/share/locale/vi/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/bfd.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/gas.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/ld.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/opcodes.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/binutils.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/ld.mo",
            "/usr/share/man/man1/addr2line.1.gz",
            "/usr/share/man/man1/ar.1.gz",
            "/usr/share/man/man1/as.1.gz",
            "/usr/share/man/man1/c++filt.1.gz",
            "/usr/share/man/man1/elfedit.1.gz",
            "/usr/share/man/man1/gprof.1.gz",
            "/usr/share/man/man1/ld.bfd.1.gz",
            "/usr/share/man/man1/nm.1.gz",
            "/usr/share/man/man1/objcopy.1.gz",
            "/usr/share/man/man1/objdump.1.gz",
            "/usr/share/man/man1/ranlib.1.gz",
            "/usr/share/man/man1/readelf.1.gz",
            "/usr/share/man/man1/size.1.gz",
            "/usr/share/man/man1/strings.1.gz",
            "/usr/share/man/man1/strip.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "binutils-x86-64-linux-gnu@2.44-3",
          "Name": "binutils-x86-64-linux-gnu",
          "Identifier": {
            "PURL": "pkg:deb/debian/binutils-x86-64-linux-gnu@2.44-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "c7335c6d6cf7a7b0"
          },
          "Version": "2.44",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "binutils",
          "SrcVersion": "2.44",
          "SrcRelease": "3",
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "binutils-common@2.44-3",
            "libbinutils@2.44-3",
            "libc6@2.41-12+deb13u4",
            "libctf-nobfd0@2.44-3",
            "libctf0@2.44-3",
            "libjansson4@2.14-2+b3",
            "libsframe1@2.44-3",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/x86_64-linux-gnu-addr2line",
            "/usr/bin/x86_64-linux-gnu-ar",
            "/usr/bin/x86_64-linux-gnu-as",
            "/usr/bin/x86_64-linux-gnu-c++filt",
            "/usr/bin/x86_64-linux-gnu-elfedit",
            "/usr/bin/x86_64-linux-gnu-gprof",
            "/usr/bin/x86_64-linux-gnu-ld.bfd",
            "/usr/bin/x86_64-linux-gnu-nm",
            "/usr/bin/x86_64-linux-gnu-objcopy",
            "/usr/bin/x86_64-linux-gnu-objdump",
            "/usr/bin/x86_64-linux-gnu-ranlib",
            "/usr/bin/x86_64-linux-gnu-readelf",
            "/usr/bin/x86_64-linux-gnu-size",
            "/usr/bin/x86_64-linux-gnu-strings",
            "/usr/bin/x86_64-linux-gnu-strip",
            "/usr/lib/x86_64-linux-gnu/bfd-plugins/libdep.so",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.x",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xbn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xcer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xd",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdcer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xde",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xder",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdwe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdwer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xr",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xs",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xscer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xse",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xser",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xswe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xswer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xu",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xwe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xwer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.x",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xbn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xcer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xd",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdcer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xde",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xder",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdwe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdwer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xr",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xs",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xscer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xse",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xser",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xswe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xswer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xu",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xwe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xwer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.x",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xbn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xcer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xd",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdcer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xde",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xder",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdwe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdwer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xr",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xs",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xscer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xse",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xser",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xswe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xswer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xu",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xwe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xwer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.x",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xbn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xcer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xd",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdcer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xde",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xder",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdwe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdwer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xr",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xs",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsc",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsce",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xscer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xse",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xser",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xswe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xswer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xu",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xw",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xwe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xwer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.x",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xa",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xbn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xr",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xu",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.x",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xa",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xbn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xe",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xer",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xn",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xr",
            "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xu",
            "/usr/lib/x86_64-linux-gnu/ldscripts/stamp",
            "/usr/share/doc/binutils/test-summary-amd64.gz",
            "/usr/share/lintian/overrides/binutils-x86-64-linux-gnu"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "bsdutils@1:2.41.5-0+deb13u1",
          "Name": "bsdutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "a4b47561565a3535"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/logger",
            "/usr/bin/renice",
            "/usr/bin/script",
            "/usr/bin/scriptlive",
            "/usr/bin/scriptreplay",
            "/usr/bin/wall",
            "/usr/share/bash-completion/completions/logger",
            "/usr/share/bash-completion/completions/renice",
            "/usr/share/bash-completion/completions/script",
            "/usr/share/bash-completion/completions/scriptlive",
            "/usr/share/bash-completion/completions/scriptreplay",
            "/usr/share/bash-completion/completions/wall",
            "/usr/share/doc/bsdutils/NEWS.Debian.gz",
            "/usr/share/doc/bsdutils/changelog.Debian.gz",
            "/usr/share/doc/bsdutils/changelog.gz",
            "/usr/share/doc/bsdutils/copyright",
            "/usr/share/lintian/overrides/bsdutils",
            "/usr/share/man/man1/logger.1.gz",
            "/usr/share/man/man1/renice.1.gz",
            "/usr/share/man/man1/script.1.gz",
            "/usr/share/man/man1/scriptlive.1.gz",
            "/usr/share/man/man1/scriptreplay.1.gz",
            "/usr/share/man/man1/wall.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "busybox-static@1:1.37.0-6+b9",
          "Name": "busybox-static",
          "Identifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "Version": "1.37.0",
          "Release": "6+b9",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "busybox",
          "SrcVersion": "1.37.0",
          "SrcRelease": "6",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Install System Team \u003cdebian-boot@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/bin/busybox",
            "/usr/share/doc/busybox-static/changelog.Debian.amd64.gz",
            "/usr/share/doc/busybox-static/changelog.Debian.gz",
            "/usr/share/doc/busybox-static/copyright",
            "/usr/share/doc/busybox-static/examples/mdev.conf",
            "/usr/share/doc/busybox-static/examples/mdev.conf.change_blockdev.sh",
            "/usr/share/doc/busybox-static/examples/mdev_fat.conf",
            "/usr/share/doc/busybox-static/examples/udhcp/sample.bound",
            "/usr/share/doc/busybox-static/examples/udhcp/sample.deconfig",
            "/usr/share/doc/busybox-static/examples/udhcp/sample.nak",
            "/usr/share/doc/busybox-static/examples/udhcp/sample.renew",
            "/usr/share/doc/busybox-static/examples/udhcp/sample.script",
            "/usr/share/doc/busybox-static/examples/udhcp/simple.script",
            "/usr/share/doc/busybox-static/examples/udhcp/udhcpd.conf",
            "/usr/share/initramfs-tools/conf-hooks.d/busybox",
            "/usr/share/initramfs-tools/hooks/zz-busybox",
            "/usr/share/lintian/overrides/busybox-static",
            "/usr/share/man/man1/busybox.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "bzip2@1.0.8-6",
          "Name": "bzip2",
          "Identifier": {
            "PURL": "pkg:deb/debian/bzip2@1.0.8-6?arch=amd64\u0026distro=debian-13.7",
            "UID": "c34c09357a1cc79a"
          },
          "Version": "1.0.8",
          "Release": "6",
          "Arch": "amd64",
          "SrcName": "bzip2",
          "SrcVersion": "1.0.8",
          "SrcRelease": "6",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-only"
          ],
          "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/bzdiff",
            "/usr/bin/bzexe",
            "/usr/bin/bzgrep",
            "/usr/bin/bzip2",
            "/usr/bin/bzip2recover",
            "/usr/bin/bzmore",
            "/usr/share/doc/bzip2/changelog.Debian.gz",
            "/usr/share/doc/bzip2/changelog.gz",
            "/usr/share/doc/bzip2/copyright",
            "/usr/share/man/man1/bzdiff.1.gz",
            "/usr/share/man/man1/bzexe.1.gz",
            "/usr/share/man/man1/bzgrep.1.gz",
            "/usr/share/man/man1/bzip2.1.gz",
            "/usr/share/man/man1/bzmore.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "ca-certificates@20250419+deb13u1",
          "Name": "ca-certificates",
          "Identifier": {
            "PURL": "pkg:deb/debian/ca-certificates@20250419%2Bdeb13u1?arch=all\u0026distro=debian-13.7",
            "UID": "36d3d495da2f248f"
          },
          "Version": "20250419+deb13u1",
          "Arch": "all",
          "SrcName": "ca-certificates",
          "SrcVersion": "20250419+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "MPL-2.0"
          ],
          "Maintainer": "Julien Cristau \u003cjcristau@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.91",
            "openssl@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/sbin/update-ca-certificates",
            "/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt",
            "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt",
            "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt",
            "/usr/share/ca-certificates/mozilla/ANF_Secure_Server_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt",
            "/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt",
            "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt",
            "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt",
            "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt",
            "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt",
            "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt",
            "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt",
            "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt",
            "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt",
            "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt",
            "/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt",
            "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt",
            "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt",
            "/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt",
            "/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt",
            "/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt",
            "/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Certainly_Root_E1.crt",
            "/usr/share/ca-certificates/mozilla/Certainly_Root_R1.crt",
            "/usr/share/ca-certificates/mozilla/Certigna.crt",
            "/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/Certum_EC-384_CA.crt",
            "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt",
            "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt",
            "/usr/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt",
            "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt",
            "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt",
            "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_2_2023.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_2_2023.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt",
            "/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt",
            "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt",
            "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/FIRMAPROFESIONAL_CA_ROOT-A_WEB.crt",
            "/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt",
            "/usr/share/ca-certificates/mozilla/GLOBALTRUST_2020.crt",
            "/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt",
            "/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt",
            "/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt",
            "/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_E46.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_R46.crt",
            "/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt",
            "/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/HARICA_TLS_ECC_Root_CA_2021.crt",
            "/usr/share/ca-certificates/mozilla/HARICA_TLS_RSA_Root_CA_2021.crt",
            "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt",
            "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt",
            "/usr/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt",
            "/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt",
            "/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt",
            "/usr/share/ca-certificates/mozilla/ISRG_Root_X2.crt",
            "/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt",
            "/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt",
            "/usr/share/ca-certificates/mozilla/Izenpe.com.crt",
            "/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt",
            "/usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt",
            "/usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt",
            "/usr/share/ca-certificates/mozilla/NAVER_Global_Root_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt",
            "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt",
            "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt",
            "/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt",
            "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt",
            "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt",
            "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA12.crt",
            "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA14.crt",
            "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA15.crt",
            "/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt",
            "/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt",
            "/usr/share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt",
            "/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt",
            "/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt",
            "/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt",
            "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt",
            "/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt",
            "/usr/share/ca-certificates/mozilla/TWCA_CYBER_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_ECC_Root_2020.crt",
            "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_RSA_Root_2023.crt",
            "/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt",
            "/usr/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt",
            "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt",
            "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt",
            "/usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/TunTrust_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt",
            "/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt",
            "/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt",
            "/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt",
            "/usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt",
            "/usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt",
            "/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt",
            "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt",
            "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt",
            "/usr/share/ca-certificates/mozilla/vTrus_ECC_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/vTrus_Root_CA.crt",
            "/usr/share/doc/ca-certificates/README.Debian",
            "/usr/share/doc/ca-certificates/changelog.gz",
            "/usr/share/doc/ca-certificates/copyright",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/Makefile",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/README",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/ca-certificates-local.triggers",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/changelog",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/compat",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/control",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/copyright",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/postrm",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/rules",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/source/format",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Local_Root_CA.crt",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Makefile",
            "/usr/share/man/man8/update-ca-certificates.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "coreutils@9.7-3",
          "Name": "coreutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/coreutils@9.7-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "cb4a55f50bda2393"
          },
          "Version": "9.7",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "coreutils",
          "SrcVersion": "9.7",
          "SrcRelease": "3",
          "Licenses": [
            "GPL-3.0-or-later",
            "BSD-4-Clause-UC",
            "GPL-3.0-only",
            "ISC",
            "FSFULLR",
            "GFDL-1.3-no-invariants-only",
            "GFDL-1.3-only"
          ],
          "Maintainer": "Michael Stone \u003cmstone@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/[",
            "/usr/bin/arch",
            "/usr/bin/b2sum",
            "/usr/bin/base32",
            "/usr/bin/base64",
            "/usr/bin/basename",
            "/usr/bin/basenc",
            "/usr/bin/cat",
            "/usr/bin/chcon",
            "/usr/bin/chgrp",
            "/usr/bin/chmod",
            "/usr/bin/chown",
            "/usr/bin/cksum",
            "/usr/bin/comm",
            "/usr/bin/cp",
            "/usr/bin/csplit",
            "/usr/bin/cut",
            "/usr/bin/date",
            "/usr/bin/dd",
            "/usr/bin/df",
            "/usr/bin/dir",
            "/usr/bin/dircolors",
            "/usr/bin/dirname",
            "/usr/bin/du",
            "/usr/bin/echo",
            "/usr/bin/env",
            "/usr/bin/expand",
            "/usr/bin/expr",
            "/usr/bin/factor",
            "/usr/bin/false",
            "/usr/bin/fmt",
            "/usr/bin/fold",
            "/usr/bin/groups",
            "/usr/bin/head",
            "/usr/bin/hostid",
            "/usr/bin/id",
            "/usr/bin/install",
            "/usr/bin/join",
            "/usr/bin/link",
            "/usr/bin/ln",
            "/usr/bin/logname",
            "/usr/bin/ls",
            "/usr/bin/md5sum",
            "/usr/bin/mkdir",
            "/usr/bin/mkfifo",
            "/usr/bin/mknod",
            "/usr/bin/mktemp",
            "/usr/bin/mv",
            "/usr/bin/nice",
            "/usr/bin/nl",
            "/usr/bin/nohup",
            "/usr/bin/nproc",
            "/usr/bin/numfmt",
            "/usr/bin/od",
            "/usr/bin/paste",
            "/usr/bin/pathchk",
            "/usr/bin/pinky",
            "/usr/bin/pr",
            "/usr/bin/printenv",
            "/usr/bin/printf",
            "/usr/bin/ptx",
            "/usr/bin/pwd",
            "/usr/bin/readlink",
            "/usr/bin/realpath",
            "/usr/bin/rm",
            "/usr/bin/rmdir",
            "/usr/bin/runcon",
            "/usr/bin/seq",
            "/usr/bin/sha1sum",
            "/usr/bin/sha224sum",
            "/usr/bin/sha256sum",
            "/usr/bin/sha384sum",
            "/usr/bin/sha512sum",
            "/usr/bin/shred",
            "/usr/bin/shuf",
            "/usr/bin/sleep",
            "/usr/bin/sort",
            "/usr/bin/split",
            "/usr/bin/stat",
            "/usr/bin/stdbuf",
            "/usr/bin/stty",
            "/usr/bin/sum",
            "/usr/bin/sync",
            "/usr/bin/tac",
            "/usr/bin/tail",
            "/usr/bin/tee",
            "/usr/bin/test",
            "/usr/bin/timeout",
            "/usr/bin/touch",
            "/usr/bin/tr",
            "/usr/bin/true",
            "/usr/bin/truncate",
            "/usr/bin/tsort",
            "/usr/bin/tty",
            "/usr/bin/uname",
            "/usr/bin/unexpand",
            "/usr/bin/uniq",
            "/usr/bin/unlink",
            "/usr/bin/users",
            "/usr/bin/vdir",
            "/usr/bin/wc",
            "/usr/bin/who",
            "/usr/bin/whoami",
            "/usr/bin/yes",
            "/usr/libexec/coreutils/libstdbuf.so",
            "/usr/sbin/chroot",
            "/usr/share/doc/coreutils/AUTHORS",
            "/usr/share/doc/coreutils/NEWS.gz",
            "/usr/share/doc/coreutils/README.Debian",
            "/usr/share/doc/coreutils/README.gz",
            "/usr/share/doc/coreutils/THANKS.gz",
            "/usr/share/doc/coreutils/TODO.gz",
            "/usr/share/doc/coreutils/changelog.Debian.gz",
            "/usr/share/doc/coreutils/changelog.gz",
            "/usr/share/doc/coreutils/copyright",
            "/usr/share/info/coreutils.info.gz",
            "/usr/share/lintian/overrides/coreutils",
            "/usr/share/locale/af/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/be/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/bg/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ca/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/cs/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/da/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/de/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/el/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/eo/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/es/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/et/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/eu/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/fi/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/fr/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ga/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/gl/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/hr/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/hu/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ia/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/id/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/it/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ja/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ka/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/kk/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ko/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/lg/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/lt/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ms/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/nb/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/nl/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/pl/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/pt/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ro/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ru/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/sk/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/sl/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/sr/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/sv/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ta/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/tr/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/uk/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/vi/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/coreutils.mo",
            "/usr/share/man/man1/arch.1.gz",
            "/usr/share/man/man1/b2sum.1.gz",
            "/usr/share/man/man1/base32.1.gz",
            "/usr/share/man/man1/base64.1.gz",
            "/usr/share/man/man1/basename.1.gz",
            "/usr/share/man/man1/basenc.1.gz",
            "/usr/share/man/man1/cat.1.gz",
            "/usr/share/man/man1/chcon.1.gz",
            "/usr/share/man/man1/chgrp.1.gz",
            "/usr/share/man/man1/chmod.1.gz",
            "/usr/share/man/man1/chown.1.gz",
            "/usr/share/man/man1/cksum.1.gz",
            "/usr/share/man/man1/comm.1.gz",
            "/usr/share/man/man1/cp.1.gz",
            "/usr/share/man/man1/csplit.1.gz",
            "/usr/share/man/man1/cut.1.gz",
            "/usr/share/man/man1/date.1.gz",
            "/usr/share/man/man1/dd.1.gz",
            "/usr/share/man/man1/df.1.gz",
            "/usr/share/man/man1/dir.1.gz",
            "/usr/share/man/man1/dircolors.1.gz",
            "/usr/share/man/man1/dirname.1.gz",
            "/usr/share/man/man1/du.1.gz",
            "/usr/share/man/man1/echo.1.gz",
            "/usr/share/man/man1/env.1.gz",
            "/usr/share/man/man1/expand.1.gz",
            "/usr/share/man/man1/expr.1.gz",
            "/usr/share/man/man1/factor.1.gz",
            "/usr/share/man/man1/false.1.gz",
            "/usr/share/man/man1/fmt.1.gz",
            "/usr/share/man/man1/fold.1.gz",
            "/usr/share/man/man1/groups.1.gz",
            "/usr/share/man/man1/head.1.gz",
            "/usr/share/man/man1/hostid.1.gz",
            "/usr/share/man/man1/id.1.gz",
            "/usr/share/man/man1/install.1.gz",
            "/usr/share/man/man1/join.1.gz",
            "/usr/share/man/man1/link.1.gz",
            "/usr/share/man/man1/ln.1.gz",
            "/usr/share/man/man1/logname.1.gz",
            "/usr/share/man/man1/ls.1.gz",
            "/usr/share/man/man1/md5sum.1.gz",
            "/usr/share/man/man1/mkdir.1.gz",
            "/usr/share/man/man1/mkfifo.1.gz",
            "/usr/share/man/man1/mknod.1.gz",
            "/usr/share/man/man1/mktemp.1.gz",
            "/usr/share/man/man1/mv.1.gz",
            "/usr/share/man/man1/nice.1.gz",
            "/usr/share/man/man1/nl.1.gz",
            "/usr/share/man/man1/nohup.1.gz",
            "/usr/share/man/man1/nproc.1.gz",
            "/usr/share/man/man1/numfmt.1.gz",
            "/usr/share/man/man1/od.1.gz",
            "/usr/share/man/man1/paste.1.gz",
            "/usr/share/man/man1/pathchk.1.gz",
            "/usr/share/man/man1/pinky.1.gz",
            "/usr/share/man/man1/pr.1.gz",
            "/usr/share/man/man1/printenv.1.gz",
            "/usr/share/man/man1/printf.1.gz",
            "/usr/share/man/man1/ptx.1.gz",
            "/usr/share/man/man1/pwd.1.gz",
            "/usr/share/man/man1/readlink.1.gz",
            "/usr/share/man/man1/realpath.1.gz",
            "/usr/share/man/man1/rm.1.gz",
            "/usr/share/man/man1/rmdir.1.gz",
            "/usr/share/man/man1/runcon.1.gz",
            "/usr/share/man/man1/seq.1.gz",
            "/usr/share/man/man1/sha1sum.1.gz",
            "/usr/share/man/man1/sha224sum.1.gz",
            "/usr/share/man/man1/sha256sum.1.gz",
            "/usr/share/man/man1/sha384sum.1.gz",
            "/usr/share/man/man1/sha512sum.1.gz",
            "/usr/share/man/man1/shred.1.gz",
            "/usr/share/man/man1/shuf.1.gz",
            "/usr/share/man/man1/sleep.1.gz",
            "/usr/share/man/man1/sort.1.gz",
            "/usr/share/man/man1/split.1.gz",
            "/usr/share/man/man1/stat.1.gz",
            "/usr/share/man/man1/stdbuf.1.gz",
            "/usr/share/man/man1/stty.1.gz",
            "/usr/share/man/man1/sum.1.gz",
            "/usr/share/man/man1/sync.1.gz",
            "/usr/share/man/man1/tac.1.gz",
            "/usr/share/man/man1/tail.1.gz",
            "/usr/share/man/man1/tee.1.gz",
            "/usr/share/man/man1/test.1.gz",
            "/usr/share/man/man1/timeout.1.gz",
            "/usr/share/man/man1/touch.1.gz",
            "/usr/share/man/man1/tr.1.gz",
            "/usr/share/man/man1/true.1.gz",
            "/usr/share/man/man1/truncate.1.gz",
            "/usr/share/man/man1/tsort.1.gz",
            "/usr/share/man/man1/tty.1.gz",
            "/usr/share/man/man1/uname.1.gz",
            "/usr/share/man/man1/unexpand.1.gz",
            "/usr/share/man/man1/uniq.1.gz",
            "/usr/share/man/man1/unlink.1.gz",
            "/usr/share/man/man1/users.1.gz",
            "/usr/share/man/man1/vdir.1.gz",
            "/usr/share/man/man1/wc.1.gz",
            "/usr/share/man/man1/who.1.gz",
            "/usr/share/man/man1/whoami.1.gz",
            "/usr/share/man/man1/yes.1.gz",
            "/usr/share/man/man8/chroot.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "cpp@4:14.2.0-1",
          "Name": "cpp",
          "Identifier": {
            "PURL": "pkg:deb/debian/cpp@14.2.0-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=4",
            "UID": "83155cdc2245e2ef"
          },
          "Version": "14.2.0",
          "Release": "1",
          "Epoch": 4,
          "Arch": "amd64",
          "SrcName": "gcc-defaults",
          "SrcVersion": "1.220",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "cpp-14@14.2.0-19",
            "cpp-x86-64-linux-gnu@4:14.2.0-1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/lintian/overrides/cpp"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "cpp-14@14.2.0-19",
          "Name": "cpp-14",
          "Identifier": {
            "PURL": "pkg:deb/debian/cpp-14@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "71f769fe939fb85"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "cpp-14-x86-64-linux-gnu@14.2.0-19",
            "gcc-14-base@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/lintian/overrides/cpp-14"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "cpp-14-x86-64-linux-gnu@14.2.0-19",
          "Name": "cpp-14-x86-64-linux-gnu",
          "Identifier": {
            "PURL": "pkg:deb/debian/cpp-14-x86-64-linux-gnu@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "7bf4c5af6f9639b9"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgmp10@2:6.3.0+dfsg-3",
            "libisl23@0.27-1",
            "libmpc3@1.3.1-1+b3",
            "libmpfr6@4.2.2-1",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/x86_64-linux-gnu-cpp-14",
            "/usr/libexec/gcc/x86_64-linux-gnu/14/cc1",
            "/usr/share/lintian/overrides/cpp-14-x86-64-linux-gnu"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "cpp-x86-64-linux-gnu@4:14.2.0-1",
          "Name": "cpp-x86-64-linux-gnu",
          "Identifier": {
            "PURL": "pkg:deb/debian/cpp-x86-64-linux-gnu@14.2.0-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=4",
            "UID": "fa78a48a9aee5135"
          },
          "Version": "14.2.0",
          "Release": "1",
          "Epoch": 4,
          "Arch": "amd64",
          "SrcName": "gcc-defaults",
          "SrcVersion": "1.220",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "cpp-14-x86-64-linux-gnu@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/doc/cpp-x86-64-linux-gnu/changelog.gz",
            "/usr/share/doc/cpp-x86-64-linux-gnu/copyright",
            "/usr/share/lintian/overrides/cpp-x86-64-linux-gnu"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "curl@8.14.1-2+deb13u7",
          "Name": "curl",
          "Identifier": {
            "PURL": "pkg:deb/debian/curl@8.14.1-2%2Bdeb13u7?arch=amd64\u0026distro=debian-13.7",
            "UID": "8878109a15b2afb0"
          },
          "Version": "8.14.1",
          "Release": "2+deb13u7",
          "Arch": "amd64",
          "SrcName": "curl",
          "SrcVersion": "8.14.1",
          "SrcRelease": "2+deb13u7",
          "Licenses": [
            "curl",
            "OLDAP-2.8",
            "ISC",
            "GPL-2+ with Autoconf-data exception",
            "GPL-3+ with Autoconf-data exception",
            "GPL-2+ with Libtool exception",
            "BSD-3-Clause",
            "BSD-4-Clause-UC",
            "FSFULLR",
            "X11",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Curl Maintainers \u003cteam+curl@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libcurl4t64@8.14.1-2+deb13u7",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/curl",
            "/usr/bin/wcurl",
            "/usr/share/doc/curl/NEWS.Debian.gz",
            "/usr/share/doc/curl/README.Debian",
            "/usr/share/doc/curl/changelog.Debian.gz",
            "/usr/share/doc/curl/changelog.gz",
            "/usr/share/doc/curl/copyright",
            "/usr/share/fish/vendor_completions.d/curl.fish",
            "/usr/share/man/man1/curl.1.gz",
            "/usr/share/man/man1/wcurl.1.gz",
            "/usr/share/zsh/vendor-completions/_curl"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "dash@0.5.12-12",
          "Name": "dash",
          "Identifier": {
            "PURL": "pkg:deb/debian/dash@0.5.12-12?arch=amd64\u0026distro=debian-13.7",
            "UID": "4990b2098a2a3724"
          },
          "Version": "0.5.12",
          "Release": "12",
          "Arch": "amd64",
          "SrcName": "dash",
          "SrcVersion": "0.5.12",
          "SrcRelease": "12",
          "Licenses": [
            "BSD-3-Clause",
            "public-domain",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debianutils@5.23.2"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/dash",
            "/usr/share/debianutils/shells.d/dash",
            "/usr/share/doc/dash/README.Debian.diet",
            "/usr/share/doc/dash/README.source",
            "/usr/share/doc/dash/changelog.Debian.gz",
            "/usr/share/doc/dash/changelog.gz",
            "/usr/share/doc/dash/copyright",
            "/usr/share/lintian/overrides/dash",
            "/usr/share/man/man1/dash.1.gz",
            "/usr/share/menu/dash"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "debconf@1.5.91",
          "Name": "debconf",
          "Identifier": {
            "PURL": "pkg:deb/debian/debconf@1.5.91?arch=all\u0026distro=debian-13.7",
            "UID": "f7c8b7ba83ed5cfe"
          },
          "Version": "1.5.91",
          "Arch": "all",
          "SrcName": "debconf",
          "SrcVersion": "1.5.91",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Maintainer": "Debconf Developers \u003cdebconf-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/debconf",
            "/usr/bin/debconf-apt-progress",
            "/usr/bin/debconf-communicate",
            "/usr/bin/debconf-copydb",
            "/usr/bin/debconf-escape",
            "/usr/bin/debconf-set-selections",
            "/usr/bin/debconf-show",
            "/usr/sbin/dpkg-preconfigure",
            "/usr/sbin/dpkg-reconfigure",
            "/usr/share/bash-completion/completions/debconf",
            "/usr/share/debconf/confmodule",
            "/usr/share/debconf/confmodule.sh",
            "/usr/share/debconf/debconf.conf",
            "/usr/share/debconf/fix_db.pl",
            "/usr/share/debconf/frontend",
            "/usr/share/doc/debconf/README.Debian",
            "/usr/share/doc/debconf/changelog.gz",
            "/usr/share/doc/debconf/copyright",
            "/usr/share/lintian/overrides/debconf",
            "/usr/share/man/man1/debconf-apt-progress.1.gz",
            "/usr/share/man/man1/debconf-communicate.1.gz",
            "/usr/share/man/man1/debconf-copydb.1.gz",
            "/usr/share/man/man1/debconf-escape.1.gz",
            "/usr/share/man/man1/debconf-set-selections.1.gz",
            "/usr/share/man/man1/debconf-show.1.gz",
            "/usr/share/man/man1/debconf.1.gz",
            "/usr/share/man/man8/dpkg-preconfigure.8.gz",
            "/usr/share/man/man8/dpkg-reconfigure.8.gz",
            "/usr/share/perl5/Debconf/AutoSelect.pm",
            "/usr/share/perl5/Debconf/Base.pm",
            "/usr/share/perl5/Debconf/Client/ConfModule.pm",
            "/usr/share/perl5/Debconf/ConfModule.pm",
            "/usr/share/perl5/Debconf/Config.pm",
            "/usr/share/perl5/Debconf/Db.pm",
            "/usr/share/perl5/Debconf/DbDriver.pm",
            "/usr/share/perl5/Debconf/DbDriver/Backup.pm",
            "/usr/share/perl5/Debconf/DbDriver/Cache.pm",
            "/usr/share/perl5/Debconf/DbDriver/Copy.pm",
            "/usr/share/perl5/Debconf/DbDriver/Debug.pm",
            "/usr/share/perl5/Debconf/DbDriver/DirTree.pm",
            "/usr/share/perl5/Debconf/DbDriver/Directory.pm",
            "/usr/share/perl5/Debconf/DbDriver/File.pm",
            "/usr/share/perl5/Debconf/DbDriver/LDAP.pm",
            "/usr/share/perl5/Debconf/DbDriver/PackageDir.pm",
            "/usr/share/perl5/Debconf/DbDriver/Pipe.pm",
            "/usr/share/perl5/Debconf/DbDriver/Stack.pm",
            "/usr/share/perl5/Debconf/Element.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Error.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Note.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Password.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Select.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/String.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Text.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Error.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Note.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Password.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Select.pm",
            "/usr/share/perl5/Debconf/Element/Editor/String.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Text.pm",
            "/usr/share/perl5/Debconf/Element/Gnome.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Error.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Note.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Password.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Select.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/String.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Text.pm",
            "/usr/share/perl5/Debconf/Element/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Error.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Note.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Password.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Select.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/String.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Text.pm",
            "/usr/share/perl5/Debconf/Element/Select.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Error.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Note.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Password.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Select.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/String.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Text.pm",
            "/usr/share/perl5/Debconf/Element/Web/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Web/Error.pm",
            "/usr/share/perl5/Debconf/Element/Web/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Web/Note.pm",
            "/usr/share/perl5/Debconf/Element/Web/Password.pm",
            "/usr/share/perl5/Debconf/Element/Web/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Web/Select.pm",
            "/usr/share/perl5/Debconf/Element/Web/String.pm",
            "/usr/share/perl5/Debconf/Element/Web/Text.pm",
            "/usr/share/perl5/Debconf/Encoding.pm",
            "/usr/share/perl5/Debconf/Format.pm",
            "/usr/share/perl5/Debconf/Format/822.pm",
            "/usr/share/perl5/Debconf/FrontEnd.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Dialog.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Editor.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Gnome.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Kde.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Noninteractive.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Passthrough.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Readline.pm",
            "/usr/share/perl5/Debconf/FrontEnd/ScreenSize.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Teletype.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Text.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Web.pm",
            "/usr/share/perl5/Debconf/Gettext.pm",
            "/usr/share/perl5/Debconf/Iterator.pm",
            "/usr/share/perl5/Debconf/Log.pm",
            "/usr/share/perl5/Debconf/Path.pm",
            "/usr/share/perl5/Debconf/Priority.pm",
            "/usr/share/perl5/Debconf/Question.pm",
            "/usr/share/perl5/Debconf/Template.pm",
            "/usr/share/perl5/Debconf/Template/Transient.pm",
            "/usr/share/perl5/Debconf/TmpFile.pm",
            "/usr/share/perl5/Debian/DebConf/Client/ConfModule.pm",
            "/usr/share/pixmaps/debian-logo.png"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "debian-archive-keyring@2025.1",
          "Name": "debian-archive-keyring",
          "Identifier": {
            "PURL": "pkg:deb/debian/debian-archive-keyring@2025.1?arch=all\u0026distro=debian-13.7",
            "UID": "a22d861380b1187c"
          },
          "Version": "2025.1",
          "Arch": "all",
          "SrcName": "debian-archive-keyring",
          "SrcVersion": "2025.1",
          "Licenses": [
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Debian Release Team \u003cpackages@release.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/debian-archive-keyring/NEWS.Debian.gz",
            "/usr/share/doc/debian-archive-keyring/README",
            "/usr/share/doc/debian-archive-keyring/changelog.gz",
            "/usr/share/doc/debian-archive-keyring/copyright",
            "/usr/share/keyrings/debian-archive-bookworm-automatic.pgp",
            "/usr/share/keyrings/debian-archive-bookworm-security-automatic.pgp",
            "/usr/share/keyrings/debian-archive-bookworm-stable.pgp",
            "/usr/share/keyrings/debian-archive-bullseye-automatic.pgp",
            "/usr/share/keyrings/debian-archive-bullseye-security-automatic.pgp",
            "/usr/share/keyrings/debian-archive-bullseye-stable.pgp",
            "/usr/share/keyrings/debian-archive-keyring.pgp",
            "/usr/share/keyrings/debian-archive-removed-keys.pgp",
            "/usr/share/keyrings/debian-archive-trixie-automatic.pgp",
            "/usr/share/keyrings/debian-archive-trixie-security-automatic.pgp",
            "/usr/share/keyrings/debian-archive-trixie-stable.pgp"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "debianutils@5.23.2",
          "Name": "debianutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/debianutils@5.23.2?arch=amd64\u0026distro=debian-13.7",
            "UID": "3c5d0b66afafddbb"
          },
          "Version": "5.23.2",
          "Arch": "amd64",
          "SrcName": "debianutils",
          "SrcVersion": "5.23.2",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "public-domain",
            "SMAIL-GPL"
          ],
          "Maintainer": "Ileana Dumitrescu \u003cileanadumitrescu95@gmail.com\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/ischroot",
            "/usr/bin/run-parts",
            "/usr/bin/savelog",
            "/usr/bin/tempfile",
            "/usr/bin/which.debianutils",
            "/usr/sbin/add-shell",
            "/usr/sbin/installkernel",
            "/usr/sbin/remove-shell",
            "/usr/sbin/update-shells",
            "/usr/share/debianutils/shells",
            "/usr/share/doc/debianutils/README.shells",
            "/usr/share/doc/debianutils/changelog.gz",
            "/usr/share/doc/debianutils/copyright",
            "/usr/share/man/de/man1/which.debianutils.1.gz",
            "/usr/share/man/de/man8/add-shell.8.gz",
            "/usr/share/man/de/man8/installkernel.8.gz",
            "/usr/share/man/de/man8/remove-shell.8.gz",
            "/usr/share/man/de/man8/run-parts.8.gz",
            "/usr/share/man/de/man8/savelog.8.gz",
            "/usr/share/man/es/man1/which.debianutils.1.gz",
            "/usr/share/man/es/man8/add-shell.8.gz",
            "/usr/share/man/es/man8/installkernel.8.gz",
            "/usr/share/man/es/man8/remove-shell.8.gz",
            "/usr/share/man/es/man8/run-parts.8.gz",
            "/usr/share/man/es/man8/savelog.8.gz",
            "/usr/share/man/fr/man1/which.debianutils.1.gz",
            "/usr/share/man/fr/man8/add-shell.8.gz",
            "/usr/share/man/fr/man8/installkernel.8.gz",
            "/usr/share/man/fr/man8/remove-shell.8.gz",
            "/usr/share/man/fr/man8/run-parts.8.gz",
            "/usr/share/man/fr/man8/savelog.8.gz",
            "/usr/share/man/it/man1/which.debianutils.1.gz",
            "/usr/share/man/it/man8/add-shell.8.gz",
            "/usr/share/man/it/man8/installkernel.8.gz",
            "/usr/share/man/it/man8/remove-shell.8.gz",
            "/usr/share/man/it/man8/run-parts.8.gz",
            "/usr/share/man/it/man8/savelog.8.gz",
            "/usr/share/man/ja/man1/which.debianutils.1.gz",
            "/usr/share/man/ja/man8/add-shell.8.gz",
            "/usr/share/man/ja/man8/installkernel.8.gz",
            "/usr/share/man/ja/man8/remove-shell.8.gz",
            "/usr/share/man/ja/man8/run-parts.8.gz",
            "/usr/share/man/ja/man8/savelog.8.gz",
            "/usr/share/man/man1/ischroot.1.gz",
            "/usr/share/man/man1/tempfile.1.gz",
            "/usr/share/man/man1/which.debianutils.1.gz",
            "/usr/share/man/man8/add-shell.8.gz",
            "/usr/share/man/man8/installkernel.8.gz",
            "/usr/share/man/man8/remove-shell.8.gz",
            "/usr/share/man/man8/run-parts.8.gz",
            "/usr/share/man/man8/savelog.8.gz",
            "/usr/share/man/man8/update-shells.8.gz",
            "/usr/share/man/pl/man1/which.debianutils.1.gz",
            "/usr/share/man/pl/man8/add-shell.8.gz",
            "/usr/share/man/pl/man8/installkernel.8.gz",
            "/usr/share/man/pl/man8/remove-shell.8.gz",
            "/usr/share/man/pl/man8/run-parts.8.gz",
            "/usr/share/man/pl/man8/savelog.8.gz",
            "/usr/share/man/pt/man1/which.debianutils.1.gz",
            "/usr/share/man/pt/man8/add-shell.8.gz",
            "/usr/share/man/pt/man8/installkernel.8.gz",
            "/usr/share/man/pt/man8/remove-shell.8.gz",
            "/usr/share/man/pt/man8/run-parts.8.gz",
            "/usr/share/man/pt/man8/savelog.8.gz",
            "/usr/share/man/sl/man1/which.debianutils.1.gz",
            "/usr/share/man/sl/man8/add-shell.8.gz",
            "/usr/share/man/sl/man8/installkernel.8.gz",
            "/usr/share/man/sl/man8/remove-shell.8.gz",
            "/usr/share/man/sl/man8/run-parts.8.gz",
            "/usr/share/man/sl/man8/savelog.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "diffutils@1:3.10-4",
          "Name": "diffutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/diffutils@3.10-4?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "852f693a78aaa149"
          },
          "Version": "3.10",
          "Release": "4",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "diffutils",
          "SrcVersion": "3.10",
          "SrcRelease": "4",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-3.0-or-later",
            "FSFULLR",
            "LGPL-2.1-or-later",
            "GPL-3.0-with-autoconf-exception+",
            "GPL-3.0-only",
            "GPL-3+ with texinfo exception",
            "LGPL-2.0-or-later",
            "GPL-2.0-or-later",
            "X11",
            "FSFAP",
            "GFDL-1.3-no-invariants-only",
            "LGPL-3.0-or-later",
            "LGPL-3.0-only",
            "public-domain",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "GPL-2.0-only",
            "GFDL-1.3-only"
          ],
          "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/cmp",
            "/usr/bin/diff",
            "/usr/bin/diff3",
            "/usr/bin/sdiff",
            "/usr/share/doc/diffutils/NEWS.gz",
            "/usr/share/doc/diffutils/changelog.Debian.gz",
            "/usr/share/doc/diffutils/changelog.gz",
            "/usr/share/doc/diffutils/copyright",
            "/usr/share/info/diffutils.info.gz",
            "/usr/share/locale/bg/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ca/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/cs/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/da/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/de/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/el/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/eo/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/es/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/fi/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/fr/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ga/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/gl/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/he/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/hr/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/hu/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/id/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/it/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ja/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ka/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ko/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/lv/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ms/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/nb/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/nl/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/pl/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/pt/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ro/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ru/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/sr/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/sv/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/tr/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/uk/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/vi/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo",
            "/usr/share/man/man1/cmp.1.gz",
            "/usr/share/man/man1/diff.1.gz",
            "/usr/share/man/man1/diff3.1.gz",
            "/usr/share/man/man1/sdiff.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "dpkg@1.22.22",
          "Name": "dpkg",
          "Identifier": {
            "PURL": "pkg:deb/debian/dpkg@1.22.22?arch=amd64\u0026distro=debian-13.7",
            "UID": "7b97f27e3bec0417"
          },
          "Version": "1.22.22",
          "Arch": "amd64",
          "SrcName": "dpkg",
          "SrcVersion": "1.22.22",
          "Licenses": [
            "GPL-2.0-or-later",
            "public-domain-s-s-d",
            "GPL-2.0-only"
          ],
          "Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "tar@1.35+dfsg-3.1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/dpkg",
            "/usr/bin/dpkg-deb",
            "/usr/bin/dpkg-divert",
            "/usr/bin/dpkg-maintscript-helper",
            "/usr/bin/dpkg-query",
            "/usr/bin/dpkg-realpath",
            "/usr/bin/dpkg-split",
            "/usr/bin/dpkg-statoverride",
            "/usr/bin/dpkg-trigger",
            "/usr/bin/update-alternatives",
            "/usr/lib/systemd/system/dpkg-db-backup.service",
            "/usr/lib/systemd/system/dpkg-db-backup.timer",
            "/usr/libexec/dpkg/dpkg-db-backup",
            "/usr/libexec/dpkg/dpkg-db-keeper",
            "/usr/sbin/start-stop-daemon",
            "/usr/share/doc/dpkg/AUTHORS",
            "/usr/share/doc/dpkg/README.api",
            "/usr/share/doc/dpkg/README.bug-usertags.gz",
            "/usr/share/doc/dpkg/README.feature-removal-schedule.gz",
            "/usr/share/doc/dpkg/THANKS.gz",
            "/usr/share/doc/dpkg/changelog.gz",
            "/usr/share/doc/dpkg/copyright",
            "/usr/share/dpkg/abitable",
            "/usr/share/dpkg/cputable",
            "/usr/share/dpkg/ostable",
            "/usr/share/dpkg/sh/dpkg-error.sh",
            "/usr/share/dpkg/tupletable",
            "/usr/share/lintian/overrides/dpkg",
            "/usr/share/lintian/profiles/dpkg/main.profile",
            "/usr/share/locale/ast/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/bs/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ca/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/cs/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/da/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/de/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/dz/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/el/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/eo/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/es/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/et/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/eu/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/fr/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/gl/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/hu/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/id/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/it/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ja/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/km/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ko/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ku/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/lt/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/mr/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/nb/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ne/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/nl/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/nn/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/oc/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/pa/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/pl/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/pt/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ro/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ru/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/sk/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/sv/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/th/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/tl/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/tr/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/vi/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/dpkg.mo",
            "/usr/share/man/de/man1/dpkg-deb.1.gz",
            "/usr/share/man/de/man1/dpkg-divert.1.gz",
            "/usr/share/man/de/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/de/man1/dpkg-query.1.gz",
            "/usr/share/man/de/man1/dpkg-realpath.1.gz",
            "/usr/share/man/de/man1/dpkg-split.1.gz",
            "/usr/share/man/de/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/de/man1/dpkg-trigger.1.gz",
            "/usr/share/man/de/man1/dpkg.1.gz",
            "/usr/share/man/de/man1/update-alternatives.1.gz",
            "/usr/share/man/de/man5/dpkg.cfg.5.gz",
            "/usr/share/man/de/man8/start-stop-daemon.8.gz",
            "/usr/share/man/es/man5/dpkg.cfg.5.gz",
            "/usr/share/man/fr/man1/dpkg-divert.1.gz",
            "/usr/share/man/fr/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/fr/man1/dpkg-query.1.gz",
            "/usr/share/man/fr/man1/dpkg-realpath.1.gz",
            "/usr/share/man/fr/man1/dpkg-split.1.gz",
            "/usr/share/man/fr/man1/dpkg-trigger.1.gz",
            "/usr/share/man/fr/man1/update-alternatives.1.gz",
            "/usr/share/man/fr/man5/dpkg.cfg.5.gz",
            "/usr/share/man/fr/man8/start-stop-daemon.8.gz",
            "/usr/share/man/it/man5/dpkg.cfg.5.gz",
            "/usr/share/man/ja/man5/dpkg.cfg.5.gz",
            "/usr/share/man/man1/dpkg-deb.1.gz",
            "/usr/share/man/man1/dpkg-divert.1.gz",
            "/usr/share/man/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/man1/dpkg-query.1.gz",
            "/usr/share/man/man1/dpkg-realpath.1.gz",
            "/usr/share/man/man1/dpkg-split.1.gz",
            "/usr/share/man/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/man1/dpkg-trigger.1.gz",
            "/usr/share/man/man1/dpkg.1.gz",
            "/usr/share/man/man1/update-alternatives.1.gz",
            "/usr/share/man/man5/dpkg.cfg.5.gz",
            "/usr/share/man/man8/start-stop-daemon.8.gz",
            "/usr/share/man/nl/man1/dpkg-deb.1.gz",
            "/usr/share/man/nl/man1/dpkg-divert.1.gz",
            "/usr/share/man/nl/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/nl/man1/dpkg-query.1.gz",
            "/usr/share/man/nl/man1/dpkg-realpath.1.gz",
            "/usr/share/man/nl/man1/dpkg-split.1.gz",
            "/usr/share/man/nl/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/nl/man1/dpkg-trigger.1.gz",
            "/usr/share/man/nl/man1/dpkg.1.gz",
            "/usr/share/man/nl/man1/update-alternatives.1.gz",
            "/usr/share/man/nl/man5/dpkg.cfg.5.gz",
            "/usr/share/man/nl/man8/start-stop-daemon.8.gz",
            "/usr/share/man/pl/man5/dpkg.cfg.5.gz",
            "/usr/share/man/pt/man1/dpkg-deb.1.gz",
            "/usr/share/man/pt/man1/dpkg-divert.1.gz",
            "/usr/share/man/pt/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/pt/man1/dpkg-query.1.gz",
            "/usr/share/man/pt/man1/dpkg-realpath.1.gz",
            "/usr/share/man/pt/man1/dpkg-split.1.gz",
            "/usr/share/man/pt/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/pt/man1/dpkg-trigger.1.gz",
            "/usr/share/man/pt/man1/dpkg.1.gz",
            "/usr/share/man/pt/man1/update-alternatives.1.gz",
            "/usr/share/man/pt/man5/dpkg.cfg.5.gz",
            "/usr/share/man/pt/man8/start-stop-daemon.8.gz",
            "/usr/share/man/sv/man1/dpkg-deb.1.gz",
            "/usr/share/man/sv/man1/dpkg-divert.1.gz",
            "/usr/share/man/sv/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/sv/man1/dpkg-query.1.gz",
            "/usr/share/man/sv/man1/dpkg-realpath.1.gz",
            "/usr/share/man/sv/man1/dpkg-split.1.gz",
            "/usr/share/man/sv/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/sv/man1/dpkg-trigger.1.gz",
            "/usr/share/man/sv/man1/dpkg.1.gz",
            "/usr/share/man/sv/man1/update-alternatives.1.gz",
            "/usr/share/man/sv/man5/dpkg.cfg.5.gz",
            "/usr/share/man/sv/man8/start-stop-daemon.8.gz",
            "/usr/share/polkit-1/actions/org.dpkg.pkexec.update-alternatives.policy"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "dpkg-dev@1.22.22",
          "Name": "dpkg-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/dpkg-dev@1.22.22?arch=all\u0026distro=debian-13.7",
            "UID": "dfdf31f58f62a49e"
          },
          "Version": "1.22.22",
          "Arch": "all",
          "SrcName": "dpkg",
          "SrcVersion": "1.22.22",
          "Licenses": [
            "GPL-2.0-or-later",
            "public-domain-s-s-d",
            "GPL-2.0-only"
          ],
          "Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "binutils@2.44-3",
            "bzip2@1.0.8-6",
            "libdpkg-perl@1.22.22",
            "make@4.4.1-2",
            "patch@2.8-2",
            "tar@1.35+dfsg-3.1",
            "xz-utils@5.8.1-1+deb13u2"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/dpkg-architecture",
            "/usr/bin/dpkg-buildapi",
            "/usr/bin/dpkg-buildflags",
            "/usr/bin/dpkg-buildpackage",
            "/usr/bin/dpkg-buildtree",
            "/usr/bin/dpkg-checkbuilddeps",
            "/usr/bin/dpkg-distaddfile",
            "/usr/bin/dpkg-genbuildinfo",
            "/usr/bin/dpkg-genchanges",
            "/usr/bin/dpkg-gencontrol",
            "/usr/bin/dpkg-gensymbols",
            "/usr/bin/dpkg-mergechangelogs",
            "/usr/bin/dpkg-name",
            "/usr/bin/dpkg-parsechangelog",
            "/usr/bin/dpkg-scanpackages",
            "/usr/bin/dpkg-scansources",
            "/usr/bin/dpkg-shlibdeps",
            "/usr/bin/dpkg-source",
            "/usr/bin/dpkg-vendor",
            "/usr/share/doc/dpkg-dev/NEWS.Debian.gz",
            "/usr/share/doc/dpkg-dev/changelog.gz",
            "/usr/share/doc/dpkg-dev/copyright",
            "/usr/share/doc/dpkg/spec/build-driver.txt",
            "/usr/share/doc/dpkg/spec/frontend-api.txt",
            "/usr/share/doc/dpkg/spec/protected-field.txt",
            "/usr/share/doc/dpkg/spec/rootless-builds.txt",
            "/usr/share/doc/dpkg/spec/triggers.txt",
            "/usr/share/dpkg/architecture.mk",
            "/usr/share/dpkg/buildapi.mk",
            "/usr/share/dpkg/buildflags.mk",
            "/usr/share/dpkg/buildopts.mk",
            "/usr/share/dpkg/buildtools.mk",
            "/usr/share/dpkg/default.mk",
            "/usr/share/dpkg/pkg-info.mk",
            "/usr/share/dpkg/vendor.mk",
            "/usr/share/man/de/man1/dpkg-architecture.1.gz",
            "/usr/share/man/de/man1/dpkg-buildapi.1.gz",
            "/usr/share/man/de/man1/dpkg-buildflags.1.gz",
            "/usr/share/man/de/man1/dpkg-buildpackage.1.gz",
            "/usr/share/man/de/man1/dpkg-buildtree.1.gz",
            "/usr/share/man/de/man1/dpkg-checkbuilddeps.1.gz",
            "/usr/share/man/de/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/de/man1/dpkg-genbuildinfo.1.gz",
            "/usr/share/man/de/man1/dpkg-genchanges.1.gz",
            "/usr/share/man/de/man1/dpkg-gencontrol.1.gz",
            "/usr/share/man/de/man1/dpkg-gensymbols.1.gz",
            "/usr/share/man/de/man1/dpkg-mergechangelogs.1.gz",
            "/usr/share/man/de/man1/dpkg-name.1.gz",
            "/usr/share/man/de/man1/dpkg-parsechangelog.1.gz",
            "/usr/share/man/de/man1/dpkg-scanpackages.1.gz",
            "/usr/share/man/de/man1/dpkg-scansources.1.gz",
            "/usr/share/man/de/man1/dpkg-shlibdeps.1.gz",
            "/usr/share/man/de/man1/dpkg-source.1.gz",
            "/usr/share/man/de/man1/dpkg-vendor.1.gz",
            "/usr/share/man/de/man5/deb-buildinfo.5.gz",
            "/usr/share/man/de/man5/deb-changelog.5.gz",
            "/usr/share/man/de/man5/deb-changes.5.gz",
            "/usr/share/man/de/man5/deb-conffiles.5.gz",
            "/usr/share/man/de/man5/deb-control.5.gz",
            "/usr/share/man/de/man5/deb-extra-override.5.gz",
            "/usr/share/man/de/man5/deb-md5sums.5.gz",
            "/usr/share/man/de/man5/deb-old.5.gz",
            "/usr/share/man/de/man5/deb-origin.5.gz",
            "/usr/share/man/de/man5/deb-override.5.gz",
            "/usr/share/man/de/man5/deb-postinst.5.gz",
            "/usr/share/man/de/man5/deb-postrm.5.gz",
            "/usr/share/man/de/man5/deb-preinst.5.gz",
            "/usr/share/man/de/man5/deb-prerm.5.gz",
            "/usr/share/man/de/man5/deb-shlibs.5.gz",
            "/usr/share/man/de/man5/deb-split.5.gz",
            "/usr/share/man/de/man5/deb-src-control.5.gz",
            "/usr/share/man/de/man5/deb-src-files.5.gz",
            "/usr/share/man/de/man5/deb-src-rules.5.gz",
            "/usr/share/man/de/man5/deb-src-symbols.5.gz",
            "/usr/share/man/de/man5/deb-substvars.5.gz",
            "/usr/share/man/de/man5/deb-symbols.5.gz",
            "/usr/share/man/de/man5/deb-triggers.5.gz",
            "/usr/share/man/de/man5/deb.5.gz",
            "/usr/share/man/de/man5/deb822.5.gz",
            "/usr/share/man/de/man5/dsc.5.gz",
            "/usr/share/man/de/man7/deb-version.7.gz",
            "/usr/share/man/de/man7/dpkg-build-api.7.gz",
            "/usr/share/man/es/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/es/man5/deb-old.5.gz",
            "/usr/share/man/fr/man1/dpkg-architecture.1.gz",
            "/usr/share/man/fr/man1/dpkg-checkbuilddeps.1.gz",
            "/usr/share/man/fr/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/fr/man1/dpkg-genbuildinfo.1.gz",
            "/usr/share/man/fr/man1/dpkg-genchanges.1.gz",
            "/usr/share/man/fr/man1/dpkg-gencontrol.1.gz",
            "/usr/share/man/fr/man1/dpkg-gensymbols.1.gz",
            "/usr/share/man/fr/man1/dpkg-mergechangelogs.1.gz",
            "/usr/share/man/fr/man1/dpkg-name.1.gz",
            "/usr/share/man/fr/man1/dpkg-parsechangelog.1.gz",
            "/usr/share/man/fr/man1/dpkg-scanpackages.1.gz",
            "/usr/share/man/fr/man1/dpkg-scansources.1.gz",
            "/usr/share/man/fr/man1/dpkg-shlibdeps.1.gz",
            "/usr/share/man/fr/man1/dpkg-source.1.gz",
            "/usr/share/man/fr/man1/dpkg-vendor.1.gz",
            "/usr/share/man/fr/man5/deb-changelog.5.gz",
            "/usr/share/man/fr/man5/deb-changes.5.gz",
            "/usr/share/man/fr/man5/deb-conffiles.5.gz",
            "/usr/share/man/fr/man5/deb-control.5.gz",
            "/usr/share/man/fr/man5/deb-extra-override.5.gz",
            "/usr/share/man/fr/man5/deb-md5sums.5.gz",
            "/usr/share/man/fr/man5/deb-old.5.gz",
            "/usr/share/man/fr/man5/deb-origin.5.gz",
            "/usr/share/man/fr/man5/deb-override.5.gz",
            "/usr/share/man/fr/man5/deb-postinst.5.gz",
            "/usr/share/man/fr/man5/deb-postrm.5.gz",
            "/usr/share/man/fr/man5/deb-preinst.5.gz",
            "/usr/share/man/fr/man5/deb-prerm.5.gz",
            "/usr/share/man/fr/man5/deb-shlibs.5.gz",
            "/usr/share/man/fr/man5/deb-split.5.gz",
            "/usr/share/man/fr/man5/deb-src-control.5.gz",
            "/usr/share/man/fr/man5/deb-src-files.5.gz",
            "/usr/share/man/fr/man5/deb-src-rules.5.gz",
            "/usr/share/man/fr/man5/deb-src-symbols.5.gz",
            "/usr/share/man/fr/man5/deb-substvars.5.gz",
            "/usr/share/man/fr/man5/deb-symbols.5.gz",
            "/usr/share/man/fr/man5/deb-triggers.5.gz",
            "/usr/share/man/fr/man5/deb.5.gz",
            "/usr/share/man/fr/man5/deb822.5.gz",
            "/usr/share/man/fr/man5/dsc.5.gz",
            "/usr/share/man/fr/man7/deb-version.7.gz",
            "/usr/share/man/it/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/it/man5/deb-old.5.gz",
            "/usr/share/man/ja/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/ja/man5/deb-old.5.gz",
            "/usr/share/man/man1/dpkg-architecture.1.gz",
            "/usr/share/man/man1/dpkg-buildapi.1.gz",
            "/usr/share/man/man1/dpkg-buildflags.1.gz",
            "/usr/share/man/man1/dpkg-buildpackage.1.gz",
            "/usr/share/man/man1/dpkg-buildtree.1.gz",
            "/usr/share/man/man1/dpkg-checkbuilddeps.1.gz",
            "/usr/share/man/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/man1/dpkg-genbuildinfo.1.gz",
            "/usr/share/man/man1/dpkg-genchanges.1.gz",
            "/usr/share/man/man1/dpkg-gencontrol.1.gz",
            "/usr/share/man/man1/dpkg-gensymbols.1.gz",
            "/usr/share/man/man1/dpkg-mergechangelogs.1.gz",
            "/usr/share/man/man1/dpkg-name.1.gz",
            "/usr/share/man/man1/dpkg-parsechangelog.1.gz",
            "/usr/share/man/man1/dpkg-scanpackages.1.gz",
            "/usr/share/man/man1/dpkg-scansources.1.gz",
            "/usr/share/man/man1/dpkg-shlibdeps.1.gz",
            "/usr/share/man/man1/dpkg-source.1.gz",
            "/usr/share/man/man1/dpkg-vendor.1.gz",
            "/usr/share/man/man5/deb-buildinfo.5.gz",
            "/usr/share/man/man5/deb-changelog.5.gz",
            "/usr/share/man/man5/deb-changes.5.gz",
            "/usr/share/man/man5/deb-conffiles.5.gz",
            "/usr/share/man/man5/deb-control.5.gz",
            "/usr/share/man/man5/deb-extra-override.5.gz",
            "/usr/share/man/man5/deb-md5sums.5.gz",
            "/usr/share/man/man5/deb-old.5.gz",
            "/usr/share/man/man5/deb-origin.5.gz",
            "/usr/share/man/man5/deb-override.5.gz",
            "/usr/share/man/man5/deb-postinst.5.gz",
            "/usr/share/man/man5/deb-postrm.5.gz",
            "/usr/share/man/man5/deb-preinst.5.gz",
            "/usr/share/man/man5/deb-prerm.5.gz",
            "/usr/share/man/man5/deb-shlibs.5.gz",
            "/usr/share/man/man5/deb-split.5.gz",
            "/usr/share/man/man5/deb-src-control.5.gz",
            "/usr/share/man/man5/deb-src-files.5.gz",
            "/usr/share/man/man5/deb-src-rules.5.gz",
            "/usr/share/man/man5/deb-src-symbols.5.gz",
            "/usr/share/man/man5/deb-substvars.5.gz",
            "/usr/share/man/man5/deb-symbols.5.gz",
            "/usr/share/man/man5/deb-triggers.5.gz",
            "/usr/share/man/man5/deb.5.gz",
            "/usr/share/man/man5/deb822.5.gz",
            "/usr/share/man/man5/dsc.5.gz",
            "/usr/share/man/man7/deb-version.7.gz",
            "/usr/share/man/man7/dpkg-build-api.7.gz",
            "/usr/share/man/nl/man1/dpkg-architecture.1.gz",
            "/usr/share/man/nl/man1/dpkg-buildapi.1.gz",
            "/usr/share/man/nl/man1/dpkg-buildflags.1.gz",
            "/usr/share/man/nl/man1/dpkg-buildpackage.1.gz",
            "/usr/share/man/nl/man1/dpkg-buildtree.1.gz",
            "/usr/share/man/nl/man1/dpkg-checkbuilddeps.1.gz",
            "/usr/share/man/nl/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/nl/man1/dpkg-genbuildinfo.1.gz",
            "/usr/share/man/nl/man1/dpkg-genchanges.1.gz",
            "/usr/share/man/nl/man1/dpkg-gencontrol.1.gz",
            "/usr/share/man/nl/man1/dpkg-gensymbols.1.gz",
            "/usr/share/man/nl/man1/dpkg-mergechangelogs.1.gz",
            "/usr/share/man/nl/man1/dpkg-name.1.gz",
            "/usr/share/man/nl/man1/dpkg-parsechangelog.1.gz",
            "/usr/share/man/nl/man1/dpkg-scanpackages.1.gz",
            "/usr/share/man/nl/man1/dpkg-scansources.1.gz",
            "/usr/share/man/nl/man1/dpkg-shlibdeps.1.gz",
            "/usr/share/man/nl/man1/dpkg-source.1.gz",
            "/usr/share/man/nl/man1/dpkg-vendor.1.gz",
            "/usr/share/man/nl/man5/deb-buildinfo.5.gz",
            "/usr/share/man/nl/man5/deb-changelog.5.gz",
            "/usr/share/man/nl/man5/deb-changes.5.gz",
            "/usr/share/man/nl/man5/deb-conffiles.5.gz",
            "/usr/share/man/nl/man5/deb-control.5.gz",
            "/usr/share/man/nl/man5/deb-extra-override.5.gz",
            "/usr/share/man/nl/man5/deb-md5sums.5.gz",
            "/usr/share/man/nl/man5/deb-old.5.gz",
            "/usr/share/man/nl/man5/deb-origin.5.gz",
            "/usr/share/man/nl/man5/deb-override.5.gz",
            "/usr/share/man/nl/man5/deb-postinst.5.gz",
            "/usr/share/man/nl/man5/deb-postrm.5.gz",
            "/usr/share/man/nl/man5/deb-preinst.5.gz",
            "/usr/share/man/nl/man5/deb-prerm.5.gz",
            "/usr/share/man/nl/man5/deb-shlibs.5.gz",
            "/usr/share/man/nl/man5/deb-split.5.gz",
            "/usr/share/man/nl/man5/deb-src-control.5.gz",
            "/usr/share/man/nl/man5/deb-src-files.5.gz",
            "/usr/share/man/nl/man5/deb-src-rules.5.gz",
            "/usr/share/man/nl/man5/deb-src-symbols.5.gz",
            "/usr/share/man/nl/man5/deb-substvars.5.gz",
            "/usr/share/man/nl/man5/deb-symbols.5.gz",
            "/usr/share/man/nl/man5/deb-triggers.5.gz",
            "/usr/share/man/nl/man5/deb.5.gz",
            "/usr/share/man/nl/man5/deb822.5.gz",
            "/usr/share/man/nl/man5/dsc.5.gz",
            "/usr/share/man/nl/man7/deb-version.7.gz",
            "/usr/share/man/nl/man7/dpkg-build-api.7.gz",
            "/usr/share/man/pl/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/pl/man5/deb-old.5.gz",
            "/usr/share/man/pt/man1/dpkg-architecture.1.gz",
            "/usr/share/man/pt/man1/dpkg-buildapi.1.gz",
            "/usr/share/man/pt/man1/dpkg-buildflags.1.gz",
            "/usr/share/man/pt/man1/dpkg-buildpackage.1.gz",
            "/usr/share/man/pt/man1/dpkg-buildtree.1.gz",
            "/usr/share/man/pt/man1/dpkg-checkbuilddeps.1.gz",
            "/usr/share/man/pt/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/pt/man1/dpkg-genbuildinfo.1.gz",
            "/usr/share/man/pt/man1/dpkg-genchanges.1.gz",
            "/usr/share/man/pt/man1/dpkg-gencontrol.1.gz",
            "/usr/share/man/pt/man1/dpkg-gensymbols.1.gz",
            "/usr/share/man/pt/man1/dpkg-mergechangelogs.1.gz",
            "/usr/share/man/pt/man1/dpkg-name.1.gz",
            "/usr/share/man/pt/man1/dpkg-parsechangelog.1.gz",
            "/usr/share/man/pt/man1/dpkg-scanpackages.1.gz",
            "/usr/share/man/pt/man1/dpkg-scansources.1.gz",
            "/usr/share/man/pt/man1/dpkg-shlibdeps.1.gz",
            "/usr/share/man/pt/man1/dpkg-source.1.gz",
            "/usr/share/man/pt/man1/dpkg-vendor.1.gz",
            "/usr/share/man/pt/man5/deb-buildinfo.5.gz",
            "/usr/share/man/pt/man5/deb-changelog.5.gz",
            "/usr/share/man/pt/man5/deb-changes.5.gz",
            "/usr/share/man/pt/man5/deb-conffiles.5.gz",
            "/usr/share/man/pt/man5/deb-control.5.gz",
            "/usr/share/man/pt/man5/deb-extra-override.5.gz",
            "/usr/share/man/pt/man5/deb-md5sums.5.gz",
            "/usr/share/man/pt/man5/deb-old.5.gz",
            "/usr/share/man/pt/man5/deb-origin.5.gz",
            "/usr/share/man/pt/man5/deb-override.5.gz",
            "/usr/share/man/pt/man5/deb-postinst.5.gz",
            "/usr/share/man/pt/man5/deb-postrm.5.gz",
            "/usr/share/man/pt/man5/deb-preinst.5.gz",
            "/usr/share/man/pt/man5/deb-prerm.5.gz",
            "/usr/share/man/pt/man5/deb-shlibs.5.gz",
            "/usr/share/man/pt/man5/deb-split.5.gz",
            "/usr/share/man/pt/man5/deb-src-control.5.gz",
            "/usr/share/man/pt/man5/deb-src-files.5.gz",
            "/usr/share/man/pt/man5/deb-src-rules.5.gz",
            "/usr/share/man/pt/man5/deb-src-symbols.5.gz",
            "/usr/share/man/pt/man5/deb-substvars.5.gz",
            "/usr/share/man/pt/man5/deb-symbols.5.gz",
            "/usr/share/man/pt/man5/deb-triggers.5.gz",
            "/usr/share/man/pt/man5/deb.5.gz",
            "/usr/share/man/pt/man5/deb822.5.gz",
            "/usr/share/man/pt/man5/dsc.5.gz",
            "/usr/share/man/pt/man7/deb-version.7.gz",
            "/usr/share/man/pt/man7/dpkg-build-api.7.gz",
            "/usr/share/man/sv/man1/dpkg-architecture.1.gz",
            "/usr/share/man/sv/man1/dpkg-buildapi.1.gz",
            "/usr/share/man/sv/man1/dpkg-buildflags.1.gz",
            "/usr/share/man/sv/man1/dpkg-buildpackage.1.gz",
            "/usr/share/man/sv/man1/dpkg-buildtree.1.gz",
            "/usr/share/man/sv/man1/dpkg-checkbuilddeps.1.gz",
            "/usr/share/man/sv/man1/dpkg-distaddfile.1.gz",
            "/usr/share/man/sv/man1/dpkg-genbuildinfo.1.gz",
            "/usr/share/man/sv/man1/dpkg-genchanges.1.gz",
            "/usr/share/man/sv/man1/dpkg-gencontrol.1.gz",
            "/usr/share/man/sv/man1/dpkg-gensymbols.1.gz",
            "/usr/share/man/sv/man1/dpkg-mergechangelogs.1.gz",
            "/usr/share/man/sv/man1/dpkg-name.1.gz",
            "/usr/share/man/sv/man1/dpkg-parsechangelog.1.gz",
            "/usr/share/man/sv/man1/dpkg-scanpackages.1.gz",
            "/usr/share/man/sv/man1/dpkg-scansources.1.gz",
            "/usr/share/man/sv/man1/dpkg-shlibdeps.1.gz",
            "/usr/share/man/sv/man1/dpkg-source.1.gz",
            "/usr/share/man/sv/man1/dpkg-vendor.1.gz",
            "/usr/share/man/sv/man5/deb-buildinfo.5.gz",
            "/usr/share/man/sv/man5/deb-changelog.5.gz",
            "/usr/share/man/sv/man5/deb-changes.5.gz",
            "/usr/share/man/sv/man5/deb-conffiles.5.gz",
            "/usr/share/man/sv/man5/deb-control.5.gz",
            "/usr/share/man/sv/man5/deb-extra-override.5.gz",
            "/usr/share/man/sv/man5/deb-md5sums.5.gz",
            "/usr/share/man/sv/man5/deb-old.5.gz",
            "/usr/share/man/sv/man5/deb-origin.5.gz",
            "/usr/share/man/sv/man5/deb-override.5.gz",
            "/usr/share/man/sv/man5/deb-postinst.5.gz",
            "/usr/share/man/sv/man5/deb-postrm.5.gz",
            "/usr/share/man/sv/man5/deb-preinst.5.gz",
            "/usr/share/man/sv/man5/deb-prerm.5.gz",
            "/usr/share/man/sv/man5/deb-shlibs.5.gz",
            "/usr/share/man/sv/man5/deb-split.5.gz",
            "/usr/share/man/sv/man5/deb-src-control.5.gz",
            "/usr/share/man/sv/man5/deb-src-files.5.gz",
            "/usr/share/man/sv/man5/deb-src-rules.5.gz",
            "/usr/share/man/sv/man5/deb-src-symbols.5.gz",
            "/usr/share/man/sv/man5/deb-substvars.5.gz",
            "/usr/share/man/sv/man5/deb-symbols.5.gz",
            "/usr/share/man/sv/man5/deb-triggers.5.gz",
            "/usr/share/man/sv/man5/deb.5.gz",
            "/usr/share/man/sv/man5/deb822.5.gz",
            "/usr/share/man/sv/man5/dsc.5.gz",
            "/usr/share/man/sv/man7/deb-version.7.gz",
            "/usr/share/man/sv/man7/dpkg-build-api.7.gz",
            "/usr/share/zsh/vendor-completions/_dpkg-parsechangelog"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "file@1:5.46-5",
          "Name": "file",
          "Identifier": {
            "PURL": "pkg:deb/debian/file@5.46-5?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "34c1dd949e0ea914"
          },
          "Version": "5.46",
          "Release": "5",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "file",
          "SrcVersion": "5.46",
          "SrcRelease": "5",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-2-Clause-alike",
            "public-domain",
            "BSD-2-Clause-NetBSD",
            "BSD-2-Clause-regents",
            "MIT-Old-Style-with-legal-disclaimer-2"
          ],
          "Maintainer": "Christoph Biedl \u003cdebian.axhn@manchmal.in-ulm.de\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libmagic1t64@1:5.46-5"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/file",
            "/usr/share/bug/file/control",
            "/usr/share/bug/file/presubj",
            "/usr/share/doc/file/README.Debian",
            "/usr/share/doc/file/changelog.Debian.gz",
            "/usr/share/doc/file/changelog.gz",
            "/usr/share/doc/file/copyright",
            "/usr/share/man/man1/file.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "findutils@4.10.0-3",
          "Name": "findutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/findutils@4.10.0-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "12e741692291b42a"
          },
          "Version": "4.10.0",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "findutils",
          "SrcVersion": "4.10.0",
          "SrcRelease": "3",
          "Licenses": [
            "GFDL-1.3-no-invariants-or-later",
            "GPL-3.0-or-later",
            "FSFAP",
            "GPL-2+ with Autoconf-data exception",
            "GPL-3+ with Autoconf-data exception",
            "FSFULLR",
            "GPL-2.0-or-later",
            "X11",
            "public-domain",
            "LGPL-2.1-or-later",
            "GPL with automake exception",
            "LGPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "BSD-3-Clause",
            "GPL-3+ with Bison-2.2 exception",
            "LGPL-3.0-only",
            "ISC",
            "GFDL-1.3-only",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Andreas Metzler \u003cametzler@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/find",
            "/usr/bin/xargs",
            "/usr/share/doc-base/findutils.findutils",
            "/usr/share/doc/findutils/NEWS.gz",
            "/usr/share/doc/findutils/README.gz",
            "/usr/share/doc/findutils/TODO",
            "/usr/share/doc/findutils/changelog.Debian.gz",
            "/usr/share/doc/findutils/changelog.gz",
            "/usr/share/doc/findutils/copyright",
            "/usr/share/info/find-maint.info.gz",
            "/usr/share/info/find.info.gz",
            "/usr/share/locale/be/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/bg/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ca/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/cs/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/da/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/de/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/el/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/eo/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/es/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/et/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/fi/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/fr/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ga/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/gl/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/hr/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/hu/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/id/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/it/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ja/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ka/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ko/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/lg/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/lt/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ms/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/nb/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/nl/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/pl/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/pt/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ro/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ru/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/sk/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/sl/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/sr/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/sv/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/tr/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/uk/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/vi/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/findutils.mo",
            "/usr/share/man/man1/find.1.gz",
            "/usr/share/man/man1/xargs.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "fontconfig@2.15.0-2.3",
          "Name": "fontconfig",
          "Identifier": {
            "PURL": "pkg:deb/debian/fontconfig@2.15.0-2.3?arch=amd64\u0026distro=debian-13.7",
            "UID": "3329d79f048f3e0b"
          },
          "Version": "2.15.0",
          "Release": "2.3",
          "Arch": "amd64",
          "SrcName": "fontconfig",
          "SrcVersion": "2.15.0",
          "SrcRelease": "2.3",
          "Maintainer": "Debian freedesktop.org maintainers \u003cpkg-freedesktop-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "fontconfig-config@2.15.0-2.3",
            "libc6@2.41-12+deb13u4",
            "libfontconfig1@2.15.0-2.3",
            "libfreetype6@2.13.3+dfsg-1+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/bin/fc-cache",
            "/usr/bin/fc-cat",
            "/usr/bin/fc-conflist",
            "/usr/bin/fc-list",
            "/usr/bin/fc-match",
            "/usr/bin/fc-pattern",
            "/usr/bin/fc-query",
            "/usr/bin/fc-scan",
            "/usr/bin/fc-validate",
            "/usr/share/doc-base/fontconfig.fontconfig-user",
            "/usr/share/doc/fontconfig/README.Debian",
            "/usr/share/doc/fontconfig/changelog.Debian.gz",
            "/usr/share/doc/fontconfig/changelog.gz",
            "/usr/share/doc/fontconfig/copyright",
            "/usr/share/doc/fontconfig/fontconfig-user.html",
            "/usr/share/doc/fontconfig/fontconfig-user.pdf.gz",
            "/usr/share/doc/fontconfig/fontconfig-user.txt.gz",
            "/usr/share/locale/ka/LC_MESSAGES/fontconfig-conf.mo",
            "/usr/share/locale/ka/LC_MESSAGES/fontconfig.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/fontconfig-conf.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/fontconfig.mo",
            "/usr/share/man/man1/fc-cache.1.gz",
            "/usr/share/man/man1/fc-cat.1.gz",
            "/usr/share/man/man1/fc-conflist.1.gz",
            "/usr/share/man/man1/fc-list.1.gz",
            "/usr/share/man/man1/fc-match.1.gz",
            "/usr/share/man/man1/fc-pattern.1.gz",
            "/usr/share/man/man1/fc-query.1.gz",
            "/usr/share/man/man1/fc-scan.1.gz",
            "/usr/share/man/man1/fc-validate.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "fontconfig-config@2.15.0-2.3",
          "Name": "fontconfig-config",
          "Identifier": {
            "PURL": "pkg:deb/debian/fontconfig-config@2.15.0-2.3?arch=amd64\u0026distro=debian-13.7",
            "UID": "2542aa568d07664a"
          },
          "Version": "2.15.0",
          "Release": "2.3",
          "Arch": "amd64",
          "SrcName": "fontconfig",
          "SrcVersion": "2.15.0",
          "SrcRelease": "2.3",
          "Maintainer": "Debian freedesktop.org maintainers \u003cpkg-freedesktop-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.91",
            "fonts-dejavu-core@2.37-8"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/share/doc/fontconfig-config/changelog.Debian.gz",
            "/usr/share/doc/fontconfig-config/changelog.gz",
            "/usr/share/doc/fontconfig-config/copyright",
            "/usr/share/fontconfig/conf.avail/05-reset-dirs-sample.conf",
            "/usr/share/fontconfig/conf.avail/09-autohint-if-no-hinting.conf",
            "/usr/share/fontconfig/conf.avail/10-autohint.conf",
            "/usr/share/fontconfig/conf.avail/10-hinting-full.conf",
            "/usr/share/fontconfig/conf.avail/10-hinting-medium.conf",
            "/usr/share/fontconfig/conf.avail/10-hinting-none.conf",
            "/usr/share/fontconfig/conf.avail/10-hinting-slight.conf",
            "/usr/share/fontconfig/conf.avail/10-no-antialias.conf",
            "/usr/share/fontconfig/conf.avail/10-scale-bitmap-fonts.conf",
            "/usr/share/fontconfig/conf.avail/10-sub-pixel-bgr.conf",
            "/usr/share/fontconfig/conf.avail/10-sub-pixel-none.conf",
            "/usr/share/fontconfig/conf.avail/10-sub-pixel-rgb.conf",
            "/usr/share/fontconfig/conf.avail/10-sub-pixel-vbgr.conf",
            "/usr/share/fontconfig/conf.avail/10-sub-pixel-vrgb.conf",
            "/usr/share/fontconfig/conf.avail/10-unhinted.conf",
            "/usr/share/fontconfig/conf.avail/10-yes-antialias.conf",
            "/usr/share/fontconfig/conf.avail/11-lcdfilter-default.conf",
            "/usr/share/fontconfig/conf.avail/11-lcdfilter-legacy.conf",
            "/usr/share/fontconfig/conf.avail/11-lcdfilter-light.conf",
            "/usr/share/fontconfig/conf.avail/11-lcdfilter-none.conf",
            "/usr/share/fontconfig/conf.avail/20-unhint-small-vera.conf",
            "/usr/share/fontconfig/conf.avail/25-unhint-nonlatin.conf",
            "/usr/share/fontconfig/conf.avail/30-metric-aliases.conf",
            "/usr/share/fontconfig/conf.avail/35-lang-normalize.conf",
            "/usr/share/fontconfig/conf.avail/40-nonlatin.conf",
            "/usr/share/fontconfig/conf.avail/45-generic.conf",
            "/usr/share/fontconfig/conf.avail/45-latin.conf",
            "/usr/share/fontconfig/conf.avail/48-spacing.conf",
            "/usr/share/fontconfig/conf.avail/49-sansserif.conf",
            "/usr/share/fontconfig/conf.avail/50-user.conf",
            "/usr/share/fontconfig/conf.avail/51-local.conf",
            "/usr/share/fontconfig/conf.avail/60-generic.conf",
            "/usr/share/fontconfig/conf.avail/60-latin.conf",
            "/usr/share/fontconfig/conf.avail/65-fonts-persian.conf",
            "/usr/share/fontconfig/conf.avail/65-khmer.conf",
            "/usr/share/fontconfig/conf.avail/65-nonlatin.conf",
            "/usr/share/fontconfig/conf.avail/69-unifont.conf",
            "/usr/share/fontconfig/conf.avail/70-force-bitmaps.conf",
            "/usr/share/fontconfig/conf.avail/70-no-bitmaps-and-emoji.conf",
            "/usr/share/fontconfig/conf.avail/70-no-bitmaps-except-emoji.conf",
            "/usr/share/fontconfig/conf.avail/70-no-bitmaps.conf",
            "/usr/share/fontconfig/conf.avail/70-yes-bitmaps.conf",
            "/usr/share/fontconfig/conf.avail/80-delicious.conf",
            "/usr/share/fontconfig/conf.avail/90-synthetic.conf",
            "/usr/share/man/man5/fonts-conf.5.gz",
            "/usr/share/xml/fontconfig/fonts.dtd"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "fonts-dejavu-core@2.37-8",
          "Name": "fonts-dejavu-core",
          "Identifier": {
            "PURL": "pkg:deb/debian/fonts-dejavu-core@2.37-8?arch=all\u0026distro=debian-13.7",
            "UID": "a3618307f9e29a5f"
          },
          "Version": "2.37",
          "Release": "8",
          "Arch": "all",
          "SrcName": "fonts-dejavu",
          "SrcVersion": "2.37",
          "SrcRelease": "8",
          "Licenses": [
            "Bitstream-Vera",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Fonts Task Force \u003cdebian-fonts@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "fonts-dejavu-mono@2.37-8"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/share/doc/fonts-dejavu-core/AUTHORS",
            "/usr/share/doc/fonts-dejavu-core/BUGS",
            "/usr/share/doc/fonts-dejavu-core/README.md",
            "/usr/share/doc/fonts-dejavu-core/changelog.Debian.gz",
            "/usr/share/doc/fonts-dejavu-core/changelog.gz",
            "/usr/share/doc/fonts-dejavu-core/copyright",
            "/usr/share/doc/fonts-dejavu-core/langcover.txt.gz",
            "/usr/share/doc/fonts-dejavu-core/status.txt.gz",
            "/usr/share/doc/fonts-dejavu-core/unicover.txt.gz",
            "/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf",
            "/usr/share/fonts/truetype/dejavu/DejaVuSans.ttf",
            "/usr/share/fonts/truetype/dejavu/DejaVuSerif-Bold.ttf",
            "/usr/share/fonts/truetype/dejavu/DejaVuSerif.ttf"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "fonts-dejavu-mono@2.37-8",
          "Name": "fonts-dejavu-mono",
          "Identifier": {
            "PURL": "pkg:deb/debian/fonts-dejavu-mono@2.37-8?arch=all\u0026distro=debian-13.7",
            "UID": "94b5c450cd2c0a2c"
          },
          "Version": "2.37",
          "Release": "8",
          "Arch": "all",
          "SrcName": "fonts-dejavu",
          "SrcVersion": "2.37",
          "SrcRelease": "8",
          "Licenses": [
            "Bitstream-Vera",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Fonts Task Force \u003cdebian-fonts@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/share/doc/fonts-dejavu-mono/AUTHORS",
            "/usr/share/doc/fonts-dejavu-mono/BUGS",
            "/usr/share/doc/fonts-dejavu-mono/README.md",
            "/usr/share/doc/fonts-dejavu-mono/changelog.Debian.gz",
            "/usr/share/doc/fonts-dejavu-mono/changelog.gz",
            "/usr/share/doc/fonts-dejavu-mono/copyright",
            "/usr/share/doc/fonts-dejavu-mono/langcover.txt.gz",
            "/usr/share/doc/fonts-dejavu-mono/status.txt.gz",
            "/usr/share/doc/fonts-dejavu-mono/unicover.txt.gz",
            "/usr/share/fonts/truetype/dejavu/DejaVuSansMono-Bold.ttf",
            "/usr/share/fonts/truetype/dejavu/DejaVuSansMono-BoldOblique.ttf",
            "/usr/share/fonts/truetype/dejavu/DejaVuSansMono-Oblique.ttf",
            "/usr/share/fonts/truetype/dejavu/DejaVuSansMono.ttf"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "g++@4:14.2.0-1",
          "Name": "g++",
          "Identifier": {
            "PURL": "pkg:deb/debian/g%2B%2B@14.2.0-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=4",
            "UID": "5009ffcc2df17d66"
          },
          "Version": "14.2.0",
          "Release": "1",
          "Epoch": 4,
          "Arch": "amd64",
          "SrcName": "gcc-defaults",
          "SrcVersion": "1.220",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "cpp-x86-64-linux-gnu@4:14.2.0-1",
            "cpp@4:14.2.0-1",
            "g++-14@14.2.0-19",
            "g++-x86-64-linux-gnu@4:14.2.0-1",
            "gcc-14@14.2.0-19",
            "gcc@4:14.2.0-1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/lintian/overrides/g++"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "g++-14@14.2.0-19",
          "Name": "g++-14",
          "Identifier": {
            "PURL": "pkg:deb/debian/g%2B%2B-14@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "8734daa7364b4311"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "g++-14-x86-64-linux-gnu@14.2.0-19",
            "gcc-14-base@14.2.0-19",
            "gcc-14@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/doc/gcc-14-base/C++/README.C++",
            "/usr/share/doc/gcc-14-base/C++/changelog.gz",
            "/usr/share/lintian/overrides/g++-14"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "g++-14-x86-64-linux-gnu@14.2.0-19",
          "Name": "g++-14-x86-64-linux-gnu",
          "Identifier": {
            "PURL": "pkg:deb/debian/g%2B%2B-14-x86-64-linux-gnu@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "c2479b0a9dcc0f9e"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "gcc-14-x86-64-linux-gnu@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgmp10@2:6.3.0+dfsg-3",
            "libisl23@0.27-1",
            "libmpc3@1.3.1-1+b3",
            "libmpfr6@4.2.2-1",
            "libstdc++-14-dev@14.2.0-19",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/x86_64-linux-gnu-g++-14",
            "/usr/libexec/gcc/x86_64-linux-gnu/14/cc1plus",
            "/usr/libexec/gcc/x86_64-linux-gnu/14/g++-mapper-server",
            "/usr/share/lintian/overrides/g++-14-x86-64-linux-gnu"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "g++-x86-64-linux-gnu@4:14.2.0-1",
          "Name": "g++-x86-64-linux-gnu",
          "Identifier": {
            "PURL": "pkg:deb/debian/g%2B%2B-x86-64-linux-gnu@14.2.0-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=4",
            "UID": "66c4af7ed883fb3d"
          },
          "Version": "14.2.0",
          "Release": "1",
          "Epoch": 4,
          "Arch": "amd64",
          "SrcName": "gcc-defaults",
          "SrcVersion": "1.220",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "cpp-x86-64-linux-gnu@4:14.2.0-1",
            "g++-14-x86-64-linux-gnu@14.2.0-19",
            "gcc-x86-64-linux-gnu@4:14.2.0-1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/lintian/overrides/g++-x86-64-linux-gnu"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gcc@4:14.2.0-1",
          "Name": "gcc",
          "Identifier": {
            "PURL": "pkg:deb/debian/gcc@14.2.0-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=4",
            "UID": "a43016c9e0c588a8"
          },
          "Version": "14.2.0",
          "Release": "1",
          "Epoch": 4,
          "Arch": "amd64",
          "SrcName": "gcc-defaults",
          "SrcVersion": "1.220",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "cpp-x86-64-linux-gnu@4:14.2.0-1",
            "cpp@4:14.2.0-1",
            "gcc-14@14.2.0-19",
            "gcc-x86-64-linux-gnu@4:14.2.0-1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/c89-gcc",
            "/usr/bin/c99-gcc",
            "/usr/share/lintian/overrides/gcc",
            "/usr/share/man/man1/c89-gcc.1.gz",
            "/usr/share/man/man1/c99-gcc.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gcc-14@14.2.0-19",
          "Name": "gcc-14",
          "Identifier": {
            "PURL": "pkg:deb/debian/gcc-14@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "612e049373700e50"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "binutils@2.44-3",
            "cpp-14@14.2.0-19",
            "gcc-14-base@14.2.0-19",
            "gcc-14-x86-64-linux-gnu@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/doc/gcc-14-base/NEWS.gz",
            "/usr/share/doc/gcc-14-base/NEWS.html",
            "/usr/share/doc/gcc-14-base/README.Bugs",
            "/usr/share/doc/gcc-14-base/README.ssp",
            "/usr/share/doc/gcc-14-base/changelog.gz",
            "/usr/share/doc/gcc-14-base/gcc/changelog.gz",
            "/usr/share/doc/gcc-14-base/gomp/changelog.gz",
            "/usr/share/doc/gcc-14-base/itm/changelog.gz",
            "/usr/share/doc/gcc-14-base/quadmath/changelog.gz",
            "/usr/share/doc/gcc-14-base/sanitizer/changelog.gz",
            "/usr/share/lintian/overrides/gcc-14"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gcc-14-base@14.2.0-19",
          "Name": "gcc-14-base",
          "Identifier": {
            "PURL": "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "371c061d08215a1b"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-3.0-only",
            "GFDL-1.2-only",
            "Artistic-2.0",
            "LGPL-2.0-or-later"
          ],
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/gcc-14-base/README.Debian.amd64.gz",
            "/usr/share/doc/gcc-14-base/TODO.Debian",
            "/usr/share/doc/gcc-14-base/changelog.Debian.gz",
            "/usr/share/doc/gcc-14-base/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gcc-14-x86-64-linux-gnu@14.2.0-19",
          "Name": "gcc-14-x86-64-linux-gnu",
          "Identifier": {
            "PURL": "pkg:deb/debian/gcc-14-x86-64-linux-gnu@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "4761edf04e1c475c"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "binutils-x86-64-linux-gnu@2.44-3",
            "cpp-14-x86-64-linux-gnu@14.2.0-19",
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libcc1-0@14.2.0-19",
            "libgcc-14-dev@14.2.0-19",
            "libgcc-s1@14.2.0-19",
            "libgmp10@2:6.3.0+dfsg-3",
            "libisl23@0.27-1",
            "libmpc3@1.3.1-1+b3",
            "libmpfr6@4.2.2-1",
            "libstdc++6@14.2.0-19",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/x86_64-linux-gnu-gcc-14",
            "/usr/bin/x86_64-linux-gnu-gcc-ar-14",
            "/usr/bin/x86_64-linux-gnu-gcc-nm-14",
            "/usr/bin/x86_64-linux-gnu-gcc-ranlib-14",
            "/usr/bin/x86_64-linux-gnu-gcov-14",
            "/usr/bin/x86_64-linux-gnu-gcov-dump-14",
            "/usr/bin/x86_64-linux-gnu-gcov-tool-14",
            "/usr/bin/x86_64-linux-gnu-lto-dump-14",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libgomp.spec",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libhwasan_preinit.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libitm.spec",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libsanitizer.spec",
            "/usr/lib/gcc/x86_64-linux-gnu/14/plugin/libcc1plugin.so.0.0.0",
            "/usr/lib/gcc/x86_64-linux-gnu/14/plugin/libcp1plugin.so.0.0.0",
            "/usr/libexec/gcc/x86_64-linux-gnu/14/collect2",
            "/usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so",
            "/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper",
            "/usr/libexec/gcc/x86_64-linux-gnu/14/lto1",
            "/usr/share/lintian/overrides/gcc-14-x86-64-linux-gnu",
            "/usr/share/man/man1/x86_64-linux-gnu-gcc-ar-14.1.gz",
            "/usr/share/man/man1/x86_64-linux-gnu-gcc-nm-14.1.gz",
            "/usr/share/man/man1/x86_64-linux-gnu-gcc-ranlib-14.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gcc-x86-64-linux-gnu@4:14.2.0-1",
          "Name": "gcc-x86-64-linux-gnu",
          "Identifier": {
            "PURL": "pkg:deb/debian/gcc-x86-64-linux-gnu@14.2.0-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=4",
            "UID": "2190197e317ee277"
          },
          "Version": "14.2.0",
          "Release": "1",
          "Epoch": 4,
          "Arch": "amd64",
          "SrcName": "gcc-defaults",
          "SrcVersion": "1.220",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "cpp-x86-64-linux-gnu@4:14.2.0-1",
            "gcc-14-x86-64-linux-gnu@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/lintian/overrides/gcc-x86-64-linux-gnu"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "girepository-tools@2.84.4-3~deb13u5",
          "Name": "girepository-tools",
          "Identifier": {
            "PURL": "pkg:deb/debian/girepository-tools@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "5446005f995024e0"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "amd64",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libffi8@3.4.8-2",
            "libgirepository-2.0-0@2.84.4-3~deb13u5",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "native-architecture@0.2.6"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/bin/x86_64-linux-gnu-gi-compile-repository",
            "/usr/bin/x86_64-linux-gnu-gi-decompile-typelib",
            "/usr/bin/x86_64-linux-gnu-gi-inspect-typelib",
            "/usr/lib/x86_64-linux-gnu/glib-2.0/gi-compile-repository",
            "/usr/lib/x86_64-linux-gnu/glib-2.0/gi-decompile-typelib",
            "/usr/lib/x86_64-linux-gnu/glib-2.0/gi-inspect-typelib",
            "/usr/share/doc/girepository-tools/changelog.Debian.gz",
            "/usr/share/doc/girepository-tools/copyright",
            "/usr/share/man/man1/gi-compile-repository.1.gz",
            "/usr/share/man/man1/gi-decompile-typelib.1.gz",
            "/usr/share/man/man1/gi-inspect-typelib.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "grep@3.11-4",
          "Name": "grep",
          "Identifier": {
            "PURL": "pkg:deb/debian/grep@3.11-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "6ce8b4eed9c0d137"
          },
          "Version": "3.11",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "grep",
          "SrcVersion": "3.11",
          "SrcRelease": "4",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only"
          ],
          "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/egrep",
            "/usr/bin/fgrep",
            "/usr/bin/grep",
            "/usr/bin/rgrep",
            "/usr/share/doc/grep/AUTHORS",
            "/usr/share/doc/grep/NEWS.Debian.gz",
            "/usr/share/doc/grep/NEWS.gz",
            "/usr/share/doc/grep/README",
            "/usr/share/doc/grep/THANKS.gz",
            "/usr/share/doc/grep/TODO.gz",
            "/usr/share/doc/grep/changelog.Debian.gz",
            "/usr/share/doc/grep/changelog.gz",
            "/usr/share/doc/grep/copyright",
            "/usr/share/info/grep.info.gz",
            "/usr/share/locale/af/LC_MESSAGES/grep.mo",
            "/usr/share/locale/be/LC_MESSAGES/grep.mo",
            "/usr/share/locale/bg/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ca/LC_MESSAGES/grep.mo",
            "/usr/share/locale/cs/LC_MESSAGES/grep.mo",
            "/usr/share/locale/da/LC_MESSAGES/grep.mo",
            "/usr/share/locale/de/LC_MESSAGES/grep.mo",
            "/usr/share/locale/el/LC_MESSAGES/grep.mo",
            "/usr/share/locale/eo/LC_MESSAGES/grep.mo",
            "/usr/share/locale/es/LC_MESSAGES/grep.mo",
            "/usr/share/locale/et/LC_MESSAGES/grep.mo",
            "/usr/share/locale/eu/LC_MESSAGES/grep.mo",
            "/usr/share/locale/fi/LC_MESSAGES/grep.mo",
            "/usr/share/locale/fr/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ga/LC_MESSAGES/grep.mo",
            "/usr/share/locale/gl/LC_MESSAGES/grep.mo",
            "/usr/share/locale/he/LC_MESSAGES/grep.mo",
            "/usr/share/locale/hr/LC_MESSAGES/grep.mo",
            "/usr/share/locale/hu/LC_MESSAGES/grep.mo",
            "/usr/share/locale/id/LC_MESSAGES/grep.mo",
            "/usr/share/locale/it/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ja/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ka/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ko/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ky/LC_MESSAGES/grep.mo",
            "/usr/share/locale/lt/LC_MESSAGES/grep.mo",
            "/usr/share/locale/nb/LC_MESSAGES/grep.mo",
            "/usr/share/locale/nl/LC_MESSAGES/grep.mo",
            "/usr/share/locale/pa/LC_MESSAGES/grep.mo",
            "/usr/share/locale/pl/LC_MESSAGES/grep.mo",
            "/usr/share/locale/pt/LC_MESSAGES/grep.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ro/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ru/LC_MESSAGES/grep.mo",
            "/usr/share/locale/sk/LC_MESSAGES/grep.mo",
            "/usr/share/locale/sl/LC_MESSAGES/grep.mo",
            "/usr/share/locale/sr/LC_MESSAGES/grep.mo",
            "/usr/share/locale/sv/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ta/LC_MESSAGES/grep.mo",
            "/usr/share/locale/th/LC_MESSAGES/grep.mo",
            "/usr/share/locale/tr/LC_MESSAGES/grep.mo",
            "/usr/share/locale/uk/LC_MESSAGES/grep.mo",
            "/usr/share/locale/vi/LC_MESSAGES/grep.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/grep.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo",
            "/usr/share/man/man1/grep.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gzip@1.13-1+deb13u1",
          "Name": "gzip",
          "Identifier": {
            "PURL": "pkg:deb/debian/gzip@1.13-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "75d9e6fa7aafe838"
          },
          "Version": "1.13",
          "Release": "1+deb13u1",
          "Arch": "amd64",
          "SrcName": "gzip",
          "SrcVersion": "1.13",
          "SrcRelease": "1+deb13u1",
          "Licenses": [
            "GPL-3.0-or-later",
            "GFDL-1.3+-no-invariant",
            "FSF-manpages",
            "GPL-3.0-only",
            "GFDL-3"
          ],
          "Maintainer": "Milan Kupcevic \u003cmilan@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/gunzip",
            "/usr/bin/gzexe",
            "/usr/bin/gzip",
            "/usr/bin/zcat",
            "/usr/bin/zcmp",
            "/usr/bin/zdiff",
            "/usr/bin/zegrep",
            "/usr/bin/zfgrep",
            "/usr/bin/zforce",
            "/usr/bin/zgrep",
            "/usr/bin/zless",
            "/usr/bin/zmore",
            "/usr/bin/znew",
            "/usr/share/doc/gzip/NEWS.gz",
            "/usr/share/doc/gzip/README.gz",
            "/usr/share/doc/gzip/TODO",
            "/usr/share/doc/gzip/changelog.Debian.gz",
            "/usr/share/doc/gzip/changelog.gz",
            "/usr/share/doc/gzip/copyright",
            "/usr/share/info/gzip.info.gz",
            "/usr/share/man/man1/gzexe.1.gz",
            "/usr/share/man/man1/gzip.1.gz",
            "/usr/share/man/man1/zdiff.1.gz",
            "/usr/share/man/man1/zforce.1.gz",
            "/usr/share/man/man1/zgrep.1.gz",
            "/usr/share/man/man1/zless.1.gz",
            "/usr/share/man/man1/zmore.1.gz",
            "/usr/share/man/man1/znew.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "hostname@3.25",
          "Name": "hostname",
          "Identifier": {
            "PURL": "pkg:deb/debian/hostname@3.25?arch=amd64\u0026distro=debian-13.7",
            "UID": "641772722328aedf"
          },
          "Version": "3.25",
          "Arch": "amd64",
          "SrcName": "hostname",
          "SrcVersion": "3.25",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Michael Meskes \u003cmeskes@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/hostname",
            "/usr/share/doc/hostname/changelog.gz",
            "/usr/share/doc/hostname/copyright",
            "/usr/share/man/man1/hostname.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "Name": "imagemagick-7-common",
          "Identifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "Version": "7.1.1.43+dfsg1",
          "Release": "1+deb13u12",
          "Epoch": 8,
          "Arch": "all",
          "SrcName": "imagemagick",
          "SrcVersion": "7.1.1.43+dfsg1",
          "SrcRelease": "1+deb13u12",
          "SrcEpoch": 8,
          "Licenses": [
            "ImageMagick",
            "aclocal",
            "Makefile-in",
            "ImageMagickPartlibsquish",
            "ImageMagickPartGraphicsMagick",
            "ImageMagickPartlibjpeg",
            "ImageMagickLicensePartFIG",
            "GPL-2.0-or-later",
            "BSD-with-FSF-change-public-domain",
            "ImageMagickLicensePartGsview",
            "ImageMagickLicensePartOpenSSH",
            "Magick++",
            "GPL2+-with-Autoconf-Macros-exception",
            "GPL3+-with-Autoconf-Macros-exception",
            "GNU-All-Permissive-License",
            "LGPL-3.0-or-later",
            "ImageMagickLicensePartEZXML",
            "Perllikelicence",
            "Artistic-2.0",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "GPL3+-with-Autoconf-Macros-exception-GNU",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "ImageMagick Packaging Team \u003cpkg-gmagick-im-team@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/share/ImageMagick-7/english.xml",
            "/usr/share/ImageMagick-7/francais.xml",
            "/usr/share/ImageMagick-7/locale.xml",
            "/usr/share/bug/imagemagick-7-common/presubj",
            "/usr/share/bug/imagemagick-7-common/script",
            "/usr/share/doc/imagemagick-7-common/README.Debian",
            "/usr/share/doc/imagemagick-7-common/README.md.gz",
            "/usr/share/doc/imagemagick-7-common/TODO.Debian",
            "/usr/share/doc/imagemagick-7-common/changelog.Debian.gz",
            "/usr/share/doc/imagemagick-7-common/copyright",
            "/usr/share/doc/imagemagick-7-common/html/README"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "init-system-helpers@1.69~deb13u1",
          "Name": "init-system-helpers",
          "Identifier": {
            "PURL": "pkg:deb/debian/init-system-helpers@1.69~deb13u1?arch=all\u0026distro=debian-13.7",
            "UID": "cb52819ec2f1a236"
          },
          "Version": "1.69~deb13u1",
          "Arch": "all",
          "SrcName": "init-system-helpers",
          "SrcVersion": "1.69~deb13u1",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/deb-systemd-helper",
            "/usr/bin/deb-systemd-invoke",
            "/usr/sbin/invoke-rc.d",
            "/usr/sbin/service",
            "/usr/sbin/update-rc.d",
            "/usr/share/bug/init-system-helpers/control",
            "/usr/share/doc/init-system-helpers/README.invoke-rc.d.gz",
            "/usr/share/doc/init-system-helpers/README.policy-rc.d.gz",
            "/usr/share/doc/init-system-helpers/changelog.gz",
            "/usr/share/doc/init-system-helpers/copyright",
            "/usr/share/lintian/overrides/init-system-helpers",
            "/usr/share/man/man1/deb-systemd-helper.1p.gz",
            "/usr/share/man/man1/deb-systemd-invoke.1p.gz",
            "/usr/share/man/man8/invoke-rc.d.8.gz",
            "/usr/share/man/man8/service.8.gz",
            "/usr/share/man/man8/update-rc.d.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libacl1@2.3.2-2+b1",
          "Name": "libacl1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libacl1@2.3.2-2%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "cc40ccea052c10a8"
          },
          "Version": "2.3.2",
          "Release": "2+b1",
          "Arch": "amd64",
          "SrcName": "acl",
          "SrcVersion": "2.3.2",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.0-or-later",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libacl.so.1.1.2302",
            "/usr/share/doc/libacl1/changelog.Debian.amd64.gz",
            "/usr/share/doc/libacl1/changelog.Debian.gz",
            "/usr/share/doc/libacl1/changelog.gz",
            "/usr/share/doc/libacl1/copyright",
            "/usr/share/lintian/overrides/libacl1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libapr1t64@1.7.5-1",
          "Name": "libapr1t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libapr1t64@1.7.5-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "a80840b029e0bb6c"
          },
          "Version": "1.7.5",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "apr",
          "SrcVersion": "1.7.5",
          "SrcRelease": "1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Maintainer": "Debian Apache Maintainers \u003cdebian-apache@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libuuid1@2.41.5-0+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libapr-1.so.0.7.5",
            "/usr/share/doc/libapr1t64/NOTICE",
            "/usr/share/doc/libapr1t64/changelog.Debian.gz",
            "/usr/share/doc/libapr1t64/changelog.gz",
            "/usr/share/doc/libapr1t64/copyright",
            "/usr/share/lintian/overrides/libapr1t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libaprutil1-dbd-sqlite3@1.6.3-3+deb13u1",
          "Name": "libaprutil1-dbd-sqlite3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libaprutil1-dbd-sqlite3@1.6.3-3%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "a39727aba5b9be58"
          },
          "Version": "1.6.3",
          "Release": "3+deb13u1",
          "Arch": "amd64",
          "SrcName": "apr-util",
          "SrcVersion": "1.6.3",
          "SrcRelease": "3+deb13u1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Maintainer": "Debian Apache Maintainers \u003cdebian-apache@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaprutil1t64@1.6.3-3+deb13u1",
            "libc6@2.41-12+deb13u4",
            "libsqlite3-0@3.46.1-7+deb13u2"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/apr-util-1/apr_dbd_sqlite3-1.so",
            "/usr/share/doc/libaprutil1-dbd-sqlite3/NOTICE",
            "/usr/share/doc/libaprutil1-dbd-sqlite3/changelog.Debian.gz",
            "/usr/share/doc/libaprutil1-dbd-sqlite3/changelog.gz",
            "/usr/share/doc/libaprutil1-dbd-sqlite3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libaprutil1-ldap@1.6.3-3+deb13u1",
          "Name": "libaprutil1-ldap",
          "Identifier": {
            "PURL": "pkg:deb/debian/libaprutil1-ldap@1.6.3-3%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "763b9a9957612620"
          },
          "Version": "1.6.3",
          "Release": "3+deb13u1",
          "Arch": "amd64",
          "SrcName": "apr-util",
          "SrcVersion": "1.6.3",
          "SrcRelease": "3+deb13u1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Maintainer": "Debian Apache Maintainers \u003cdebian-apache@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaprutil1t64@1.6.3-3+deb13u1",
            "libc6@2.41-12+deb13u4",
            "libldap2@2.6.10+dfsg-1"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/apr-util-1/apr_ldap-1.so",
            "/usr/share/doc/libaprutil1-ldap/NOTICE",
            "/usr/share/doc/libaprutil1-ldap/changelog.Debian.gz",
            "/usr/share/doc/libaprutil1-ldap/changelog.gz",
            "/usr/share/doc/libaprutil1-ldap/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libaprutil1t64@1.6.3-3+deb13u1",
          "Name": "libaprutil1t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libaprutil1t64@1.6.3-3%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "a07b674e81261f7b"
          },
          "Version": "1.6.3",
          "Release": "3+deb13u1",
          "Arch": "amd64",
          "SrcName": "apr-util",
          "SrcVersion": "1.6.3",
          "SrcRelease": "3+deb13u1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Maintainer": "Debian Apache Maintainers \u003cdebian-apache@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libapr1t64@1.7.5-1",
            "libc6@2.41-12+deb13u4",
            "libcrypt1@1:4.4.38-1",
            "libdb5.3t64@5.3.28+dfsg2-9",
            "libexpat1@2.9.0-1~deb13u1",
            "libgdbm6t64@1.24-2",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/apr-util-1/apr_crypto_openssl-1.so",
            "/usr/lib/x86_64-linux-gnu/apr-util-1/apr_dbm_db-1.so",
            "/usr/lib/x86_64-linux-gnu/apr-util-1/apr_dbm_gdbm-1.so",
            "/usr/lib/x86_64-linux-gnu/libaprutil-1.so.0.6.3",
            "/usr/share/doc/libaprutil1t64/NOTICE",
            "/usr/share/doc/libaprutil1t64/changelog.Debian.gz",
            "/usr/share/doc/libaprutil1t64/changelog.gz",
            "/usr/share/doc/libaprutil1t64/copyright",
            "/usr/share/lintian/overrides/libaprutil1t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libapt-pkg7.0@3.0.3",
          "Name": "libapt-pkg7.0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libapt-pkg7.0@3.0.3?arch=amd64\u0026distro=debian-13.7",
            "UID": "158032a20d7e3dfd"
          },
          "Version": "3.0.3",
          "Arch": "amd64",
          "SrcName": "apt",
          "SrcVersion": "3.0.3",
          "Licenses": [
            "GPL-2.0-or-later",
            "curl",
            "BSD-3-Clause",
            "MIT",
            "GPL-2.0-only"
          ],
          "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "liblz4-1@1.10.0-4",
            "liblzma5@5.8.1-1+deb13u2",
            "libssl3t64@3.5.7-1~deb13u3",
            "libstdc++6@14.2.0-19",
            "libsystemd0@257.13-1~deb13u1",
            "libudev1@257.13-1~deb13u1",
            "libxxhash0@0.8.3-2",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libapt-pkg.so.7.0.0",
            "/usr/share/doc/libapt-pkg7.0/NEWS.Debian.gz",
            "/usr/share/doc/libapt-pkg7.0/changelog.gz",
            "/usr/share/doc/libapt-pkg7.0/copyright",
            "/usr/share/locale/ar/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/ast/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/bg/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/bs/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/ca/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/cs/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/cy/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/da/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/de/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/dz/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/el/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/es/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/eu/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/fi/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/fr/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/gl/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/hu/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/it/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/ja/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/km/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/ko/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/ku/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/lt/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/mr/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/nb/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/ne/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/nl/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/nn/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/pl/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/pt/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/ro/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/ru/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/sk/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/sl/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/sv/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/th/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/tl/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/tr/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/uk/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/vi/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/libapt-pkg7.0.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/libapt-pkg7.0.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libargon2-1@0~20190702+dfsg-4+b2",
          "Name": "libargon2-1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libargon2-1@0~20190702%2Bdfsg-4%2Bb2?arch=amd64\u0026distro=debian-13.7",
            "UID": "42d895446aeee2c9"
          },
          "Version": "0~20190702+dfsg",
          "Release": "4+b2",
          "Arch": "amd64",
          "SrcName": "argon2",
          "SrcVersion": "0~20190702+dfsg",
          "SrcRelease": "4",
          "Licenses": [
            "CC0-1.0",
            "Apache-2.0"
          ],
          "Maintainer": "Debian Security Tools \u003cteam+pkg-security@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:83cc9b31906fa96474ec2d6137375a26b1fc9f1050e092277613b0f193686e96"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libargon2.so.1",
            "/usr/share/doc/libargon2-1/changelog.Debian.amd64.gz",
            "/usr/share/doc/libargon2-1/changelog.Debian.gz",
            "/usr/share/doc/libargon2-1/changelog.gz",
            "/usr/share/doc/libargon2-1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libasan8@14.2.0-19",
          "Name": "libasan8",
          "Identifier": {
            "PURL": "pkg:deb/debian/libasan8@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "353d15f101428ebc"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libasan.so.8.0.0",
            "/usr/share/lintian/overrides/libasan8"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libatomic1@14.2.0-19",
          "Name": "libatomic1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libatomic1@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "fb414674fe485f4c"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libatomic.so.1.2.0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libattr1@1:2.5.2-3",
          "Name": "libattr1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libattr1@2.5.2-3?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "d04226e5c9c60381"
          },
          "Version": "2.5.2",
          "Release": "3",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "attr",
          "SrcVersion": "2.5.2",
          "SrcRelease": "3",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.0-or-later",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libattr.so.1.1.2502",
            "/usr/share/doc/libattr1/changelog.Debian.gz",
            "/usr/share/doc/libattr1/changelog.gz",
            "/usr/share/doc/libattr1/copyright",
            "/usr/share/lintian/overrides/libattr1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libaudit-common@1:4.0.2-2+deb13u1",
          "Name": "libaudit-common",
          "Identifier": {
            "PURL": "pkg:deb/debian/libaudit-common@4.0.2-2%2Bdeb13u1?arch=all\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "18dd5eb82cef3db0"
          },
          "Version": "4.0.2",
          "Release": "2+deb13u1",
          "Epoch": 1,
          "Arch": "all",
          "SrcName": "audit",
          "SrcVersion": "4.0.2",
          "SrcRelease": "2+deb13u1",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.1-only",
            "GPL-1.0-only"
          ],
          "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/libaudit-common/changelog.Debian.gz",
            "/usr/share/doc/libaudit-common/changelog.gz",
            "/usr/share/doc/libaudit-common/copyright",
            "/usr/share/man/man5/libaudit.conf.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libaudit1@1:4.0.2-2+deb13u1",
          "Name": "libaudit1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libaudit1@4.0.2-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "f2916f6572e51444"
          },
          "Version": "4.0.2",
          "Release": "2+deb13u1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "audit",
          "SrcVersion": "4.0.2",
          "SrcRelease": "2+deb13u1",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.1-only",
            "GPL-1.0-only"
          ],
          "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit-common@1:4.0.2-2+deb13u1",
            "libc6@2.41-12+deb13u4",
            "libcap-ng0@0.8.5-4+b1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libaudit.so.1.0.0",
            "/usr/share/doc/libaudit1/changelog.Debian.gz",
            "/usr/share/doc/libaudit1/changelog.gz",
            "/usr/share/doc/libaudit1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libbinutils@2.44-3",
          "Name": "libbinutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/libbinutils@2.44-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "859a065e4aaa265d"
          },
          "Version": "2.44",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "binutils",
          "SrcVersion": "2.44",
          "SrcRelease": "3",
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "binutils-common@2.44-3",
            "libc6@2.41-12+deb13u4",
            "libsframe1@2.44-3",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libbfd-2.44-system.so",
            "/usr/lib/x86_64-linux-gnu/libopcodes-2.44-system.so",
            "/usr/share/lintian/overrides/libbinutils"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libblkid-dev@2.41.5-0+deb13u1",
          "Name": "libblkid-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libblkid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1a3007c8f0bb9de0"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libblkid1@2.41.5-0+deb13u1",
            "libc6-dev@2.41-12+deb13u4",
            "uuid-dev@2.41.5-0+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/blkid/blkid.h",
            "/usr/lib/x86_64-linux-gnu/libblkid.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/blkid.pc",
            "/usr/share/doc/libblkid-dev/NEWS.Debian.gz",
            "/usr/share/doc/libblkid-dev/changelog.Debian.gz",
            "/usr/share/doc/libblkid-dev/changelog.gz",
            "/usr/share/doc/libblkid-dev/copyright",
            "/usr/share/man/man3/libblkid.3.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libblkid1@2.41.5-0+deb13u1",
          "Name": "libblkid1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e20c3ed37f6020d7"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libblkid.so.1.1.0",
            "/usr/share/doc/libblkid1/NEWS.Debian.gz",
            "/usr/share/doc/libblkid1/changelog.Debian.gz",
            "/usr/share/doc/libblkid1/changelog.gz",
            "/usr/share/doc/libblkid1/copyright",
            "/usr/share/lintian/overrides/libblkid1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libbrotli1@1.1.0-2+b7",
          "Name": "libbrotli1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libbrotli1@1.1.0-2%2Bb7?arch=amd64\u0026distro=debian-13.7",
            "UID": "a4f4e37cbdd6d674"
          },
          "Version": "1.1.0",
          "Release": "2+b7",
          "Arch": "amd64",
          "SrcName": "brotli",
          "SrcVersion": "1.1.0",
          "SrcRelease": "2",
          "Licenses": [
            "MIT"
          ],
          "Maintainer": "Tomasz Buchert \u003ctomasz@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libbrotlicommon.so.1.1.0",
            "/usr/lib/x86_64-linux-gnu/libbrotlidec.so.1.1.0",
            "/usr/lib/x86_64-linux-gnu/libbrotlienc.so.1.1.0",
            "/usr/share/doc/libbrotli1/changelog.Debian.amd64.gz",
            "/usr/share/doc/libbrotli1/changelog.Debian.gz",
            "/usr/share/doc/libbrotli1/changelog.gz",
            "/usr/share/doc/libbrotli1/copyright",
            "/usr/share/lintian/overrides/libbrotli1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libbsd0@0.12.2-2",
          "Name": "libbsd0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libbsd0@0.12.2-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "1de87442fee280ff"
          },
          "Version": "0.12.2",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libbsd",
          "SrcVersion": "0.12.2",
          "SrcRelease": "2",
          "Licenses": [
            "BSD-3-Clause",
            "BSD-3-clause-Regents",
            "BSD-2-Clause-NetBSD",
            "BSD-3-clause-author",
            "BSD-3-clause-John-Birrell",
            "BSD-5-clause-Peter-Wemm",
            "BSD-2-Clause",
            "BSD-2-clause-verbatim",
            "BSD-2-clause-author",
            "ISC",
            "ISC-Original",
            "MIT",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libmd0@1.1.0-2+b1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libbsd.so.0.12.2",
            "/usr/share/doc/libbsd0/changelog.Debian.gz",
            "/usr/share/doc/libbsd0/changelog.gz",
            "/usr/share/doc/libbsd0/copyright",
            "/usr/share/lintian/overrides/libbsd0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libbz2-1.0@1.0.8-6",
          "Name": "libbz2-1.0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libbz2-1.0@1.0.8-6?arch=amd64\u0026distro=debian-13.7",
            "UID": "3589bfcff9e95a4f"
          },
          "Version": "1.0.8",
          "Release": "6",
          "Arch": "amd64",
          "SrcName": "bzip2",
          "SrcVersion": "1.0.8",
          "SrcRelease": "6",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-only"
          ],
          "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4",
            "/usr/share/doc/libbz2-1.0/changelog.Debian.gz",
            "/usr/share/doc/libbz2-1.0/changelog.gz",
            "/usr/share/doc/libbz2-1.0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libc-bin@2.41-12+deb13u4",
          "Name": "libc-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/libc-bin@2.41-12%2Bdeb13u4?arch=amd64\u0026distro=debian-13.7",
            "UID": "5ccd64afecf0b4d0"
          },
          "Version": "2.41",
          "Release": "12+deb13u4",
          "Arch": "amd64",
          "SrcName": "glibc",
          "SrcVersion": "2.41",
          "SrcRelease": "12+deb13u4",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.0-or-later",
            "LGPL-2.1+-with-link-exception",
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "GPL-2+-with-link-exception",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "FSFAP",
            "Carnegie",
            "Inner-Net",
            "MIT-like-Lord",
            "BSD-like-Spencer",
            "PCRE",
            "BSD-3-clause-Carnegie",
            "Unicode-DFS-2016",
            "BSL-1.0",
            "SunPro",
            "CORE-MATH",
            "BSD-3-clause-Berkeley",
            "BSD-3-clause-WIDE",
            "BSD-2-Clause",
            "BSD-3-clause-Oracle",
            "DEC",
            "IBM",
            "ISC",
            "Univ-Coimbra",
            "public-domain",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/getconf",
            "/usr/bin/getent",
            "/usr/bin/iconv",
            "/usr/bin/ldd",
            "/usr/bin/locale",
            "/usr/bin/localedef",
            "/usr/bin/pldd",
            "/usr/bin/tzselect",
            "/usr/bin/zdump",
            "/usr/lib/locale/C.utf8/LC_ADDRESS",
            "/usr/lib/locale/C.utf8/LC_COLLATE",
            "/usr/lib/locale/C.utf8/LC_CTYPE",
            "/usr/lib/locale/C.utf8/LC_IDENTIFICATION",
            "/usr/lib/locale/C.utf8/LC_MEASUREMENT",
            "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES",
            "/usr/lib/locale/C.utf8/LC_MONETARY",
            "/usr/lib/locale/C.utf8/LC_NAME",
            "/usr/lib/locale/C.utf8/LC_NUMERIC",
            "/usr/lib/locale/C.utf8/LC_PAPER",
            "/usr/lib/locale/C.utf8/LC_TELEPHONE",
            "/usr/lib/locale/C.utf8/LC_TIME",
            "/usr/sbin/iconvconfig",
            "/usr/sbin/ldconfig",
            "/usr/sbin/zic",
            "/usr/share/doc/libc-bin/changelog.Debian.gz",
            "/usr/share/doc/libc-bin/changelog.gz",
            "/usr/share/doc/libc-bin/copyright",
            "/usr/share/libc-bin/nsswitch.conf",
            "/usr/share/lintian/overrides/libc-bin",
            "/usr/share/man/man1/getconf.1.gz",
            "/usr/share/man/man1/tzselect.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libc-dev-bin@2.41-12+deb13u4",
          "Name": "libc-dev-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/libc-dev-bin@2.41-12%2Bdeb13u4?arch=amd64\u0026distro=debian-13.7",
            "UID": "b4d39fcc1cfbd906"
          },
          "Version": "2.41",
          "Release": "12+deb13u4",
          "Arch": "amd64",
          "SrcName": "glibc",
          "SrcVersion": "2.41",
          "SrcRelease": "12+deb13u4",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.0-or-later",
            "LGPL-2.1+-with-link-exception",
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "GPL-2+-with-link-exception",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "FSFAP",
            "Carnegie",
            "Inner-Net",
            "MIT-like-Lord",
            "BSD-like-Spencer",
            "PCRE",
            "BSD-3-clause-Carnegie",
            "Unicode-DFS-2016",
            "BSL-1.0",
            "SunPro",
            "CORE-MATH",
            "BSD-3-clause-Berkeley",
            "BSD-3-clause-WIDE",
            "BSD-2-Clause",
            "BSD-3-clause-Oracle",
            "DEC",
            "IBM",
            "ISC",
            "Univ-Coimbra",
            "public-domain",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/gencat",
            "/usr/share/doc/libc-dev-bin/changelog.Debian.gz",
            "/usr/share/doc/libc-dev-bin/changelog.gz",
            "/usr/share/doc/libc-dev-bin/copyright",
            "/usr/share/man/man1/gencat.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libc6@2.41-12+deb13u4",
          "Name": "libc6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u4?arch=amd64\u0026distro=debian-13.7",
            "UID": "ff8541d1996042ee"
          },
          "Version": "2.41",
          "Release": "12+deb13u4",
          "Arch": "amd64",
          "SrcName": "glibc",
          "SrcVersion": "2.41",
          "SrcRelease": "12+deb13u4",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.0-or-later",
            "LGPL-2.1+-with-link-exception",
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "GPL-2+-with-link-exception",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "FSFAP",
            "Carnegie",
            "Inner-Net",
            "MIT-like-Lord",
            "BSD-like-Spencer",
            "PCRE",
            "BSD-3-clause-Carnegie",
            "Unicode-DFS-2016",
            "BSL-1.0",
            "SunPro",
            "CORE-MATH",
            "BSD-3-clause-Berkeley",
            "BSD-3-clause-WIDE",
            "BSD-2-Clause",
            "BSD-3-clause-Oracle",
            "DEC",
            "IBM",
            "ISC",
            "Univ-Coimbra",
            "public-domain",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libgcc-s1@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/gconv/ANSI_X3.110.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ARMSCII-8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ASMO_449.so",
            "/usr/lib/x86_64-linux-gnu/gconv/BIG5.so",
            "/usr/lib/x86_64-linux-gnu/gconv/BIG5HKSCS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/BRF.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP10007.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1125.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1250.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1251.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1252.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1253.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1254.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1255.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1256.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1257.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1258.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP737.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP770.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP771.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP772.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP773.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP774.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP775.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP932.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CSN_369103.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CWI.so",
            "/usr/lib/x86_64-linux-gnu/gconv/DEC-MCS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE-A.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-CA-FR.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO-A.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-A.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-S.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE-A.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FR.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IS-FRISS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-PT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-UK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-US.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ECMA-CYRILLIC.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-CN.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-JISX0213.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP-MS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-KR.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-TW.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GB18030.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GBBIG5.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GBGBK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GBK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-ACADEMY.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-PS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GOST_19768-74.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GREEK-CCITT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GREEK7-OLD.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GREEK7.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-GREEK8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN9.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-THAI8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-TURKISH8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM037.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM038.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1004.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1008.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1008_420.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1025.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1026.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1046.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1047.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1097.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1112.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1122.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1123.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1124.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1129.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1130.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1132.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1133.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1137.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1140.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1141.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1142.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1143.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1144.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1145.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1146.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1147.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1148.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1149.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1153.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1154.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1155.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1156.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1157.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1158.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1160.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1161.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1162.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1163.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1164.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1166.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1167.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM12712.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1364.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1371.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1388.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1390.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1399.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM16804.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM256.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM273.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM274.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM275.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM277.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM278.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM280.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM281.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM284.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM285.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM290.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM297.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM420.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM423.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM424.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM437.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM4517.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM4899.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM4909.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM4971.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM500.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM5347.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM803.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM850.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM851.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM852.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM855.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM856.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM857.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM858.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM860.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM861.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM862.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM863.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM864.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM865.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM866.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM866NAV.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM868.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM869.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM870.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM871.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM874.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM875.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM880.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM891.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM901.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM902.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM903.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM9030.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM904.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM905.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM9066.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM918.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM921.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM922.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM930.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM932.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM933.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM935.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM937.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM939.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM943.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM9448.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IEC_P27-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/INIS-8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/INIS-CYRILLIC.so",
            "/usr/lib/x86_64-linux-gnu/gconv/INIS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISIRI-3342.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN-EXT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP-3.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-KR.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-197.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-209.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO646.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-10.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-11.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-13.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-14.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-15.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-16.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-2.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-3.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-4.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-5.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-6.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-7.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9E.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_10367-BOX.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_11548-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_2033.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427-EXT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_5428.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937-2.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937.so",
            "/usr/lib/x86_64-linux-gnu/gconv/JOHAB.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI-8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI8-R.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI8-RU.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI8-T.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI8-U.so",
            "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MAC-CENTRALEUROPE.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MAC-IS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MAC-SAMI.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MAC-UK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MACINTOSH.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MIK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/NATS-DANO.so",
            "/usr/lib/x86_64-linux-gnu/gconv/NATS-SEFI.so",
            "/usr/lib/x86_64-linux-gnu/gconv/PT154.so",
            "/usr/lib/x86_64-linux-gnu/gconv/RK1048.so",
            "/usr/lib/x86_64-linux-gnu/gconv/SAMI-WS2.so",
            "/usr/lib/x86_64-linux-gnu/gconv/SHIFT_JISX0213.so",
            "/usr/lib/x86_64-linux-gnu/gconv/SJIS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/T.61.so",
            "/usr/lib/x86_64-linux-gnu/gconv/TCVN5712-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/TIS-620.so",
            "/usr/lib/x86_64-linux-gnu/gconv/TSCII.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UHC.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UNICODE.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UTF-16.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UTF-32.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UTF-7.so",
            "/usr/lib/x86_64-linux-gnu/gconv/VISCII.so",
            "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules",
            "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache",
            "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf",
            "/usr/lib/x86_64-linux-gnu/gconv/libCNS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libGB.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libISOIR165.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libJIS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libJISX0213.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libKSC.so",
            "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2",
            "/usr/lib/x86_64-linux-gnu/libBrokenLocale.so.1",
            "/usr/lib/x86_64-linux-gnu/libanl.so.1",
            "/usr/lib/x86_64-linux-gnu/libc.so.6",
            "/usr/lib/x86_64-linux-gnu/libc_malloc_debug.so.0",
            "/usr/lib/x86_64-linux-gnu/libdl.so.2",
            "/usr/lib/x86_64-linux-gnu/libm.so.6",
            "/usr/lib/x86_64-linux-gnu/libmemusage.so",
            "/usr/lib/x86_64-linux-gnu/libmvec.so.1",
            "/usr/lib/x86_64-linux-gnu/libnsl.so.1",
            "/usr/lib/x86_64-linux-gnu/libnss_compat.so.2",
            "/usr/lib/x86_64-linux-gnu/libnss_dns.so.2",
            "/usr/lib/x86_64-linux-gnu/libnss_files.so.2",
            "/usr/lib/x86_64-linux-gnu/libnss_hesiod.so.2",
            "/usr/lib/x86_64-linux-gnu/libpcprofile.so",
            "/usr/lib/x86_64-linux-gnu/libpthread.so.0",
            "/usr/lib/x86_64-linux-gnu/libresolv.so.2",
            "/usr/lib/x86_64-linux-gnu/librt.so.1",
            "/usr/lib/x86_64-linux-gnu/libthread_db.so.1",
            "/usr/lib/x86_64-linux-gnu/libutil.so.1",
            "/usr/share/doc/libc6/NEWS.Debian.gz",
            "/usr/share/doc/libc6/NEWS.gz",
            "/usr/share/doc/libc6/README.Debian.gz",
            "/usr/share/doc/libc6/README.hesiod.gz",
            "/usr/share/doc/libc6/changelog.Debian.gz",
            "/usr/share/doc/libc6/changelog.gz",
            "/usr/share/doc/libc6/copyright",
            "/usr/share/lintian/overrides/libc6"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libc6-dev@2.41-12+deb13u4",
          "Name": "libc6-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libc6-dev@2.41-12%2Bdeb13u4?arch=amd64\u0026distro=debian-13.7",
            "UID": "5806de8f90ee2ced"
          },
          "Version": "2.41",
          "Release": "12+deb13u4",
          "Arch": "amd64",
          "SrcName": "glibc",
          "SrcVersion": "2.41",
          "SrcRelease": "12+deb13u4",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.0-or-later",
            "LGPL-2.1+-with-link-exception",
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "GPL-2+-with-link-exception",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "FSFAP",
            "Carnegie",
            "Inner-Net",
            "MIT-like-Lord",
            "BSD-like-Spencer",
            "PCRE",
            "BSD-3-clause-Carnegie",
            "Unicode-DFS-2016",
            "BSL-1.0",
            "SunPro",
            "CORE-MATH",
            "BSD-3-clause-Berkeley",
            "BSD-3-clause-WIDE",
            "BSD-2-Clause",
            "BSD-3-clause-Oracle",
            "DEC",
            "IBM",
            "ISC",
            "Univ-Coimbra",
            "public-domain",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc-dev-bin@2.41-12+deb13u4",
            "libc6@2.41-12+deb13u4",
            "libcrypt-dev@1:4.4.38-1",
            "linux-libc-dev@6.12.113-1",
            "rpcsvc-proto@1.4.3-1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/include/aio.h",
            "/usr/include/aliases.h",
            "/usr/include/alloca.h",
            "/usr/include/ar.h",
            "/usr/include/argp.h",
            "/usr/include/argz.h",
            "/usr/include/arpa/ftp.h",
            "/usr/include/arpa/inet.h",
            "/usr/include/arpa/nameser.h",
            "/usr/include/arpa/nameser_compat.h",
            "/usr/include/arpa/telnet.h",
            "/usr/include/arpa/tftp.h",
            "/usr/include/assert.h",
            "/usr/include/byteswap.h",
            "/usr/include/complex.h",
            "/usr/include/cpio.h",
            "/usr/include/ctype.h",
            "/usr/include/dirent.h",
            "/usr/include/dlfcn.h",
            "/usr/include/elf.h",
            "/usr/include/endian.h",
            "/usr/include/envz.h",
            "/usr/include/err.h",
            "/usr/include/errno.h",
            "/usr/include/error.h",
            "/usr/include/execinfo.h",
            "/usr/include/fcntl.h",
            "/usr/include/features-time64.h",
            "/usr/include/features.h",
            "/usr/include/fenv.h",
            "/usr/include/finclude/x86_64-linux-gnu/math-vector-fortran.h",
            "/usr/include/fmtmsg.h",
            "/usr/include/fnmatch.h",
            "/usr/include/fstab.h",
            "/usr/include/fts.h",
            "/usr/include/ftw.h",
            "/usr/include/gconv.h",
            "/usr/include/getopt.h",
            "/usr/include/glob.h",
            "/usr/include/gnu-versions.h",
            "/usr/include/grp.h",
            "/usr/include/gshadow.h",
            "/usr/include/iconv.h",
            "/usr/include/ifaddrs.h",
            "/usr/include/inttypes.h",
            "/usr/include/langinfo.h",
            "/usr/include/lastlog.h",
            "/usr/include/libgen.h",
            "/usr/include/libintl.h",
            "/usr/include/limits.h",
            "/usr/include/link.h",
            "/usr/include/locale.h",
            "/usr/include/malloc.h",
            "/usr/include/math.h",
            "/usr/include/mcheck.h",
            "/usr/include/memory.h",
            "/usr/include/mntent.h",
            "/usr/include/monetary.h",
            "/usr/include/mqueue.h",
            "/usr/include/net/ethernet.h",
            "/usr/include/net/if.h",
            "/usr/include/net/if_arp.h",
            "/usr/include/net/if_packet.h",
            "/usr/include/net/if_ppp.h",
            "/usr/include/net/if_shaper.h",
            "/usr/include/net/if_slip.h",
            "/usr/include/net/ppp-comp.h",
            "/usr/include/net/ppp_defs.h",
            "/usr/include/net/route.h",
            "/usr/include/netash/ash.h",
            "/usr/include/netatalk/at.h",
            "/usr/include/netax25/ax25.h",
            "/usr/include/netdb.h",
            "/usr/include/neteconet/ec.h",
            "/usr/include/netinet/ether.h",
            "/usr/include/netinet/icmp6.h",
            "/usr/include/netinet/if_ether.h",
            "/usr/include/netinet/if_fddi.h",
            "/usr/include/netinet/if_tr.h",
            "/usr/include/netinet/igmp.h",
            "/usr/include/netinet/in.h",
            "/usr/include/netinet/in_systm.h",
            "/usr/include/netinet/ip.h",
            "/usr/include/netinet/ip6.h",
            "/usr/include/netinet/ip_icmp.h",
            "/usr/include/netinet/tcp.h",
            "/usr/include/netinet/udp.h",
            "/usr/include/netipx/ipx.h",
            "/usr/include/netiucv/iucv.h",
            "/usr/include/netpacket/packet.h",
            "/usr/include/netrom/netrom.h",
            "/usr/include/netrose/rose.h",
            "/usr/include/nfs/nfs.h",
            "/usr/include/nl_types.h",
            "/usr/include/nss.h",
            "/usr/include/obstack.h",
            "/usr/include/paths.h",
            "/usr/include/poll.h",
            "/usr/include/printf.h",
            "/usr/include/proc_service.h",
            "/usr/include/protocols/routed.h",
            "/usr/include/protocols/rwhod.h",
            "/usr/include/protocols/talkd.h",
            "/usr/include/protocols/timed.h",
            "/usr/include/pthread.h",
            "/usr/include/pty.h",
            "/usr/include/pwd.h",
            "/usr/include/re_comp.h",
            "/usr/include/regex.h",
            "/usr/include/regexp.h",
            "/usr/include/resolv.h",
            "/usr/include/rpc/netdb.h",
            "/usr/include/sched.h",
            "/usr/include/scsi/scsi.h",
            "/usr/include/scsi/scsi_ioctl.h",
            "/usr/include/scsi/sg.h",
            "/usr/include/search.h",
            "/usr/include/semaphore.h",
            "/usr/include/setjmp.h",
            "/usr/include/sgtty.h",
            "/usr/include/shadow.h",
            "/usr/include/signal.h",
            "/usr/include/spawn.h",
            "/usr/include/stab.h",
            "/usr/include/stdbit.h",
            "/usr/include/stdc-predef.h",
            "/usr/include/stdint.h",
            "/usr/include/stdio.h",
            "/usr/include/stdio_ext.h",
            "/usr/include/stdlib.h",
            "/usr/include/string.h",
            "/usr/include/strings.h",
            "/usr/include/syscall.h",
            "/usr/include/sysexits.h",
            "/usr/include/syslog.h",
            "/usr/include/tar.h",
            "/usr/include/termio.h",
            "/usr/include/termios.h",
            "/usr/include/tgmath.h",
            "/usr/include/thread_db.h",
            "/usr/include/threads.h",
            "/usr/include/time.h",
            "/usr/include/ttyent.h",
            "/usr/include/uchar.h",
            "/usr/include/ucontext.h",
            "/usr/include/ulimit.h",
            "/usr/include/unistd.h",
            "/usr/include/utime.h",
            "/usr/include/utmp.h",
            "/usr/include/utmpx.h",
            "/usr/include/values.h",
            "/usr/include/wait.h",
            "/usr/include/wchar.h",
            "/usr/include/wctype.h",
            "/usr/include/wordexp.h",
            "/usr/include/x86_64-linux-gnu/a.out.h",
            "/usr/include/x86_64-linux-gnu/bits/a.out.h",
            "/usr/include/x86_64-linux-gnu/bits/argp-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/atomic_wide_counter.h",
            "/usr/include/x86_64-linux-gnu/bits/byteswap.h",
            "/usr/include/x86_64-linux-gnu/bits/cloexec.h",
            "/usr/include/x86_64-linux-gnu/bits/cmathcalls.h",
            "/usr/include/x86_64-linux-gnu/bits/confname.h",
            "/usr/include/x86_64-linux-gnu/bits/cpu-set.h",
            "/usr/include/x86_64-linux-gnu/bits/dirent.h",
            "/usr/include/x86_64-linux-gnu/bits/dirent_ext.h",
            "/usr/include/x86_64-linux-gnu/bits/dl_find_object.h",
            "/usr/include/x86_64-linux-gnu/bits/dlfcn.h",
            "/usr/include/x86_64-linux-gnu/bits/elfclass.h",
            "/usr/include/x86_64-linux-gnu/bits/endian.h",
            "/usr/include/x86_64-linux-gnu/bits/endianness.h",
            "/usr/include/x86_64-linux-gnu/bits/environments.h",
            "/usr/include/x86_64-linux-gnu/bits/epoll.h",
            "/usr/include/x86_64-linux-gnu/bits/err-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/errno.h",
            "/usr/include/x86_64-linux-gnu/bits/error-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/error.h",
            "/usr/include/x86_64-linux-gnu/bits/eventfd.h",
            "/usr/include/x86_64-linux-gnu/bits/fcntl-linux.h",
            "/usr/include/x86_64-linux-gnu/bits/fcntl.h",
            "/usr/include/x86_64-linux-gnu/bits/fcntl2.h",
            "/usr/include/x86_64-linux-gnu/bits/fenv.h",
            "/usr/include/x86_64-linux-gnu/bits/floatn-common.h",
            "/usr/include/x86_64-linux-gnu/bits/floatn.h",
            "/usr/include/x86_64-linux-gnu/bits/flt-eval-method.h",
            "/usr/include/x86_64-linux-gnu/bits/fp-fast.h",
            "/usr/include/x86_64-linux-gnu/bits/fp-logb.h",
            "/usr/include/x86_64-linux-gnu/bits/getopt_core.h",
            "/usr/include/x86_64-linux-gnu/bits/getopt_ext.h",
            "/usr/include/x86_64-linux-gnu/bits/getopt_posix.h",
            "/usr/include/x86_64-linux-gnu/bits/hwcap.h",
            "/usr/include/x86_64-linux-gnu/bits/in.h",
            "/usr/include/x86_64-linux-gnu/bits/indirect-return.h",
            "/usr/include/x86_64-linux-gnu/bits/initspin.h",
            "/usr/include/x86_64-linux-gnu/bits/inotify.h",
            "/usr/include/x86_64-linux-gnu/bits/ioctl-types.h",
            "/usr/include/x86_64-linux-gnu/bits/ioctls.h",
            "/usr/include/x86_64-linux-gnu/bits/ipc-perm.h",
            "/usr/include/x86_64-linux-gnu/bits/ipc.h",
            "/usr/include/x86_64-linux-gnu/bits/ipctypes.h",
            "/usr/include/x86_64-linux-gnu/bits/iscanonical.h",
            "/usr/include/x86_64-linux-gnu/bits/libc-header-start.h",
            "/usr/include/x86_64-linux-gnu/bits/libm-simd-decl-stubs.h",
            "/usr/include/x86_64-linux-gnu/bits/link.h",
            "/usr/include/x86_64-linux-gnu/bits/link_lavcurrent.h",
            "/usr/include/x86_64-linux-gnu/bits/local_lim.h",
            "/usr/include/x86_64-linux-gnu/bits/locale.h",
            "/usr/include/x86_64-linux-gnu/bits/long-double.h",
            "/usr/include/x86_64-linux-gnu/bits/math-vector.h",
            "/usr/include/x86_64-linux-gnu/bits/mathcalls-helper-functions.h",
            "/usr/include/x86_64-linux-gnu/bits/mathcalls-macros.h",
            "/usr/include/x86_64-linux-gnu/bits/mathcalls-narrow.h",
            "/usr/include/x86_64-linux-gnu/bits/mathcalls.h",
            "/usr/include/x86_64-linux-gnu/bits/mathdef.h",
            "/usr/include/x86_64-linux-gnu/bits/mman-linux.h",
            "/usr/include/x86_64-linux-gnu/bits/mman-map-flags-generic.h",
            "/usr/include/x86_64-linux-gnu/bits/mman-shared.h",
            "/usr/include/x86_64-linux-gnu/bits/mman.h",
            "/usr/include/x86_64-linux-gnu/bits/mman_ext.h",
            "/usr/include/x86_64-linux-gnu/bits/monetary-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/mqueue.h",
            "/usr/include/x86_64-linux-gnu/bits/mqueue2.h",
            "/usr/include/x86_64-linux-gnu/bits/msq.h",
            "/usr/include/x86_64-linux-gnu/bits/netdb.h",
            "/usr/include/x86_64-linux-gnu/bits/param.h",
            "/usr/include/x86_64-linux-gnu/bits/platform/features.h",
            "/usr/include/x86_64-linux-gnu/bits/platform/x86.h",
            "/usr/include/x86_64-linux-gnu/bits/poll.h",
            "/usr/include/x86_64-linux-gnu/bits/poll2.h",
            "/usr/include/x86_64-linux-gnu/bits/posix1_lim.h",
            "/usr/include/x86_64-linux-gnu/bits/posix2_lim.h",
            "/usr/include/x86_64-linux-gnu/bits/posix_opt.h",
            "/usr/include/x86_64-linux-gnu/bits/printf-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/procfs-extra.h",
            "/usr/include/x86_64-linux-gnu/bits/procfs-id.h",
            "/usr/include/x86_64-linux-gnu/bits/procfs-prregset.h",
            "/usr/include/x86_64-linux-gnu/bits/procfs.h",
            "/usr/include/x86_64-linux-gnu/bits/pthread_stack_min-dynamic.h",
            "/usr/include/x86_64-linux-gnu/bits/pthread_stack_min.h",
            "/usr/include/x86_64-linux-gnu/bits/pthreadtypes-arch.h",
            "/usr/include/x86_64-linux-gnu/bits/pthreadtypes.h",
            "/usr/include/x86_64-linux-gnu/bits/ptrace-shared.h",
            "/usr/include/x86_64-linux-gnu/bits/resource.h",
            "/usr/include/x86_64-linux-gnu/bits/rseq.h",
            "/usr/include/x86_64-linux-gnu/bits/sched.h",
            "/usr/include/x86_64-linux-gnu/bits/select-decl.h",
            "/usr/include/x86_64-linux-gnu/bits/select.h",
            "/usr/include/x86_64-linux-gnu/bits/select2.h",
            "/usr/include/x86_64-linux-gnu/bits/sem.h",
            "/usr/include/x86_64-linux-gnu/bits/semaphore.h",
            "/usr/include/x86_64-linux-gnu/bits/setjmp.h",
            "/usr/include/x86_64-linux-gnu/bits/setjmp2.h",
            "/usr/include/x86_64-linux-gnu/bits/shm.h",
            "/usr/include/x86_64-linux-gnu/bits/shmlba.h",
            "/usr/include/x86_64-linux-gnu/bits/sigaction.h",
            "/usr/include/x86_64-linux-gnu/bits/sigcontext.h",
            "/usr/include/x86_64-linux-gnu/bits/sigevent-consts.h",
            "/usr/include/x86_64-linux-gnu/bits/siginfo-arch.h",
            "/usr/include/x86_64-linux-gnu/bits/siginfo-consts-arch.h",
            "/usr/include/x86_64-linux-gnu/bits/siginfo-consts.h",
            "/usr/include/x86_64-linux-gnu/bits/signal_ext.h",
            "/usr/include/x86_64-linux-gnu/bits/signalfd.h",
            "/usr/include/x86_64-linux-gnu/bits/signum-arch.h",
            "/usr/include/x86_64-linux-gnu/bits/signum-generic.h",
            "/usr/include/x86_64-linux-gnu/bits/sigstack.h",
            "/usr/include/x86_64-linux-gnu/bits/sigstksz.h",
            "/usr/include/x86_64-linux-gnu/bits/sigthread.h",
            "/usr/include/x86_64-linux-gnu/bits/sockaddr.h",
            "/usr/include/x86_64-linux-gnu/bits/socket-constants.h",
            "/usr/include/x86_64-linux-gnu/bits/socket.h",
            "/usr/include/x86_64-linux-gnu/bits/socket2.h",
            "/usr/include/x86_64-linux-gnu/bits/socket_type.h",
            "/usr/include/x86_64-linux-gnu/bits/spawn_ext.h",
            "/usr/include/x86_64-linux-gnu/bits/ss_flags.h",
            "/usr/include/x86_64-linux-gnu/bits/stab.def",
            "/usr/include/x86_64-linux-gnu/bits/stat.h",
            "/usr/include/x86_64-linux-gnu/bits/statfs.h",
            "/usr/include/x86_64-linux-gnu/bits/statvfs.h",
            "/usr/include/x86_64-linux-gnu/bits/statx-generic.h",
            "/usr/include/x86_64-linux-gnu/bits/statx.h",
            "/usr/include/x86_64-linux-gnu/bits/stdint-intn.h",
            "/usr/include/x86_64-linux-gnu/bits/stdint-least.h",
            "/usr/include/x86_64-linux-gnu/bits/stdint-uintn.h",
            "/usr/include/x86_64-linux-gnu/bits/stdio-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/stdio.h",
            "/usr/include/x86_64-linux-gnu/bits/stdio2-decl.h",
            "/usr/include/x86_64-linux-gnu/bits/stdio2.h",
            "/usr/include/x86_64-linux-gnu/bits/stdio_lim.h",
            "/usr/include/x86_64-linux-gnu/bits/stdlib-bsearch.h",
            "/usr/include/x86_64-linux-gnu/bits/stdlib-float.h",
            "/usr/include/x86_64-linux-gnu/bits/stdlib-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/stdlib.h",
            "/usr/include/x86_64-linux-gnu/bits/string_fortified.h",
            "/usr/include/x86_64-linux-gnu/bits/strings_fortified.h",
            "/usr/include/x86_64-linux-gnu/bits/struct_mutex.h",
            "/usr/include/x86_64-linux-gnu/bits/struct_rwlock.h",
            "/usr/include/x86_64-linux-gnu/bits/struct_stat.h",
            "/usr/include/x86_64-linux-gnu/bits/struct_stat_time64_helper.h",
            "/usr/include/x86_64-linux-gnu/bits/syscall.h",
            "/usr/include/x86_64-linux-gnu/bits/syslog-decl.h",
            "/usr/include/x86_64-linux-gnu/bits/syslog-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/syslog-path.h",
            "/usr/include/x86_64-linux-gnu/bits/syslog.h",
            "/usr/include/x86_64-linux-gnu/bits/sysmacros.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-baud.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-c_cc.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-c_cflag.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-c_iflag.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-c_lflag.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-c_oflag.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-misc.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-struct.h",
            "/usr/include/x86_64-linux-gnu/bits/termios-tcflow.h",
            "/usr/include/x86_64-linux-gnu/bits/termios.h",
            "/usr/include/x86_64-linux-gnu/bits/thread-shared-types.h",
            "/usr/include/x86_64-linux-gnu/bits/time.h",
            "/usr/include/x86_64-linux-gnu/bits/time64.h",
            "/usr/include/x86_64-linux-gnu/bits/timerfd.h",
            "/usr/include/x86_64-linux-gnu/bits/timesize.h",
            "/usr/include/x86_64-linux-gnu/bits/timex.h",
            "/usr/include/x86_64-linux-gnu/bits/types.h",
            "/usr/include/x86_64-linux-gnu/bits/types/FILE.h",
            "/usr/include/x86_64-linux-gnu/bits/types/__FILE.h",
            "/usr/include/x86_64-linux-gnu/bits/types/__fpos64_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/__fpos_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/__locale_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/__mbstate_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/__sigset_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/__sigval_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/clock_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/clockid_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/cookie_io_functions_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/error_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/idtype_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/locale_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/mbstate_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/res_state.h",
            "/usr/include/x86_64-linux-gnu/bits/types/sig_atomic_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/sigevent_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/siginfo_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/sigset_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/sigval_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/stack_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_FILE.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct___jmp_buf_tag.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_iovec.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_itimerspec.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_msqid64_ds.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_msqid64_ds_helper.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_msqid_ds.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_osockaddr.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_rusage.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_sched_param.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_semid64_ds.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_semid64_ds_helper.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_semid_ds.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_shmid64_ds.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_shmid64_ds_helper.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_shmid_ds.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_sigstack.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_statx.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_statx_timestamp.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_timeb.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_timespec.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_timeval.h",
            "/usr/include/x86_64-linux-gnu/bits/types/struct_tm.h",
            "/usr/include/x86_64-linux-gnu/bits/types/time_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/timer_t.h",
            "/usr/include/x86_64-linux-gnu/bits/types/wint_t.h",
            "/usr/include/x86_64-linux-gnu/bits/typesizes.h",
            "/usr/include/x86_64-linux-gnu/bits/uintn-identity.h",
            "/usr/include/x86_64-linux-gnu/bits/uio-ext.h",
            "/usr/include/x86_64-linux-gnu/bits/uio_lim.h",
            "/usr/include/x86_64-linux-gnu/bits/unistd-decl.h",
            "/usr/include/x86_64-linux-gnu/bits/unistd.h",
            "/usr/include/x86_64-linux-gnu/bits/unistd_ext.h",
            "/usr/include/x86_64-linux-gnu/bits/utmp.h",
            "/usr/include/x86_64-linux-gnu/bits/utmpx.h",
            "/usr/include/x86_64-linux-gnu/bits/utsname.h",
            "/usr/include/x86_64-linux-gnu/bits/waitflags.h",
            "/usr/include/x86_64-linux-gnu/bits/waitstatus.h",
            "/usr/include/x86_64-linux-gnu/bits/wchar-ldbl.h",
            "/usr/include/x86_64-linux-gnu/bits/wchar.h",
            "/usr/include/x86_64-linux-gnu/bits/wchar2-decl.h",
            "/usr/include/x86_64-linux-gnu/bits/wchar2.h",
            "/usr/include/x86_64-linux-gnu/bits/wctype-wchar.h",
            "/usr/include/x86_64-linux-gnu/bits/wordsize.h",
            "/usr/include/x86_64-linux-gnu/bits/xopen_lim.h",
            "/usr/include/x86_64-linux-gnu/fpu_control.h",
            "/usr/include/x86_64-linux-gnu/gnu/lib-names-64.h",
            "/usr/include/x86_64-linux-gnu/gnu/lib-names.h",
            "/usr/include/x86_64-linux-gnu/gnu/libc-version.h",
            "/usr/include/x86_64-linux-gnu/gnu/stubs-64.h",
            "/usr/include/x86_64-linux-gnu/gnu/stubs.h",
            "/usr/include/x86_64-linux-gnu/ieee754.h",
            "/usr/include/x86_64-linux-gnu/sys/acct.h",
            "/usr/include/x86_64-linux-gnu/sys/auxv.h",
            "/usr/include/x86_64-linux-gnu/sys/bitypes.h",
            "/usr/include/x86_64-linux-gnu/sys/cdefs.h",
            "/usr/include/x86_64-linux-gnu/sys/debugreg.h",
            "/usr/include/x86_64-linux-gnu/sys/dir.h",
            "/usr/include/x86_64-linux-gnu/sys/elf.h",
            "/usr/include/x86_64-linux-gnu/sys/epoll.h",
            "/usr/include/x86_64-linux-gnu/sys/errno.h",
            "/usr/include/x86_64-linux-gnu/sys/eventfd.h",
            "/usr/include/x86_64-linux-gnu/sys/fanotify.h",
            "/usr/include/x86_64-linux-gnu/sys/fcntl.h",
            "/usr/include/x86_64-linux-gnu/sys/file.h",
            "/usr/include/x86_64-linux-gnu/sys/fsuid.h",
            "/usr/include/x86_64-linux-gnu/sys/gmon.h",
            "/usr/include/x86_64-linux-gnu/sys/gmon_out.h",
            "/usr/include/x86_64-linux-gnu/sys/inotify.h",
            "/usr/include/x86_64-linux-gnu/sys/io.h",
            "/usr/include/x86_64-linux-gnu/sys/ioctl.h",
            "/usr/include/x86_64-linux-gnu/sys/ipc.h",
            "/usr/include/x86_64-linux-gnu/sys/kd.h",
            "/usr/include/x86_64-linux-gnu/sys/klog.h",
            "/usr/include/x86_64-linux-gnu/sys/mman.h",
            "/usr/include/x86_64-linux-gnu/sys/mount.h",
            "/usr/include/x86_64-linux-gnu/sys/msg.h",
            "/usr/include/x86_64-linux-gnu/sys/mtio.h",
            "/usr/include/x86_64-linux-gnu/sys/param.h",
            "/usr/include/x86_64-linux-gnu/sys/pci.h",
            "/usr/include/x86_64-linux-gnu/sys/perm.h",
            "/usr/include/x86_64-linux-gnu/sys/personality.h",
            "/usr/include/x86_64-linux-gnu/sys/pidfd.h",
            "/usr/include/x86_64-linux-gnu/sys/platform/x86.h",
            "/usr/include/x86_64-linux-gnu/sys/poll.h",
            "/usr/include/x86_64-linux-gnu/sys/prctl.h",
            "/usr/include/x86_64-linux-gnu/sys/procfs.h",
            "/usr/include/x86_64-linux-gnu/sys/profil.h",
            "/usr/include/x86_64-linux-gnu/sys/ptrace.h",
            "/usr/include/x86_64-linux-gnu/sys/queue.h",
            "/usr/include/x86_64-linux-gnu/sys/quota.h",
            "/usr/include/x86_64-linux-gnu/sys/random.h",
            "/usr/include/x86_64-linux-gnu/sys/raw.h",
            "/usr/include/x86_64-linux-gnu/sys/reboot.h",
            "/usr/include/x86_64-linux-gnu/sys/reg.h",
            "/usr/include/x86_64-linux-gnu/sys/resource.h",
            "/usr/include/x86_64-linux-gnu/sys/rseq.h",
            "/usr/include/x86_64-linux-gnu/sys/select.h",
            "/usr/include/x86_64-linux-gnu/sys/sem.h",
            "/usr/include/x86_64-linux-gnu/sys/sendfile.h",
            "/usr/include/x86_64-linux-gnu/sys/shm.h",
            "/usr/include/x86_64-linux-gnu/sys/signal.h",
            "/usr/include/x86_64-linux-gnu/sys/signalfd.h",
            "/usr/include/x86_64-linux-gnu/sys/single_threaded.h",
            "/usr/include/x86_64-linux-gnu/sys/socket.h",
            "/usr/include/x86_64-linux-gnu/sys/socketvar.h",
            "/usr/include/x86_64-linux-gnu/sys/soundcard.h",
            "/usr/include/x86_64-linux-gnu/sys/stat.h",
            "/usr/include/x86_64-linux-gnu/sys/statfs.h",
            "/usr/include/x86_64-linux-gnu/sys/statvfs.h",
            "/usr/include/x86_64-linux-gnu/sys/swap.h",
            "/usr/include/x86_64-linux-gnu/sys/syscall.h",
            "/usr/include/x86_64-linux-gnu/sys/sysinfo.h",
            "/usr/include/x86_64-linux-gnu/sys/syslog.h",
            "/usr/include/x86_64-linux-gnu/sys/sysmacros.h",
            "/usr/include/x86_64-linux-gnu/sys/termios.h",
            "/usr/include/x86_64-linux-gnu/sys/time.h",
            "/usr/include/x86_64-linux-gnu/sys/timeb.h",
            "/usr/include/x86_64-linux-gnu/sys/timerfd.h",
            "/usr/include/x86_64-linux-gnu/sys/times.h",
            "/usr/include/x86_64-linux-gnu/sys/timex.h",
            "/usr/include/x86_64-linux-gnu/sys/ttychars.h",
            "/usr/include/x86_64-linux-gnu/sys/ttydefaults.h",
            "/usr/include/x86_64-linux-gnu/sys/types.h",
            "/usr/include/x86_64-linux-gnu/sys/ucontext.h",
            "/usr/include/x86_64-linux-gnu/sys/uio.h",
            "/usr/include/x86_64-linux-gnu/sys/un.h",
            "/usr/include/x86_64-linux-gnu/sys/unistd.h",
            "/usr/include/x86_64-linux-gnu/sys/user.h",
            "/usr/include/x86_64-linux-gnu/sys/utsname.h",
            "/usr/include/x86_64-linux-gnu/sys/vfs.h",
            "/usr/include/x86_64-linux-gnu/sys/vlimit.h",
            "/usr/include/x86_64-linux-gnu/sys/vm86.h",
            "/usr/include/x86_64-linux-gnu/sys/vt.h",
            "/usr/include/x86_64-linux-gnu/sys/wait.h",
            "/usr/include/x86_64-linux-gnu/sys/xattr.h",
            "/usr/lib/x86_64-linux-gnu/Mcrt1.o",
            "/usr/lib/x86_64-linux-gnu/Scrt1.o",
            "/usr/lib/x86_64-linux-gnu/audit/sotruss-lib.so",
            "/usr/lib/x86_64-linux-gnu/crt1.o",
            "/usr/lib/x86_64-linux-gnu/crti.o",
            "/usr/lib/x86_64-linux-gnu/crtn.o",
            "/usr/lib/x86_64-linux-gnu/gcrt1.o",
            "/usr/lib/x86_64-linux-gnu/grcrt1.o",
            "/usr/lib/x86_64-linux-gnu/libBrokenLocale.a",
            "/usr/lib/x86_64-linux-gnu/libanl.a",
            "/usr/lib/x86_64-linux-gnu/libc.a",
            "/usr/lib/x86_64-linux-gnu/libc.so",
            "/usr/lib/x86_64-linux-gnu/libc_nonshared.a",
            "/usr/lib/x86_64-linux-gnu/libdl.a",
            "/usr/lib/x86_64-linux-gnu/libg.a",
            "/usr/lib/x86_64-linux-gnu/libm-2.41.a",
            "/usr/lib/x86_64-linux-gnu/libm.a",
            "/usr/lib/x86_64-linux-gnu/libm.so",
            "/usr/lib/x86_64-linux-gnu/libmcheck.a",
            "/usr/lib/x86_64-linux-gnu/libmvec.a",
            "/usr/lib/x86_64-linux-gnu/libpthread.a",
            "/usr/lib/x86_64-linux-gnu/libpthread_nonshared.a",
            "/usr/lib/x86_64-linux-gnu/libresolv.a",
            "/usr/lib/x86_64-linux-gnu/librt.a",
            "/usr/lib/x86_64-linux-gnu/libutil.a",
            "/usr/lib/x86_64-linux-gnu/rcrt1.o",
            "/usr/share/doc/libc6-dev/NEWS.Debian.gz",
            "/usr/share/doc/libc6-dev/changelog.Debian.gz",
            "/usr/share/doc/libc6-dev/changelog.gz",
            "/usr/share/doc/libc6-dev/copyright",
            "/usr/share/gdb/auto-load/lib/x86_64-linux-gnu/libc.so.6-gdb.py",
            "/usr/share/lintian/overrides/libc6-dev"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcairo2@1.18.4-1+b1",
          "Name": "libcairo2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcairo2@1.18.4-1%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "4ebd6b113204c7d6"
          },
          "Version": "1.18.4",
          "Release": "1+b1",
          "Arch": "amd64",
          "SrcName": "cairo",
          "SrcVersion": "1.18.4",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libfontconfig1@2.15.0-2.3",
            "libfreetype6@2.13.3+dfsg-1+deb13u1",
            "libpixman-1-0@0.44.0-3",
            "libpng16-16t64@1.6.48-1+deb13u6",
            "libx11-6@2:1.8.12-1",
            "libxcb-render0@1.17.0-2+b1",
            "libxcb-shm0@1.17.0-2+b1",
            "libxcb1@1.17.0-2+b1",
            "libxext6@2:1.3.4-1+b3",
            "libxrender1@1:0.9.12-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libcairo.so.2.11804.4",
            "/usr/share/doc/libcairo2/changelog.Debian.amd64.gz",
            "/usr/share/doc/libcairo2/changelog.Debian.gz",
            "/usr/share/doc/libcairo2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcap-ng0@0.8.5-4+b1",
          "Name": "libcap-ng0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcap-ng0@0.8.5-4%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "6ebeba515cbfa716"
          },
          "Version": "0.8.5",
          "Release": "4+b1",
          "Arch": "amd64",
          "SrcName": "libcap-ng",
          "SrcVersion": "0.8.5",
          "SrcRelease": "4",
          "Licenses": [
            "LGPL-2.1-or-later",
            "GPL-2.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.1-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Håvard F. Aasen \u003chavard.f.aasen@pfft.no\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libcap-ng.so.0.0.0",
            "/usr/lib/x86_64-linux-gnu/libdrop_ambient.so.0.0.0",
            "/usr/share/doc/libcap-ng0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libcap-ng0/changelog.Debian.gz",
            "/usr/share/doc/libcap-ng0/changelog.gz",
            "/usr/share/doc/libcap-ng0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcap2@1:2.75-10+deb13u1+b3",
          "Name": "libcap2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcap2@2.75-10%2Bdeb13u1%2Bb3?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "32401c9c22a36a0d"
          },
          "Version": "2.75",
          "Release": "10+deb13u1+b3",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libcap2",
          "SrcVersion": "2.75",
          "SrcRelease": "10+deb13u1",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-only",
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libcap.so.2.75",
            "/usr/lib/x86_64-linux-gnu/libpsx.so.2.75",
            "/usr/share/doc/libcap2/changelog.Debian.amd64.gz",
            "/usr/share/doc/libcap2/changelog.Debian.gz",
            "/usr/share/doc/libcap2/changelog.gz",
            "/usr/share/doc/libcap2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcc1-0@14.2.0-19",
          "Name": "libcc1-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcc1-0@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "16bdfaeab04d54de"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libcc1.so.0.0.0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcom-err2@1.47.2-3+b12",
          "Name": "libcom-err2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcom-err2@1.47.2-3%2Bb12?arch=amd64\u0026distro=debian-13.7",
            "UID": "ad80133cfb791722"
          },
          "Version": "1.47.2",
          "Release": "3+b12",
          "Arch": "amd64",
          "SrcName": "e2fsprogs",
          "SrcVersion": "1.47.2",
          "SrcRelease": "3",
          "Licenses": [
            "GPL-2.0-only",
            "GPL-2.0-or-later",
            "0BSD",
            "MIT",
            "BSD-3-Clause-Variant",
            "BSD-3-Clause",
            "BSD-4-Clause-CMU",
            "LGPL-2.0-only",
            "Apache-2.0",
            "ISC",
            "MIT-US-export",
            "Kazlib",
            "Latex2e",
            "GPL-2+ with Texinfo exception"
          ],
          "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libcom_err.so.2.1",
            "/usr/share/doc/libcom-err2/changelog.Debian.amd64.gz",
            "/usr/share/doc/libcom-err2/changelog.Debian.gz",
            "/usr/share/doc/libcom-err2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcrypt-dev@1:4.4.38-1",
          "Name": "libcrypt-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcrypt-dev@4.4.38-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "1ad202b91e5aaef6"
          },
          "Version": "4.4.38",
          "Release": "1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libxcrypt",
          "SrcVersion": "4.4.38",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libcrypt1@1:4.4.38-1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/include/crypt.h",
            "/usr/lib/x86_64-linux-gnu/libcrypt.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/libxcrypt.pc",
            "/usr/share/doc/libcrypt-dev/README.md.gz",
            "/usr/share/doc/libcrypt-dev/TODO.md.gz",
            "/usr/share/doc/libcrypt-dev/changelog.Debian.gz",
            "/usr/share/doc/libcrypt-dev/changelog.gz",
            "/usr/share/doc/libcrypt-dev/copyright",
            "/usr/share/man/man3/crypt.3.gz",
            "/usr/share/man/man3/crypt_checksalt.3.gz",
            "/usr/share/man/man3/crypt_gensalt.3.gz",
            "/usr/share/man/man3/crypt_preferred_method.3.gz",
            "/usr/share/man/man5/crypt.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcrypt1@1:4.4.38-1",
          "Name": "libcrypt1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcrypt1@4.4.38-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "bcf9a53d19864571"
          },
          "Version": "4.4.38",
          "Release": "1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libxcrypt",
          "SrcVersion": "4.4.38",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libcrypt.so.1.1.0",
            "/usr/share/doc/libcrypt1/changelog.Debian.gz",
            "/usr/share/doc/libcrypt1/changelog.gz",
            "/usr/share/doc/libcrypt1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libctf-nobfd0@2.44-3",
          "Name": "libctf-nobfd0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libctf-nobfd0@2.44-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "102c7b520f761520"
          },
          "Version": "2.44",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "binutils",
          "SrcVersion": "2.44",
          "SrcRelease": "3",
          "Licenses": [
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "GFDL-1.3-or-later"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libctf-nobfd.so.0.0.0",
            "/usr/share/doc/libctf-nobfd0/changelog.Debian.gz",
            "/usr/share/doc/libctf-nobfd0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libctf0@2.44-3",
          "Name": "libctf0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libctf0@2.44-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "be7617cc05cea3ce"
          },
          "Version": "2.44",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "binutils",
          "SrcVersion": "2.44",
          "SrcRelease": "3",
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbinutils@2.44-3",
            "libc6@2.41-12+deb13u4",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcurl4t64@8.14.1-2+deb13u7",
          "Name": "libcurl4t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcurl4t64@8.14.1-2%2Bdeb13u7?arch=amd64\u0026distro=debian-13.7",
            "UID": "d222e2259fcdcdf0"
          },
          "Version": "8.14.1",
          "Release": "2+deb13u7",
          "Arch": "amd64",
          "SrcName": "curl",
          "SrcVersion": "8.14.1",
          "SrcRelease": "2+deb13u7",
          "Licenses": [
            "curl",
            "OLDAP-2.8",
            "ISC",
            "GPL-2+ with Autoconf-data exception",
            "GPL-3+ with Autoconf-data exception",
            "GPL-2+ with Libtool exception",
            "BSD-3-Clause",
            "BSD-4-Clause-UC",
            "FSFULLR",
            "X11",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Curl Maintainers \u003cteam+curl@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbrotli1@1.1.0-2+b7",
            "libc6@2.41-12+deb13u4",
            "libgssapi-krb5-2@1.21.3-5+deb13u1",
            "libidn2-0@2.3.8-2",
            "libldap2@2.6.10+dfsg-1",
            "libnghttp2-14@1.64.0-1.1+deb13u1",
            "libnghttp3-9@1.8.0-1",
            "libpsl5t64@0.21.2-1.1+b1",
            "librtmp1@2.4+20151223.gitfa8646d.1-2+b5",
            "libssh2-1t64@1.11.1-1+deb13u2",
            "libssl3t64@3.5.7-1~deb13u3",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libcurl.so.4.8.0",
            "/usr/share/doc/libcurl4t64/changelog.Debian.gz",
            "/usr/share/doc/libcurl4t64/changelog.gz",
            "/usr/share/doc/libcurl4t64/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdatrie1@0.2.13-3+b1",
          "Name": "libdatrie1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdatrie1@0.2.13-3%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "a09a539565735824"
          },
          "Version": "0.2.13",
          "Release": "3+b1",
          "Arch": "amd64",
          "SrcName": "libdatrie",
          "SrcVersion": "0.2.13",
          "SrcRelease": "3",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Theppitak Karoonboonyanan \u003cthep@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libdatrie.so.1.4.0",
            "/usr/share/doc/libdatrie1/NEWS.gz",
            "/usr/share/doc/libdatrie1/README",
            "/usr/share/doc/libdatrie1/changelog.Debian.amd64.gz",
            "/usr/share/doc/libdatrie1/changelog.Debian.gz",
            "/usr/share/doc/libdatrie1/changelog.gz",
            "/usr/share/doc/libdatrie1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdav1d7@1.5.1-1",
          "Name": "libdav1d7",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdav1d7@1.5.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "30aba1d4fb79aa9c"
          },
          "Version": "1.5.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "dav1d",
          "SrcVersion": "1.5.1",
          "SrcRelease": "1",
          "Licenses": [
            "BSD-2-Clause",
            "public-domain",
            "ISC"
          ],
          "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libdav1d.so.7.0.0",
            "/usr/share/doc/libdav1d7/changelog.Debian.gz",
            "/usr/share/doc/libdav1d7/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdb5.3t64@5.3.28+dfsg2-9",
          "Name": "libdb5.3t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdb5.3t64@5.3.28%2Bdfsg2-9?arch=amd64\u0026distro=debian-13.7",
            "UID": "6644476cfc0a6297"
          },
          "Version": "5.3.28+dfsg2",
          "Release": "9",
          "Arch": "amd64",
          "SrcName": "db5.3",
          "SrcVersion": "5.3.28+dfsg2",
          "SrcRelease": "9",
          "Licenses": [
            "Sleepycat",
            "BSD-3-Clause",
            "MS-PL",
            "GPL-2.0-or-later",
            "Artistic-2.0",
            "X11",
            "MIT-old",
            "TCL-like",
            "BSD-3-clause-fjord",
            "GPL-3.0-only",
            "Zlib"
          ],
          "Maintainer": "Debian QA Group \u003cpackages@qa.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libdb-5.3.so",
            "/usr/share/doc/libdb5.3t64/build_signature_amd64.txt",
            "/usr/share/doc/libdb5.3t64/changelog.Debian.gz",
            "/usr/share/doc/libdb5.3t64/copyright",
            "/usr/share/lintian/overrides/libdb5.3t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libde265-0@1.0.15-1+deb13u2",
          "Name": "libde265-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libde265-0@1.0.15-1%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "15e8751d68e54316"
          },
          "Version": "1.0.15",
          "Release": "1+deb13u2",
          "Arch": "amd64",
          "SrcName": "libde265",
          "SrcVersion": "1.0.15",
          "SrcRelease": "1+deb13u2",
          "Licenses": [
            "LGPL-3.0-or-later",
            "GPL-3.0-or-later",
            "BSD-4-Clause",
            "public-domain-1",
            "other-1",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libde265.so.0.1.8",
            "/usr/share/doc/libde265-0/changelog.Debian.gz",
            "/usr/share/doc/libde265-0/changelog.gz",
            "/usr/share/doc/libde265-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdebconfclient0@0.280",
          "Name": "libdebconfclient0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdebconfclient0@0.280?arch=amd64\u0026distro=debian-13.7",
            "UID": "cd0c9dc2c6921f31"
          },
          "Version": "0.280",
          "Arch": "amd64",
          "SrcName": "cdebconf",
          "SrcVersion": "0.280",
          "Licenses": [
            "BSD-2-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Install System Team \u003cdebian-boot@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libdebconfclient.so.0.0.0",
            "/usr/share/doc/libdebconfclient0/changelog.gz",
            "/usr/share/doc/libdebconfclient0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdeflate0@1.23-2",
          "Name": "libdeflate0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdeflate0@1.23-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "c25d2144840eaaab"
          },
          "Version": "1.23",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libdeflate",
          "SrcVersion": "1.23",
          "SrcRelease": "2",
          "Licenses": [
            "MIT"
          ],
          "Maintainer": "Deflate Team \u003clibdeflate@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libdeflate.so.0",
            "/usr/share/doc/libdeflate0/changelog.Debian.gz",
            "/usr/share/doc/libdeflate0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdjvulibre-text@3.5.28-2.2",
          "Name": "libdjvulibre-text",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdjvulibre-text@3.5.28-2.2?arch=all\u0026distro=debian-13.7",
            "UID": "9d95a5aba2136593"
          },
          "Version": "3.5.28",
          "Release": "2.2",
          "Arch": "all",
          "SrcName": "djvulibre",
          "SrcVersion": "3.5.28",
          "SrcRelease": "2.2",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Barak A. Pearlmutter \u003cbap@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/share/djvu/osi/cs/messages.xml",
            "/usr/share/djvu/osi/de/libdjvu++.xml",
            "/usr/share/djvu/osi/de/messages.xml",
            "/usr/share/djvu/osi/en/djvutools-reference.xml",
            "/usr/share/djvu/osi/en/libdjvu++.xml",
            "/usr/share/djvu/osi/en/messages.xml",
            "/usr/share/djvu/osi/fr/libdjvu++.xml",
            "/usr/share/djvu/osi/fr/messages.xml",
            "/usr/share/djvu/osi/ja/libdjvu++.xml",
            "/usr/share/djvu/osi/ja/messages.xml",
            "/usr/share/djvu/osi/languages.xml",
            "/usr/share/djvu/osi/zh/libdjvu++.xml",
            "/usr/share/djvu/osi/zh/messages.xml",
            "/usr/share/djvu/pubtext/DjVuMessages.dtd",
            "/usr/share/djvu/pubtext/DjVuOCR.dtd",
            "/usr/share/djvu/pubtext/DjVuXML-s.dtd",
            "/usr/share/doc/libdjvulibre-text/changelog.Debian.gz",
            "/usr/share/doc/libdjvulibre-text/changelog.gz",
            "/usr/share/doc/libdjvulibre-text/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdjvulibre21@3.5.28-2.2",
          "Name": "libdjvulibre21",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdjvulibre21@3.5.28-2.2?arch=amd64\u0026distro=debian-13.7",
            "UID": "3d051c090ff99d9c"
          },
          "Version": "3.5.28",
          "Release": "2.2",
          "Arch": "amd64",
          "SrcName": "djvulibre",
          "SrcVersion": "3.5.28",
          "SrcRelease": "2.2",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Barak A. Pearlmutter \u003cbap@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libdjvulibre-text@3.5.28-2.2",
            "libgcc-s1@14.2.0-19",
            "libjpeg62-turbo@1:2.1.5-4",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libdjvulibre.so.21.7.0",
            "/usr/share/doc/libdjvulibre21/changelog.Debian.gz",
            "/usr/share/doc/libdjvulibre21/changelog.gz",
            "/usr/share/doc/libdjvulibre21/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdpkg-perl@1.22.22",
          "Name": "libdpkg-perl",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdpkg-perl@1.22.22?arch=all\u0026distro=debian-13.7",
            "UID": "50490b6bb6414481"
          },
          "Version": "1.22.22",
          "Arch": "all",
          "SrcName": "dpkg",
          "SrcVersion": "1.22.22",
          "Licenses": [
            "GPL-2.0-or-later",
            "public-domain-s-s-d",
            "GPL-2.0-only"
          ],
          "Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "dpkg@1.22.22"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/doc/libdpkg-perl/changelog.gz",
            "/usr/share/doc/libdpkg-perl/copyright",
            "/usr/share/dpkg/no-pie-compile.specs",
            "/usr/share/dpkg/no-pie-link.specs",
            "/usr/share/dpkg/pie-compile.specs",
            "/usr/share/dpkg/pie-link.specs",
            "/usr/share/locale/ca/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/locale/de/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/locale/es/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/locale/fr/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/locale/nl/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/locale/pl/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/locale/pt/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/locale/ru/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/locale/sv/LC_MESSAGES/dpkg-dev.mo",
            "/usr/share/man/man3/Dpkg.3perl.gz",
            "/usr/share/man/man3/Dpkg::Arch.3perl.gz",
            "/usr/share/man/man3/Dpkg::Archive::Ar.3perl.gz",
            "/usr/share/man/man3/Dpkg::Build::Info.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildAPI.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildDriver.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildDriver::DebianRules.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildEnv.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildFlags.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildInfo.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildOptions.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildProfiles.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildTree.3perl.gz",
            "/usr/share/man/man3/Dpkg::BuildTypes.3perl.gz",
            "/usr/share/man/man3/Dpkg::Changelog.3perl.gz",
            "/usr/share/man/man3/Dpkg::Changelog::Debian.3perl.gz",
            "/usr/share/man/man3/Dpkg::Changelog::Entry.3perl.gz",
            "/usr/share/man/man3/Dpkg::Changelog::Entry::Debian.3perl.gz",
            "/usr/share/man/man3/Dpkg::Changelog::Parse.3perl.gz",
            "/usr/share/man/man3/Dpkg::Checksums.3perl.gz",
            "/usr/share/man/man3/Dpkg::Compression.3perl.gz",
            "/usr/share/man/man3/Dpkg::Compression::FileHandle.3perl.gz",
            "/usr/share/man/man3/Dpkg::Compression::Process.3perl.gz",
            "/usr/share/man/man3/Dpkg::Conf.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::Changelog.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::Fields.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::FieldsCore.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::Hash.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::HashCore.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::HashCore::Tie.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::Info.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::Tests.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::Tests::Entry.3perl.gz",
            "/usr/share/man/man3/Dpkg::Control::Types.3perl.gz",
            "/usr/share/man/man3/Dpkg::Deps.3perl.gz",
            "/usr/share/man/man3/Dpkg::Deps::AND.3perl.gz",
            "/usr/share/man/man3/Dpkg::Deps::KnownFacts.3perl.gz",
            "/usr/share/man/man3/Dpkg::Deps::Multiple.3perl.gz",
            "/usr/share/man/man3/Dpkg::Deps::OR.3perl.gz",
            "/usr/share/man/man3/Dpkg::Deps::Simple.3perl.gz",
            "/usr/share/man/man3/Dpkg::Deps::Union.3perl.gz",
            "/usr/share/man/man3/Dpkg::Dist::Files.3perl.gz",
            "/usr/share/man/man3/Dpkg::ErrorHandling.3perl.gz",
            "/usr/share/man/man3/Dpkg::Exit.3perl.gz",
            "/usr/share/man/man3/Dpkg::File.3perl.gz",
            "/usr/share/man/man3/Dpkg::Getopt.3perl.gz",
            "/usr/share/man/man3/Dpkg::Gettext.3perl.gz",
            "/usr/share/man/man3/Dpkg::IPC.3perl.gz",
            "/usr/share/man/man3/Dpkg::Index.3perl.gz",
            "/usr/share/man/man3/Dpkg::Interface::Storable.3perl.gz",
            "/usr/share/man/man3/Dpkg::Lock.3perl.gz",
            "/usr/share/man/man3/Dpkg::OpenPGP.3perl.gz",
            "/usr/share/man/man3/Dpkg::OpenPGP::Backend.3perl.gz",
            "/usr/share/man/man3/Dpkg::OpenPGP::Backend::GnuPG.3perl.gz",
            "/usr/share/man/man3/Dpkg::OpenPGP::Backend::SOP.3perl.gz",
            "/usr/share/man/man3/Dpkg::OpenPGP::Backend::Sequoia.3perl.gz",
            "/usr/share/man/man3/Dpkg::OpenPGP::ErrorCodes.3perl.gz",
            "/usr/share/man/man3/Dpkg::OpenPGP::KeyHandle.3perl.gz",
            "/usr/share/man/man3/Dpkg::Package.3perl.gz",
            "/usr/share/man/man3/Dpkg::Path.3perl.gz",
            "/usr/share/man/man3/Dpkg::Shlibs.3perl.gz",
            "/usr/share/man/man3/Dpkg::Shlibs::Cppfilt.3perl.gz",
            "/usr/share/man/man3/Dpkg::Shlibs::Objdump.3perl.gz",
            "/usr/share/man/man3/Dpkg::Shlibs::Objdump::Object.3perl.gz",
            "/usr/share/man/man3/Dpkg::Shlibs::Symbol.3perl.gz",
            "/usr/share/man/man3/Dpkg::Shlibs::SymbolFile.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Archive.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::BinaryFiles.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Format.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Functions.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Package.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Package::V1.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Package::V2.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Package::V3::Bzr.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Package::V3::Custom.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Package::V3::Git.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Package::V3::Native.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Package::V3::Quilt.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Patch.3perl.gz",
            "/usr/share/man/man3/Dpkg::Source::Quilt.3perl.gz",
            "/usr/share/man/man3/Dpkg::Substvars.3perl.gz",
            "/usr/share/man/man3/Dpkg::Vendor.3perl.gz",
            "/usr/share/man/man3/Dpkg::Vendor::Debian.3perl.gz",
            "/usr/share/man/man3/Dpkg::Vendor::Default.3perl.gz",
            "/usr/share/man/man3/Dpkg::Vendor::Devuan.3perl.gz",
            "/usr/share/man/man3/Dpkg::Vendor::PureOS.3perl.gz",
            "/usr/share/man/man3/Dpkg::Vendor::Ubuntu.3perl.gz",
            "/usr/share/man/man3/Dpkg::Version.3perl.gz",
            "/usr/share/perl5/Dpkg.pm",
            "/usr/share/perl5/Dpkg/Arch.pm",
            "/usr/share/perl5/Dpkg/Archive/Ar.pm",
            "/usr/share/perl5/Dpkg/Build/Info.pm",
            "/usr/share/perl5/Dpkg/BuildAPI.pm",
            "/usr/share/perl5/Dpkg/BuildDriver.pm",
            "/usr/share/perl5/Dpkg/BuildDriver/DebianRules.pm",
            "/usr/share/perl5/Dpkg/BuildEnv.pm",
            "/usr/share/perl5/Dpkg/BuildFlags.pm",
            "/usr/share/perl5/Dpkg/BuildInfo.pm",
            "/usr/share/perl5/Dpkg/BuildOptions.pm",
            "/usr/share/perl5/Dpkg/BuildProfiles.pm",
            "/usr/share/perl5/Dpkg/BuildTree.pm",
            "/usr/share/perl5/Dpkg/BuildTypes.pm",
            "/usr/share/perl5/Dpkg/Changelog.pm",
            "/usr/share/perl5/Dpkg/Changelog/Debian.pm",
            "/usr/share/perl5/Dpkg/Changelog/Entry.pm",
            "/usr/share/perl5/Dpkg/Changelog/Entry/Debian.pm",
            "/usr/share/perl5/Dpkg/Changelog/Parse.pm",
            "/usr/share/perl5/Dpkg/Checksums.pm",
            "/usr/share/perl5/Dpkg/Compression.pm",
            "/usr/share/perl5/Dpkg/Compression/FileHandle.pm",
            "/usr/share/perl5/Dpkg/Compression/Process.pm",
            "/usr/share/perl5/Dpkg/Conf.pm",
            "/usr/share/perl5/Dpkg/Control.pm",
            "/usr/share/perl5/Dpkg/Control/Changelog.pm",
            "/usr/share/perl5/Dpkg/Control/Fields.pm",
            "/usr/share/perl5/Dpkg/Control/FieldsCore.pm",
            "/usr/share/perl5/Dpkg/Control/Hash.pm",
            "/usr/share/perl5/Dpkg/Control/HashCore.pm",
            "/usr/share/perl5/Dpkg/Control/HashCore/Tie.pm",
            "/usr/share/perl5/Dpkg/Control/Info.pm",
            "/usr/share/perl5/Dpkg/Control/Tests.pm",
            "/usr/share/perl5/Dpkg/Control/Tests/Entry.pm",
            "/usr/share/perl5/Dpkg/Control/Types.pm",
            "/usr/share/perl5/Dpkg/Deps.pm",
            "/usr/share/perl5/Dpkg/Deps/AND.pm",
            "/usr/share/perl5/Dpkg/Deps/KnownFacts.pm",
            "/usr/share/perl5/Dpkg/Deps/Multiple.pm",
            "/usr/share/perl5/Dpkg/Deps/OR.pm",
            "/usr/share/perl5/Dpkg/Deps/Simple.pm",
            "/usr/share/perl5/Dpkg/Deps/Union.pm",
            "/usr/share/perl5/Dpkg/Dist/Files.pm",
            "/usr/share/perl5/Dpkg/ErrorHandling.pm",
            "/usr/share/perl5/Dpkg/Exit.pm",
            "/usr/share/perl5/Dpkg/File.pm",
            "/usr/share/perl5/Dpkg/Getopt.pm",
            "/usr/share/perl5/Dpkg/Gettext.pm",
            "/usr/share/perl5/Dpkg/IPC.pm",
            "/usr/share/perl5/Dpkg/Index.pm",
            "/usr/share/perl5/Dpkg/Interface/Storable.pm",
            "/usr/share/perl5/Dpkg/Lock.pm",
            "/usr/share/perl5/Dpkg/OpenPGP.pm",
            "/usr/share/perl5/Dpkg/OpenPGP/Backend.pm",
            "/usr/share/perl5/Dpkg/OpenPGP/Backend/GnuPG.pm",
            "/usr/share/perl5/Dpkg/OpenPGP/Backend/SOP.pm",
            "/usr/share/perl5/Dpkg/OpenPGP/Backend/Sequoia.pm",
            "/usr/share/perl5/Dpkg/OpenPGP/ErrorCodes.pm",
            "/usr/share/perl5/Dpkg/OpenPGP/KeyHandle.pm",
            "/usr/share/perl5/Dpkg/Package.pm",
            "/usr/share/perl5/Dpkg/Path.pm",
            "/usr/share/perl5/Dpkg/Shlibs.pm",
            "/usr/share/perl5/Dpkg/Shlibs/Cppfilt.pm",
            "/usr/share/perl5/Dpkg/Shlibs/Objdump.pm",
            "/usr/share/perl5/Dpkg/Shlibs/Objdump/Object.pm",
            "/usr/share/perl5/Dpkg/Shlibs/Symbol.pm",
            "/usr/share/perl5/Dpkg/Shlibs/SymbolFile.pm",
            "/usr/share/perl5/Dpkg/Source/Archive.pm",
            "/usr/share/perl5/Dpkg/Source/BinaryFiles.pm",
            "/usr/share/perl5/Dpkg/Source/Format.pm",
            "/usr/share/perl5/Dpkg/Source/Functions.pm",
            "/usr/share/perl5/Dpkg/Source/Package.pm",
            "/usr/share/perl5/Dpkg/Source/Package/V1.pm",
            "/usr/share/perl5/Dpkg/Source/Package/V2.pm",
            "/usr/share/perl5/Dpkg/Source/Package/V3/Bzr.pm",
            "/usr/share/perl5/Dpkg/Source/Package/V3/Custom.pm",
            "/usr/share/perl5/Dpkg/Source/Package/V3/Git.pm",
            "/usr/share/perl5/Dpkg/Source/Package/V3/Native.pm",
            "/usr/share/perl5/Dpkg/Source/Package/V3/Quilt.pm",
            "/usr/share/perl5/Dpkg/Source/Patch.pm",
            "/usr/share/perl5/Dpkg/Source/Quilt.pm",
            "/usr/share/perl5/Dpkg/Substvars.pm",
            "/usr/share/perl5/Dpkg/Vendor.pm",
            "/usr/share/perl5/Dpkg/Vendor/Debian.pm",
            "/usr/share/perl5/Dpkg/Vendor/Default.pm",
            "/usr/share/perl5/Dpkg/Vendor/Devuan.pm",
            "/usr/share/perl5/Dpkg/Vendor/PureOS.pm",
            "/usr/share/perl5/Dpkg/Vendor/Ubuntu.pm",
            "/usr/share/perl5/Dpkg/Version.pm"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libelf1t64@0.192-4",
          "Name": "libelf1t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libelf1t64@0.192-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "6838d73684138f42"
          },
          "Version": "0.192",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "elfutils",
          "SrcVersion": "0.192",
          "SrcRelease": "4",
          "Licenses": [
            "GPL-3.0-or-later",
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-3.0-only",
            "BSD-2-Clause",
            "GFDL-1.3-no-invariants-only",
            "GFDL-1.3-only",
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "GPL-3+ with Bison exception",
            "GPL-3.0-only"
          ],
          "Maintainer": "Debian Elfutils Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libelf-0.192.so",
            "/usr/share/doc/libelf1t64/changelog.Debian.gz",
            "/usr/share/doc/libelf1t64/changelog.gz",
            "/usr/share/doc/libelf1t64/copyright",
            "/usr/share/locale/de/LC_MESSAGES/elfutils.mo",
            "/usr/share/locale/en@boldquot/LC_MESSAGES/elfutils.mo",
            "/usr/share/locale/en@quot/LC_MESSAGES/elfutils.mo",
            "/usr/share/locale/es/LC_MESSAGES/elfutils.mo",
            "/usr/share/locale/ja/LC_MESSAGES/elfutils.mo",
            "/usr/share/locale/pl/LC_MESSAGES/elfutils.mo",
            "/usr/share/locale/uk/LC_MESSAGES/elfutils.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libexpat1@2.9.0-1~deb13u1",
          "Name": "libexpat1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1b1647a103482843"
          },
          "Version": "2.9.0",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "expat",
          "SrcVersion": "2.9.0",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "MIT"
          ],
          "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libexpat.so.1.13.0",
            "/usr/lib/x86_64-linux-gnu/libexpatw.so.1.13.0",
            "/usr/share/doc/libexpat1/AUTHORS",
            "/usr/share/doc/libexpat1/changelog.Debian.gz",
            "/usr/share/doc/libexpat1/changelog.gz",
            "/usr/share/doc/libexpat1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libffi-dev@3.4.8-2",
          "Name": "libffi-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libffi-dev@3.4.8-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "124b817ba1aebb2a"
          },
          "Version": "3.4.8",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libffi",
          "SrcVersion": "3.4.8",
          "SrcRelease": "2",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libffi8@3.4.8-2"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/x86_64-linux-gnu/ffi.h",
            "/usr/include/x86_64-linux-gnu/ffitarget.h",
            "/usr/lib/x86_64-linux-gnu/libffi.a",
            "/usr/lib/x86_64-linux-gnu/libffi_pic.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/libffi.pc",
            "/usr/share/doc-base/libffi-dev.libffi",
            "/usr/share/doc/libffi8/README.md.gz",
            "/usr/share/doc/libffi8/html/Arrays-Unions-Enums.html",
            "/usr/share/doc/libffi8/html/Closure-Example.html",
            "/usr/share/doc/libffi8/html/Complex-Type-Example.html",
            "/usr/share/doc/libffi8/html/Complex.html",
            "/usr/share/doc/libffi8/html/Index.html",
            "/usr/share/doc/libffi8/html/Introduction.html",
            "/usr/share/doc/libffi8/html/Memory-Usage.html",
            "/usr/share/doc/libffi8/html/Missing-Features.html",
            "/usr/share/doc/libffi8/html/Multiple-ABIs.html",
            "/usr/share/doc/libffi8/html/Primitive-Types.html",
            "/usr/share/doc/libffi8/html/Simple-Example.html",
            "/usr/share/doc/libffi8/html/Size-and-Alignment.html",
            "/usr/share/doc/libffi8/html/Structures.html",
            "/usr/share/doc/libffi8/html/The-Basics.html",
            "/usr/share/doc/libffi8/html/The-Closure-API.html",
            "/usr/share/doc/libffi8/html/Thread-Safety.html",
            "/usr/share/doc/libffi8/html/Type-Example.html",
            "/usr/share/doc/libffi8/html/Types.html",
            "/usr/share/doc/libffi8/html/Using-libffi.html",
            "/usr/share/doc/libffi8/html/index.html",
            "/usr/share/info/libffi.info.gz",
            "/usr/share/man/man3/ffi.3.gz",
            "/usr/share/man/man3/ffi_call.3.gz",
            "/usr/share/man/man3/ffi_prep_cif.3.gz",
            "/usr/share/man/man3/ffi_prep_cif_var.3.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libffi8@3.4.8-2",
          "Name": "libffi8",
          "Identifier": {
            "PURL": "pkg:deb/debian/libffi8@3.4.8-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "228a6da53492f741"
          },
          "Version": "3.4.8",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libffi",
          "SrcVersion": "3.4.8",
          "SrcRelease": "2",
          "Licenses": [
            "MIT",
            "X11",
            "GPL-2.0-or-later",
            "GPL-3.0-or-later",
            "MPL-1.1",
            "LGPL-2.1-or-later",
            "public-domain"
          ],
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libffi.so.8.1.4",
            "/usr/share/doc/libffi8/changelog.Debian.gz",
            "/usr/share/doc/libffi8/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libfftw3-double3@3.3.10-2+b1",
          "Name": "libfftw3-double3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libfftw3-double3@3.3.10-2%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "f426117d80e8e51"
          },
          "Version": "3.3.10",
          "Release": "2+b1",
          "Arch": "amd64",
          "SrcName": "fftw3",
          "SrcVersion": "3.3.10",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Science Maintainers \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgomp1@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libfftw3.so.3.6.10",
            "/usr/lib/x86_64-linux-gnu/libfftw3_omp.so.3.6.10",
            "/usr/lib/x86_64-linux-gnu/libfftw3_threads.so.3.6.10",
            "/usr/share/doc/libfftw3-double3/NEWS.gz",
            "/usr/share/doc/libfftw3-double3/README",
            "/usr/share/doc/libfftw3-double3/README.Debian",
            "/usr/share/doc/libfftw3-double3/changelog.Debian.amd64.gz",
            "/usr/share/doc/libfftw3-double3/changelog.Debian.gz",
            "/usr/share/doc/libfftw3-double3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libfontconfig1@2.15.0-2.3",
          "Name": "libfontconfig1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libfontconfig1@2.15.0-2.3?arch=amd64\u0026distro=debian-13.7",
            "UID": "7362ca79d0f77d0"
          },
          "Version": "2.15.0",
          "Release": "2.3",
          "Arch": "amd64",
          "SrcName": "fontconfig",
          "SrcVersion": "2.15.0",
          "SrcRelease": "2.3",
          "Maintainer": "Debian freedesktop.org maintainers \u003cpkg-freedesktop-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "fontconfig-config@2.15.0-2.3",
            "libc6@2.41-12+deb13u4",
            "libexpat1@2.9.0-1~deb13u1",
            "libfreetype6@2.13.3+dfsg-1+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libfontconfig.so.1.12.1",
            "/usr/share/doc/libfontconfig1/changelog.Debian.gz",
            "/usr/share/doc/libfontconfig1/changelog.gz",
            "/usr/share/doc/libfontconfig1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libfreetype6@2.13.3+dfsg-1+deb13u1",
          "Name": "libfreetype6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libfreetype6@2.13.3%2Bdfsg-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "c5aa2357172fd631"
          },
          "Version": "2.13.3+dfsg",
          "Release": "1+deb13u1",
          "Arch": "amd64",
          "SrcName": "freetype",
          "SrcVersion": "2.13.3+dfsg",
          "SrcRelease": "1+deb13u1",
          "Licenses": [
            "FTL",
            "MIT",
            "BSD-3-Clause",
            "FSFAP",
            "GPL-3.0-or-later",
            "GPL-2.0-or-later",
            "Public-Domain",
            "MIT-SMC",
            "BSL-1.0",
            "MIT-Modern-Variant",
            "Zlib",
            "OpenGroup-MIT",
            "GPL-2.0-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "Hugh McMaster \u003chmc@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbrotli1@1.1.0-2+b7",
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4",
            "libpng16-16t64@1.6.48-1+deb13u6",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libfreetype.so.6.20.2",
            "/usr/share/doc/libfreetype6/README",
            "/usr/share/doc/libfreetype6/changelog.Debian.gz",
            "/usr/share/doc/libfreetype6/changelog.gz",
            "/usr/share/doc/libfreetype6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libfribidi0@1.0.16-1",
          "Name": "libfribidi0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libfribidi0@1.0.16-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "46f97d4d56df627c"
          },
          "Version": "1.0.16",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "fribidi",
          "SrcVersion": "1.0.16",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian Hebrew Packaging Team \u003cteam+hebrew@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libfribidi.so.0.4.0",
            "/usr/share/doc/libfribidi0/NEWS.gz",
            "/usr/share/doc/libfribidi0/README",
            "/usr/share/doc/libfribidi0/THANKS",
            "/usr/share/doc/libfribidi0/TODO",
            "/usr/share/doc/libfribidi0/changelog.Debian.gz",
            "/usr/share/doc/libfribidi0/changelog.gz",
            "/usr/share/doc/libfribidi0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgcc-14-dev@14.2.0-19",
          "Name": "libgcc-14-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgcc-14-dev@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "7b5cfb691a9e36c4"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libasan8@14.2.0-19",
            "libatomic1@14.2.0-19",
            "libgcc-s1@14.2.0-19",
            "libgomp1@14.2.0-19",
            "libhwasan0@14.2.0-19",
            "libitm1@14.2.0-19",
            "liblsan0@14.2.0-19",
            "libquadmath0@14.2.0-19",
            "libtsan2@14.2.0-19",
            "libubsan1@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtbegin.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtbeginT.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtend.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtfastmath.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadbegin.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadend.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadtable.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadtableS.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec32.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec64.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec80.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/acc_prof.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/adxintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/ammintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxbf16intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxcomplexintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxfp16intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxint8intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxtileintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx2intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx5124fmapsintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx5124vnniwintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bf16intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bf16vlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bitalgintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bitalgvlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bwintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512cdintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512dqintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512erintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fp16intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fp16vlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512ifmaintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512ifmavlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512pfintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmi2intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmi2vlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmiintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmivlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vlbwintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vldqintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vnniintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vnnivlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vp2intersectintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vp2intersectvlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vpopcntdqintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vpopcntdqvlintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxifmaintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxneconvertintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniint16intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniint8intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/backtrace-supported.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/backtrace.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmi2intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmiintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/cet.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/cetintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/cldemoteintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/clflushoptintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/clwbintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/clzerointrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/cmpccxaddintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/cpuid.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/cross-stdarg.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/emmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/enqcmdintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/f16cintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/float.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/fma4intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/fmaintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/fxsrintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/gcov.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/gfniintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/hresetintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/ia32intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/immintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/iso646.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/keylockerintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/limits.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/lwpintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/lzcntintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/mm3dnow.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/mm_malloc.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/mmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/movdirintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/mwaitintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/mwaitxintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/nmmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/omp.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/openacc.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/pconfigintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/pkuintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/pmmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/popcntintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/prfchiintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/prfchwintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/quadmath.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/quadmath_weak.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/raointintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/rdseedintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/rtmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/asan_interface.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/common_interface_defs.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/hwasan_interface.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/lsan_interface.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/tsan_interface.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/serializeintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sgxintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sha512intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/shaintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sm3intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/sm4intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/smmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdalign.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdarg.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdatomic.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdbool.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdckdint.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stddef.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdfix.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdint-gcc.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdint.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdnoreturn.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/syslimits.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/tbmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/tmmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/tsxldtrkintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/uintrintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/unwind.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/usermsrintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/vaesintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/varargs.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/vpclmulqdqintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/waitpkgintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/wbnoinvdintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/wmmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/x86gprintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/x86intrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/xmmintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/xopintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsavecintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsaveintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsaveoptintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsavesintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/include/xtestintrin.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libasan.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libasan_preinit.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libatomic.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libbacktrace.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc_eh.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc_s.so",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libgcov.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libgomp.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libhwasan.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libitm.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/liblsan.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/liblsan_preinit.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libquadmath.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libssp_nonshared.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libtsan.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libtsan_preinit.o",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libubsan.a"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgcc-s1@14.2.0-19",
          "Name": "libgcc-s1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "5f801be708edc088"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgcc_s.so.1",
            "/usr/share/lintian/overrides/libgcc-s1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgdbm-compat4t64@1.24-2",
          "Name": "libgdbm-compat4t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgdbm-compat4t64@1.24-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee4be0b7249fc4ce"
          },
          "Version": "1.24",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "gdbm",
          "SrcVersion": "1.24",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-2.0-or-later",
            "GFDL-1.3-no-invariants-or-later",
            "GPL-3.0-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Nicolas Mora \u003cbabelouest@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgdbm6t64@1.24-2"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgdbm_compat.so.4.0.0",
            "/usr/share/doc/libgdbm-compat4t64/changelog.Debian.gz",
            "/usr/share/doc/libgdbm-compat4t64/changelog.gz",
            "/usr/share/doc/libgdbm-compat4t64/copyright",
            "/usr/share/lintian/overrides/libgdbm-compat4t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgdbm6t64@1.24-2",
          "Name": "libgdbm6t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgdbm6t64@1.24-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "22d26fcd3d7e2796"
          },
          "Version": "1.24",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "gdbm",
          "SrcVersion": "1.24",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-2.0-or-later",
            "GFDL-1.3-no-invariants-or-later",
            "GPL-3.0-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Nicolas Mora \u003cbabelouest@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgdbm.so.6.0.0",
            "/usr/share/doc/libgdbm6t64/changelog.Debian.gz",
            "/usr/share/doc/libgdbm6t64/changelog.gz",
            "/usr/share/doc/libgdbm6t64/copyright",
            "/usr/share/lintian/overrides/libgdbm6t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgio-2.0-dev@2.84.4-3~deb13u5",
          "Name": "libgio-2.0-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgio-2.0-dev@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "c8b25ae2a3fe611f"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "amd64",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libffi-dev@3.4.8-2",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "libmount-dev@2.41.5-0+deb13u1",
            "libpcre2-dev@10.46-1~deb13u3",
            "libselinux1-dev@3.8.1-1",
            "libsysprof-capture-4-dev@48.0-2",
            "pkgconf@1.8.1-4",
            "zlib1g-dev@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/gio-unix-2.0/gio/gdesktopappinfo.h",
            "/usr/include/gio-unix-2.0/gio/gfiledescriptorbased.h",
            "/usr/include/gio-unix-2.0/gio/gunixfdmessage.h",
            "/usr/include/gio-unix-2.0/gio/gunixinputstream.h",
            "/usr/include/gio-unix-2.0/gio/gunixmounts.h",
            "/usr/include/gio-unix-2.0/gio/gunixoutputstream.h",
            "/usr/include/glib-2.0/gio/gaction.h",
            "/usr/include/glib-2.0/gio/gactiongroup.h",
            "/usr/include/glib-2.0/gio/gactiongroupexporter.h",
            "/usr/include/glib-2.0/gio/gactionmap.h",
            "/usr/include/glib-2.0/gio/gappinfo.h",
            "/usr/include/glib-2.0/gio/gapplication.h",
            "/usr/include/glib-2.0/gio/gapplicationcommandline.h",
            "/usr/include/glib-2.0/gio/gasyncinitable.h",
            "/usr/include/glib-2.0/gio/gasyncresult.h",
            "/usr/include/glib-2.0/gio/gbufferedinputstream.h",
            "/usr/include/glib-2.0/gio/gbufferedoutputstream.h",
            "/usr/include/glib-2.0/gio/gbytesicon.h",
            "/usr/include/glib-2.0/gio/gcancellable.h",
            "/usr/include/glib-2.0/gio/gcharsetconverter.h",
            "/usr/include/glib-2.0/gio/gcontenttype.h",
            "/usr/include/glib-2.0/gio/gconverter.h",
            "/usr/include/glib-2.0/gio/gconverterinputstream.h",
            "/usr/include/glib-2.0/gio/gconverteroutputstream.h",
            "/usr/include/glib-2.0/gio/gcredentials.h",
            "/usr/include/glib-2.0/gio/gdatagrambased.h",
            "/usr/include/glib-2.0/gio/gdatainputstream.h",
            "/usr/include/glib-2.0/gio/gdataoutputstream.h",
            "/usr/include/glib-2.0/gio/gdbusactiongroup.h",
            "/usr/include/glib-2.0/gio/gdbusaddress.h",
            "/usr/include/glib-2.0/gio/gdbusauthobserver.h",
            "/usr/include/glib-2.0/gio/gdbusconnection.h",
            "/usr/include/glib-2.0/gio/gdbuserror.h",
            "/usr/include/glib-2.0/gio/gdbusinterface.h",
            "/usr/include/glib-2.0/gio/gdbusinterfaceskeleton.h",
            "/usr/include/glib-2.0/gio/gdbusintrospection.h",
            "/usr/include/glib-2.0/gio/gdbusmenumodel.h",
            "/usr/include/glib-2.0/gio/gdbusmessage.h",
            "/usr/include/glib-2.0/gio/gdbusmethodinvocation.h",
            "/usr/include/glib-2.0/gio/gdbusnameowning.h",
            "/usr/include/glib-2.0/gio/gdbusnamewatching.h",
            "/usr/include/glib-2.0/gio/gdbusobject.h",
            "/usr/include/glib-2.0/gio/gdbusobjectmanager.h",
            "/usr/include/glib-2.0/gio/gdbusobjectmanagerclient.h",
            "/usr/include/glib-2.0/gio/gdbusobjectmanagerserver.h",
            "/usr/include/glib-2.0/gio/gdbusobjectproxy.h",
            "/usr/include/glib-2.0/gio/gdbusobjectskeleton.h",
            "/usr/include/glib-2.0/gio/gdbusproxy.h",
            "/usr/include/glib-2.0/gio/gdbusserver.h",
            "/usr/include/glib-2.0/gio/gdbusutils.h",
            "/usr/include/glib-2.0/gio/gdebugcontroller.h",
            "/usr/include/glib-2.0/gio/gdebugcontrollerdbus.h",
            "/usr/include/glib-2.0/gio/gdrive.h",
            "/usr/include/glib-2.0/gio/gdtlsclientconnection.h",
            "/usr/include/glib-2.0/gio/gdtlsconnection.h",
            "/usr/include/glib-2.0/gio/gdtlsserverconnection.h",
            "/usr/include/glib-2.0/gio/gemblem.h",
            "/usr/include/glib-2.0/gio/gemblemedicon.h",
            "/usr/include/glib-2.0/gio/gfile.h",
            "/usr/include/glib-2.0/gio/gfileattribute.h",
            "/usr/include/glib-2.0/gio/gfileenumerator.h",
            "/usr/include/glib-2.0/gio/gfileicon.h",
            "/usr/include/glib-2.0/gio/gfileinfo.h",
            "/usr/include/glib-2.0/gio/gfileinputstream.h",
            "/usr/include/glib-2.0/gio/gfileiostream.h",
            "/usr/include/glib-2.0/gio/gfilemonitor.h",
            "/usr/include/glib-2.0/gio/gfilenamecompleter.h",
            "/usr/include/glib-2.0/gio/gfileoutputstream.h",
            "/usr/include/glib-2.0/gio/gfilterinputstream.h",
            "/usr/include/glib-2.0/gio/gfilteroutputstream.h",
            "/usr/include/glib-2.0/gio/gicon.h",
            "/usr/include/glib-2.0/gio/ginetaddress.h",
            "/usr/include/glib-2.0/gio/ginetaddressmask.h",
            "/usr/include/glib-2.0/gio/ginetsocketaddress.h",
            "/usr/include/glib-2.0/gio/ginitable.h",
            "/usr/include/glib-2.0/gio/ginputstream.h",
            "/usr/include/glib-2.0/gio/gio-autocleanups.h",
            "/usr/include/glib-2.0/gio/gio-visibility.h",
            "/usr/include/glib-2.0/gio/gio.h",
            "/usr/include/glib-2.0/gio/gioenums.h",
            "/usr/include/glib-2.0/gio/gioenumtypes.h",
            "/usr/include/glib-2.0/gio/gioerror.h",
            "/usr/include/glib-2.0/gio/giomodule.h",
            "/usr/include/glib-2.0/gio/gioscheduler.h",
            "/usr/include/glib-2.0/gio/giostream.h",
            "/usr/include/glib-2.0/gio/giotypes.h",
            "/usr/include/glib-2.0/gio/glistmodel.h",
            "/usr/include/glib-2.0/gio/gliststore.h",
            "/usr/include/glib-2.0/gio/gloadableicon.h",
            "/usr/include/glib-2.0/gio/gmemoryinputstream.h",
            "/usr/include/glib-2.0/gio/gmemorymonitor.h",
            "/usr/include/glib-2.0/gio/gmemoryoutputstream.h",
            "/usr/include/glib-2.0/gio/gmenu.h",
            "/usr/include/glib-2.0/gio/gmenuexporter.h",
            "/usr/include/glib-2.0/gio/gmenumodel.h",
            "/usr/include/glib-2.0/gio/gmount.h",
            "/usr/include/glib-2.0/gio/gmountoperation.h",
            "/usr/include/glib-2.0/gio/gnativesocketaddress.h",
            "/usr/include/glib-2.0/gio/gnativevolumemonitor.h",
            "/usr/include/glib-2.0/gio/gnetworkaddress.h",
            "/usr/include/glib-2.0/gio/gnetworking.h",
            "/usr/include/glib-2.0/gio/gnetworkmonitor.h",
            "/usr/include/glib-2.0/gio/gnetworkservice.h",
            "/usr/include/glib-2.0/gio/gnotification.h",
            "/usr/include/glib-2.0/gio/goutputstream.h",
            "/usr/include/glib-2.0/gio/gpermission.h",
            "/usr/include/glib-2.0/gio/gpollableinputstream.h",
            "/usr/include/glib-2.0/gio/gpollableoutputstream.h",
            "/usr/include/glib-2.0/gio/gpollableutils.h",
            "/usr/include/glib-2.0/gio/gpowerprofilemonitor.h",
            "/usr/include/glib-2.0/gio/gpropertyaction.h",
            "/usr/include/glib-2.0/gio/gproxy.h",
            "/usr/include/glib-2.0/gio/gproxyaddress.h",
            "/usr/include/glib-2.0/gio/gproxyaddressenumerator.h",
            "/usr/include/glib-2.0/gio/gproxyresolver.h",
            "/usr/include/glib-2.0/gio/gremoteactiongroup.h",
            "/usr/include/glib-2.0/gio/gresolver.h",
            "/usr/include/glib-2.0/gio/gresource.h",
            "/usr/include/glib-2.0/gio/gseekable.h",
            "/usr/include/glib-2.0/gio/gsettings.h",
            "/usr/include/glib-2.0/gio/gsettingsbackend.h",
            "/usr/include/glib-2.0/gio/gsettingsschema.h",
            "/usr/include/glib-2.0/gio/gsimpleaction.h",
            "/usr/include/glib-2.0/gio/gsimpleactiongroup.h",
            "/usr/include/glib-2.0/gio/gsimpleasyncresult.h",
            "/usr/include/glib-2.0/gio/gsimpleiostream.h",
            "/usr/include/glib-2.0/gio/gsimplepermission.h",
            "/usr/include/glib-2.0/gio/gsimpleproxyresolver.h",
            "/usr/include/glib-2.0/gio/gsocket.h",
            "/usr/include/glib-2.0/gio/gsocketaddress.h",
            "/usr/include/glib-2.0/gio/gsocketaddressenumerator.h",
            "/usr/include/glib-2.0/gio/gsocketclient.h",
            "/usr/include/glib-2.0/gio/gsocketconnectable.h",
            "/usr/include/glib-2.0/gio/gsocketconnection.h",
            "/usr/include/glib-2.0/gio/gsocketcontrolmessage.h",
            "/usr/include/glib-2.0/gio/gsocketlistener.h",
            "/usr/include/glib-2.0/gio/gsocketservice.h",
            "/usr/include/glib-2.0/gio/gsrvtarget.h",
            "/usr/include/glib-2.0/gio/gsubprocess.h",
            "/usr/include/glib-2.0/gio/gsubprocesslauncher.h",
            "/usr/include/glib-2.0/gio/gtask.h",
            "/usr/include/glib-2.0/gio/gtcpconnection.h",
            "/usr/include/glib-2.0/gio/gtcpwrapperconnection.h",
            "/usr/include/glib-2.0/gio/gtestdbus.h",
            "/usr/include/glib-2.0/gio/gthemedicon.h",
            "/usr/include/glib-2.0/gio/gthreadedsocketservice.h",
            "/usr/include/glib-2.0/gio/gtlsbackend.h",
            "/usr/include/glib-2.0/gio/gtlscertificate.h",
            "/usr/include/glib-2.0/gio/gtlsclientconnection.h",
            "/usr/include/glib-2.0/gio/gtlsconnection.h",
            "/usr/include/glib-2.0/gio/gtlsdatabase.h",
            "/usr/include/glib-2.0/gio/gtlsfiledatabase.h",
            "/usr/include/glib-2.0/gio/gtlsinteraction.h",
            "/usr/include/glib-2.0/gio/gtlspassword.h",
            "/usr/include/glib-2.0/gio/gtlsserverconnection.h",
            "/usr/include/glib-2.0/gio/gunixconnection.h",
            "/usr/include/glib-2.0/gio/gunixcredentialsmessage.h",
            "/usr/include/glib-2.0/gio/gunixfdlist.h",
            "/usr/include/glib-2.0/gio/gunixsocketaddress.h",
            "/usr/include/glib-2.0/gio/gvfs.h",
            "/usr/include/glib-2.0/gio/gvolume.h",
            "/usr/include/glib-2.0/gio/gvolumemonitor.h",
            "/usr/include/glib-2.0/gio/gzlibcompressor.h",
            "/usr/include/glib-2.0/gio/gzlibdecompressor.h",
            "/usr/include/glib-2.0/glib-object.h",
            "/usr/include/glib-2.0/glib-unix.h",
            "/usr/include/glib-2.0/glib.h",
            "/usr/include/glib-2.0/glib/deprecated/gallocator.h",
            "/usr/include/glib-2.0/glib/deprecated/gcache.h",
            "/usr/include/glib-2.0/glib/deprecated/gcompletion.h",
            "/usr/include/glib-2.0/glib/deprecated/gmain.h",
            "/usr/include/glib-2.0/glib/deprecated/grel.h",
            "/usr/include/glib-2.0/glib/deprecated/gthread.h",
            "/usr/include/glib-2.0/glib/galloca.h",
            "/usr/include/glib-2.0/glib/garray.h",
            "/usr/include/glib-2.0/glib/gasyncqueue.h",
            "/usr/include/glib-2.0/glib/gatomic.h",
            "/usr/include/glib-2.0/glib/gbacktrace.h",
            "/usr/include/glib-2.0/glib/gbase64.h",
            "/usr/include/glib-2.0/glib/gbitlock.h",
            "/usr/include/glib-2.0/glib/gbookmarkfile.h",
            "/usr/include/glib-2.0/glib/gbytes.h",
            "/usr/include/glib-2.0/glib/gcharset.h",
            "/usr/include/glib-2.0/glib/gchecksum.h",
            "/usr/include/glib-2.0/glib/gconvert.h",
            "/usr/include/glib-2.0/glib/gdataset.h",
            "/usr/include/glib-2.0/glib/gdate.h",
            "/usr/include/glib-2.0/glib/gdatetime.h",
            "/usr/include/glib-2.0/glib/gdir.h",
            "/usr/include/glib-2.0/glib/genviron.h",
            "/usr/include/glib-2.0/glib/gerror.h",
            "/usr/include/glib-2.0/glib/gfileutils.h",
            "/usr/include/glib-2.0/glib/ggettext.h",
            "/usr/include/glib-2.0/glib/ghash.h",
            "/usr/include/glib-2.0/glib/ghmac.h",
            "/usr/include/glib-2.0/glib/ghook.h",
            "/usr/include/glib-2.0/glib/ghostutils.h",
            "/usr/include/glib-2.0/glib/gi18n-lib.h",
            "/usr/include/glib-2.0/glib/gi18n.h",
            "/usr/include/glib-2.0/glib/giochannel.h",
            "/usr/include/glib-2.0/glib/gkeyfile.h",
            "/usr/include/glib-2.0/glib/glib-autocleanups.h",
            "/usr/include/glib-2.0/glib/glib-typeof.h",
            "/usr/include/glib-2.0/glib/glib-visibility.h",
            "/usr/include/glib-2.0/glib/glist.h",
            "/usr/include/glib-2.0/glib/gmacros.h",
            "/usr/include/glib-2.0/glib/gmain.h",
            "/usr/include/glib-2.0/glib/gmappedfile.h",
            "/usr/include/glib-2.0/glib/gmarkup.h",
            "/usr/include/glib-2.0/glib/gmem.h",
            "/usr/include/glib-2.0/glib/gmessages.h",
            "/usr/include/glib-2.0/glib/gnode.h",
            "/usr/include/glib-2.0/glib/goption.h",
            "/usr/include/glib-2.0/glib/gpathbuf.h",
            "/usr/include/glib-2.0/glib/gpattern.h",
            "/usr/include/glib-2.0/glib/gpoll.h",
            "/usr/include/glib-2.0/glib/gprimes.h",
            "/usr/include/glib-2.0/glib/gprintf.h",
            "/usr/include/glib-2.0/glib/gqsort.h",
            "/usr/include/glib-2.0/glib/gquark.h",
            "/usr/include/glib-2.0/glib/gqueue.h",
            "/usr/include/glib-2.0/glib/grand.h",
            "/usr/include/glib-2.0/glib/grcbox.h",
            "/usr/include/glib-2.0/glib/grefcount.h",
            "/usr/include/glib-2.0/glib/grefstring.h",
            "/usr/include/glib-2.0/glib/gregex.h",
            "/usr/include/glib-2.0/glib/gscanner.h",
            "/usr/include/glib-2.0/glib/gsequence.h",
            "/usr/include/glib-2.0/glib/gshell.h",
            "/usr/include/glib-2.0/glib/gslice.h",
            "/usr/include/glib-2.0/glib/gslist.h",
            "/usr/include/glib-2.0/glib/gspawn.h",
            "/usr/include/glib-2.0/glib/gstdio.h",
            "/usr/include/glib-2.0/glib/gstrfuncs.h",
            "/usr/include/glib-2.0/glib/gstring.h",
            "/usr/include/glib-2.0/glib/gstringchunk.h",
            "/usr/include/glib-2.0/glib/gstrvbuilder.h",
            "/usr/include/glib-2.0/glib/gtestutils.h",
            "/usr/include/glib-2.0/glib/gthread.h",
            "/usr/include/glib-2.0/glib/gthreadpool.h",
            "/usr/include/glib-2.0/glib/gtimer.h",
            "/usr/include/glib-2.0/glib/gtimezone.h",
            "/usr/include/glib-2.0/glib/gtrashstack.h",
            "/usr/include/glib-2.0/glib/gtree.h",
            "/usr/include/glib-2.0/glib/gtypes.h",
            "/usr/include/glib-2.0/glib/gunicode.h",
            "/usr/include/glib-2.0/glib/guri.h",
            "/usr/include/glib-2.0/glib/gutils.h",
            "/usr/include/glib-2.0/glib/guuid.h",
            "/usr/include/glib-2.0/glib/gvariant.h",
            "/usr/include/glib-2.0/glib/gvarianttype.h",
            "/usr/include/glib-2.0/glib/gversion.h",
            "/usr/include/glib-2.0/glib/gversionmacros.h",
            "/usr/include/glib-2.0/gmodule.h",
            "/usr/include/glib-2.0/gmodule/gmodule-visibility.h",
            "/usr/include/glib-2.0/gobject/gbinding.h",
            "/usr/include/glib-2.0/gobject/gbindinggroup.h",
            "/usr/include/glib-2.0/gobject/gboxed.h",
            "/usr/include/glib-2.0/gobject/gclosure.h",
            "/usr/include/glib-2.0/gobject/genums.h",
            "/usr/include/glib-2.0/gobject/glib-enumtypes.h",
            "/usr/include/glib-2.0/gobject/glib-types.h",
            "/usr/include/glib-2.0/gobject/gmarshal.h",
            "/usr/include/glib-2.0/gobject/gobject-autocleanups.h",
            "/usr/include/glib-2.0/gobject/gobject-visibility.h",
            "/usr/include/glib-2.0/gobject/gobject.h",
            "/usr/include/glib-2.0/gobject/gobjectnotifyqueue.c",
            "/usr/include/glib-2.0/gobject/gparam.h",
            "/usr/include/glib-2.0/gobject/gparamspecs.h",
            "/usr/include/glib-2.0/gobject/gsignal.h",
            "/usr/include/glib-2.0/gobject/gsignalgroup.h",
            "/usr/include/glib-2.0/gobject/gsourceclosure.h",
            "/usr/include/glib-2.0/gobject/gtype.h",
            "/usr/include/glib-2.0/gobject/gtypemodule.h",
            "/usr/include/glib-2.0/gobject/gtypeplugin.h",
            "/usr/include/glib-2.0/gobject/gvalue.h",
            "/usr/include/glib-2.0/gobject/gvaluearray.h",
            "/usr/include/glib-2.0/gobject/gvaluecollector.h",
            "/usr/include/glib-2.0/gobject/gvaluetypes.h",
            "/usr/lib/x86_64-linux-gnu/glib-2.0/include/glibconfig.h",
            "/usr/lib/x86_64-linux-gnu/libgio-2.0.a",
            "/usr/lib/x86_64-linux-gnu/libglib-2.0.a",
            "/usr/lib/x86_64-linux-gnu/libgmodule-2.0.a",
            "/usr/lib/x86_64-linux-gnu/libgobject-2.0.a",
            "/usr/lib/x86_64-linux-gnu/libgthread-2.0.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/gio-2.0.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/gio-unix-2.0.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/glib-2.0.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/gmodule-2.0.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/gmodule-export-2.0.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/gmodule-no-export-2.0.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/gobject-2.0.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/gthread-2.0.pc",
            "/usr/share/aclocal/glib-2.0.m4",
            "/usr/share/aclocal/glib-gettext.m4",
            "/usr/share/aclocal/gsettings.m4",
            "/usr/share/doc/libgio-2.0-dev/changelog.Debian.gz",
            "/usr/share/doc/libgio-2.0-dev/copyright",
            "/usr/share/gettext/its/gschema.its",
            "/usr/share/gettext/its/gschema.loc",
            "/usr/share/glib-2.0/dtds/gresource.dtd",
            "/usr/share/glib-2.0/gettext/po/Makefile.in.in",
            "/usr/share/glib-2.0/schemas/gschema.dtd",
            "/usr/share/glib-2.0/valgrind/glib.supp"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgio-2.0-dev-bin@2.84.4-3~deb13u5",
          "Name": "libgio-2.0-dev-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgio-2.0-dev-bin@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "9285f5853b18f538"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "amd64",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "python3-packaging@25.0-1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/bin/gdbus-codegen",
            "/usr/bin/glib-compile-resources",
            "/usr/bin/glib-genmarshal",
            "/usr/bin/glib-gettextize",
            "/usr/bin/glib-mkenums",
            "/usr/bin/gobject-query",
            "/usr/bin/gtester",
            "/usr/bin/gtester-report",
            "/usr/share/doc/libgio-2.0-dev-bin/changelog.Debian.gz",
            "/usr/share/doc/libgio-2.0-dev-bin/copyright",
            "/usr/share/glib-2.0/codegen/__init__.py",
            "/usr/share/glib-2.0/codegen/codegen.py",
            "/usr/share/glib-2.0/codegen/codegen_docbook.py",
            "/usr/share/glib-2.0/codegen/codegen_main.py",
            "/usr/share/glib-2.0/codegen/codegen_md.py",
            "/usr/share/glib-2.0/codegen/codegen_rst.py",
            "/usr/share/glib-2.0/codegen/config.py",
            "/usr/share/glib-2.0/codegen/dbustypes.py",
            "/usr/share/glib-2.0/codegen/parser.py",
            "/usr/share/glib-2.0/codegen/utils.py",
            "/usr/share/glib-2.0/gdb/glib_gdb.py",
            "/usr/share/glib-2.0/gdb/gobject_gdb.py",
            "/usr/share/man/man1/gdbus-codegen.1.gz",
            "/usr/share/man/man1/glib-compile-resources.1.gz",
            "/usr/share/man/man1/glib-genmarshal.1.gz",
            "/usr/share/man/man1/glib-gettextize.1.gz",
            "/usr/share/man/man1/glib-mkenums.1.gz",
            "/usr/share/man/man1/gobject-query.1.gz",
            "/usr/share/man/man1/gtester-report.1.gz",
            "/usr/share/man/man1/gtester.1.gz",
            "/usr/share/python3/runtime.d/libgio-2.0-dev-bin.rtupdate"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgirepository-2.0-0@2.84.4-3~deb13u5",
          "Name": "libgirepository-2.0-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgirepository-2.0-0@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "eaa0bb5df862d601"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "amd64",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libffi8@3.4.8-2",
            "libglib2.0-0t64@2.84.4-3~deb13u5"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgirepository-2.0.so.0.8400.4",
            "/usr/share/doc/libgirepository-2.0-0/changelog.Debian.gz",
            "/usr/share/doc/libgirepository-2.0-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libglib2.0-0t64@2.84.4-3~deb13u5",
          "Name": "libglib2.0-0t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libglib2.0-0t64@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "5a2c0c0938a8d519"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "amd64",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libatomic1@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libffi8@3.4.8-2",
            "libmount1@2.41.5-0+deb13u1",
            "libpcre2-8-0@10.46-1~deb13u3",
            "libselinux1@3.8.1-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/glib-2.0/gio-launch-desktop",
            "/usr/lib/x86_64-linux-gnu/glib-2.0/gio-querymodules",
            "/usr/lib/x86_64-linux-gnu/glib-2.0/glib-compile-schemas",
            "/usr/lib/x86_64-linux-gnu/libgio-2.0.so.0.8400.4",
            "/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0.8400.4",
            "/usr/lib/x86_64-linux-gnu/libgmodule-2.0.so.0.8400.4",
            "/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.8400.4",
            "/usr/lib/x86_64-linux-gnu/libgthread-2.0.so.0.8400.4",
            "/usr/share/doc/libglib2.0-0t64/NEWS.gz",
            "/usr/share/doc/libglib2.0-0t64/README.Debian",
            "/usr/share/doc/libglib2.0-0t64/README.md",
            "/usr/share/doc/libglib2.0-0t64/changelog.Debian.gz",
            "/usr/share/doc/libglib2.0-0t64/copyright",
            "/usr/share/lintian/overrides/libglib2.0-0t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libglib2.0-bin@2.84.4-3~deb13u5",
          "Name": "libglib2.0-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/libglib2.0-bin@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "29efad0dd72b26c1"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "amd64",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libelf1t64@0.192-4",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "libglib2.0-data@2.84.4-3~deb13u5"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/bin/gapplication",
            "/usr/bin/gdbus",
            "/usr/bin/gio",
            "/usr/bin/gresource",
            "/usr/bin/gsettings",
            "/usr/share/bash-completion/completions/gapplication",
            "/usr/share/bash-completion/completions/gdbus",
            "/usr/share/bash-completion/completions/gio",
            "/usr/share/bash-completion/completions/gresource",
            "/usr/share/bash-completion/completions/gsettings",
            "/usr/share/doc/libglib2.0-bin/changelog.Debian.gz",
            "/usr/share/doc/libglib2.0-bin/copyright",
            "/usr/share/lintian/overrides/libglib2.0-bin",
            "/usr/share/man/man1/gapplication.1.gz",
            "/usr/share/man/man1/gdbus.1.gz",
            "/usr/share/man/man1/gio-querymodules.1.gz",
            "/usr/share/man/man1/gio.1.gz",
            "/usr/share/man/man1/glib-compile-schemas.1.gz",
            "/usr/share/man/man1/gresource.1.gz",
            "/usr/share/man/man1/gsettings.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libglib2.0-data@2.84.4-3~deb13u5",
          "Name": "libglib2.0-data",
          "Identifier": {
            "PURL": "pkg:deb/debian/libglib2.0-data@2.84.4-3~deb13u5?arch=all\u0026distro=debian-13.7",
            "UID": "75c2bf00b098a0de"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "all",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/share/doc/libglib2.0-data/changelog.Debian.gz",
            "/usr/share/doc/libglib2.0-data/copyright",
            "/usr/share/locale/ab/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/af/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/am/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/an/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ar/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/as/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ast/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/az/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/be/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/be@latin/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/bg/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/bn/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/bn_IN/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/bs/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ca/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ca@valencia/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/cs/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/cy/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/da/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/de/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/dz/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/el/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/en@shaw/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/en_CA/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/en_GB/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/eo/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/es/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/et/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/eu/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/fa/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/fi/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/fr/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/fur/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ga/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/gd/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/gl/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/gu/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/he/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/hi/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/hr/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/hu/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/hy/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/id/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ie/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/is/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/it/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ja/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ka/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/kab/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/kk/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/kn/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ko/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ku/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/lt/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/lv/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/mai/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/mg/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/mk/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ml/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/mn/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/mr/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ms/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/nb/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/nds/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ne/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/nl/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/nn/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/oc/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/or/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/pa/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/pl/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ps/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/pt/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ro/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ru/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/rw/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/si/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/sk/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/sl/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/sq/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/sr/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/sr@ije/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/sr@latin/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/sv/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ta/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/te/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/tg/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/th/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/tl/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/tr/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/tt/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/ug/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/uk/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/vi/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/wa/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/xh/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/yi/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/zh_HK/LC_MESSAGES/glib20.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/glib20.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libglib2.0-dev@2.84.4-3~deb13u5",
          "Name": "libglib2.0-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libglib2.0-dev@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "71b560abb1495835"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "amd64",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "girepository-tools@2.84.4-3~deb13u5",
            "libgio-2.0-dev@2.84.4-3~deb13u5",
            "libglib2.0-bin@2.84.4-3~deb13u5",
            "libglib2.0-dev-bin@2.84.4-3~deb13u5"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/share/doc/libglib2.0-dev/README.Debian",
            "/usr/share/doc/libglib2.0-dev/changelog.Debian.gz",
            "/usr/share/doc/libglib2.0-dev/copyright",
            "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0.8400.4-gdb.py",
            "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.8400.4-gdb.py"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libglib2.0-dev-bin@2.84.4-3~deb13u5",
          "Name": "libglib2.0-dev-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/libglib2.0-dev-bin@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "39b645bb41491180"
          },
          "Version": "2.84.4",
          "Release": "3~deb13u5",
          "Arch": "amd64",
          "SrcName": "glib2.0",
          "SrcVersion": "2.84.4",
          "SrcRelease": "3~deb13u5",
          "Licenses": [
            "LGPL-2.1-or-later",
            "old-glib-tests",
            "AFL-2.0",
            "Janik-permissive",
            "LGPL-2.0-or-later",
            "CC0-1.0",
            "FSFULLR",
            "Iconv-PD",
            "Mingw-PD",
            "Unicode-DFS-2016",
            "MIT",
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "Apache-2.0 with LLVM exception",
            "Kuchling-PD",
            "Plumb-PD",
            "bzip2-1.0.6",
            "CC-BY-SA-3.0",
            "cmph",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "MPL-1.1",
            "Apache-2.0",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "girepository-tools@2.84.4-3~deb13u5",
            "libgio-2.0-dev-bin@2.84.4-3~deb13u5"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/share/doc/libglib2.0-dev-bin/changelog.Debian.gz",
            "/usr/share/doc/libglib2.0-dev-bin/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgmp10@2:6.3.0+dfsg-3",
          "Name": "libgmp10",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgmp10@6.3.0%2Bdfsg-3?arch=amd64\u0026distro=debian-13.7\u0026epoch=2",
            "UID": "472e354773202f0f"
          },
          "Version": "6.3.0+dfsg",
          "Release": "3",
          "Epoch": 2,
          "Arch": "amd64",
          "SrcName": "gmp",
          "SrcVersion": "6.3.0+dfsg",
          "SrcRelease": "3",
          "SrcEpoch": 2,
          "Licenses": [
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-or-later",
            "GPL-3+ with Bison exception",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian Science Maintainers \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgmp.so.10.5.0",
            "/usr/share/doc/libgmp10/README.Debian",
            "/usr/share/doc/libgmp10/changelog.Debian.gz",
            "/usr/share/doc/libgmp10/changelog.gz",
            "/usr/share/doc/libgmp10/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgnutls30t64@3.8.9-3+deb13u4",
          "Name": "libgnutls30t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgnutls30t64@3.8.9-3%2Bdeb13u4?arch=amd64\u0026distro=debian-13.7",
            "UID": "bee8a7b969fa13b6"
          },
          "Version": "3.8.9",
          "Release": "3+deb13u4",
          "Arch": "amd64",
          "SrcName": "gnutls28",
          "SrcVersion": "3.8.9",
          "SrcRelease": "3+deb13u4",
          "Licenses": [
            "LGPL-2.1-only",
            "LGPL-2.0-or-later",
            "LGPL-3.0-only",
            "GPL-2.0-or-later",
            "GPL-3.0-only",
            "GFDL-1.3-only",
            "CC0-1.0",
            "MIT",
            "Apache-2.0",
            "LGPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "GPL-3.0-or-later",
            "BSD-3-Clause",
            "FSFAP"
          ],
          "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgmp10@2:6.3.0+dfsg-3",
            "libhogweed6t64@3.10.1-1",
            "libidn2-0@2.3.8-2",
            "libnettle8t64@3.10.1-1",
            "libp11-kit0@0.25.5-3",
            "libtasn1-6@4.20.0-2+deb13u1",
            "libunistring5@1.3-2"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgnutls.so.30.40.3",
            "/usr/share/doc/libgnutls30t64/AUTHORS.gz",
            "/usr/share/doc/libgnutls30t64/NEWS.gz",
            "/usr/share/doc/libgnutls30t64/README.md.gz",
            "/usr/share/doc/libgnutls30t64/THANKS.gz",
            "/usr/share/doc/libgnutls30t64/changelog.Debian.gz",
            "/usr/share/doc/libgnutls30t64/changelog.gz",
            "/usr/share/doc/libgnutls30t64/copyright",
            "/usr/share/lintian/overrides/libgnutls30t64",
            "/usr/share/locale/cs/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/de/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/eo/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/es/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/fi/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/fr/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/it/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/ka/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/ms/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/nl/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/pl/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/ro/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/sr/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/sv/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/uk/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/vi/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/gnutls30.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgomp1@14.2.0-19",
          "Name": "libgomp1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgomp1@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "d4cf754fa8743c01"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgprofng0@2.44-3",
          "Name": "libgprofng0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgprofng0@2.44-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "e1f0c1962f729579"
          },
          "Version": "2.44",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "binutils",
          "SrcVersion": "2.44",
          "SrcRelease": "3",
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbinutils@2.44-3",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libstdc++6@14.2.0-19",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/gprofng/libgp-collector.so",
            "/usr/lib/x86_64-linux-gnu/gprofng/libgp-collectorAPI.so",
            "/usr/lib/x86_64-linux-gnu/gprofng/libgp-heap.so",
            "/usr/lib/x86_64-linux-gnu/gprofng/libgp-iotrace.so",
            "/usr/lib/x86_64-linux-gnu/gprofng/libgp-sync.so",
            "/usr/lib/x86_64-linux-gnu/libgprofng.so.0.0.0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgraphite2-3@1.3.14-2+deb13u1",
          "Name": "libgraphite2-3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgraphite2-3@1.3.14-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "7bea6b56ad18b22e"
          },
          "Version": "1.3.14",
          "Release": "2+deb13u1",
          "Arch": "amd64",
          "SrcName": "graphite2",
          "SrcVersion": "1.3.14",
          "SrcRelease": "2+deb13u1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "MPL-1.1",
            "GPL-2.0-or-later",
            "public-domain",
            "Artistic-2.0",
            "GPL-1.0-or-later",
            "custom-sil-open-font-license",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian LibreOffice Maintainers \u003cdebian-openoffice@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgraphite2.so.3.2.1",
            "/usr/share/doc/libgraphite2-3/changelog.Debian.gz",
            "/usr/share/doc/libgraphite2-3/changelog.gz",
            "/usr/share/doc/libgraphite2-3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgssapi-krb5-2@1.21.3-5+deb13u1",
          "Name": "libgssapi-krb5-2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgssapi-krb5-2@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "dac17d4a06256172"
          },
          "Version": "1.21.3",
          "Release": "5+deb13u1",
          "Arch": "amd64",
          "SrcName": "krb5",
          "SrcVersion": "1.21.3",
          "SrcRelease": "5+deb13u1",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libcom-err2@1.47.2-3+b12",
            "libk5crypto3@1.21.3-5+deb13u1",
            "libkrb5-3@1.21.3-5+deb13u1",
            "libkrb5support0@1.21.3-5+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2",
            "/usr/share/doc/libgssapi-krb5-2/changelog.Debian.gz",
            "/usr/share/doc/libgssapi-krb5-2/copyright",
            "/usr/share/lintian/overrides/libgssapi-krb5-2"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libharfbuzz0b@10.2.0-1+deb13u1",
          "Name": "libharfbuzz0b",
          "Identifier": {
            "PURL": "pkg:deb/debian/libharfbuzz0b@10.2.0-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "31d810fd752b0632"
          },
          "Version": "10.2.0",
          "Release": "1+deb13u1",
          "Arch": "amd64",
          "SrcName": "harfbuzz",
          "SrcVersion": "10.2.0",
          "SrcRelease": "1+deb13u1",
          "Licenses": [
            "MIT",
            "Unicode",
            "ISC",
            "Apache-2.0",
            "OFL-1.1",
            "Monotype",
            "CC0-1.0",
            "GPL-3.0-or-later",
            "GPL-2+ with Font exception",
            "UFL-1.0",
            "FSFULLR",
            "GPL-2.0-with-autoconf-exception+",
            "GPL-3.0-with-autoconf-exception+",
            "FSFAP",
            "LGPL-2.1-or-later",
            "GPL-2+ with LibTool exception",
            "FSFUL",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "أحمد المحمودي (Ahmed El-Mahmoudy) \u003caelmahmoudy@users.sourceforge.net\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libfreetype6@2.13.3+dfsg-1+deb13u1",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "libgraphite2-3@1.3.14-2+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libharfbuzz.so.0.61020.0",
            "/usr/share/doc/libharfbuzz0b/changelog.Debian.gz",
            "/usr/share/doc/libharfbuzz0b/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libhashkit2t64@1.1.4-1.1+b2",
          "Name": "libhashkit2t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libhashkit2t64@1.1.4-1.1%2Bb2?arch=amd64\u0026distro=debian-13.7",
            "UID": "70f607817dcf9bf0"
          },
          "Version": "1.1.4",
          "Release": "1.1+b2",
          "Arch": "amd64",
          "SrcName": "libmemcached",
          "SrcVersion": "1.1.4",
          "SrcRelease": "1.1",
          "Licenses": [
            "BSD-3-clause-TangentOrg",
            "Paul-Hsieh",
            "RSA-Data-Security",
            "Bob-Jenkins",
            "BSD-3-Clause-Sun",
            "BSD-3-Clause"
          ],
          "Maintainer": "Ondřej Surý \u003condrej@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libhashkit.so.2.0.0",
            "/usr/share/doc/libhashkit2t64/changelog.Debian.amd64.gz",
            "/usr/share/doc/libhashkit2t64/changelog.Debian.gz",
            "/usr/share/doc/libhashkit2t64/changelog.gz",
            "/usr/share/doc/libhashkit2t64/copyright",
            "/usr/share/lintian/overrides/libhashkit2t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libheif-plugin-dav1d@1.23.4-1~deb13u1",
          "Name": "libheif-plugin-dav1d",
          "Identifier": {
            "PURL": "pkg:deb/debian/libheif-plugin-dav1d@1.23.4-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "5586200c471f0a1b"
          },
          "Version": "1.23.4",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "libheif",
          "SrcVersion": "1.23.4",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "LGPL-3.0-or-later",
            "BSD-2-Clause",
            "GPL-3.0-or-later",
            "MIT",
            "BSD-4-Clause-UC",
            "BSD-3-Clause",
            "BSL-1.0",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libdav1d7@1.5.1-1",
            "libgcc-s1@14.2.0-19",
            "libheif1@1.23.4-1~deb13u1",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libheif/plugins/libheif-dav1d.so",
            "/usr/share/doc/libheif-plugin-dav1d/changelog.Debian.gz",
            "/usr/share/doc/libheif-plugin-dav1d/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libheif-plugin-libde265@1.23.4-1~deb13u1",
          "Name": "libheif-plugin-libde265",
          "Identifier": {
            "PURL": "pkg:deb/debian/libheif-plugin-libde265@1.23.4-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "392412324dcd74a4"
          },
          "Version": "1.23.4",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "libheif",
          "SrcVersion": "1.23.4",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "LGPL-3.0-or-later",
            "BSD-2-Clause",
            "GPL-3.0-or-later",
            "MIT",
            "BSD-4-Clause-UC",
            "BSD-3-Clause",
            "BSL-1.0",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libde265-0@1.0.15-1+deb13u2",
            "libgcc-s1@14.2.0-19",
            "libheif1@1.23.4-1~deb13u1",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libheif/plugins/libheif-libde265.so",
            "/usr/share/doc/libheif-plugin-libde265/changelog.Debian.gz",
            "/usr/share/doc/libheif-plugin-libde265/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libheif1@1.23.4-1~deb13u1",
          "Name": "libheif1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libheif1@1.23.4-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "c8c5fe0c38a99938"
          },
          "Version": "1.23.4",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "libheif",
          "SrcVersion": "1.23.4",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "LGPL-3.0-or-later",
            "BSD-2-Clause",
            "GPL-3.0-or-later",
            "MIT",
            "BSD-4-Clause-UC",
            "BSD-3-Clause",
            "BSL-1.0",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbrotli1@1.1.0-2+b7",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libheif-plugin-dav1d@1.23.4-1~deb13u1",
            "libheif-plugin-libde265@1.23.4-1~deb13u1",
            "libsharpyuv0@1.5.0-0.1",
            "libstdc++6@14.2.0-19",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libheif.so.1.23.4",
            "/usr/share/doc/libheif1/changelog.Debian.gz",
            "/usr/share/doc/libheif1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libhogweed6t64@3.10.1-1",
          "Name": "libhogweed6t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libhogweed6t64@3.10.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "2df7ce16a99c5e01"
          },
          "Version": "3.10.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "nettle",
          "SrcVersion": "3.10.1",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "MIT",
            "GPL-3.0-with-autoconf-exception+",
            "public-domain",
            "GPL-2.0-only",
            "GAP"
          ],
          "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgmp10@2:6.3.0+dfsg-3",
            "libnettle8t64@3.10.1-1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libhogweed.so.6.10",
            "/usr/share/doc/libhogweed6t64/changelog.Debian.gz",
            "/usr/share/doc/libhogweed6t64/changelog.gz",
            "/usr/share/doc/libhogweed6t64/copyright",
            "/usr/share/lintian/overrides/libhogweed6t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libhwasan0@14.2.0-19",
          "Name": "libhwasan0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libhwasan0@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "726c3c91a9b3bd86"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libhwasan.so.0.0.0",
            "/usr/share/lintian/overrides/libhwasan0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libicu76@76.1-4",
          "Name": "libicu76",
          "Identifier": {
            "PURL": "pkg:deb/debian/libicu76@76.1-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "6275b05bce26d44f"
          },
          "Version": "76.1",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "icu",
          "SrcVersion": "76.1",
          "SrcRelease": "4",
          "Licenses": [
            "MIT",
            "GPL-3.0-only"
          ],
          "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libicudata.so.76.1",
            "/usr/lib/x86_64-linux-gnu/libicui18n.so.76.1",
            "/usr/lib/x86_64-linux-gnu/libicuio.so.76.1",
            "/usr/lib/x86_64-linux-gnu/libicutest.so.76.1",
            "/usr/lib/x86_64-linux-gnu/libicutu.so.76.1",
            "/usr/lib/x86_64-linux-gnu/libicuuc.so.76.1",
            "/usr/share/doc/libicu76/changelog.Debian.gz",
            "/usr/share/doc/libicu76/copyright",
            "/usr/share/lintian/overrides/libicu76"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libidn2-0@2.3.8-2",
          "Name": "libidn2-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libidn2-0@2.3.8-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "4f4a3be0ceb6bfcd"
          },
          "Version": "2.3.8",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libidn2",
          "SrcVersion": "2.3.8",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "MIT",
            "Unicode",
            "GPL-3.0-only",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian Libidn team \u003chelp-libidn@gnu.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libunistring5@1.3-2"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libidn2.so.0.4.0",
            "/usr/share/doc/libidn2-0/AUTHORS",
            "/usr/share/doc/libidn2-0/NEWS.gz",
            "/usr/share/doc/libidn2-0/README.md.gz",
            "/usr/share/doc/libidn2-0/changelog.Debian.gz",
            "/usr/share/doc/libidn2-0/copyright",
            "/usr/share/lintian/overrides/libidn2-0",
            "/usr/share/locale/cs/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/da/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/de/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/eo/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/es/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/fi/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/fr/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/fur/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/hr/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/hu/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/id/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/it/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ja/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ka/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ko/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/lv/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/nl/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/pl/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ro/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ru/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/sr/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/sv/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/uk/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/vi/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/libidn2.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libimath-3-1-29t64@3.1.12-1+b3",
          "Name": "libimath-3-1-29t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libimath-3-1-29t64@3.1.12-1%2Bb3?arch=amd64\u0026distro=debian-13.7",
            "UID": "eb33c9779e84916"
          },
          "Version": "3.1.12",
          "Release": "1+b3",
          "Arch": "amd64",
          "SrcName": "imath",
          "SrcVersion": "3.1.12",
          "SrcRelease": "1",
          "Licenses": [
            "imath"
          ],
          "Maintainer": "Debian PhotoTools Maintainers \u003cpkg-phototools-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libImath-3_1.so.29.11.0",
            "/usr/share/doc/libimath-3-1-29t64/changelog.Debian.amd64.gz",
            "/usr/share/doc/libimath-3-1-29t64/changelog.Debian.gz",
            "/usr/share/doc/libimath-3-1-29t64/changelog.gz",
            "/usr/share/doc/libimath-3-1-29t64/copyright",
            "/usr/share/lintian/overrides/libimath-3-1-29t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libisl23@0.27-1",
          "Name": "libisl23",
          "Identifier": {
            "PURL": "pkg:deb/debian/libisl23@0.27-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "92894a82573394b8"
          },
          "Version": "0.27",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "isl",
          "SrcVersion": "0.27",
          "SrcRelease": "1",
          "Licenses": [
            "MIT",
            "BSD-2-Clause",
            "LGPL-2.1-or-later",
            "LGPL-2.0-only"
          ],
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgmp10@2:6.3.0+dfsg-3"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libisl.so.23.4.0",
            "/usr/share/doc/libisl23/changelog.Debian.gz",
            "/usr/share/doc/libisl23/changelog.gz",
            "/usr/share/doc/libisl23/copyright",
            "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libisl.so.23.4.0-gdb.py"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libitm1@14.2.0-19",
          "Name": "libitm1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libitm1@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "38cfe10686113209"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libitm.so.1.0.0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libjansson4@2.14-2+b3",
          "Name": "libjansson4",
          "Identifier": {
            "PURL": "pkg:deb/debian/libjansson4@2.14-2%2Bb3?arch=amd64\u0026distro=debian-13.7",
            "UID": "28d108e68fbe33d5"
          },
          "Version": "2.14",
          "Release": "2+b3",
          "Arch": "amd64",
          "SrcName": "jansson",
          "SrcVersion": "2.14",
          "SrcRelease": "2",
          "Licenses": [
            "MIT"
          ],
          "Maintainer": "Alessandro Ghedini \u003cghedo@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libjansson.so.4.14.0",
            "/usr/share/doc/libjansson4/README.rst",
            "/usr/share/doc/libjansson4/changelog.Debian.amd64.gz",
            "/usr/share/doc/libjansson4/changelog.Debian.gz",
            "/usr/share/doc/libjansson4/changelog.gz",
            "/usr/share/doc/libjansson4/copyright",
            "/usr/share/doc/libjansson4/examples/json_process.c"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libjbig0@2.1-6.1+b2",
          "Name": "libjbig0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libjbig0@2.1-6.1%2Bb2?arch=amd64\u0026distro=debian-13.7",
            "UID": "f0cab185dfb7e01a"
          },
          "Version": "2.1",
          "Release": "6.1+b2",
          "Arch": "amd64",
          "SrcName": "jbigkit",
          "SrcVersion": "2.1",
          "SrcRelease": "6.1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Michael van der Kolff \u003cmvanderkolff@gmail.com\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libjbig.so.0",
            "/usr/share/doc/libjbig0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libjbig0/changelog.Debian.gz",
            "/usr/share/doc/libjbig0/changelog.gz",
            "/usr/share/doc/libjbig0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libjpeg62-turbo@1:2.1.5-4",
          "Name": "libjpeg62-turbo",
          "Identifier": {
            "PURL": "pkg:deb/debian/libjpeg62-turbo@2.1.5-4?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "7087f0ef0767db37"
          },
          "Version": "2.1.5",
          "Release": "4",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libjpeg-turbo",
          "SrcVersion": "2.1.5",
          "SrcRelease": "4",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-BY-LC-NE",
            "Zlib",
            "BSD-3-Clause",
            "MIT",
            "NTP"
          ],
          "Maintainer": "Ondřej Surý \u003condrej@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libjpeg.so.62.3.0",
            "/usr/share/doc/libjpeg62-turbo/changelog.Debian.gz",
            "/usr/share/doc/libjpeg62-turbo/changelog.gz",
            "/usr/share/doc/libjpeg62-turbo/copyright",
            "/usr/share/lintian/overrides/libjpeg62-turbo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libk5crypto3@1.21.3-5+deb13u1",
          "Name": "libk5crypto3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libk5crypto3@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "f8d49da0eb971f"
          },
          "Version": "1.21.3",
          "Release": "5+deb13u1",
          "Arch": "amd64",
          "SrcName": "krb5",
          "SrcVersion": "1.21.3",
          "SrcRelease": "5+deb13u1",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libkrb5support0@1.21.3-5+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1",
            "/usr/share/doc/libk5crypto3/changelog.Debian.gz",
            "/usr/share/doc/libk5crypto3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libkeyutils1@1.6.3-6",
          "Name": "libkeyutils1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libkeyutils1@1.6.3-6?arch=amd64\u0026distro=debian-13.7",
            "UID": "67361ceb6d971212"
          },
          "Version": "1.6.3",
          "Release": "6",
          "Arch": "amd64",
          "SrcName": "keyutils",
          "SrcVersion": "1.6.3",
          "SrcRelease": "6",
          "Licenses": [
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.0-only"
          ],
          "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libkeyutils.so.1.10",
            "/usr/share/doc/libkeyutils1/changelog.Debian.gz",
            "/usr/share/doc/libkeyutils1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libkrb5-3@1.21.3-5+deb13u1",
          "Name": "libkrb5-3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libkrb5-3@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "c338d2fcc3f70f88"
          },
          "Version": "1.21.3",
          "Release": "5+deb13u1",
          "Arch": "amd64",
          "SrcName": "krb5",
          "SrcVersion": "1.21.3",
          "SrcRelease": "5+deb13u1",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libcom-err2@1.47.2-3+b12",
            "libk5crypto3@1.21.3-5+deb13u1",
            "libkeyutils1@1.6.3-6",
            "libkrb5support0@1.21.3-5+deb13u1",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so",
            "/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3",
            "/usr/share/doc/libkrb5-3/README.Debian",
            "/usr/share/doc/libkrb5-3/README.gz",
            "/usr/share/doc/libkrb5-3/changelog.Debian.gz",
            "/usr/share/doc/libkrb5-3/copyright",
            "/usr/share/lintian/overrides/libkrb5-3"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libkrb5support0@1.21.3-5+deb13u1",
          "Name": "libkrb5support0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libkrb5support0@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "9ebcef3f54ad8dc1"
          },
          "Version": "1.21.3",
          "Release": "5+deb13u1",
          "Arch": "amd64",
          "SrcName": "krb5",
          "SrcVersion": "1.21.3",
          "SrcRelease": "5+deb13u1",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1",
            "/usr/share/doc/libkrb5support0/changelog.Debian.gz",
            "/usr/share/doc/libkrb5support0/copyright",
            "/usr/share/lintian/overrides/libkrb5support0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblastlog2-2@2.41.5-0+deb13u1",
          "Name": "liblastlog2-2",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "481f2fda004b182b"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libsqlite3-0@3.46.1-7+deb13u2"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblastlog2.so.2.0.0",
            "/usr/share/doc/liblastlog2-2/NEWS.Debian.gz",
            "/usr/share/doc/liblastlog2-2/changelog.Debian.gz",
            "/usr/share/doc/liblastlog2-2/changelog.gz",
            "/usr/share/doc/liblastlog2-2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblcms2-2@2.16-2+deb13u2",
          "Name": "liblcms2-2",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblcms2-2@2.16-2%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "3ca0f4bbc512f6a9"
          },
          "Version": "2.16",
          "Release": "2+deb13u2",
          "Arch": "amd64",
          "SrcName": "lcms2",
          "SrcVersion": "2.16",
          "SrcRelease": "2+deb13u2",
          "Licenses": [
            "MIT",
            "GPL-3.0-only",
            "IJG",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Thomas Weber \u003ctweber@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblcms2.so.2.0.16",
            "/usr/share/doc/liblcms2-2/changelog.Debian.gz",
            "/usr/share/doc/liblcms2-2/changelog.gz",
            "/usr/share/doc/liblcms2-2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libldap-common@2.6.10+dfsg-1",
          "Name": "libldap-common",
          "Identifier": {
            "PURL": "pkg:deb/debian/libldap-common@2.6.10%2Bdfsg-1?arch=all\u0026distro=debian-13.7",
            "UID": "8215983bfd1750e9"
          },
          "Version": "2.6.10+dfsg",
          "Release": "1",
          "Arch": "all",
          "SrcName": "openldap",
          "SrcVersion": "2.6.10+dfsg",
          "SrcRelease": "1",
          "Licenses": [
            "OpenLDAP-2.8",
            "FSF-unlimited",
            "GPL-2.0-with-autoconf-exception+",
            "GPL-3.0-with-autoconf-exception+",
            "GPL-2+ with Libtool exception",
            "GPL-3+ with Libtool exception",
            "GPL-3.0-or-later",
            "GPL-2.0-or-later",
            "UMich",
            "F5",
            "JCG",
            "MIT-XC",
            "NeoSoft-permissive",
            "BSD-3-Clause",
            "Beerware",
            "public-domain",
            "BSD-4-clause-California",
            "BSD-3-clause-variant",
            "Expat-ISC",
            "Expat-UNM",
            "MIT",
            "BSD-3-clause-California",
            "GPL-2.0-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "Debian OpenLDAP Maintainers \u003cpkg-openldap-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/share/doc/libldap-common/NEWS.Debian.gz",
            "/usr/share/doc/libldap-common/changelog.Debian.gz",
            "/usr/share/doc/libldap-common/changelog.gz",
            "/usr/share/doc/libldap-common/copyright",
            "/usr/share/man/man5/ldap.conf.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libldap2@2.6.10+dfsg-1",
          "Name": "libldap2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libldap2@2.6.10%2Bdfsg-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "a42eecc359ec021a"
          },
          "Version": "2.6.10+dfsg",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "openldap",
          "SrcVersion": "2.6.10+dfsg",
          "SrcRelease": "1",
          "Licenses": [
            "OpenLDAP-2.8",
            "FSF-unlimited",
            "GPL-2.0-with-autoconf-exception+",
            "GPL-3.0-with-autoconf-exception+",
            "GPL-2+ with Libtool exception",
            "GPL-3+ with Libtool exception",
            "GPL-3.0-or-later",
            "GPL-2.0-or-later",
            "UMich",
            "F5",
            "JCG",
            "MIT-XC",
            "NeoSoft-permissive",
            "BSD-3-Clause",
            "Beerware",
            "public-domain",
            "BSD-4-clause-California",
            "BSD-3-clause-variant",
            "Expat-ISC",
            "Expat-UNM",
            "MIT",
            "BSD-3-clause-California",
            "GPL-2.0-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "Debian OpenLDAP Maintainers \u003cpkg-openldap-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libsasl2-2@2.1.28+dfsg1-9",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblber.so.2.0.200",
            "/usr/lib/x86_64-linux-gnu/libldap.so.2.0.200",
            "/usr/share/doc/libldap2/NEWS.Debian.gz",
            "/usr/share/doc/libldap2/changelog.Debian.gz",
            "/usr/share/doc/libldap2/changelog.gz",
            "/usr/share/doc/libldap2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblerc4@4.0.0+ds-5",
          "Name": "liblerc4",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblerc4@4.0.0%2Bds-5?arch=amd64\u0026distro=debian-13.7",
            "UID": "657d0299d9e5d26f"
          },
          "Version": "4.0.0+ds",
          "Release": "5",
          "Arch": "amd64",
          "SrcName": "lerc",
          "SrcVersion": "4.0.0+ds",
          "SrcRelease": "5",
          "Licenses": [
            "Apache-2.0"
          ],
          "Maintainer": "Debian GIS Project \u003cpkg-grass-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libLerc.so.4",
            "/usr/share/doc/liblerc4/NOTICE",
            "/usr/share/doc/liblerc4/changelog.Debian.gz",
            "/usr/share/doc/liblerc4/changelog.gz",
            "/usr/share/doc/liblerc4/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblqr-1-0@0.4.2-2.1+b2",
          "Name": "liblqr-1-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblqr-1-0@0.4.2-2.1%2Bb2?arch=amd64\u0026distro=debian-13.7",
            "UID": "8ca3ab042ba16635"
          },
          "Version": "0.4.2",
          "Release": "2.1+b2",
          "Arch": "amd64",
          "SrcName": "liblqr",
          "SrcVersion": "0.4.2",
          "SrcRelease": "2.1",
          "Licenses": [
            "LGPL-3.0-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "Bernd Zeimetz \u003cbzed@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libglib2.0-0t64@2.84.4-3~deb13u5"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblqr-1.so.0.3.2",
            "/usr/share/doc/liblqr-1-0/changelog.Debian.amd64.gz",
            "/usr/share/doc/liblqr-1-0/changelog.Debian.gz",
            "/usr/share/doc/liblqr-1-0/changelog.gz",
            "/usr/share/doc/liblqr-1-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblsan0@14.2.0-19",
          "Name": "liblsan0",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblsan0@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "d17ac7b69274501f"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblsan.so.0.0.0",
            "/usr/share/lintian/overrides/liblsan0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libltdl7@2.5.4-4",
          "Name": "libltdl7",
          "Identifier": {
            "PURL": "pkg:deb/debian/libltdl7@2.5.4-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "2cad739b2e560cd3"
          },
          "Version": "2.5.4",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "libtool",
          "SrcVersion": "2.5.4",
          "SrcRelease": "4",
          "Licenses": [
            "GPL-2.0-or-later",
            "GFDL-1.3-no-invariants-or-later",
            "GPL-2.0-only",
            "GFDL-1.3-only"
          ],
          "Maintainer": "Alastair McKinstry \u003cmckinstry@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libltdl.so.7.3.3",
            "/usr/share/doc/libltdl7/NEWS.gz",
            "/usr/share/doc/libltdl7/README",
            "/usr/share/doc/libltdl7/changelog.Debian.gz",
            "/usr/share/doc/libltdl7/changelog.gz",
            "/usr/share/doc/libltdl7/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblua5.4-0@5.4.7-1+b2",
          "Name": "liblua5.4-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblua5.4-0@5.4.7-1%2Bb2?arch=amd64\u0026distro=debian-13.7",
            "UID": "78a46ee23d662937"
          },
          "Version": "5.4.7",
          "Release": "1+b2",
          "Arch": "amd64",
          "SrcName": "lua5.4",
          "SrcVersion": "5.4.7",
          "SrcRelease": "1",
          "Licenses": [
            "MIT"
          ],
          "Maintainer": "Debian Lua Team \u003cpkg-lua-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblua5.4-c++.so.0.0.0",
            "/usr/lib/x86_64-linux-gnu/liblua5.4.so.0.0.0",
            "/usr/share/doc/liblua5.4-0/changelog.Debian.amd64.gz",
            "/usr/share/doc/liblua5.4-0/changelog.Debian.gz",
            "/usr/share/doc/liblua5.4-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblz4-1@1.10.0-4",
          "Name": "liblz4-1",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblz4-1@1.10.0-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "dcc7de8e33942d8c"
          },
          "Version": "1.10.0",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "lz4",
          "SrcVersion": "1.10.0",
          "SrcRelease": "4",
          "Licenses": [
            "GPL-2.0-or-later",
            "BSD-2-Clause",
            "GPL-2.0-only"
          ],
          "Maintainer": "Nobuhiro Iwamatsu \u003ciwamatsu@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libxxhash0@0.8.3-2"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblz4.so.1.10.0",
            "/usr/share/doc/liblz4-1/changelog.Debian.gz",
            "/usr/share/doc/liblz4-1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblzma5@5.8.1-1+deb13u2",
          "Name": "liblzma5",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblzma5@5.8.1-1%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "443b92228913606d"
          },
          "Version": "5.8.1",
          "Release": "1+deb13u2",
          "Arch": "amd64",
          "SrcName": "xz-utils",
          "SrcVersion": "5.8.1",
          "SrcRelease": "1+deb13u2",
          "Licenses": [
            "0BSD",
            "GPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "FSFULLR",
            "GPL-3.0-or-later-WITH-Autoconf-exception-macro",
            "none",
            "PD",
            "permissive-nowarranty",
            "FSFUL",
            "noderivs",
            "PD-debian",
            "LGPL-2.1-only",
            "GPL-2.0-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "Sebastian Andrzej Siewior \u003csebastian@breakpoint.cc\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblzma.so.5.8.1",
            "/usr/share/doc/liblzma5/AUTHORS",
            "/usr/share/doc/liblzma5/NEWS.gz",
            "/usr/share/doc/liblzma5/THANKS.gz",
            "/usr/share/doc/liblzma5/changelog.Debian.gz",
            "/usr/share/doc/liblzma5/changelog.gz",
            "/usr/share/doc/liblzma5/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmagic-mgc@1:5.46-5",
          "Name": "libmagic-mgc",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmagic-mgc@5.46-5?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "c7e481c493353375"
          },
          "Version": "5.46",
          "Release": "5",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "file",
          "SrcVersion": "5.46",
          "SrcRelease": "5",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-2-Clause-alike",
            "public-domain",
            "BSD-2-Clause-NetBSD",
            "BSD-2-Clause-regents",
            "MIT-Old-Style-with-legal-disclaimer-2"
          ],
          "Maintainer": "Christoph Biedl \u003cdebian.axhn@manchmal.in-ulm.de\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/file/magic.mgc",
            "/usr/share/doc/libmagic-mgc/README.Debian",
            "/usr/share/doc/libmagic-mgc/changelog.Debian.gz",
            "/usr/share/doc/libmagic-mgc/changelog.gz",
            "/usr/share/doc/libmagic-mgc/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmagic1t64@1:5.46-5",
          "Name": "libmagic1t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmagic1t64@5.46-5?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "4a45e4e43eba4a4e"
          },
          "Version": "5.46",
          "Release": "5",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "file",
          "SrcVersion": "5.46",
          "SrcRelease": "5",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-2-Clause-alike",
            "public-domain",
            "BSD-2-Clause-NetBSD",
            "BSD-2-Clause-regents",
            "MIT-Old-Style-with-legal-disclaimer-2"
          ],
          "Maintainer": "Christoph Biedl \u003cdebian.axhn@manchmal.in-ulm.de\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4",
            "liblzma5@5.8.1-1+deb13u2",
            "libmagic-mgc@1:5.46-5",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libmagic.so.1.0.0",
            "/usr/share/bug/libmagic1t64/control",
            "/usr/share/bug/libmagic1t64/presubj",
            "/usr/share/doc/libmagic1t64/changelog.Debian.gz",
            "/usr/share/doc/libmagic1t64/changelog.gz",
            "/usr/share/doc/libmagic1t64/copyright",
            "/usr/share/lintian/overrides/libmagic1t64",
            "/usr/share/man/man5/magic.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "Name": "libmagickcore-7.q16-10",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "Version": "7.1.1.43+dfsg1",
          "Release": "1+deb13u12",
          "Epoch": 8,
          "Arch": "amd64",
          "SrcName": "imagemagick",
          "SrcVersion": "7.1.1.43+dfsg1",
          "SrcRelease": "1+deb13u12",
          "SrcEpoch": 8,
          "Licenses": [
            "ImageMagick",
            "aclocal",
            "Makefile-in",
            "ImageMagickPartlibsquish",
            "ImageMagickPartGraphicsMagick",
            "ImageMagickPartlibjpeg",
            "ImageMagickLicensePartFIG",
            "GPL-2.0-or-later",
            "BSD-with-FSF-change-public-domain",
            "ImageMagickLicensePartGsview",
            "ImageMagickLicensePartOpenSSH",
            "Magick++",
            "GPL2+-with-Autoconf-Macros-exception",
            "GPL3+-with-Autoconf-Macros-exception",
            "GNU-All-Permissive-License",
            "LGPL-3.0-or-later",
            "ImageMagickLicensePartEZXML",
            "Perllikelicence",
            "Artistic-2.0",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "GPL3+-with-Autoconf-Macros-exception-GNU",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "ImageMagick Packaging Team \u003cpkg-gmagick-im-team@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4",
            "libfftw3-double3@3.3.10-2+b1",
            "libfontconfig1@2.15.0-2.3",
            "libfreetype6@2.13.3+dfsg-1+deb13u1",
            "libgcc-s1@14.2.0-19",
            "libgomp1@14.2.0-19",
            "libheif1@1.23.4-1~deb13u1",
            "libjbig0@2.1-6.1+b2",
            "libjpeg62-turbo@1:2.1.5-4",
            "liblcms2-2@2.16-2+deb13u2",
            "liblqr-1-0@0.4.2-2.1+b2",
            "libltdl7@2.5.4-4",
            "liblzma5@5.8.1-1+deb13u2",
            "libopenjp2-7@2.5.3-2.1~deb13u2",
            "libpng16-16t64@1.6.48-1+deb13u6",
            "libraw23t64@0.21.4-2+deb13u1",
            "libtiff6@4.7.0-3+deb13u3",
            "libwebp7@1.5.0-0.1",
            "libwebpdemux2@1.5.0-0.1",
            "libwebpmux3@1.5.0-0.1",
            "libx11-6@2:1.8.12-1",
            "libxext6@2:1.3.4-1+b3",
            "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/config-Q16/configure.xml",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/aai.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/aai.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/art.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/art.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ashlar.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ashlar.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/avs.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/avs.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/bayer.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/bayer.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/bgr.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/bgr.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/bmp.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/bmp.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/braille.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/braille.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cals.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cals.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/caption.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/caption.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cin.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cin.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cip.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cip.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/clip.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/clip.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cmyk.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cmyk.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cube.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cube.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cut.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/cut.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dcm.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dcm.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dds.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dds.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/debug.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/debug.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dib.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dib.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dng.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dng.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dpx.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dpx.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ept.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ept.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/farbfeld.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/farbfeld.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/fax.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/fax.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/fits.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/fits.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/fl32.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/fl32.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ftxt.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ftxt.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/gif.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/gif.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/gradient.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/gradient.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/gray.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/gray.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/hald.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/hald.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/hdr.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/hdr.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/heic.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/heic.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/histogram.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/histogram.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/hrz.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/hrz.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/html.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/html.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/icon.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/icon.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/info.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/info.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/inline.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/inline.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ipl.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ipl.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/jbig.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/jbig.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/jnx.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/jnx.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/jp2.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/jp2.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/jpeg.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/jpeg.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/json.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/json.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/kernel.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/kernel.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/label.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/label.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mac.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mac.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/magick.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/magick.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/map.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/map.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mask.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mask.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mat.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mat.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/matte.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/matte.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/meta.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/meta.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/miff.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/miff.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mono.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mono.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mpc.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mpc.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mpr.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mpr.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/msl.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/msl.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mtv.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mtv.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mvg.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/mvg.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/null.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/null.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ora.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ora.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/otb.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/otb.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/palm.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/palm.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pattern.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pattern.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pcd.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pcd.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pcl.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pcl.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pcx.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pcx.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pdb.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pdb.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pdf.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pdf.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pes.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pes.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pgx.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pgx.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pict.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pict.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pix.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pix.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/plasma.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/plasma.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/png.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/png.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pnm.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pnm.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ps.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ps.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ps2.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ps2.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ps3.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ps3.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/psd.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/psd.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pwp.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pwp.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/qoi.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/qoi.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/raw.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/raw.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/rgb.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/rgb.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/rgf.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/rgf.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/rla.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/rla.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/rle.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/rle.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/scr.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/scr.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sct.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sct.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sfw.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sfw.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sgi.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sgi.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sixel.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sixel.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/stegano.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/stegano.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/strimg.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/strimg.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sun.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/sun.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tga.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tga.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/thumbnail.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/thumbnail.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tiff.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tiff.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tile.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tile.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tim.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tim.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tim2.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/tim2.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ttf.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ttf.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/txt.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/txt.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/uil.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/uil.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/url.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/url.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/uyvy.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/uyvy.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/vicar.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/vicar.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/vid.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/vid.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/video.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/video.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/viff.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/viff.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/vips.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/vips.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/wbmp.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/wbmp.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/webp.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/webp.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/wpg.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/wpg.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/x.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/x.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xbm.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xbm.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xc.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xc.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xcf.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xcf.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xpm.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xpm.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xps.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xps.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xwd.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/xwd.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/yaml.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/yaml.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ycbcr.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ycbcr.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/yuv.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/yuv.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/filters/analyze.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/filters/analyze.so",
            "/usr/lib/x86_64-linux-gnu/libMagickCore-7.Q16.so.10.0.2",
            "/usr/share/doc/libmagickcore-7.q16-10/changelog.Debian.gz",
            "/usr/share/doc/libmagickcore-7.q16-10/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "Name": "libmagickcore-7.q16-10-extra",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "Version": "7.1.1.43+dfsg1",
          "Release": "1+deb13u12",
          "Epoch": 8,
          "Arch": "amd64",
          "SrcName": "imagemagick",
          "SrcVersion": "7.1.1.43+dfsg1",
          "SrcRelease": "1+deb13u12",
          "SrcEpoch": 8,
          "Licenses": [
            "ImageMagick",
            "aclocal",
            "Makefile-in",
            "ImageMagickPartlibsquish",
            "ImageMagickPartGraphicsMagick",
            "ImageMagickPartlibjpeg",
            "ImageMagickLicensePartFIG",
            "GPL-2.0-or-later",
            "BSD-with-FSF-change-public-domain",
            "ImageMagickLicensePartGsview",
            "ImageMagickLicensePartOpenSSH",
            "Magick++",
            "GPL2+-with-Autoconf-Macros-exception",
            "GPL3+-with-Autoconf-Macros-exception",
            "GNU-All-Permissive-License",
            "LGPL-3.0-or-later",
            "ImageMagickLicensePartEZXML",
            "Perllikelicence",
            "Artistic-2.0",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "GPL3+-with-Autoconf-Macros-exception-GNU",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "ImageMagick Packaging Team \u003cpkg-gmagick-im-team@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libcairo2@1.18.4-1+b1",
            "libdjvulibre21@3.5.28-2.2",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
            "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
            "libopenexr-3-1-30@3.1.13-2",
            "libpango-1.0-0@1.56.3-1",
            "libpangocairo-1.0-0@1.56.3-1",
            "libwmflite-0.2-7@0.2.13-1.1+b3",
            "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/djvu.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/djvu.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dot.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/dot.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/exr.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/exr.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pango.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/pango.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/svg.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/svg.so",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/wmf.la",
            "/usr/lib/x86_64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/wmf.so",
            "/usr/share/doc/libmagickcore-7.q16-10-extra/changelog.Debian.gz",
            "/usr/share/doc/libmagickcore-7.q16-10-extra/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "Name": "libmagickwand-7.q16-10",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "Version": "7.1.1.43+dfsg1",
          "Release": "1+deb13u12",
          "Epoch": 8,
          "Arch": "amd64",
          "SrcName": "imagemagick",
          "SrcVersion": "7.1.1.43+dfsg1",
          "SrcRelease": "1+deb13u12",
          "SrcEpoch": 8,
          "Licenses": [
            "ImageMagick",
            "aclocal",
            "Makefile-in",
            "ImageMagickPartlibsquish",
            "ImageMagickPartGraphicsMagick",
            "ImageMagickPartlibjpeg",
            "ImageMagickLicensePartFIG",
            "GPL-2.0-or-later",
            "BSD-with-FSF-change-public-domain",
            "ImageMagickLicensePartGsview",
            "ImageMagickLicensePartOpenSSH",
            "Magick++",
            "GPL2+-with-Autoconf-Macros-exception",
            "GPL3+-with-Autoconf-Macros-exception",
            "GNU-All-Permissive-License",
            "LGPL-3.0-or-later",
            "ImageMagickLicensePartEZXML",
            "Perllikelicence",
            "Artistic-2.0",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "GPL3+-with-Autoconf-Macros-exception-GNU",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "ImageMagick Packaging Team \u003cpkg-gmagick-im-team@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libgomp1@14.2.0-19",
            "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
            "libx11-6@2:1.8.12-1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libMagickWand-7.Q16.so.10.0.2",
            "/usr/share/doc/libmagickwand-7.q16-10/changelog.Debian.gz",
            "/usr/share/doc/libmagickwand-7.q16-10/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmd0@1.1.0-2+b1",
          "Name": "libmd0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmd0@1.1.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "6f55e5e0a3458581"
          },
          "Version": "1.1.0",
          "Release": "2+b1",
          "Arch": "amd64",
          "SrcName": "libmd",
          "SrcVersion": "1.1.0",
          "SrcRelease": "2",
          "Licenses": [
            "BSD-3-Clause",
            "BSD-3-clause-Aaron-D-Gifford",
            "BSD-2-Clause",
            "BSD-2-Clause-NetBSD",
            "ISC",
            "Beerware",
            "public-domain-md4",
            "public-domain-md5",
            "public-domain-sha1"
          ],
          "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libmd.so.0.1.0",
            "/usr/share/doc/libmd0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libmd0/changelog.Debian.gz",
            "/usr/share/doc/libmd0/changelog.gz",
            "/usr/share/doc/libmd0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmemcached11t64@1.1.4-1.1+b2",
          "Name": "libmemcached11t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmemcached11t64@1.1.4-1.1%2Bb2?arch=amd64\u0026distro=debian-13.7",
            "UID": "4c4b15847235b0bf"
          },
          "Version": "1.1.4",
          "Release": "1.1+b2",
          "Arch": "amd64",
          "SrcName": "libmemcached",
          "SrcVersion": "1.1.4",
          "SrcRelease": "1.1",
          "Licenses": [
            "BSD-3-clause-TangentOrg",
            "Paul-Hsieh",
            "RSA-Data-Security",
            "Bob-Jenkins",
            "BSD-3-Clause-Sun",
            "BSD-3-Clause"
          ],
          "Maintainer": "Ondřej Surý \u003condrej@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libhashkit2t64@1.1.4-1.1+b2",
            "libsasl2-2@2.1.28+dfsg1-9",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libmemcached.so.11.0.0",
            "/usr/share/doc/libmemcached11t64/AUTHORS",
            "/usr/share/doc/libmemcached11t64/BUGS.md",
            "/usr/share/doc/libmemcached11t64/NEWS.gz",
            "/usr/share/doc/libmemcached11t64/README.md.gz",
            "/usr/share/doc/libmemcached11t64/changelog.Debian.amd64.gz",
            "/usr/share/doc/libmemcached11t64/changelog.Debian.gz",
            "/usr/share/doc/libmemcached11t64/changelog.gz",
            "/usr/share/doc/libmemcached11t64/copyright",
            "/usr/share/lintian/overrides/libmemcached11t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmount-dev@2.41.5-0+deb13u1",
          "Name": "libmount-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmount-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "8b48e6cfede54432"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libblkid-dev@2.41.5-0+deb13u1",
            "libc6-dev@2.41-12+deb13u4",
            "libmount1@2.41.5-0+deb13u1",
            "libselinux1-dev@3.8.1-1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/libmount/libmount.h",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/mount.pc",
            "/usr/share/doc/libmount-dev/NEWS.Debian.gz",
            "/usr/share/doc/libmount-dev/changelog.Debian.gz",
            "/usr/share/doc/libmount-dev/changelog.gz",
            "/usr/share/doc/libmount-dev/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmount1@2.41.5-0+deb13u1",
          "Name": "libmount1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d0bfdcf72ddff375"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libblkid1@2.41.5-0+deb13u1",
            "libc6@2.41-12+deb13u4",
            "libselinux1@3.8.1-1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libmount.so.1.1.0",
            "/usr/share/doc/libmount1/NEWS.Debian.gz",
            "/usr/share/doc/libmount1/changelog.Debian.gz",
            "/usr/share/doc/libmount1/changelog.gz",
            "/usr/share/doc/libmount1/copyright",
            "/usr/share/lintian/overrides/libmount1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmpc3@1.3.1-1+b3",
          "Name": "libmpc3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmpc3@1.3.1-1%2Bb3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee29aeb1a00c173e"
          },
          "Version": "1.3.1",
          "Release": "1+b3",
          "Arch": "amd64",
          "SrcName": "mpclib3",
          "SrcVersion": "1.3.1",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgmp10@2:6.3.0+dfsg-3",
            "libmpfr6@4.2.2-1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libmpc.so.3.3.1",
            "/usr/share/doc/libmpc3/changelog.Debian.amd64.gz",
            "/usr/share/doc/libmpc3/changelog.Debian.gz",
            "/usr/share/doc/libmpc3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmpfr6@4.2.2-1",
          "Name": "libmpfr6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmpfr6@4.2.2-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "2fc3ffe32ffe9744"
          },
          "Version": "4.2.2",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "mpfr4",
          "SrcVersion": "4.2.2",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgmp10@2:6.3.0+dfsg-3"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libmpfr.so.6.2.2",
            "/usr/share/doc/libmpfr6/AUTHORS",
            "/usr/share/doc/libmpfr6/BUGS",
            "/usr/share/doc/libmpfr6/NEWS.gz",
            "/usr/share/doc/libmpfr6/README",
            "/usr/share/doc/libmpfr6/TODO.gz",
            "/usr/share/doc/libmpfr6/changelog.Debian.gz",
            "/usr/share/doc/libmpfr6/changelog.gz",
            "/usr/share/doc/libmpfr6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libncursesw6@6.5+20250216-2",
          "Name": "libncursesw6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libncursesw6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "7121209a6392dd9e"
          },
          "Version": "6.5+20250216",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "ncurses",
          "SrcVersion": "6.5+20250216",
          "SrcRelease": "2",
          "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libtinfo6@6.5+20250216-2"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libformw.so.6.5",
            "/usr/lib/x86_64-linux-gnu/libmenuw.so.6.5",
            "/usr/lib/x86_64-linux-gnu/libncursesw.so.6.5",
            "/usr/lib/x86_64-linux-gnu/libpanelw.so.6.5"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libnettle8t64@3.10.1-1",
          "Name": "libnettle8t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libnettle8t64@3.10.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "bbd391fef91ccd16"
          },
          "Version": "3.10.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "nettle",
          "SrcVersion": "3.10.1",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "MIT",
            "GPL-3.0-with-autoconf-exception+",
            "public-domain",
            "GPL-2.0-only",
            "GAP"
          ],
          "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libnettle.so.8.10",
            "/usr/share/doc/libnettle8t64/NEWS.gz",
            "/usr/share/doc/libnettle8t64/README",
            "/usr/share/doc/libnettle8t64/changelog.Debian.gz",
            "/usr/share/doc/libnettle8t64/changelog.gz",
            "/usr/share/doc/libnettle8t64/copyright",
            "/usr/share/lintian/overrides/libnettle8t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libnghttp2-14@1.64.0-1.1+deb13u1",
          "Name": "libnghttp2-14",
          "Identifier": {
            "PURL": "pkg:deb/debian/libnghttp2-14@1.64.0-1.1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "cf4df1b5016a0d67"
          },
          "Version": "1.64.0",
          "Release": "1.1+deb13u1",
          "Arch": "amd64",
          "SrcName": "nghttp2",
          "SrcVersion": "1.64.0",
          "SrcRelease": "1.1+deb13u1",
          "Licenses": [
            "MIT",
            "all-permissive",
            "GPL-3.0-with-autoconf-exception+",
            "BSD-2-Clause",
            "GPL-3.0-only"
          ],
          "Maintainer": "Tomasz Buchert \u003ctomasz@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libnghttp2.so.14.28.3",
            "/usr/share/doc/libnghttp2-14/AUTHORS",
            "/usr/share/doc/libnghttp2-14/README.rst.gz",
            "/usr/share/doc/libnghttp2-14/changelog.Debian.gz",
            "/usr/share/doc/libnghttp2-14/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libnghttp3-9@1.8.0-1",
          "Name": "libnghttp3-9",
          "Identifier": {
            "PURL": "pkg:deb/debian/libnghttp3-9@1.8.0-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "6f6a39857ea11cb1"
          },
          "Version": "1.8.0",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "nghttp3",
          "SrcVersion": "1.8.0",
          "SrcRelease": "1",
          "Licenses": [
            "MIT",
            "FSFULLR",
            "GPL-3+ with Autoconf generic exception",
            "FSFUL",
            "GPL-2+ with Autoconf generic exception",
            "FSFAP",
            "GPL-2+ with Libtool Exception",
            "GPL-3.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "Debian Curl Maintainers \u003cteam+curl@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libnghttp3.so.9.2.6",
            "/usr/share/doc/libnghttp3-9/changelog.Debian.gz",
            "/usr/share/doc/libnghttp3-9/changelog.gz",
            "/usr/share/doc/libnghttp3-9/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libonig5@6.9.9-1+b1",
          "Name": "libonig5",
          "Identifier": {
            "PURL": "pkg:deb/debian/libonig5@6.9.9-1%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "f15f3d14e5c9136b"
          },
          "Version": "6.9.9",
          "Release": "1+b1",
          "Arch": "amd64",
          "SrcName": "libonig",
          "SrcVersion": "6.9.9",
          "SrcRelease": "1",
          "Licenses": [
            "BSD-2-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Jörg Frings-Fürst \u003cdebian@jff.email\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:83cc9b31906fa96474ec2d6137375a26b1fc9f1050e092277613b0f193686e96"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libonig.so.5.4.0",
            "/usr/share/doc/libonig5/changelog.Debian.amd64.gz",
            "/usr/share/doc/libonig5/changelog.Debian.gz",
            "/usr/share/doc/libonig5/changelog.gz",
            "/usr/share/doc/libonig5/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libopenexr-3-1-30@3.1.13-2",
          "Name": "libopenexr-3-1-30",
          "Identifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "Version": "3.1.13",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "openexr",
          "SrcVersion": "3.1.13",
          "SrcRelease": "2",
          "Licenses": [
            "openexr",
            "BSD-3-Clause"
          ],
          "Maintainer": "Debian PhotoTools Maintainers \u003cpkg-phototools-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libimath-3-1-29t64@3.1.12-1+b3",
            "libstdc++6@14.2.0-19",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libIex-3_1.so.30.13.1",
            "/usr/lib/x86_64-linux-gnu/libIlmThread-3_1.so.30.13.1",
            "/usr/lib/x86_64-linux-gnu/libOpenEXR-3_1.so.30.13.1",
            "/usr/lib/x86_64-linux-gnu/libOpenEXRCore-3_1.so.30.13.1",
            "/usr/lib/x86_64-linux-gnu/libOpenEXRUtil-3_1.so.30.13.1",
            "/usr/share/doc/libopenexr-3-1-30/changelog.Debian.gz",
            "/usr/share/doc/libopenexr-3-1-30/changelog.gz",
            "/usr/share/doc/libopenexr-3-1-30/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libopenjp2-7@2.5.3-2.1~deb13u2",
          "Name": "libopenjp2-7",
          "Identifier": {
            "PURL": "pkg:deb/debian/libopenjp2-7@2.5.3-2.1~deb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "8a87a5676e9552b3"
          },
          "Version": "2.5.3",
          "Release": "2.1~deb13u2",
          "Arch": "amd64",
          "SrcName": "openjpeg2",
          "SrcVersion": "2.5.3",
          "SrcRelease": "2.1~deb13u2",
          "Licenses": [
            "BSD-2-Clause",
            "MIT",
            "BSD-3-Clause",
            "Libpng",
            "Zlib",
            "libtiff",
            "LIBTIFF-PIXAR",
            "LIBTIFF-GLARSON"
          ],
          "Maintainer": "Debian PhotoTools Maintainers \u003cpkg-phototools-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libopenjp2.so.2.5.3",
            "/usr/share/doc/libopenjp2-7/changelog.Debian.gz",
            "/usr/share/doc/libopenjp2-7/changelog.gz",
            "/usr/share/doc/libopenjp2-7/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libp11-kit0@0.25.5-3",
          "Name": "libp11-kit0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libp11-kit0@0.25.5-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "252ea149eddfc0bf"
          },
          "Version": "0.25.5",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "p11-kit",
          "SrcVersion": "0.25.5",
          "SrcRelease": "3",
          "Licenses": [
            "BSD-3-Clause",
            "FSFULLR",
            "GPL-2+ with Autoconf-data exception",
            "GPL-3+ with Autoconf-data exception",
            "X11",
            "ISC",
            "customFSFULLRWD",
            "LGPL-2.1-or-later",
            "Apache-2.0",
            "customFSFUL",
            "FSFAP",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libffi8@3.4.8-2"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.4.1",
            "/usr/share/doc/libp11-kit0/changelog.Debian.gz",
            "/usr/share/doc/libp11-kit0/changelog.gz",
            "/usr/share/doc/libp11-kit0/copyright",
            "/usr/share/doc/libp11-kit0/examples/pkcs11.conf.example"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpam-modules@1.7.0-5",
          "Name": "libpam-modules",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpam-modules@1.7.0-5?arch=amd64\u0026distro=debian-13.7",
            "UID": "274a704398461ef0"
          },
          "Version": "1.7.0",
          "Release": "5",
          "Arch": "amd64",
          "SrcName": "pam",
          "SrcVersion": "1.7.0",
          "SrcRelease": "5",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "BSD-tcp_wrappers",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/security/pam_access.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_canonicalize_user.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_debug.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_deny.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_echo.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_env.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_exec.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_faildelay.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_faillock.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_filter.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_ftp.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_group.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_issue.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_keyinit.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_limits.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_listfile.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_localuser.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_loginuid.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_mail.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_mkhomedir.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_motd.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_namespace.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_nologin.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_permit.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_pwhistory.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_rhosts.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_rootok.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_securetty.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_selinux.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_sepermit.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_setquota.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_shells.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_stress.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_succeed_if.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_time.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_timestamp.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_tty_audit.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_umask.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_unix.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_userdb.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_usertype.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_warn.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_wheel.so",
            "/usr/lib/x86_64-linux-gnu/security/pam_xauth.so",
            "/usr/share/doc/libpam-modules/NEWS.Debian.gz",
            "/usr/share/doc/libpam-modules/changelog.Debian.gz",
            "/usr/share/doc/libpam-modules/changelog.gz",
            "/usr/share/doc/libpam-modules/copyright",
            "/usr/share/doc/libpam-modules/examples/upperLOWER.c",
            "/usr/share/lintian/overrides/libpam-modules",
            "/usr/share/pam-configs/mkhomedir"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpam-modules-bin@1.7.0-5",
          "Name": "libpam-modules-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpam-modules-bin@1.7.0-5?arch=amd64\u0026distro=debian-13.7",
            "UID": "dbbd2b9769d4b438"
          },
          "Version": "1.7.0",
          "Release": "5",
          "Arch": "amd64",
          "SrcName": "pam",
          "SrcVersion": "1.7.0",
          "SrcRelease": "5",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "BSD-tcp_wrappers",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit1@1:4.0.2-2+deb13u1",
            "libc6@2.41-12+deb13u4",
            "libcrypt1@1:4.4.38-1",
            "libpam0g@1.7.0-5",
            "libselinux1@3.8.1-1",
            "libsystemd0@257.13-1~deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/systemd/system/pam_namespace.service",
            "/usr/sbin/faillock",
            "/usr/sbin/mkhomedir_helper",
            "/usr/sbin/pam_namespace_helper",
            "/usr/sbin/pam_timestamp_check",
            "/usr/sbin/pwhistory_helper",
            "/usr/sbin/unix_chkpwd",
            "/usr/sbin/unix_update",
            "/usr/share/doc/libpam-modules-bin/changelog.Debian.gz",
            "/usr/share/doc/libpam-modules-bin/changelog.gz",
            "/usr/share/doc/libpam-modules-bin/copyright",
            "/usr/share/lintian/overrides/libpam-modules-bin"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpam-runtime@1.7.0-5",
          "Name": "libpam-runtime",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpam-runtime@1.7.0-5?arch=all\u0026distro=debian-13.7",
            "UID": "1d4f3eaf1c0f9548"
          },
          "Version": "1.7.0",
          "Release": "5",
          "Arch": "all",
          "SrcName": "pam",
          "SrcVersion": "1.7.0",
          "SrcRelease": "5",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "BSD-tcp_wrappers",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.91",
            "libpam-modules@1.7.0-5"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/sbin/pam-auth-update",
            "/usr/sbin/pam_getenv",
            "/usr/share/doc/libpam-runtime/changelog.Debian.gz",
            "/usr/share/doc/libpam-runtime/changelog.gz",
            "/usr/share/doc/libpam-runtime/copyright",
            "/usr/share/lintian/overrides/libpam-runtime",
            "/usr/share/locale/af/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/am/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ar/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/as/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/az/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/be/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/bg/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/bn/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/bn_IN/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/bs/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ca/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/cs/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/cy/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/da/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/de/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/de_CH/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/el/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/eo/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/es/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/et/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/eu/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/fa/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/fi/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/fr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ga/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/gl/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/gu/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/he/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/hi/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/hr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/hu/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ia/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/id/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/is/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/it/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ja/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ka/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/kk/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/km/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/kn/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ko/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/kw_GB/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ky/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/lt/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/lv/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/mk/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ml/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/mn/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/mr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ms/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/my/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ne/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/nl/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/or/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/pa/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/pl/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/pt/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ro/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ru/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/si/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sk/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sl/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sq/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sv/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ta/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/te/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/tg/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/th/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/tr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/uk/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/vi/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/yo/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/zh_HK/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/zu/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/man/man5/access.conf.5.gz",
            "/usr/share/man/man5/faillock.conf.5.gz",
            "/usr/share/man/man5/group.conf.5.gz",
            "/usr/share/man/man5/limits.conf.5.gz",
            "/usr/share/man/man5/namespace.conf.5.gz",
            "/usr/share/man/man5/pam.conf.5.gz",
            "/usr/share/man/man5/pam_env.conf.5.gz",
            "/usr/share/man/man5/pwhistory.conf.5.gz",
            "/usr/share/man/man5/sepermit.conf.5.gz",
            "/usr/share/man/man5/time.conf.5.gz",
            "/usr/share/man/man7/PAM.7.gz",
            "/usr/share/man/man8/faillock.8.gz",
            "/usr/share/man/man8/mkhomedir_helper.8.gz",
            "/usr/share/man/man8/pam-auth-update.8.gz",
            "/usr/share/man/man8/pam_access.8.gz",
            "/usr/share/man/man8/pam_canonicalize_user.8.gz",
            "/usr/share/man/man8/pam_debug.8.gz",
            "/usr/share/man/man8/pam_deny.8.gz",
            "/usr/share/man/man8/pam_echo.8.gz",
            "/usr/share/man/man8/pam_env.8.gz",
            "/usr/share/man/man8/pam_exec.8.gz",
            "/usr/share/man/man8/pam_faildelay.8.gz",
            "/usr/share/man/man8/pam_faillock.8.gz",
            "/usr/share/man/man8/pam_filter.8.gz",
            "/usr/share/man/man8/pam_ftp.8.gz",
            "/usr/share/man/man8/pam_getenv.8.gz",
            "/usr/share/man/man8/pam_group.8.gz",
            "/usr/share/man/man8/pam_issue.8.gz",
            "/usr/share/man/man8/pam_keyinit.8.gz",
            "/usr/share/man/man8/pam_limits.8.gz",
            "/usr/share/man/man8/pam_listfile.8.gz",
            "/usr/share/man/man8/pam_localuser.8.gz",
            "/usr/share/man/man8/pam_loginuid.8.gz",
            "/usr/share/man/man8/pam_mail.8.gz",
            "/usr/share/man/man8/pam_mkhomedir.8.gz",
            "/usr/share/man/man8/pam_motd.8.gz",
            "/usr/share/man/man8/pam_namespace.8.gz",
            "/usr/share/man/man8/pam_namespace_helper.8.gz",
            "/usr/share/man/man8/pam_nologin.8.gz",
            "/usr/share/man/man8/pam_permit.8.gz",
            "/usr/share/man/man8/pam_pwhistory.8.gz",
            "/usr/share/man/man8/pam_rhosts.8.gz",
            "/usr/share/man/man8/pam_rootok.8.gz",
            "/usr/share/man/man8/pam_securetty.8.gz",
            "/usr/share/man/man8/pam_selinux.8.gz",
            "/usr/share/man/man8/pam_sepermit.8.gz",
            "/usr/share/man/man8/pam_setquota.8.gz",
            "/usr/share/man/man8/pam_shells.8.gz",
            "/usr/share/man/man8/pam_stress.8.gz",
            "/usr/share/man/man8/pam_succeed_if.8.gz",
            "/usr/share/man/man8/pam_time.8.gz",
            "/usr/share/man/man8/pam_timestamp.8.gz",
            "/usr/share/man/man8/pam_timestamp_check.8.gz",
            "/usr/share/man/man8/pam_tty_audit.8.gz",
            "/usr/share/man/man8/pam_umask.8.gz",
            "/usr/share/man/man8/pam_unix.8.gz",
            "/usr/share/man/man8/pam_userdb.8.gz",
            "/usr/share/man/man8/pam_usertype.8.gz",
            "/usr/share/man/man8/pam_warn.8.gz",
            "/usr/share/man/man8/pam_wheel.8.gz",
            "/usr/share/man/man8/pam_xauth.8.gz",
            "/usr/share/man/man8/pwhistory_helper.8.gz",
            "/usr/share/man/man8/unix_chkpwd.8.gz",
            "/usr/share/man/man8/unix_update.8.gz",
            "/usr/share/pam-configs/unix",
            "/usr/share/pam/common-account",
            "/usr/share/pam/common-account.md5sums",
            "/usr/share/pam/common-auth",
            "/usr/share/pam/common-auth.md5sums",
            "/usr/share/pam/common-password",
            "/usr/share/pam/common-password.md5sums",
            "/usr/share/pam/common-session",
            "/usr/share/pam/common-session-noninteractive",
            "/usr/share/pam/common-session-noninteractive.md5sums",
            "/usr/share/pam/common-session.md5sums"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpam0g@1.7.0-5",
          "Name": "libpam0g",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpam0g@1.7.0-5?arch=amd64\u0026distro=debian-13.7",
            "UID": "ea209b4d4ec86f20"
          },
          "Version": "1.7.0",
          "Release": "5",
          "Arch": "amd64",
          "SrcName": "pam",
          "SrcVersion": "1.7.0",
          "SrcRelease": "5",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "BSD-tcp_wrappers",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.91",
            "libaudit1@1:4.0.2-2+deb13u1",
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpam.so.0.85.1",
            "/usr/lib/x86_64-linux-gnu/libpam_misc.so.0.82.1",
            "/usr/lib/x86_64-linux-gnu/libpamc.so.0.82.1",
            "/usr/share/doc/libpam0g/Debian-PAM-MiniPolicy.gz",
            "/usr/share/doc/libpam0g/README",
            "/usr/share/doc/libpam0g/README.Debian",
            "/usr/share/doc/libpam0g/TODO.Debian",
            "/usr/share/doc/libpam0g/changelog.Debian.gz",
            "/usr/share/doc/libpam0g/changelog.gz",
            "/usr/share/doc/libpam0g/copyright",
            "/usr/share/lintian/overrides/libpam0g"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpango-1.0-0@1.56.3-1",
          "Name": "libpango-1.0-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpango-1.0-0@1.56.3-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "a0040fd1c5a5cf30"
          },
          "Version": "1.56.3",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "pango1.0",
          "SrcVersion": "1.56.3",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "Example",
            "TCL",
            "Unicode",
            "ICU",
            "Chromium-BSD-style",
            "Apache-2.0",
            "Bitstream-Vera",
            "OFL-1.1",
            "LGPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "fontconfig@2.15.0-2.3",
            "libc6@2.41-12+deb13u4",
            "libfribidi0@1.0.16-1",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "libharfbuzz0b@10.2.0-1+deb13u1",
            "libthai0@0.1.29-2+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpango-1.0.so.0.5600.3",
            "/usr/share/doc/libpango-1.0-0/NEWS.gz",
            "/usr/share/doc/libpango-1.0-0/README.md",
            "/usr/share/doc/libpango-1.0-0/THANKS",
            "/usr/share/doc/libpango-1.0-0/changelog.Debian.gz",
            "/usr/share/doc/libpango-1.0-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpangocairo-1.0-0@1.56.3-1",
          "Name": "libpangocairo-1.0-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpangocairo-1.0-0@1.56.3-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "8d12a284dd7a52e6"
          },
          "Version": "1.56.3",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "pango1.0",
          "SrcVersion": "1.56.3",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "Example",
            "TCL",
            "Unicode",
            "ICU",
            "Chromium-BSD-style",
            "Apache-2.0",
            "Bitstream-Vera",
            "OFL-1.1",
            "LGPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libcairo2@1.18.4-1+b1",
            "libfontconfig1@2.15.0-2.3",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "libharfbuzz0b@10.2.0-1+deb13u1",
            "libpango-1.0-0@1.56.3-1",
            "libpangoft2-1.0-0@1.56.3-1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpangocairo-1.0.so.0.5600.3",
            "/usr/share/doc/libpangocairo-1.0-0/changelog.Debian.gz",
            "/usr/share/doc/libpangocairo-1.0-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpangoft2-1.0-0@1.56.3-1",
          "Name": "libpangoft2-1.0-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpangoft2-1.0-0@1.56.3-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "64eacb917bc372e8"
          },
          "Version": "1.56.3",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "pango1.0",
          "SrcVersion": "1.56.3",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "Example",
            "TCL",
            "Unicode",
            "ICU",
            "Chromium-BSD-style",
            "Apache-2.0",
            "Bitstream-Vera",
            "OFL-1.1",
            "LGPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libfontconfig1@2.15.0-2.3",
            "libfreetype6@2.13.3+dfsg-1+deb13u1",
            "libglib2.0-0t64@2.84.4-3~deb13u5",
            "libharfbuzz0b@10.2.0-1+deb13u1",
            "libpango-1.0-0@1.56.3-1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpangoft2-1.0.so.0.5600.3",
            "/usr/share/doc/libpangoft2-1.0-0/changelog.Debian.gz",
            "/usr/share/doc/libpangoft2-1.0-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpcre2-16-0@10.46-1~deb13u3",
          "Name": "libpcre2-16-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpcre2-16-0@10.46-1~deb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "88e43a382e5f968b"
          },
          "Version": "10.46",
          "Release": "1~deb13u3",
          "Arch": "amd64",
          "SrcName": "pcre2",
          "SrcVersion": "10.46",
          "SrcRelease": "1~deb13u3",
          "Licenses": [
            "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception",
            "BSD-3-Clause",
            "X11",
            "BSD-2-Clause",
            "public-domain"
          ],
          "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpcre2-16.so.0.14.0",
            "/usr/share/doc/libpcre2-16-0/changelog.Debian.gz",
            "/usr/share/doc/libpcre2-16-0/changelog.gz",
            "/usr/share/doc/libpcre2-16-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpcre2-32-0@10.46-1~deb13u3",
          "Name": "libpcre2-32-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpcre2-32-0@10.46-1~deb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ebb731cf7549de05"
          },
          "Version": "10.46",
          "Release": "1~deb13u3",
          "Arch": "amd64",
          "SrcName": "pcre2",
          "SrcVersion": "10.46",
          "SrcRelease": "1~deb13u3",
          "Licenses": [
            "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception",
            "BSD-3-Clause",
            "X11",
            "BSD-2-Clause",
            "public-domain"
          ],
          "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpcre2-32.so.0.14.0",
            "/usr/share/doc/libpcre2-32-0/changelog.Debian.gz",
            "/usr/share/doc/libpcre2-32-0/changelog.gz",
            "/usr/share/doc/libpcre2-32-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpcre2-8-0@10.46-1~deb13u3",
          "Name": "libpcre2-8-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "738ebb122347d802"
          },
          "Version": "10.46",
          "Release": "1~deb13u3",
          "Arch": "amd64",
          "SrcName": "pcre2",
          "SrcVersion": "10.46",
          "SrcRelease": "1~deb13u3",
          "Licenses": [
            "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception",
            "BSD-3-Clause",
            "X11",
            "BSD-2-Clause",
            "public-domain"
          ],
          "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.14.0",
            "/usr/share/doc/libpcre2-8-0/README.Debian",
            "/usr/share/doc/libpcre2-8-0/changelog.Debian.gz",
            "/usr/share/doc/libpcre2-8-0/changelog.gz",
            "/usr/share/doc/libpcre2-8-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpcre2-dev@10.46-1~deb13u3",
          "Name": "libpcre2-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpcre2-dev@10.46-1~deb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "845e4aaed866ea83"
          },
          "Version": "10.46",
          "Release": "1~deb13u3",
          "Arch": "amd64",
          "SrcName": "pcre2",
          "SrcVersion": "10.46",
          "SrcRelease": "1~deb13u3",
          "Licenses": [
            "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception",
            "BSD-3-Clause",
            "X11",
            "BSD-2-Clause",
            "public-domain"
          ],
          "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libpcre2-16-0@10.46-1~deb13u3",
            "libpcre2-32-0@10.46-1~deb13u3",
            "libpcre2-8-0@10.46-1~deb13u3",
            "libpcre2-posix3@10.46-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/bin/pcre2-config",
            "/usr/include/pcre2.h",
            "/usr/include/pcre2posix.h",
            "/usr/lib/x86_64-linux-gnu/libpcre2-16.a",
            "/usr/lib/x86_64-linux-gnu/libpcre2-32.a",
            "/usr/lib/x86_64-linux-gnu/libpcre2-8.a",
            "/usr/lib/x86_64-linux-gnu/libpcre2-posix.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/libpcre2-16.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/libpcre2-32.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/libpcre2-8.pc",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/libpcre2-posix.pc",
            "/usr/share/doc/libpcre2-dev/changelog.Debian.gz",
            "/usr/share/doc/libpcre2-dev/changelog.gz",
            "/usr/share/doc/libpcre2-dev/copyright",
            "/usr/share/man/man1/pcre2-config.1.gz",
            "/usr/share/man/man3/pcre2.3.gz",
            "/usr/share/man/man3/pcre2_callout_enumerate.3.gz",
            "/usr/share/man/man3/pcre2_code_copy.3.gz",
            "/usr/share/man/man3/pcre2_code_copy_with_tables.3.gz",
            "/usr/share/man/man3/pcre2_code_free.3.gz",
            "/usr/share/man/man3/pcre2_compile.3.gz",
            "/usr/share/man/man3/pcre2_compile_context_copy.3.gz",
            "/usr/share/man/man3/pcre2_compile_context_create.3.gz",
            "/usr/share/man/man3/pcre2_compile_context_free.3.gz",
            "/usr/share/man/man3/pcre2_config.3.gz",
            "/usr/share/man/man3/pcre2_convert_context_copy.3.gz",
            "/usr/share/man/man3/pcre2_convert_context_create.3.gz",
            "/usr/share/man/man3/pcre2_convert_context_free.3.gz",
            "/usr/share/man/man3/pcre2_converted_pattern_free.3.gz",
            "/usr/share/man/man3/pcre2_dfa_match.3.gz",
            "/usr/share/man/man3/pcre2_general_context_copy.3.gz",
            "/usr/share/man/man3/pcre2_general_context_create.3.gz",
            "/usr/share/man/man3/pcre2_general_context_free.3.gz",
            "/usr/share/man/man3/pcre2_get_error_message.3.gz",
            "/usr/share/man/man3/pcre2_get_mark.3.gz",
            "/usr/share/man/man3/pcre2_get_match_data_heapframes_size.3.gz",
            "/usr/share/man/man3/pcre2_get_match_data_size.3.gz",
            "/usr/share/man/man3/pcre2_get_ovector_count.3.gz",
            "/usr/share/man/man3/pcre2_get_ovector_pointer.3.gz",
            "/usr/share/man/man3/pcre2_get_startchar.3.gz",
            "/usr/share/man/man3/pcre2_jit_compile.3.gz",
            "/usr/share/man/man3/pcre2_jit_free_unused_memory.3.gz",
            "/usr/share/man/man3/pcre2_jit_match.3.gz",
            "/usr/share/man/man3/pcre2_jit_stack_assign.3.gz",
            "/usr/share/man/man3/pcre2_jit_stack_create.3.gz",
            "/usr/share/man/man3/pcre2_jit_stack_free.3.gz",
            "/usr/share/man/man3/pcre2_maketables.3.gz",
            "/usr/share/man/man3/pcre2_maketables_free.3.gz",
            "/usr/share/man/man3/pcre2_match.3.gz",
            "/usr/share/man/man3/pcre2_match_context_copy.3.gz",
            "/usr/share/man/man3/pcre2_match_context_create.3.gz",
            "/usr/share/man/man3/pcre2_match_context_free.3.gz",
            "/usr/share/man/man3/pcre2_match_data_create.3.gz",
            "/usr/share/man/man3/pcre2_match_data_create_from_pattern.3.gz",
            "/usr/share/man/man3/pcre2_match_data_free.3.gz",
            "/usr/share/man/man3/pcre2_pattern_convert.3.gz",
            "/usr/share/man/man3/pcre2_pattern_info.3.gz",
            "/usr/share/man/man3/pcre2_serialize_decode.3.gz",
            "/usr/share/man/man3/pcre2_serialize_encode.3.gz",
            "/usr/share/man/man3/pcre2_serialize_free.3.gz",
            "/usr/share/man/man3/pcre2_serialize_get_number_of_codes.3.gz",
            "/usr/share/man/man3/pcre2_set_bsr.3.gz",
            "/usr/share/man/man3/pcre2_set_callout.3.gz",
            "/usr/share/man/man3/pcre2_set_character_tables.3.gz",
            "/usr/share/man/man3/pcre2_set_compile_extra_options.3.gz",
            "/usr/share/man/man3/pcre2_set_compile_recursion_guard.3.gz",
            "/usr/share/man/man3/pcre2_set_depth_limit.3.gz",
            "/usr/share/man/man3/pcre2_set_glob_escape.3.gz",
            "/usr/share/man/man3/pcre2_set_glob_separator.3.gz",
            "/usr/share/man/man3/pcre2_set_heap_limit.3.gz",
            "/usr/share/man/man3/pcre2_set_match_limit.3.gz",
            "/usr/share/man/man3/pcre2_set_max_pattern_compiled_length.3.gz",
            "/usr/share/man/man3/pcre2_set_max_pattern_length.3.gz",
            "/usr/share/man/man3/pcre2_set_max_varlookbehind.3.gz",
            "/usr/share/man/man3/pcre2_set_newline.3.gz",
            "/usr/share/man/man3/pcre2_set_offset_limit.3.gz",
            "/usr/share/man/man3/pcre2_set_optimize.3.gz",
            "/usr/share/man/man3/pcre2_set_parens_nest_limit.3.gz",
            "/usr/share/man/man3/pcre2_set_recursion_limit.3.gz",
            "/usr/share/man/man3/pcre2_set_recursion_memory_management.3.gz",
            "/usr/share/man/man3/pcre2_set_substitute_callout.3.gz",
            "/usr/share/man/man3/pcre2_set_substitute_case_callout.3.gz",
            "/usr/share/man/man3/pcre2_substitute.3.gz",
            "/usr/share/man/man3/pcre2_substring_copy_byname.3.gz",
            "/usr/share/man/man3/pcre2_substring_copy_bynumber.3.gz",
            "/usr/share/man/man3/pcre2_substring_free.3.gz",
            "/usr/share/man/man3/pcre2_substring_get_byname.3.gz",
            "/usr/share/man/man3/pcre2_substring_get_bynumber.3.gz",
            "/usr/share/man/man3/pcre2_substring_length_byname.3.gz",
            "/usr/share/man/man3/pcre2_substring_length_bynumber.3.gz",
            "/usr/share/man/man3/pcre2_substring_list_free.3.gz",
            "/usr/share/man/man3/pcre2_substring_list_get.3.gz",
            "/usr/share/man/man3/pcre2_substring_nametable_scan.3.gz",
            "/usr/share/man/man3/pcre2_substring_number_from_name.3.gz",
            "/usr/share/man/man3/pcre2api.3.gz",
            "/usr/share/man/man3/pcre2build.3.gz",
            "/usr/share/man/man3/pcre2callout.3.gz",
            "/usr/share/man/man3/pcre2compat.3.gz",
            "/usr/share/man/man3/pcre2convert.3.gz",
            "/usr/share/man/man3/pcre2demo.3.gz",
            "/usr/share/man/man3/pcre2jit.3.gz",
            "/usr/share/man/man3/pcre2limits.3.gz",
            "/usr/share/man/man3/pcre2matching.3.gz",
            "/usr/share/man/man3/pcre2partial.3.gz",
            "/usr/share/man/man3/pcre2pattern.3.gz",
            "/usr/share/man/man3/pcre2perform.3.gz",
            "/usr/share/man/man3/pcre2posix.3.gz",
            "/usr/share/man/man3/pcre2sample.3.gz",
            "/usr/share/man/man3/pcre2serialize.3.gz",
            "/usr/share/man/man3/pcre2syntax.3.gz",
            "/usr/share/man/man3/pcre2unicode.3.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpcre2-posix3@10.46-1~deb13u3",
          "Name": "libpcre2-posix3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpcre2-posix3@10.46-1~deb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "78957731b2428848"
          },
          "Version": "10.46",
          "Release": "1~deb13u3",
          "Arch": "amd64",
          "SrcName": "pcre2",
          "SrcVersion": "10.46",
          "SrcRelease": "1~deb13u3",
          "Licenses": [
            "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception",
            "BSD-3-Clause",
            "X11",
            "BSD-2-Clause",
            "public-domain"
          ],
          "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libpcre2-8-0@10.46-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpcre2-posix.so.3.0.6",
            "/usr/share/doc/libpcre2-posix3/changelog.Debian.gz",
            "/usr/share/doc/libpcre2-posix3/changelog.gz",
            "/usr/share/doc/libpcre2-posix3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libperl5.40@5.40.1-6+deb13u1",
          "Name": "libperl5.40",
          "Identifier": {
            "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "25a808bf789392f4"
          },
          "Version": "5.40.1",
          "Release": "6+deb13u1",
          "Arch": "amd64",
          "SrcName": "perl",
          "SrcVersion": "5.40.1",
          "SrcRelease": "6+deb13u1",
          "Licenses": [
            "GPL-1.0-or-later",
            "Artistic-2.0",
            "MIT",
            "REGCOMP",
            "GPL-2.0-with-bison-exception+",
            "Unicode",
            "BZIP",
            "Zlib",
            "GPL-2.0-or-later",
            "FSFAP",
            "BSD-3-clause-with-weird-numbering",
            "CC0-1.0",
            "TEXT-TABS",
            "BSD-4-clause-POWERDOG",
            "BSD-3-clause-GENERIC",
            "BSD-3-Clause",
            "SDBM-PUBLIC-DOMAIN",
            "DONT-CHANGE-THE-GPL",
            "Artistic-dist",
            "LGPL-2.1-only",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "Artistic-2"
          ],
          "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4",
            "libcrypt1@1:4.4.38-1",
            "libdb5.3t64@5.3.28+dfsg2-9",
            "libgdbm-compat4t64@1.24-2",
            "libgdbm6t64@1.24-2",
            "perl-modules-5.40@5.40.1-6+deb13u1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/cpan5.40-x86_64-linux-gnu",
            "/usr/bin/perl5.40-x86_64-linux-gnu",
            "/usr/lib/x86_64-linux-gnu/libperl.so.5.40.1",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B/Concise.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B/Showlex.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B/Terse.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B/Xref.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/EXTERN.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/INTERN.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/XSUB.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/av.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/bitcount.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/charclass_invlists.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/config.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/cop.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/cv.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/dosish.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/ebcdic_tables.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/embed.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/embedvar.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/fakesdio.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/feature.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/form.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/git_version.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/gv.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/handy.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/hv.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/hv_func.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/hv_macro.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/inline.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/intrpvar.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/invlist_inline.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/iperlsys.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/keywords.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/l1_char_class_tab.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/locale_table.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/malloc_ctl.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/metaconfig.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mg.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mg_data.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mg_raw.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mg_vtable.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mydtrace.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/nostdio.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/op.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/op_reg_common.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/opcode.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/opnames.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/overload.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/pad.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/parser.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/patchlevel-debian.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/patchlevel.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perl.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perl_inc_macro.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perl_langinfo.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perl_siphash.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlapi.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlio.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perliol.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlsdio.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlstatic.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlvars.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perly.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/pp.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/pp_proto.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/proto.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/reentr.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regcharclass.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regcomp.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regcomp_internal.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regexp.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/reginline.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regnodes.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/sbox32_hash.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/scope.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/scope_types.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/sv.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/sv_inline.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/thread.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/time64.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/time64_config.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/uni_keywords.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/unicode_constants.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/unixish.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/utf8.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/utfebcdic.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/util.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/uudmap.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/vutil.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/warnings.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/zaphod32_hash.h",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Compress/Raw/Bzip2.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Compress/Raw/Zlib.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Config.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Config.pod",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Config_git.pl",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Config_heavy.pl",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Cwd.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/DB_File.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Data/Dumper.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Devel/PPPort.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Devel/Peek.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Digest/MD5.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Digest/SHA.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/DynaLoader.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Alias.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Byte.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/CJKConstants.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/CN.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/CN/HZ.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Config.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/EBCDIC.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Encoder.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Encoding.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/GSM0338.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Guess.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/JP.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/JP/H2Z.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/JP/JIS7.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/KR.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/KR/2022_KR.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/MIME/Header.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/MIME/Header/ISO_2022_JP.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/MIME/Name.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Symbol.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/TW.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Unicode.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Unicode/UTF7.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Errno.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Fcntl.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/DosGlob.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Glob.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/AmigaOS.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Cygwin.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Epoc.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Functions.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Mac.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/OS2.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Unix.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/VMS.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Win32.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Filter/Util/Call.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/GDBM_File.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Hash/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Hash/Util/FieldHash.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/I18N/Langinfo.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Dir.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/File.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Handle.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Pipe.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Poll.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Seekable.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Select.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Socket.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Socket/INET.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Socket/UNIX.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IPC/Msg.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IPC/Semaphore.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IPC/SharedMem.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IPC/SysV.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/List/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/List/Util/XS.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/MIME/Base64.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/MIME/QuotedPrint.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Math/BigInt/FastCalc.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/NDBM_File.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/O.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/ODBM_File.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Opcode.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/POSIX.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/POSIX.pod",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/PerlIO/encoding.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/PerlIO/mmap.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/PerlIO/via.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/SDBM_File.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Scalar/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Socket.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Storable.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Sub/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Sys/Hostname.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Sys/Syslog.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Time/HiRes.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Time/Piece.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Time/Seconds.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Unicode/Collate.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Unicode/Collate/Locale.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Unicode/Normalize.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/_h2ph_pre.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/bitsperlong.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/ioctl.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/ioctls.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/posix_types.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/socket.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/sockios.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/termbits-common.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/termbits.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/termios.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/bitsperlong.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/ioctl.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/ioctls.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/posix_types.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/posix_types_32.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/posix_types_64.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/posix_types_x32.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/socket.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/sockios.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/termbits.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/termios.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/unistd.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/unistd_32.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/unistd_64.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/unistd_x32.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/attributes.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/B/B.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Compress/Raw/Bzip2/Bzip2.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Compress/Raw/Zlib/Zlib.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Cwd/Cwd.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/DB_File/DB_File.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Data/Dumper/Dumper.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Devel/Peek/Peek.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Digest/MD5/MD5.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Digest/SHA/SHA.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/Byte/Byte.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/CN/CN.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/EBCDIC/EBCDIC.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/Encode.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/JP/JP.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/KR/KR.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/Symbol/Symbol.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/TW/TW.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/Unicode/Unicode.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Fcntl/Fcntl.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/File/DosGlob/DosGlob.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/File/Glob/Glob.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Filter/Util/Call/Call.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/GDBM_File/GDBM_File.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Hash/Util/FieldHash/FieldHash.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Hash/Util/Util.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/I18N/Langinfo/Langinfo.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/IO/IO.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/IPC/SysV/SysV.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/List/Util/Util.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/MIME/Base64/Base64.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Math/BigInt/FastCalc/FastCalc.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/NDBM_File/NDBM_File.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/ODBM_File/ODBM_File.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Opcode/Opcode.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/POSIX/POSIX.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/PerlIO/encoding/encoding.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/PerlIO/mmap/mmap.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/PerlIO/via/via.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/SDBM_File/SDBM_File.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Socket/Socket.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Storable/Storable.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Sys/Hostname/Hostname.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Sys/Syslog/Syslog.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Time/HiRes/HiRes.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Time/Piece/Piece.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Unicode/Collate/Collate.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Unicode/Normalize/Normalize.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/attributes/attributes.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/mro/mro.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/re/re.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/threads/shared/shared.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/threads/threads.so",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/atomic_wide_counter.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/byteswap.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/confname.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/endian.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/endianness.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/environments.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/floatn-common.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/floatn.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/getopt_core.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/getopt_posix.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/ioctl-types.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/ioctls.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/long-double.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/posix_opt.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/pthreadtypes-arch.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/pthreadtypes.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/select-decl.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/select.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/select2.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigaction.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigcontext.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigevent-consts.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/siginfo-arch.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/siginfo-consts-arch.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/siginfo-consts.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/signal_ext.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/signum-arch.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/signum-generic.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigstack.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigstksz.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigthread.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sockaddr.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/socket-constants.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/socket.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/socket2.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/socket_type.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/ss_flags.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/stdint-intn.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/struct_mutex.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/struct_rwlock.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syscall.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syslog-decl.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syslog-ldbl.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syslog-path.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syslog.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/thread-shared-types.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/time64.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/timesize.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/__sigset_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/__sigval_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/clock_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/clockid_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/idtype_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/sig_atomic_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/sigevent_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/siginfo_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/sigset_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/sigval_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/stack_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_iovec.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_osockaddr.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_rusage.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_sigstack.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_timespec.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_timeval.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/time_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/timer_t.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/typesizes.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/uintn-identity.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/unistd-decl.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/unistd.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/unistd_ext.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/waitflags.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/waitstatus.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/wordsize.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/encoding.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/endian.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/errno.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/features-time64.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/features.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/gnu/stubs-64.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/gnu/stubs.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/lib.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/linux/ioctl.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/linux/posix_types.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/linux/stddef.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/mro.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/ops.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/re.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/signal.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/stdarg.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/stdc-predef.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/stddef.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/cdefs.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/ioctl.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/select.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/socket.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/syscall.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/syslog.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/time.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/ttydefaults.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/types.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/ucontext.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/wait.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/syscall.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sysexits.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/syslimits.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/syslog.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/threads.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/threads/shared.pm",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/unistd.ph",
            "/usr/lib/x86_64-linux-gnu/perl/5.40.1/wait.ph",
            "/usr/lib/x86_64-linux-gnu/perl/debian-config-data-5.40.1/README",
            "/usr/lib/x86_64-linux-gnu/perl/debian-config-data-5.40.1/config.sh.debug.gz",
            "/usr/lib/x86_64-linux-gnu/perl/debian-config-data-5.40.1/config.sh.shared.gz",
            "/usr/lib/x86_64-linux-gnu/perl/debian-config-data-5.40.1/config.sh.static.gz",
            "/usr/share/doc/libperl5.40/changelog.Debian.gz",
            "/usr/share/doc/libperl5.40/changelog.gz",
            "/usr/share/doc/libperl5.40/copyright",
            "/usr/share/lintian/overrides/libperl5.40",
            "/usr/share/man/man1/cpan5.40-x86_64-linux-gnu.1.gz",
            "/usr/share/man/man1/perl5.40-x86_64-linux-gnu.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpixman-1-0@0.44.0-3",
          "Name": "libpixman-1-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpixman-1-0@0.44.0-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "c9311ea2d5de279b"
          },
          "Version": "0.44.0",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "pixman",
          "SrcVersion": "0.44.0",
          "SrcRelease": "3",
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpixman-1.so.0.44.0",
            "/usr/share/doc/libpixman-1-0/changelog.Debian.gz",
            "/usr/share/doc/libpixman-1-0/copyright",
            "/usr/share/lintian/overrides/libpixman-1-0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpkgconf3@1.8.1-4",
          "Name": "libpkgconf3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpkgconf3@1.8.1-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "bb109e94106d7284"
          },
          "Version": "1.8.1",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "pkgconf",
          "SrcVersion": "1.8.1",
          "SrcRelease": "4",
          "Licenses": [
            "ISC",
            "BSD-4-Clause",
            "BSD-2-Clause",
            "X11",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpkgconf.so.3.0.0",
            "/usr/share/doc/libpkgconf3/changelog.Debian.gz",
            "/usr/share/doc/libpkgconf3/changelog.gz",
            "/usr/share/doc/libpkgconf3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpng16-16t64@1.6.48-1+deb13u6",
          "Name": "libpng16-16t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpng16-16t64@1.6.48-1%2Bdeb13u6?arch=amd64\u0026distro=debian-13.7",
            "UID": "9738b93ae115ef4c"
          },
          "Version": "1.6.48",
          "Release": "1+deb13u6",
          "Arch": "amd64",
          "SrcName": "libpng1.6",
          "SrcVersion": "1.6.48",
          "SrcRelease": "1+deb13u6",
          "Licenses": [
            "Libpng",
            "MIT",
            "GPL-2.0-or-later",
            "BSD-like-with-advertising-clause",
            "libpng OR Apache-2.0 OR BSD-3-clause",
            "Apache-2.0",
            "GPL-2.0-only",
            "BSD-3-Clause"
          ],
          "Maintainer": "Maintainers of libpng1.6 packages \u003clibpng1.6@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpng16.so.16.48.0",
            "/usr/share/doc-base/libpng16-16t64.libpng16",
            "/usr/share/doc/libpng16-16t64/ANNOUNCE",
            "/usr/share/doc/libpng16-16t64/README.gz",
            "/usr/share/doc/libpng16-16t64/TODO",
            "/usr/share/doc/libpng16-16t64/changelog.Debian.gz",
            "/usr/share/doc/libpng16-16t64/changelog.gz",
            "/usr/share/doc/libpng16-16t64/copyright",
            "/usr/share/doc/libpng16-16t64/libpng-manual.txt.gz",
            "/usr/share/lintian/overrides/libpng16-16t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpopt0@1.19+dfsg-2",
          "Name": "libpopt0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpopt0@1.19%2Bdfsg-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "75c6f355b80547d0"
          },
          "Version": "1.19+dfsg",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "popt",
          "SrcVersion": "1.19+dfsg",
          "SrcRelease": "2",
          "Licenses": [
            "MIT",
            "public-domain",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Håvard F. Aasen \u003chavard.f.aasen@pfft.no\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpopt.so.0.0.2",
            "/usr/share/doc/libpopt0/README",
            "/usr/share/doc/libpopt0/changelog.Debian.gz",
            "/usr/share/doc/libpopt0/copyright",
            "/usr/share/locale/ca/LC_MESSAGES/popt.mo",
            "/usr/share/locale/cs/LC_MESSAGES/popt.mo",
            "/usr/share/locale/da/LC_MESSAGES/popt.mo",
            "/usr/share/locale/de/LC_MESSAGES/popt.mo",
            "/usr/share/locale/eo/LC_MESSAGES/popt.mo",
            "/usr/share/locale/es/LC_MESSAGES/popt.mo",
            "/usr/share/locale/fi/LC_MESSAGES/popt.mo",
            "/usr/share/locale/fr/LC_MESSAGES/popt.mo",
            "/usr/share/locale/ga/LC_MESSAGES/popt.mo",
            "/usr/share/locale/gl/LC_MESSAGES/popt.mo",
            "/usr/share/locale/hu/LC_MESSAGES/popt.mo",
            "/usr/share/locale/id/LC_MESSAGES/popt.mo",
            "/usr/share/locale/is/LC_MESSAGES/popt.mo",
            "/usr/share/locale/it/LC_MESSAGES/popt.mo",
            "/usr/share/locale/ja/LC_MESSAGES/popt.mo",
            "/usr/share/locale/ka/LC_MESSAGES/popt.mo",
            "/usr/share/locale/ko/LC_MESSAGES/popt.mo",
            "/usr/share/locale/lv/LC_MESSAGES/popt.mo",
            "/usr/share/locale/nb/LC_MESSAGES/popt.mo",
            "/usr/share/locale/nl/LC_MESSAGES/popt.mo",
            "/usr/share/locale/pl/LC_MESSAGES/popt.mo",
            "/usr/share/locale/pt/LC_MESSAGES/popt.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/popt.mo",
            "/usr/share/locale/ro/LC_MESSAGES/popt.mo",
            "/usr/share/locale/ru/LC_MESSAGES/popt.mo",
            "/usr/share/locale/si/LC_MESSAGES/popt.mo",
            "/usr/share/locale/sk/LC_MESSAGES/popt.mo",
            "/usr/share/locale/sl/LC_MESSAGES/popt.mo",
            "/usr/share/locale/sv/LC_MESSAGES/popt.mo",
            "/usr/share/locale/th/LC_MESSAGES/popt.mo",
            "/usr/share/locale/tr/LC_MESSAGES/popt.mo",
            "/usr/share/locale/uk/LC_MESSAGES/popt.mo",
            "/usr/share/locale/vi/LC_MESSAGES/popt.mo",
            "/usr/share/locale/wa/LC_MESSAGES/popt.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/popt.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/popt.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpq5@17.11-0+deb13u1",
          "Name": "libpq5",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpq5@17.11-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "20e1c02243ce32f8"
          },
          "Version": "17.11",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "postgresql-17",
          "SrcVersion": "17.11",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "PostgreSQL",
            "Custom-regex",
            "TCL",
            "Custom-pg_dump",
            "BSD-3-Clause",
            "Custom-Unicode",
            "double-metaphone",
            "GPL-1.0-only",
            "Artistic-2.0",
            "nagaysau-ishii",
            "BSD-2-Clause"
          ],
          "Maintainer": "Debian PostgreSQL Maintainers \u003cteam+postgresql@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgssapi-krb5-2@1.21.3-5+deb13u1",
            "libldap2@2.6.10+dfsg-1",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpq.so.5.17",
            "/usr/share/doc/libpq5/changelog.Debian.gz",
            "/usr/share/doc/libpq5/changelog.gz",
            "/usr/share/doc/libpq5/copyright",
            "/usr/share/locale/cs/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/de/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/el/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/es/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/fr/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/he/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/it/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/ja/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/ka/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/ko/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/pl/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/ru/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/sv/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/tr/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/uk/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/libpq5-17.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/libpq5-17.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libproc2-0@2:4.0.4-9",
          "Name": "libproc2-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libproc2-0@4.0.4-9?arch=amd64\u0026distro=debian-13.7\u0026epoch=2",
            "UID": "3aff8b6d7e70e952"
          },
          "Version": "4.0.4",
          "Release": "9",
          "Epoch": 2,
          "Arch": "amd64",
          "SrcName": "procps",
          "SrcVersion": "4.0.4",
          "SrcRelease": "9",
          "SrcEpoch": 2,
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.0-or-later",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libsystemd0@257.13-1~deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libproc2.so.0.0.2",
            "/usr/share/doc/libproc2-0/NEWS.Debian.gz",
            "/usr/share/doc/libproc2-0/changelog.Debian.gz",
            "/usr/share/doc/libproc2-0/changelog.gz",
            "/usr/share/doc/libproc2-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpsl5t64@0.21.2-1.1+b1",
          "Name": "libpsl5t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpsl5t64@0.21.2-1.1%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1c917ea5edaa1f04"
          },
          "Version": "0.21.2",
          "Release": "1.1+b1",
          "Arch": "amd64",
          "SrcName": "libpsl",
          "SrcVersion": "0.21.2",
          "SrcRelease": "1.1",
          "Licenses": [
            "MIT",
            "gnulib",
            "Chromium"
          ],
          "Maintainer": "Tim Rühsen \u003ctim.ruehsen@gmx.de\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libidn2-0@2.3.8-2",
            "libunistring5@1.3-2"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpsl.so.5.3.4",
            "/usr/share/doc/libpsl5t64/changelog.Debian.amd64.gz",
            "/usr/share/doc/libpsl5t64/changelog.Debian.gz",
            "/usr/share/doc/libpsl5t64/changelog.gz",
            "/usr/share/doc/libpsl5t64/copyright",
            "/usr/share/lintian/overrides/libpsl5t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpython3-stdlib@3.13.5-1",
          "Name": "libpython3-stdlib",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpython3-stdlib@3.13.5-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e48b81548c645d75"
          },
          "Version": "3.13.5",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "python3-defaults",
          "SrcVersion": "3.13.5",
          "SrcRelease": "1",
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libpython3.13-stdlib@3.13.5-2+deb13u5"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/share/doc/libpython3-stdlib/README.Debian",
            "/usr/share/doc/libpython3-stdlib/changelog.Debian.gz",
            "/usr/share/doc/libpython3-stdlib/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpython3.13-minimal@3.13.5-2+deb13u5",
          "Name": "libpython3.13-minimal",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpython3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "2b46bbe036589b95"
          },
          "Version": "3.13.5",
          "Release": "2+deb13u5",
          "Arch": "amd64",
          "SrcName": "python3.13",
          "SrcVersion": "3.13.5",
          "SrcRelease": "2+deb13u5",
          "Licenses": [
            "GPL-2.0-only",
            "text://Redistribution and use in source and binary forms, with or without",
            "text://By obtaining, using, and/or copying this software and/or its",
            "text://Permission to use, copy, modify, and distribute this software and",
            "text://This software is provided 'as-is', without any express or implied",
            "text://Permission  is  hereby granted,  free  of charge,  to  any person",
            "text://Permission is hereby granted, free of charge, to any person obtaining",
            "text://Permission to use, copy, modify, and distribute this software and its",
            "text://This software is provided as-is, without express or implied",
            "text://Permission to use, copy, modify, and distribute this software for any",
            "text://* Permission to use this software in any way is granted without"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/python3.13/__future__.py",
            "/usr/lib/python3.13/_collections_abc.py",
            "/usr/lib/python3.13/_colorize.py",
            "/usr/lib/python3.13/_compat_pickle.py",
            "/usr/lib/python3.13/_opcode_metadata.py",
            "/usr/lib/python3.13/_py_abc.py",
            "/usr/lib/python3.13/_sitebuiltins.py",
            "/usr/lib/python3.13/_strptime.py",
            "/usr/lib/python3.13/_sysconfigdata__linux_x86_64-linux-gnu.py",
            "/usr/lib/python3.13/_threading_local.py",
            "/usr/lib/python3.13/_weakrefset.py",
            "/usr/lib/python3.13/abc.py",
            "/usr/lib/python3.13/argparse.py",
            "/usr/lib/python3.13/ast.py",
            "/usr/lib/python3.13/base64.py",
            "/usr/lib/python3.13/bisect.py",
            "/usr/lib/python3.13/calendar.py",
            "/usr/lib/python3.13/codecs.py",
            "/usr/lib/python3.13/collections/__init__.py",
            "/usr/lib/python3.13/compileall.py",
            "/usr/lib/python3.13/configparser.py",
            "/usr/lib/python3.13/contextlib.py",
            "/usr/lib/python3.13/copy.py",
            "/usr/lib/python3.13/copyreg.py",
            "/usr/lib/python3.13/csv.py",
            "/usr/lib/python3.13/dataclasses.py",
            "/usr/lib/python3.13/datetime.py",
            "/usr/lib/python3.13/dis.py",
            "/usr/lib/python3.13/email/__init__.py",
            "/usr/lib/python3.13/email/_encoded_words.py",
            "/usr/lib/python3.13/email/_header_value_parser.py",
            "/usr/lib/python3.13/email/_parseaddr.py",
            "/usr/lib/python3.13/email/_policybase.py",
            "/usr/lib/python3.13/email/architecture.rst",
            "/usr/lib/python3.13/email/base64mime.py",
            "/usr/lib/python3.13/email/charset.py",
            "/usr/lib/python3.13/email/contentmanager.py",
            "/usr/lib/python3.13/email/encoders.py",
            "/usr/lib/python3.13/email/errors.py",
            "/usr/lib/python3.13/email/feedparser.py",
            "/usr/lib/python3.13/email/generator.py",
            "/usr/lib/python3.13/email/header.py",
            "/usr/lib/python3.13/email/headerregistry.py",
            "/usr/lib/python3.13/email/iterators.py",
            "/usr/lib/python3.13/email/message.py",
            "/usr/lib/python3.13/email/mime/__init__.py",
            "/usr/lib/python3.13/email/mime/application.py",
            "/usr/lib/python3.13/email/mime/audio.py",
            "/usr/lib/python3.13/email/mime/base.py",
            "/usr/lib/python3.13/email/mime/image.py",
            "/usr/lib/python3.13/email/mime/message.py",
            "/usr/lib/python3.13/email/mime/multipart.py",
            "/usr/lib/python3.13/email/mime/nonmultipart.py",
            "/usr/lib/python3.13/email/mime/text.py",
            "/usr/lib/python3.13/email/parser.py",
            "/usr/lib/python3.13/email/policy.py",
            "/usr/lib/python3.13/email/quoprimime.py",
            "/usr/lib/python3.13/email/utils.py",
            "/usr/lib/python3.13/encodings/__init__.py",
            "/usr/lib/python3.13/encodings/aliases.py",
            "/usr/lib/python3.13/encodings/ascii.py",
            "/usr/lib/python3.13/encodings/base64_codec.py",
            "/usr/lib/python3.13/encodings/big5.py",
            "/usr/lib/python3.13/encodings/big5hkscs.py",
            "/usr/lib/python3.13/encodings/bz2_codec.py",
            "/usr/lib/python3.13/encodings/charmap.py",
            "/usr/lib/python3.13/encodings/cp037.py",
            "/usr/lib/python3.13/encodings/cp1006.py",
            "/usr/lib/python3.13/encodings/cp1026.py",
            "/usr/lib/python3.13/encodings/cp1125.py",
            "/usr/lib/python3.13/encodings/cp1140.py",
            "/usr/lib/python3.13/encodings/cp1250.py",
            "/usr/lib/python3.13/encodings/cp1251.py",
            "/usr/lib/python3.13/encodings/cp1252.py",
            "/usr/lib/python3.13/encodings/cp1253.py",
            "/usr/lib/python3.13/encodings/cp1254.py",
            "/usr/lib/python3.13/encodings/cp1255.py",
            "/usr/lib/python3.13/encodings/cp1256.py",
            "/usr/lib/python3.13/encodings/cp1257.py",
            "/usr/lib/python3.13/encodings/cp1258.py",
            "/usr/lib/python3.13/encodings/cp273.py",
            "/usr/lib/python3.13/encodings/cp424.py",
            "/usr/lib/python3.13/encodings/cp437.py",
            "/usr/lib/python3.13/encodings/cp500.py",
            "/usr/lib/python3.13/encodings/cp720.py",
            "/usr/lib/python3.13/encodings/cp737.py",
            "/usr/lib/python3.13/encodings/cp775.py",
            "/usr/lib/python3.13/encodings/cp850.py",
            "/usr/lib/python3.13/encodings/cp852.py",
            "/usr/lib/python3.13/encodings/cp855.py",
            "/usr/lib/python3.13/encodings/cp856.py",
            "/usr/lib/python3.13/encodings/cp857.py",
            "/usr/lib/python3.13/encodings/cp858.py",
            "/usr/lib/python3.13/encodings/cp860.py",
            "/usr/lib/python3.13/encodings/cp861.py",
            "/usr/lib/python3.13/encodings/cp862.py",
            "/usr/lib/python3.13/encodings/cp863.py",
            "/usr/lib/python3.13/encodings/cp864.py",
            "/usr/lib/python3.13/encodings/cp865.py",
            "/usr/lib/python3.13/encodings/cp866.py",
            "/usr/lib/python3.13/encodings/cp869.py",
            "/usr/lib/python3.13/encodings/cp874.py",
            "/usr/lib/python3.13/encodings/cp875.py",
            "/usr/lib/python3.13/encodings/cp932.py",
            "/usr/lib/python3.13/encodings/cp949.py",
            "/usr/lib/python3.13/encodings/cp950.py",
            "/usr/lib/python3.13/encodings/euc_jis_2004.py",
            "/usr/lib/python3.13/encodings/euc_jisx0213.py",
            "/usr/lib/python3.13/encodings/euc_jp.py",
            "/usr/lib/python3.13/encodings/euc_kr.py",
            "/usr/lib/python3.13/encodings/gb18030.py",
            "/usr/lib/python3.13/encodings/gb2312.py",
            "/usr/lib/python3.13/encodings/gbk.py",
            "/usr/lib/python3.13/encodings/hex_codec.py",
            "/usr/lib/python3.13/encodings/hp_roman8.py",
            "/usr/lib/python3.13/encodings/hz.py",
            "/usr/lib/python3.13/encodings/idna.py",
            "/usr/lib/python3.13/encodings/iso2022_jp.py",
            "/usr/lib/python3.13/encodings/iso2022_jp_1.py",
            "/usr/lib/python3.13/encodings/iso2022_jp_2.py",
            "/usr/lib/python3.13/encodings/iso2022_jp_2004.py",
            "/usr/lib/python3.13/encodings/iso2022_jp_3.py",
            "/usr/lib/python3.13/encodings/iso2022_jp_ext.py",
            "/usr/lib/python3.13/encodings/iso2022_kr.py",
            "/usr/lib/python3.13/encodings/iso8859_1.py",
            "/usr/lib/python3.13/encodings/iso8859_10.py",
            "/usr/lib/python3.13/encodings/iso8859_11.py",
            "/usr/lib/python3.13/encodings/iso8859_13.py",
            "/usr/lib/python3.13/encodings/iso8859_14.py",
            "/usr/lib/python3.13/encodings/iso8859_15.py",
            "/usr/lib/python3.13/encodings/iso8859_16.py",
            "/usr/lib/python3.13/encodings/iso8859_2.py",
            "/usr/lib/python3.13/encodings/iso8859_3.py",
            "/usr/lib/python3.13/encodings/iso8859_4.py",
            "/usr/lib/python3.13/encodings/iso8859_5.py",
            "/usr/lib/python3.13/encodings/iso8859_6.py",
            "/usr/lib/python3.13/encodings/iso8859_7.py",
            "/usr/lib/python3.13/encodings/iso8859_8.py",
            "/usr/lib/python3.13/encodings/iso8859_9.py",
            "/usr/lib/python3.13/encodings/johab.py",
            "/usr/lib/python3.13/encodings/koi8_r.py",
            "/usr/lib/python3.13/encodings/koi8_t.py",
            "/usr/lib/python3.13/encodings/koi8_u.py",
            "/usr/lib/python3.13/encodings/kz1048.py",
            "/usr/lib/python3.13/encodings/latin_1.py",
            "/usr/lib/python3.13/encodings/mac_arabic.py",
            "/usr/lib/python3.13/encodings/mac_croatian.py",
            "/usr/lib/python3.13/encodings/mac_cyrillic.py",
            "/usr/lib/python3.13/encodings/mac_farsi.py",
            "/usr/lib/python3.13/encodings/mac_greek.py",
            "/usr/lib/python3.13/encodings/mac_iceland.py",
            "/usr/lib/python3.13/encodings/mac_latin2.py",
            "/usr/lib/python3.13/encodings/mac_roman.py",
            "/usr/lib/python3.13/encodings/mac_romanian.py",
            "/usr/lib/python3.13/encodings/mac_turkish.py",
            "/usr/lib/python3.13/encodings/mbcs.py",
            "/usr/lib/python3.13/encodings/oem.py",
            "/usr/lib/python3.13/encodings/palmos.py",
            "/usr/lib/python3.13/encodings/ptcp154.py",
            "/usr/lib/python3.13/encodings/punycode.py",
            "/usr/lib/python3.13/encodings/quopri_codec.py",
            "/usr/lib/python3.13/encodings/raw_unicode_escape.py",
            "/usr/lib/python3.13/encodings/rot_13.py",
            "/usr/lib/python3.13/encodings/shift_jis.py",
            "/usr/lib/python3.13/encodings/shift_jis_2004.py",
            "/usr/lib/python3.13/encodings/shift_jisx0213.py",
            "/usr/lib/python3.13/encodings/tis_620.py",
            "/usr/lib/python3.13/encodings/undefined.py",
            "/usr/lib/python3.13/encodings/unicode_escape.py",
            "/usr/lib/python3.13/encodings/utf_16.py",
            "/usr/lib/python3.13/encodings/utf_16_be.py",
            "/usr/lib/python3.13/encodings/utf_16_le.py",
            "/usr/lib/python3.13/encodings/utf_32.py",
            "/usr/lib/python3.13/encodings/utf_32_be.py",
            "/usr/lib/python3.13/encodings/utf_32_le.py",
            "/usr/lib/python3.13/encodings/utf_7.py",
            "/usr/lib/python3.13/encodings/utf_8.py",
            "/usr/lib/python3.13/encodings/utf_8_sig.py",
            "/usr/lib/python3.13/encodings/uu_codec.py",
            "/usr/lib/python3.13/encodings/zlib_codec.py",
            "/usr/lib/python3.13/enum.py",
            "/usr/lib/python3.13/filecmp.py",
            "/usr/lib/python3.13/fnmatch.py",
            "/usr/lib/python3.13/functools.py",
            "/usr/lib/python3.13/genericpath.py",
            "/usr/lib/python3.13/getopt.py",
            "/usr/lib/python3.13/glob.py",
            "/usr/lib/python3.13/hashlib.py",
            "/usr/lib/python3.13/heapq.py",
            "/usr/lib/python3.13/importlib/__init__.py",
            "/usr/lib/python3.13/importlib/_abc.py",
            "/usr/lib/python3.13/importlib/_bootstrap.py",
            "/usr/lib/python3.13/importlib/_bootstrap_external.py",
            "/usr/lib/python3.13/importlib/abc.py",
            "/usr/lib/python3.13/importlib/machinery.py",
            "/usr/lib/python3.13/importlib/metadata/__init__.py",
            "/usr/lib/python3.13/importlib/metadata/_adapters.py",
            "/usr/lib/python3.13/importlib/metadata/_collections.py",
            "/usr/lib/python3.13/importlib/metadata/_functools.py",
            "/usr/lib/python3.13/importlib/metadata/_itertools.py",
            "/usr/lib/python3.13/importlib/metadata/_meta.py",
            "/usr/lib/python3.13/importlib/metadata/_text.py",
            "/usr/lib/python3.13/importlib/metadata/diagnose.py",
            "/usr/lib/python3.13/importlib/readers.py",
            "/usr/lib/python3.13/importlib/resources/__init__.py",
            "/usr/lib/python3.13/importlib/resources/_adapters.py",
            "/usr/lib/python3.13/importlib/resources/_common.py",
            "/usr/lib/python3.13/importlib/resources/_functional.py",
            "/usr/lib/python3.13/importlib/resources/_itertools.py",
            "/usr/lib/python3.13/importlib/resources/abc.py",
            "/usr/lib/python3.13/importlib/resources/readers.py",
            "/usr/lib/python3.13/importlib/resources/simple.py",
            "/usr/lib/python3.13/importlib/simple.py",
            "/usr/lib/python3.13/importlib/util.py",
            "/usr/lib/python3.13/inspect.py",
            "/usr/lib/python3.13/io.py",
            "/usr/lib/python3.13/ipaddress.py",
            "/usr/lib/python3.13/json/__init__.py",
            "/usr/lib/python3.13/json/decoder.py",
            "/usr/lib/python3.13/json/encoder.py",
            "/usr/lib/python3.13/json/scanner.py",
            "/usr/lib/python3.13/json/tool.py",
            "/usr/lib/python3.13/keyword.py",
            "/usr/lib/python3.13/lib-dynload/_hashlib.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_ssl.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/linecache.py",
            "/usr/lib/python3.13/locale.py",
            "/usr/lib/python3.13/logging/__init__.py",
            "/usr/lib/python3.13/logging/config.py",
            "/usr/lib/python3.13/logging/handlers.py",
            "/usr/lib/python3.13/opcode.py",
            "/usr/lib/python3.13/operator.py",
            "/usr/lib/python3.13/optparse.py",
            "/usr/lib/python3.13/os.py",
            "/usr/lib/python3.13/pathlib/__init__.py",
            "/usr/lib/python3.13/pathlib/_abc.py",
            "/usr/lib/python3.13/pathlib/_local.py",
            "/usr/lib/python3.13/pickle.py",
            "/usr/lib/python3.13/pkgutil.py",
            "/usr/lib/python3.13/platform.py",
            "/usr/lib/python3.13/posixpath.py",
            "/usr/lib/python3.13/py_compile.py",
            "/usr/lib/python3.13/quopri.py",
            "/usr/lib/python3.13/random.py",
            "/usr/lib/python3.13/re/__init__.py",
            "/usr/lib/python3.13/re/_casefix.py",
            "/usr/lib/python3.13/re/_compiler.py",
            "/usr/lib/python3.13/re/_constants.py",
            "/usr/lib/python3.13/re/_parser.py",
            "/usr/lib/python3.13/reprlib.py",
            "/usr/lib/python3.13/runpy.py",
            "/usr/lib/python3.13/selectors.py",
            "/usr/lib/python3.13/signal.py",
            "/usr/lib/python3.13/site.py",
            "/usr/lib/python3.13/socket.py",
            "/usr/lib/python3.13/sre_compile.py",
            "/usr/lib/python3.13/sre_constants.py",
            "/usr/lib/python3.13/sre_parse.py",
            "/usr/lib/python3.13/ssl.py",
            "/usr/lib/python3.13/stat.py",
            "/usr/lib/python3.13/string.py",
            "/usr/lib/python3.13/stringprep.py",
            "/usr/lib/python3.13/struct.py",
            "/usr/lib/python3.13/subprocess.py",
            "/usr/lib/python3.13/sysconfig/__init__.py",
            "/usr/lib/python3.13/sysconfig/__main__.py",
            "/usr/lib/python3.13/tempfile.py",
            "/usr/lib/python3.13/textwrap.py",
            "/usr/lib/python3.13/threading.py",
            "/usr/lib/python3.13/token.py",
            "/usr/lib/python3.13/tokenize.py",
            "/usr/lib/python3.13/traceback.py",
            "/usr/lib/python3.13/tracemalloc.py",
            "/usr/lib/python3.13/types.py",
            "/usr/lib/python3.13/typing.py",
            "/usr/lib/python3.13/urllib/__init__.py",
            "/usr/lib/python3.13/urllib/error.py",
            "/usr/lib/python3.13/urllib/parse.py",
            "/usr/lib/python3.13/urllib/request.py",
            "/usr/lib/python3.13/urllib/response.py",
            "/usr/lib/python3.13/urllib/robotparser.py",
            "/usr/lib/python3.13/warnings.py",
            "/usr/lib/python3.13/weakref.py",
            "/usr/lib/python3.13/zipfile/__init__.py",
            "/usr/lib/python3.13/zipfile/__main__.py",
            "/usr/lib/python3.13/zipfile/_path/__init__.py",
            "/usr/lib/python3.13/zipfile/_path/glob.py",
            "/usr/lib/python3.13/zipimport.py",
            "/usr/share/doc/libpython3.13-minimal/README.Debian",
            "/usr/share/doc/libpython3.13-minimal/changelog.Debian.gz",
            "/usr/share/doc/libpython3.13-minimal/copyright",
            "/usr/share/lintian/overrides/libpython3.13-minimal"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpython3.13-stdlib@3.13.5-2+deb13u5",
          "Name": "libpython3.13-stdlib",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpython3.13-stdlib@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "d927ada341a0fb1e"
          },
          "Version": "3.13.5",
          "Release": "2+deb13u5",
          "Arch": "amd64",
          "SrcName": "python3.13",
          "SrcVersion": "3.13.5",
          "SrcRelease": "2+deb13u5",
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4",
            "libdb5.3t64@5.3.28+dfsg2-9",
            "libffi8@3.4.8-2",
            "liblzma5@5.8.1-1+deb13u2",
            "libncursesw6@6.5+20250216-2",
            "libpython3.13-minimal@3.13.5-2+deb13u5",
            "libreadline8t64@8.2-6",
            "libsqlite3-0@3.46.1-7+deb13u2",
            "libtinfo6@6.5+20250216-2",
            "libuuid1@2.41.5-0+deb13u1",
            "media-types@13.0.0",
            "netbase@6.5",
            "tzdata@2026c-0+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/python3.13/EXTERNALLY-MANAGED",
            "/usr/lib/python3.13/LICENSE.txt",
            "/usr/lib/python3.13/__hello__.py",
            "/usr/lib/python3.13/__phello__/__init__.py",
            "/usr/lib/python3.13/__phello__/spam.py",
            "/usr/lib/python3.13/_aix_support.py",
            "/usr/lib/python3.13/_android_support.py",
            "/usr/lib/python3.13/_apple_support.py",
            "/usr/lib/python3.13/_compression.py",
            "/usr/lib/python3.13/_distutils_system_mod.py",
            "/usr/lib/python3.13/_ios_support.py",
            "/usr/lib/python3.13/_markupbase.py",
            "/usr/lib/python3.13/_osx_support.py",
            "/usr/lib/python3.13/_pydatetime.py",
            "/usr/lib/python3.13/_pydecimal.py",
            "/usr/lib/python3.13/_pyio.py",
            "/usr/lib/python3.13/_pylong.py",
            "/usr/lib/python3.13/_pyrepl/__init__.py",
            "/usr/lib/python3.13/_pyrepl/__main__.py",
            "/usr/lib/python3.13/_pyrepl/_minimal_curses.py",
            "/usr/lib/python3.13/_pyrepl/_threading_handler.py",
            "/usr/lib/python3.13/_pyrepl/base_eventqueue.py",
            "/usr/lib/python3.13/_pyrepl/commands.py",
            "/usr/lib/python3.13/_pyrepl/completing_reader.py",
            "/usr/lib/python3.13/_pyrepl/console.py",
            "/usr/lib/python3.13/_pyrepl/curses.py",
            "/usr/lib/python3.13/_pyrepl/fancy_termios.py",
            "/usr/lib/python3.13/_pyrepl/historical_reader.py",
            "/usr/lib/python3.13/_pyrepl/input.py",
            "/usr/lib/python3.13/_pyrepl/keymap.py",
            "/usr/lib/python3.13/_pyrepl/main.py",
            "/usr/lib/python3.13/_pyrepl/mypy.ini",
            "/usr/lib/python3.13/_pyrepl/pager.py",
            "/usr/lib/python3.13/_pyrepl/reader.py",
            "/usr/lib/python3.13/_pyrepl/readline.py",
            "/usr/lib/python3.13/_pyrepl/simple_interact.py",
            "/usr/lib/python3.13/_pyrepl/trace.py",
            "/usr/lib/python3.13/_pyrepl/types.py",
            "/usr/lib/python3.13/_pyrepl/unix_console.py",
            "/usr/lib/python3.13/_pyrepl/unix_eventqueue.py",
            "/usr/lib/python3.13/_pyrepl/utils.py",
            "/usr/lib/python3.13/_pyrepl/windows_console.py",
            "/usr/lib/python3.13/_pyrepl/windows_eventqueue.py",
            "/usr/lib/python3.13/antigravity.py",
            "/usr/lib/python3.13/asyncio/__init__.py",
            "/usr/lib/python3.13/asyncio/__main__.py",
            "/usr/lib/python3.13/asyncio/base_events.py",
            "/usr/lib/python3.13/asyncio/base_futures.py",
            "/usr/lib/python3.13/asyncio/base_subprocess.py",
            "/usr/lib/python3.13/asyncio/base_tasks.py",
            "/usr/lib/python3.13/asyncio/constants.py",
            "/usr/lib/python3.13/asyncio/coroutines.py",
            "/usr/lib/python3.13/asyncio/events.py",
            "/usr/lib/python3.13/asyncio/exceptions.py",
            "/usr/lib/python3.13/asyncio/format_helpers.py",
            "/usr/lib/python3.13/asyncio/futures.py",
            "/usr/lib/python3.13/asyncio/locks.py",
            "/usr/lib/python3.13/asyncio/log.py",
            "/usr/lib/python3.13/asyncio/mixins.py",
            "/usr/lib/python3.13/asyncio/proactor_events.py",
            "/usr/lib/python3.13/asyncio/protocols.py",
            "/usr/lib/python3.13/asyncio/queues.py",
            "/usr/lib/python3.13/asyncio/runners.py",
            "/usr/lib/python3.13/asyncio/selector_events.py",
            "/usr/lib/python3.13/asyncio/sslproto.py",
            "/usr/lib/python3.13/asyncio/staggered.py",
            "/usr/lib/python3.13/asyncio/streams.py",
            "/usr/lib/python3.13/asyncio/subprocess.py",
            "/usr/lib/python3.13/asyncio/taskgroups.py",
            "/usr/lib/python3.13/asyncio/tasks.py",
            "/usr/lib/python3.13/asyncio/threads.py",
            "/usr/lib/python3.13/asyncio/timeouts.py",
            "/usr/lib/python3.13/asyncio/transports.py",
            "/usr/lib/python3.13/asyncio/trsock.py",
            "/usr/lib/python3.13/asyncio/unix_events.py",
            "/usr/lib/python3.13/asyncio/windows_events.py",
            "/usr/lib/python3.13/asyncio/windows_utils.py",
            "/usr/lib/python3.13/bdb.py",
            "/usr/lib/python3.13/bz2.py",
            "/usr/lib/python3.13/cProfile.py",
            "/usr/lib/python3.13/cmd.py",
            "/usr/lib/python3.13/code.py",
            "/usr/lib/python3.13/codeop.py",
            "/usr/lib/python3.13/colorsys.py",
            "/usr/lib/python3.13/concurrent/__init__.py",
            "/usr/lib/python3.13/concurrent/futures/__init__.py",
            "/usr/lib/python3.13/concurrent/futures/_base.py",
            "/usr/lib/python3.13/concurrent/futures/process.py",
            "/usr/lib/python3.13/concurrent/futures/thread.py",
            "/usr/lib/python3.13/contextvars.py",
            "/usr/lib/python3.13/ctypes/__init__.py",
            "/usr/lib/python3.13/ctypes/_aix.py",
            "/usr/lib/python3.13/ctypes/_endian.py",
            "/usr/lib/python3.13/ctypes/util.py",
            "/usr/lib/python3.13/ctypes/wintypes.py",
            "/usr/lib/python3.13/curses/__init__.py",
            "/usr/lib/python3.13/curses/ascii.py",
            "/usr/lib/python3.13/curses/has_key.py",
            "/usr/lib/python3.13/curses/panel.py",
            "/usr/lib/python3.13/curses/textpad.py",
            "/usr/lib/python3.13/dbm/__init__.py",
            "/usr/lib/python3.13/dbm/dumb.py",
            "/usr/lib/python3.13/dbm/gnu.py",
            "/usr/lib/python3.13/dbm/ndbm.py",
            "/usr/lib/python3.13/dbm/sqlite3.py",
            "/usr/lib/python3.13/decimal.py",
            "/usr/lib/python3.13/difflib.py",
            "/usr/lib/python3.13/doctest.py",
            "/usr/lib/python3.13/fileinput.py",
            "/usr/lib/python3.13/fractions.py",
            "/usr/lib/python3.13/ftplib.py",
            "/usr/lib/python3.13/getpass.py",
            "/usr/lib/python3.13/gettext.py",
            "/usr/lib/python3.13/graphlib.py",
            "/usr/lib/python3.13/gzip.py",
            "/usr/lib/python3.13/hmac.py",
            "/usr/lib/python3.13/html/__init__.py",
            "/usr/lib/python3.13/html/entities.py",
            "/usr/lib/python3.13/html/parser.py",
            "/usr/lib/python3.13/http/__init__.py",
            "/usr/lib/python3.13/http/client.py",
            "/usr/lib/python3.13/http/cookiejar.py",
            "/usr/lib/python3.13/http/cookies.py",
            "/usr/lib/python3.13/http/server.py",
            "/usr/lib/python3.13/imaplib.py",
            "/usr/lib/python3.13/lib-dynload/_asyncio.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_bz2.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_codecs_cn.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_codecs_hk.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_codecs_iso2022.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_codecs_jp.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_codecs_kr.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_codecs_tw.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_contextvars.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_ctypes.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_ctypes_test.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_curses.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_curses_panel.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_dbm.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_decimal.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_interpchannels.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_interpqueues.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_interpreters.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_lsprof.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_lzma.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_multibytecodec.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_multiprocessing.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_posixshmem.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_queue.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_sqlite3.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testbuffer.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testcapi.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testclinic.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testclinic_limited.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testexternalinspection.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testimportmultiple.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testinternalcapi.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testlimitedcapi.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testmultiphase.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_testsinglephase.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_uuid.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_xxtestfuzz.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/_zoneinfo.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/mmap.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/readline.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/resource.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/termios.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/xxlimited.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/xxlimited_35.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lib-dynload/xxsubtype.cpython-313-x86_64-linux-gnu.so",
            "/usr/lib/python3.13/lzma.py",
            "/usr/lib/python3.13/mailbox.py",
            "/usr/lib/python3.13/mimetypes.py",
            "/usr/lib/python3.13/modulefinder.py",
            "/usr/lib/python3.13/multiprocessing/__init__.py",
            "/usr/lib/python3.13/multiprocessing/connection.py",
            "/usr/lib/python3.13/multiprocessing/context.py",
            "/usr/lib/python3.13/multiprocessing/dummy/__init__.py",
            "/usr/lib/python3.13/multiprocessing/dummy/connection.py",
            "/usr/lib/python3.13/multiprocessing/forkserver.py",
            "/usr/lib/python3.13/multiprocessing/heap.py",
            "/usr/lib/python3.13/multiprocessing/managers.py",
            "/usr/lib/python3.13/multiprocessing/pool.py",
            "/usr/lib/python3.13/multiprocessing/popen_fork.py",
            "/usr/lib/python3.13/multiprocessing/popen_forkserver.py",
            "/usr/lib/python3.13/multiprocessing/popen_spawn_posix.py",
            "/usr/lib/python3.13/multiprocessing/popen_spawn_win32.py",
            "/usr/lib/python3.13/multiprocessing/process.py",
            "/usr/lib/python3.13/multiprocessing/queues.py",
            "/usr/lib/python3.13/multiprocessing/reduction.py",
            "/usr/lib/python3.13/multiprocessing/resource_sharer.py",
            "/usr/lib/python3.13/multiprocessing/resource_tracker.py",
            "/usr/lib/python3.13/multiprocessing/shared_memory.py",
            "/usr/lib/python3.13/multiprocessing/sharedctypes.py",
            "/usr/lib/python3.13/multiprocessing/spawn.py",
            "/usr/lib/python3.13/multiprocessing/synchronize.py",
            "/usr/lib/python3.13/multiprocessing/util.py",
            "/usr/lib/python3.13/netrc.py",
            "/usr/lib/python3.13/ntpath.py",
            "/usr/lib/python3.13/nturl2path.py",
            "/usr/lib/python3.13/numbers.py",
            "/usr/lib/python3.13/pdb.py",
            "/usr/lib/python3.13/pickletools.py",
            "/usr/lib/python3.13/plistlib.py",
            "/usr/lib/python3.13/poplib.py",
            "/usr/lib/python3.13/pprint.py",
            "/usr/lib/python3.13/profile.py",
            "/usr/lib/python3.13/pstats.py",
            "/usr/lib/python3.13/pty.py",
            "/usr/lib/python3.13/pyclbr.py",
            "/usr/lib/python3.13/pydoc.py",
            "/usr/lib/python3.13/pydoc_data/__init__.py",
            "/usr/lib/python3.13/pydoc_data/_pydoc.css",
            "/usr/lib/python3.13/pydoc_data/topics.py",
            "/usr/lib/python3.13/queue.py",
            "/usr/lib/python3.13/rlcompleter.py",
            "/usr/lib/python3.13/sched.py",
            "/usr/lib/python3.13/secrets.py",
            "/usr/lib/python3.13/shelve.py",
            "/usr/lib/python3.13/shlex.py",
            "/usr/lib/python3.13/shutil.py",
            "/usr/lib/python3.13/smtplib.py",
            "/usr/lib/python3.13/socketserver.py",
            "/usr/lib/python3.13/sqlite3/__init__.py",
            "/usr/lib/python3.13/sqlite3/__main__.py",
            "/usr/lib/python3.13/sqlite3/dbapi2.py",
            "/usr/lib/python3.13/sqlite3/dump.py",
            "/usr/lib/python3.13/statistics.py",
            "/usr/lib/python3.13/symtable.py",
            "/usr/lib/python3.13/tabnanny.py",
            "/usr/lib/python3.13/tarfile.py",
            "/usr/lib/python3.13/test/__init__.py",
            "/usr/lib/python3.13/test/__main__.py",
            "/usr/lib/python3.13/test/libregrtest/__init__.py",
            "/usr/lib/python3.13/test/libregrtest/cmdline.py",
            "/usr/lib/python3.13/test/libregrtest/filter.py",
            "/usr/lib/python3.13/test/libregrtest/findtests.py",
            "/usr/lib/python3.13/test/libregrtest/logger.py",
            "/usr/lib/python3.13/test/libregrtest/main.py",
            "/usr/lib/python3.13/test/libregrtest/mypy.ini",
            "/usr/lib/python3.13/test/libregrtest/pgo.py",
            "/usr/lib/python3.13/test/libregrtest/refleak.py",
            "/usr/lib/python3.13/test/libregrtest/result.py",
            "/usr/lib/python3.13/test/libregrtest/results.py",
            "/usr/lib/python3.13/test/libregrtest/run_workers.py",
            "/usr/lib/python3.13/test/libregrtest/runtests.py",
            "/usr/lib/python3.13/test/libregrtest/save_env.py",
            "/usr/lib/python3.13/test/libregrtest/setup.py",
            "/usr/lib/python3.13/test/libregrtest/single.py",
            "/usr/lib/python3.13/test/libregrtest/testresult.py",
            "/usr/lib/python3.13/test/libregrtest/tsan.py",
            "/usr/lib/python3.13/test/libregrtest/utils.py",
            "/usr/lib/python3.13/test/libregrtest/win_utils.py",
            "/usr/lib/python3.13/test/libregrtest/worker.py",
            "/usr/lib/python3.13/test/regrtest.py",
            "/usr/lib/python3.13/test/support/__init__.py",
            "/usr/lib/python3.13/test/support/_hypothesis_stubs/__init__.py",
            "/usr/lib/python3.13/test/support/_hypothesis_stubs/_helpers.py",
            "/usr/lib/python3.13/test/support/_hypothesis_stubs/strategies.py",
            "/usr/lib/python3.13/test/support/ast_helper.py",
            "/usr/lib/python3.13/test/support/asynchat.py",
            "/usr/lib/python3.13/test/support/asyncore.py",
            "/usr/lib/python3.13/test/support/bytecode_helper.py",
            "/usr/lib/python3.13/test/support/hashlib_helper.py",
            "/usr/lib/python3.13/test/support/hypothesis_helper.py",
            "/usr/lib/python3.13/test/support/i18n_helper.py",
            "/usr/lib/python3.13/test/support/import_helper.py",
            "/usr/lib/python3.13/test/support/interpreters/__init__.py",
            "/usr/lib/python3.13/test/support/interpreters/_crossinterp.py",
            "/usr/lib/python3.13/test/support/interpreters/channels.py",
            "/usr/lib/python3.13/test/support/interpreters/queues.py",
            "/usr/lib/python3.13/test/support/logging_helper.py",
            "/usr/lib/python3.13/test/support/numbers.py",
            "/usr/lib/python3.13/test/support/os_helper.py",
            "/usr/lib/python3.13/test/support/pty_helper.py",
            "/usr/lib/python3.13/test/support/refleak_helper.py",
            "/usr/lib/python3.13/test/support/script_helper.py",
            "/usr/lib/python3.13/test/support/smtpd.py",
            "/usr/lib/python3.13/test/support/socket_helper.py",
            "/usr/lib/python3.13/test/support/testcase.py",
            "/usr/lib/python3.13/test/support/threading_helper.py",
            "/usr/lib/python3.13/test/support/venv.py",
            "/usr/lib/python3.13/test/support/warnings_helper.py",
            "/usr/lib/python3.13/test/test_support.py",
            "/usr/lib/python3.13/test/typinganndata/__init__.py",
            "/usr/lib/python3.13/test/typinganndata/_typed_dict_helper.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module2.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module3.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module4.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module5.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module6.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module695.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module7.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module8.py",
            "/usr/lib/python3.13/test/typinganndata/ann_module9.py",
            "/usr/lib/python3.13/test/typinganndata/mod_generics_cache.py",
            "/usr/lib/python3.13/this.py",
            "/usr/lib/python3.13/timeit.py",
            "/usr/lib/python3.13/tomllib/__init__.py",
            "/usr/lib/python3.13/tomllib/_parser.py",
            "/usr/lib/python3.13/tomllib/_re.py",
            "/usr/lib/python3.13/tomllib/_types.py",
            "/usr/lib/python3.13/tomllib/mypy.ini",
            "/usr/lib/python3.13/trace.py",
            "/usr/lib/python3.13/tty.py",
            "/usr/lib/python3.13/turtle.py",
            "/usr/lib/python3.13/unittest/__init__.py",
            "/usr/lib/python3.13/unittest/__main__.py",
            "/usr/lib/python3.13/unittest/_log.py",
            "/usr/lib/python3.13/unittest/async_case.py",
            "/usr/lib/python3.13/unittest/case.py",
            "/usr/lib/python3.13/unittest/loader.py",
            "/usr/lib/python3.13/unittest/main.py",
            "/usr/lib/python3.13/unittest/mock.py",
            "/usr/lib/python3.13/unittest/result.py",
            "/usr/lib/python3.13/unittest/runner.py",
            "/usr/lib/python3.13/unittest/signals.py",
            "/usr/lib/python3.13/unittest/suite.py",
            "/usr/lib/python3.13/unittest/util.py",
            "/usr/lib/python3.13/uuid.py",
            "/usr/lib/python3.13/venv/__init__.py",
            "/usr/lib/python3.13/venv/__main__.py",
            "/usr/lib/python3.13/venv/scripts/common/Activate.ps1",
            "/usr/lib/python3.13/venv/scripts/common/activate",
            "/usr/lib/python3.13/venv/scripts/common/activate.fish",
            "/usr/lib/python3.13/venv/scripts/posix/activate.csh",
            "/usr/lib/python3.13/wave.py",
            "/usr/lib/python3.13/webbrowser.py",
            "/usr/lib/python3.13/wsgiref/__init__.py",
            "/usr/lib/python3.13/wsgiref/handlers.py",
            "/usr/lib/python3.13/wsgiref/headers.py",
            "/usr/lib/python3.13/wsgiref/simple_server.py",
            "/usr/lib/python3.13/wsgiref/types.py",
            "/usr/lib/python3.13/wsgiref/util.py",
            "/usr/lib/python3.13/wsgiref/validate.py",
            "/usr/lib/python3.13/xml/__init__.py",
            "/usr/lib/python3.13/xml/dom/NodeFilter.py",
            "/usr/lib/python3.13/xml/dom/__init__.py",
            "/usr/lib/python3.13/xml/dom/domreg.py",
            "/usr/lib/python3.13/xml/dom/expatbuilder.py",
            "/usr/lib/python3.13/xml/dom/minicompat.py",
            "/usr/lib/python3.13/xml/dom/minidom.py",
            "/usr/lib/python3.13/xml/dom/pulldom.py",
            "/usr/lib/python3.13/xml/dom/xmlbuilder.py",
            "/usr/lib/python3.13/xml/etree/ElementInclude.py",
            "/usr/lib/python3.13/xml/etree/ElementPath.py",
            "/usr/lib/python3.13/xml/etree/ElementTree.py",
            "/usr/lib/python3.13/xml/etree/__init__.py",
            "/usr/lib/python3.13/xml/etree/cElementTree.py",
            "/usr/lib/python3.13/xml/parsers/__init__.py",
            "/usr/lib/python3.13/xml/parsers/expat.py",
            "/usr/lib/python3.13/xml/sax/__init__.py",
            "/usr/lib/python3.13/xml/sax/_exceptions.py",
            "/usr/lib/python3.13/xml/sax/expatreader.py",
            "/usr/lib/python3.13/xml/sax/handler.py",
            "/usr/lib/python3.13/xml/sax/saxutils.py",
            "/usr/lib/python3.13/xml/sax/xmlreader.py",
            "/usr/lib/python3.13/xmlrpc/__init__.py",
            "/usr/lib/python3.13/xmlrpc/client.py",
            "/usr/lib/python3.13/xmlrpc/server.py",
            "/usr/lib/python3.13/zipapp.py",
            "/usr/lib/python3.13/zoneinfo/__init__.py",
            "/usr/lib/python3.13/zoneinfo/_common.py",
            "/usr/lib/python3.13/zoneinfo/_tzpath.py",
            "/usr/lib/python3.13/zoneinfo/_zoneinfo.py",
            "/usr/share/lintian/overrides/libpython3.13-stdlib"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libquadmath0@14.2.0-19",
          "Name": "libquadmath0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libquadmath0@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "2c9283f862b093d5"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libquadmath.so.0.0.0"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libraw23t64@0.21.4-2+deb13u1",
          "Name": "libraw23t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libraw23t64@0.21.4-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1243dbe751fc07e1"
          },
          "Version": "0.21.4",
          "Release": "2+deb13u1",
          "Arch": "amd64",
          "SrcName": "libraw",
          "SrcVersion": "0.21.4",
          "SrcRelease": "2+deb13u1",
          "Licenses": [
            "LGPL-2.1-only",
            "CDDL-1.0",
            "CC-BY-SA-3.0",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian PhotoTools Maintainers \u003cpkg-phototools-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libgomp1@14.2.0-19",
            "libjpeg62-turbo@1:2.1.5-4",
            "liblcms2-2@2.16-2+deb13u2",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libraw.so.23.0.0",
            "/usr/lib/x86_64-linux-gnu/libraw_r.so.23.0.0",
            "/usr/share/doc/libraw23t64/NEWS.Debian.gz",
            "/usr/share/doc/libraw23t64/changelog.Debian.gz",
            "/usr/share/doc/libraw23t64/changelog.gz",
            "/usr/share/doc/libraw23t64/copyright",
            "/usr/share/lintian/overrides/libraw23t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libreadline8t64@8.2-6",
          "Name": "libreadline8t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libreadline8t64@8.2-6?arch=amd64\u0026distro=debian-13.7",
            "UID": "55c7596306f21341"
          },
          "Version": "8.2",
          "Release": "6",
          "Arch": "amd64",
          "SrcName": "readline",
          "SrcVersion": "8.2",
          "SrcRelease": "6",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GFDL-1.3-no-invariants-or-later",
            "GFDL-1.3-or-later",
            "ISC-no-attribution"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libtinfo6@6.5+20250216-2",
            "readline-common@8.2-6"
          ],
          "Layer": {
            "DiffID": "sha256:83cc9b31906fa96474ec2d6137375a26b1fc9f1050e092277613b0f193686e96"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libhistory.so.8.2",
            "/usr/lib/x86_64-linux-gnu/libreadline.so.8.2",
            "/usr/share/doc/libreadline8t64/README.Debian",
            "/usr/share/doc/libreadline8t64/USAGE",
            "/usr/share/doc/libreadline8t64/changelog.Debian.gz",
            "/usr/share/doc/libreadline8t64/changelog.gz",
            "/usr/share/doc/libreadline8t64/copyright",
            "/usr/share/doc/libreadline8t64/examples/Inputrc",
            "/usr/share/doc/libreadline8t64/inputrc.arrows"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "librtmp1@2.4+20151223.gitfa8646d.1-2+b5",
          "Name": "librtmp1",
          "Identifier": {
            "PURL": "pkg:deb/debian/librtmp1@2.4%2B20151223.gitfa8646d.1-2%2Bb5?arch=amd64\u0026distro=debian-13.7",
            "UID": "ae2b713214bc9ee2"
          },
          "Version": "2.4+20151223.gitfa8646d.1",
          "Release": "2+b5",
          "Arch": "amd64",
          "SrcName": "rtmpdump",
          "SrcVersion": "2.4+20151223.gitfa8646d.1",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgmp10@2:6.3.0+dfsg-3",
            "libgnutls30t64@3.8.9-3+deb13u4",
            "libhogweed6t64@3.10.1-1",
            "libnettle8t64@3.10.1-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/librtmp.so.1",
            "/usr/share/doc/librtmp1/changelog.Debian.amd64.gz",
            "/usr/share/doc/librtmp1/changelog.Debian.gz",
            "/usr/share/doc/librtmp1/changelog.gz",
            "/usr/share/doc/librtmp1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsasl2-2@2.1.28+dfsg1-9",
          "Name": "libsasl2-2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsasl2-2@2.1.28%2Bdfsg1-9?arch=amd64\u0026distro=debian-13.7",
            "UID": "d7090b3eae18a46c"
          },
          "Version": "2.1.28+dfsg1",
          "Release": "9",
          "Arch": "amd64",
          "SrcName": "cyrus-sasl2",
          "SrcVersion": "2.1.28+dfsg1",
          "SrcRelease": "9",
          "Licenses": [
            "BSD-3-Clause-Attribution",
            "BSD-3-Clause",
            "BSD-2-Clause",
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "BSD-4-Clause-UC",
            "RSA-MD",
            "text://BSD-3-Clause-Attribution and IBM-as-is",
            "BSD-3-clause-JANET",
            "BSD-3-clause-PADL",
            "MIT-OpenVision",
            "OpenLDAP",
            "FSFULLR",
            "MIT-CMU",
            "MIT-Export",
            "BSD-2.2-clause",
            "text://IBM-as-is"
          ],
          "Maintainer": "Debian Cyrus Team \u003cteam+cyrus@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libsasl2-modules-db@2.1.28+dfsg1-9",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25",
            "/usr/share/doc/libsasl2-2/README.Debian",
            "/usr/share/doc/libsasl2-2/changelog.Debian.gz",
            "/usr/share/doc/libsasl2-2/copyright",
            "/usr/share/man/man5/libsasl.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsasl2-modules-db@2.1.28+dfsg1-9",
          "Name": "libsasl2-modules-db",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsasl2-modules-db@2.1.28%2Bdfsg1-9?arch=amd64\u0026distro=debian-13.7",
            "UID": "f503b75cc3f00d08"
          },
          "Version": "2.1.28+dfsg1",
          "Release": "9",
          "Arch": "amd64",
          "SrcName": "cyrus-sasl2",
          "SrcVersion": "2.1.28+dfsg1",
          "SrcRelease": "9",
          "Licenses": [
            "BSD-3-Clause-Attribution",
            "BSD-3-Clause",
            "BSD-2-Clause",
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "BSD-4-Clause-UC",
            "RSA-MD",
            "text://BSD-3-Clause-Attribution and IBM-as-is",
            "BSD-3-clause-JANET",
            "BSD-3-clause-PADL",
            "MIT-OpenVision",
            "OpenLDAP",
            "FSFULLR",
            "MIT-CMU",
            "MIT-Export",
            "BSD-2.2-clause",
            "text://IBM-as-is"
          ],
          "Maintainer": "Debian Cyrus Team \u003cteam+cyrus@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libdb5.3t64@5.3.28+dfsg2-9"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25",
            "/usr/share/doc/libsasl2-modules-db/changelog.Debian.gz",
            "/usr/share/doc/libsasl2-modules-db/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libseccomp2@2.6.0-2",
          "Name": "libseccomp2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libseccomp2@2.6.0-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2af8140f63038666"
          },
          "Version": "2.6.0",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libseccomp",
          "SrcVersion": "2.6.0",
          "SrcRelease": "2",
          "Licenses": [
            "LGPL-2.1-only"
          ],
          "Maintainer": "Kees Cook \u003ckees@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libseccomp.so.2.6.0",
            "/usr/share/doc/libseccomp2/changelog.Debian.gz",
            "/usr/share/doc/libseccomp2/changelog.gz",
            "/usr/share/doc/libseccomp2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libselinux1@3.8.1-1",
          "Name": "libselinux1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libselinux1@3.8.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1d32a3f53846138a"
          },
          "Version": "3.8.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "libselinux",
          "SrcVersion": "3.8.1",
          "SrcRelease": "1",
          "Licenses": [
            "public-domain",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libpcre2-8-0@10.46-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/tmpfiles.d/libselinux1.conf",
            "/usr/lib/x86_64-linux-gnu/libselinux.so.1",
            "/usr/share/doc/libselinux1/changelog.Debian.gz",
            "/usr/share/doc/libselinux1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libselinux1-dev@3.8.1-1",
          "Name": "libselinux1-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libselinux1-dev@3.8.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "73d0a3db78d9a1a0"
          },
          "Version": "3.8.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "libselinux",
          "SrcVersion": "3.8.1",
          "SrcRelease": "1",
          "Licenses": [
            "public-domain",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libpcre2-dev@10.46-1~deb13u3",
            "libselinux1@3.8.1-1",
            "libsepol-dev@3.8.1-1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/selinux/avc.h",
            "/usr/include/selinux/context.h",
            "/usr/include/selinux/get_context_list.h",
            "/usr/include/selinux/get_default_type.h",
            "/usr/include/selinux/label.h",
            "/usr/include/selinux/restorecon.h",
            "/usr/include/selinux/selinux.h",
            "/usr/lib/x86_64-linux-gnu/libselinux.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/libselinux.pc",
            "/usr/share/doc/libselinux1-dev/changelog.Debian.gz",
            "/usr/share/doc/libselinux1-dev/copyright",
            "/usr/share/man/man3/avc_add_callback.3.gz",
            "/usr/share/man/man3/avc_cache_stats.3.gz",
            "/usr/share/man/man3/avc_compute_create.3.gz",
            "/usr/share/man/man3/avc_context_to_sid.3.gz",
            "/usr/share/man/man3/avc_has_perm.3.gz",
            "/usr/share/man/man3/avc_init.3.gz",
            "/usr/share/man/man3/avc_netlink_loop.3.gz",
            "/usr/share/man/man3/avc_open.3.gz",
            "/usr/share/man/man3/context_new.3.gz",
            "/usr/share/man/man3/get_ordered_context_list.3.gz",
            "/usr/share/man/man3/getcon.3.gz",
            "/usr/share/man/man3/getexeccon.3.gz",
            "/usr/share/man/man3/getfilecon.3.gz",
            "/usr/share/man/man3/getfscreatecon.3.gz",
            "/usr/share/man/man3/getkeycreatecon.3.gz",
            "/usr/share/man/man3/getseuserbyname.3.gz",
            "/usr/share/man/man3/getsockcreatecon.3.gz",
            "/usr/share/man/man3/init_selinuxmnt.3.gz",
            "/usr/share/man/man3/is_context_customizable.3.gz",
            "/usr/share/man/man3/is_selinux_enabled.3.gz",
            "/usr/share/man/man3/matchmediacon.3.gz",
            "/usr/share/man/man3/matchpathcon.3.gz",
            "/usr/share/man/man3/matchpathcon_checkmatches.3.gz",
            "/usr/share/man/man3/security_check_context.3.gz",
            "/usr/share/man/man3/security_class_to_string.3.gz",
            "/usr/share/man/man3/security_compute_av.3.gz",
            "/usr/share/man/man3/security_disable.3.gz",
            "/usr/share/man/man3/security_getenforce.3.gz",
            "/usr/share/man/man3/security_load_booleans.3.gz",
            "/usr/share/man/man3/security_load_policy.3.gz",
            "/usr/share/man/man3/security_policyvers.3.gz",
            "/usr/share/man/man3/selabel_digest.3.gz",
            "/usr/share/man/man3/selabel_get_digests_all_partial_matches.3.gz",
            "/usr/share/man/man3/selabel_lookup.3.gz",
            "/usr/share/man/man3/selabel_lookup_best_match.3.gz",
            "/usr/share/man/man3/selabel_open.3.gz",
            "/usr/share/man/man3/selabel_partial_match.3.gz",
            "/usr/share/man/man3/selabel_stats.3.gz",
            "/usr/share/man/man3/selinux_binary_policy_path.3.gz",
            "/usr/share/man/man3/selinux_boolean_sub.3.gz",
            "/usr/share/man/man3/selinux_check_securetty_context.3.gz",
            "/usr/share/man/man3/selinux_colors_path.3.gz",
            "/usr/share/man/man3/selinux_file_context_cmp.3.gz",
            "/usr/share/man/man3/selinux_file_context_verify.3.gz",
            "/usr/share/man/man3/selinux_getenforcemode.3.gz",
            "/usr/share/man/man3/selinux_getpolicytype.3.gz",
            "/usr/share/man/man3/selinux_lsetfilecon_default.3.gz",
            "/usr/share/man/man3/selinux_policy_root.3.gz",
            "/usr/share/man/man3/selinux_raw_context_to_color.3.gz",
            "/usr/share/man/man3/selinux_restorecon.3.gz",
            "/usr/share/man/man3/selinux_restorecon_default_handle.3.gz",
            "/usr/share/man/man3/selinux_restorecon_get_skipped_errors.3.gz",
            "/usr/share/man/man3/selinux_restorecon_set_alt_rootpath.3.gz",
            "/usr/share/man/man3/selinux_restorecon_set_exclude_list.3.gz",
            "/usr/share/man/man3/selinux_restorecon_set_sehandle.3.gz",
            "/usr/share/man/man3/selinux_restorecon_xattr.3.gz",
            "/usr/share/man/man3/selinux_set_callback.3.gz",
            "/usr/share/man/man3/selinux_set_mapping.3.gz",
            "/usr/share/man/man3/selinux_status_open.3.gz",
            "/usr/share/man/man3/set_matchpathcon_flags.3.gz",
            "/usr/share/man/man3/setfilecon.3.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsemanage-common@3.8.1-1",
          "Name": "libsemanage-common",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsemanage-common@3.8.1-1?arch=all\u0026distro=debian-13.7",
            "UID": "ecc6b54d8bc6318c"
          },
          "Version": "3.8.1",
          "Release": "1",
          "Arch": "all",
          "SrcName": "libsemanage",
          "SrcVersion": "3.8.1",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/libsemanage-common/changelog.Debian.gz",
            "/usr/share/doc/libsemanage-common/copyright",
            "/usr/share/man/man5/semanage.conf.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsemanage2@3.8.1-1",
          "Name": "libsemanage2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsemanage2@3.8.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "9b85e9240d41ffa5"
          },
          "Version": "3.8.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "libsemanage",
          "SrcVersion": "3.8.1",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit1@1:4.0.2-2+deb13u1",
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4",
            "libselinux1@3.8.1-1",
            "libsemanage-common@3.8.1-1",
            "libsepol2@3.8.1-1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsemanage.so.2",
            "/usr/share/doc/libsemanage2/changelog.Debian.gz",
            "/usr/share/doc/libsemanage2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsepol-dev@3.8.1-1",
          "Name": "libsepol-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsepol-dev@3.8.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "dc01d36f49bf4ced"
          },
          "Version": "3.8.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "libsepol",
          "SrcVersion": "3.8.1",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "Zlib",
            "GPL-2.0-only",
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libsepol2@3.8.1-1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/sepol/boolean_record.h",
            "/usr/include/sepol/booleans.h",
            "/usr/include/sepol/cil/cil.h",
            "/usr/include/sepol/context.h",
            "/usr/include/sepol/context_record.h",
            "/usr/include/sepol/debug.h",
            "/usr/include/sepol/errcodes.h",
            "/usr/include/sepol/handle.h",
            "/usr/include/sepol/ibendport_record.h",
            "/usr/include/sepol/ibendports.h",
            "/usr/include/sepol/ibpkey_record.h",
            "/usr/include/sepol/ibpkeys.h",
            "/usr/include/sepol/iface_record.h",
            "/usr/include/sepol/interfaces.h",
            "/usr/include/sepol/kernel_to_cil.h",
            "/usr/include/sepol/kernel_to_conf.h",
            "/usr/include/sepol/module.h",
            "/usr/include/sepol/module_to_cil.h",
            "/usr/include/sepol/node_record.h",
            "/usr/include/sepol/nodes.h",
            "/usr/include/sepol/policydb.h",
            "/usr/include/sepol/policydb/avrule_block.h",
            "/usr/include/sepol/policydb/avtab.h",
            "/usr/include/sepol/policydb/conditional.h",
            "/usr/include/sepol/policydb/constraint.h",
            "/usr/include/sepol/policydb/context.h",
            "/usr/include/sepol/policydb/ebitmap.h",
            "/usr/include/sepol/policydb/expand.h",
            "/usr/include/sepol/policydb/flask_types.h",
            "/usr/include/sepol/policydb/hashtab.h",
            "/usr/include/sepol/policydb/hierarchy.h",
            "/usr/include/sepol/policydb/link.h",
            "/usr/include/sepol/policydb/mls_types.h",
            "/usr/include/sepol/policydb/module.h",
            "/usr/include/sepol/policydb/polcaps.h",
            "/usr/include/sepol/policydb/policydb.h",
            "/usr/include/sepol/policydb/services.h",
            "/usr/include/sepol/policydb/sidtab.h",
            "/usr/include/sepol/policydb/symtab.h",
            "/usr/include/sepol/policydb/util.h",
            "/usr/include/sepol/port_record.h",
            "/usr/include/sepol/ports.h",
            "/usr/include/sepol/sepol.h",
            "/usr/include/sepol/user_record.h",
            "/usr/include/sepol/users.h",
            "/usr/lib/x86_64-linux-gnu/libsepol.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/libsepol.pc",
            "/usr/share/doc/libsepol-dev/changelog.Debian.gz",
            "/usr/share/doc/libsepol-dev/copyright",
            "/usr/share/man/man3/sepol_check_context.3.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsepol2@3.8.1-1",
          "Name": "libsepol2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsepol2@3.8.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "ab7918253426cd4"
          },
          "Version": "3.8.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "libsepol",
          "SrcVersion": "3.8.1",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "Zlib",
            "GPL-2.0-only",
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsepol.so.2",
            "/usr/share/doc/libsepol2/changelog.Debian.gz",
            "/usr/share/doc/libsepol2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsframe1@2.44-3",
          "Name": "libsframe1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsframe1@2.44-3?arch=amd64\u0026distro=debian-13.7",
            "UID": "aee213e14be258fe"
          },
          "Version": "2.44",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "binutils",
          "SrcVersion": "2.44",
          "SrcRelease": "3",
          "Licenses": [
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "GFDL-1.3-or-later"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsframe.so.1.0.0",
            "/usr/share/doc/libsframe1/changelog.Debian.gz",
            "/usr/share/doc/libsframe1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsharpyuv0@1.5.0-0.1",
          "Name": "libsharpyuv0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsharpyuv0@1.5.0-0.1?arch=amd64\u0026distro=debian-13.7",
            "UID": "2cd2e74f2efa6d53"
          },
          "Version": "1.5.0",
          "Release": "0.1",
          "Arch": "amd64",
          "SrcName": "libwebp",
          "SrcVersion": "1.5.0",
          "SrcRelease": "0.1",
          "Licenses": [
            "BSD-3-Clause",
            "Apache-2.0"
          ],
          "Maintainer": "Jeff Breidenbach \u003cjab@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsharpyuv.so.0.1.1",
            "/usr/share/doc/libsharpyuv0/changelog.Debian.gz",
            "/usr/share/doc/libsharpyuv0/changelog.gz",
            "/usr/share/doc/libsharpyuv0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsmartcols1@2.41.5-0+deb13u1",
          "Name": "libsmartcols1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "94502fa5e10395c7"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsmartcols.so.1.1.0",
            "/usr/share/doc/libsmartcols1/NEWS.Debian.gz",
            "/usr/share/doc/libsmartcols1/changelog.Debian.gz",
            "/usr/share/doc/libsmartcols1/changelog.gz",
            "/usr/share/doc/libsmartcols1/copyright",
            "/usr/share/lintian/overrides/libsmartcols1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsodium23@1.0.18-1+deb13u1",
          "Name": "libsodium23",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsodium23@1.0.18-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "2af40080adde5730"
          },
          "Version": "1.0.18",
          "Release": "1+deb13u1",
          "Arch": "amd64",
          "SrcName": "libsodium",
          "SrcVersion": "1.0.18",
          "SrcRelease": "1+deb13u1",
          "Licenses": [
            "ISC",
            "BSD-2-Clause",
            "public-domain",
            "CC0-1.0",
            "MIT",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:83cc9b31906fa96474ec2d6137375a26b1fc9f1050e092277613b0f193686e96"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsodium.so.23.3.0",
            "/usr/share/doc/libsodium23/AUTHORS.gz",
            "/usr/share/doc/libsodium23/README.markdown",
            "/usr/share/doc/libsodium23/THANKS",
            "/usr/share/doc/libsodium23/changelog.Debian.gz",
            "/usr/share/doc/libsodium23/changelog.gz",
            "/usr/share/doc/libsodium23/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsqlite3-0@3.46.1-7+deb13u2",
          "Name": "libsqlite3-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "283f5d44571e2d3e"
          },
          "Version": "3.46.1",
          "Release": "7+deb13u2",
          "Arch": "amd64",
          "SrcName": "sqlite3",
          "SrcVersion": "3.46.1",
          "SrcRelease": "7+deb13u2",
          "Licenses": [
            "public-domain",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6",
            "/usr/share/doc/libsqlite3-0/README.Debian",
            "/usr/share/doc/libsqlite3-0/changelog.Debian.gz",
            "/usr/share/doc/libsqlite3-0/changelog.gz",
            "/usr/share/doc/libsqlite3-0/changelog.html.gz",
            "/usr/share/doc/libsqlite3-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libssh2-1t64@1.11.1-1+deb13u2",
          "Name": "libssh2-1t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libssh2-1t64@1.11.1-1%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "f2a5abab28c5880a"
          },
          "Version": "1.11.1",
          "Release": "1+deb13u2",
          "Arch": "amd64",
          "SrcName": "libssh2",
          "SrcVersion": "1.11.1",
          "SrcRelease": "1+deb13u2",
          "Licenses": [
            "BSD-3-Clause",
            "ISC"
          ],
          "Maintainer": "Nicolas Mora \u003cbabelouest@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libssl3t64@3.5.7-1~deb13u3",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libssh2.so.1.0.1",
            "/usr/share/doc/libssh2-1t64/AUTHORS",
            "/usr/share/doc/libssh2-1t64/RELEASE-NOTES.gz",
            "/usr/share/doc/libssh2-1t64/changelog.Debian.gz",
            "/usr/share/doc/libssh2-1t64/changelog.gz",
            "/usr/share/doc/libssh2-1t64/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libssl3t64@3.5.7-1~deb13u3",
          "Name": "libssl3t64",
          "Identifier": {
            "PURL": "pkg:deb/debian/libssl3t64@3.5.7-1~deb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "6feadfef6234ca5b"
          },
          "Version": "3.5.7",
          "Release": "1~deb13u3",
          "Arch": "amd64",
          "SrcName": "openssl",
          "SrcVersion": "3.5.7",
          "SrcRelease": "1~deb13u3",
          "Licenses": [
            "Apache-2.0",
            "Artistic-2.0",
            "GPL-1.0-or-later",
            "GPL-1.0-only"
          ],
          "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libzstd1@1.5.7+dfsg-1",
            "openssl-provider-legacy@3.5.7-1~deb13u3",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/engines-3/afalg.so",
            "/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so",
            "/usr/lib/x86_64-linux-gnu/engines-3/padlock.so",
            "/usr/lib/x86_64-linux-gnu/libcrypto.so.3",
            "/usr/lib/x86_64-linux-gnu/libssl.so.3",
            "/usr/share/doc/libssl3t64/NEWS.Debian.gz",
            "/usr/share/doc/libssl3t64/changelog.Debian.gz",
            "/usr/share/doc/libssl3t64/changelog.gz",
            "/usr/share/doc/libssl3t64/copyright",
            "/usr/share/lintian/overrides/libssl3t64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libstdc++-14-dev@14.2.0-19",
          "Name": "libstdc++-14-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libstdc%2B%2B-14-dev@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "5cb120864a2db390"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6-dev@2.41-12+deb13u4",
            "libgcc-14-dev@14.2.0-19",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/include/c++/14/algorithm",
            "/usr/include/c++/14/any",
            "/usr/include/c++/14/array",
            "/usr/include/c++/14/atomic",
            "/usr/include/c++/14/backward/auto_ptr.h",
            "/usr/include/c++/14/backward/backward_warning.h",
            "/usr/include/c++/14/backward/binders.h",
            "/usr/include/c++/14/backward/hash_fun.h",
            "/usr/include/c++/14/backward/hash_map",
            "/usr/include/c++/14/backward/hash_set",
            "/usr/include/c++/14/backward/hashtable.h",
            "/usr/include/c++/14/backward/strstream",
            "/usr/include/c++/14/barrier",
            "/usr/include/c++/14/bit",
            "/usr/include/c++/14/bits/algorithmfwd.h",
            "/usr/include/c++/14/bits/align.h",
            "/usr/include/c++/14/bits/alloc_traits.h",
            "/usr/include/c++/14/bits/allocated_ptr.h",
            "/usr/include/c++/14/bits/allocator.h",
            "/usr/include/c++/14/bits/atomic_base.h",
            "/usr/include/c++/14/bits/atomic_futex.h",
            "/usr/include/c++/14/bits/atomic_lockfree_defines.h",
            "/usr/include/c++/14/bits/atomic_timed_wait.h",
            "/usr/include/c++/14/bits/atomic_wait.h",
            "/usr/include/c++/14/bits/basic_ios.h",
            "/usr/include/c++/14/bits/basic_ios.tcc",
            "/usr/include/c++/14/bits/basic_string.h",
            "/usr/include/c++/14/bits/basic_string.tcc",
            "/usr/include/c++/14/bits/boost_concept_check.h",
            "/usr/include/c++/14/bits/c++0x_warning.h",
            "/usr/include/c++/14/bits/char_traits.h",
            "/usr/include/c++/14/bits/charconv.h",
            "/usr/include/c++/14/bits/chrono.h",
            "/usr/include/c++/14/bits/chrono_io.h",
            "/usr/include/c++/14/bits/codecvt.h",
            "/usr/include/c++/14/bits/concept_check.h",
            "/usr/include/c++/14/bits/cow_string.h",
            "/usr/include/c++/14/bits/cpp_type_traits.h",
            "/usr/include/c++/14/bits/cxxabi_forced.h",
            "/usr/include/c++/14/bits/cxxabi_init_exception.h",
            "/usr/include/c++/14/bits/deque.tcc",
            "/usr/include/c++/14/bits/elements_of.h",
            "/usr/include/c++/14/bits/enable_special_members.h",
            "/usr/include/c++/14/bits/erase_if.h",
            "/usr/include/c++/14/bits/exception.h",
            "/usr/include/c++/14/bits/exception_defines.h",
            "/usr/include/c++/14/bits/exception_ptr.h",
            "/usr/include/c++/14/bits/forward_list.h",
            "/usr/include/c++/14/bits/forward_list.tcc",
            "/usr/include/c++/14/bits/fs_dir.h",
            "/usr/include/c++/14/bits/fs_fwd.h",
            "/usr/include/c++/14/bits/fs_ops.h",
            "/usr/include/c++/14/bits/fs_path.h",
            "/usr/include/c++/14/bits/fstream.tcc",
            "/usr/include/c++/14/bits/functexcept.h",
            "/usr/include/c++/14/bits/functional_hash.h",
            "/usr/include/c++/14/bits/gslice.h",
            "/usr/include/c++/14/bits/gslice_array.h",
            "/usr/include/c++/14/bits/hash_bytes.h",
            "/usr/include/c++/14/bits/hashtable.h",
            "/usr/include/c++/14/bits/hashtable_policy.h",
            "/usr/include/c++/14/bits/indirect_array.h",
            "/usr/include/c++/14/bits/invoke.h",
            "/usr/include/c++/14/bits/ios_base.h",
            "/usr/include/c++/14/bits/istream.tcc",
            "/usr/include/c++/14/bits/iterator_concepts.h",
            "/usr/include/c++/14/bits/list.tcc",
            "/usr/include/c++/14/bits/locale_classes.h",
            "/usr/include/c++/14/bits/locale_classes.tcc",
            "/usr/include/c++/14/bits/locale_conv.h",
            "/usr/include/c++/14/bits/locale_facets.h",
            "/usr/include/c++/14/bits/locale_facets.tcc",
            "/usr/include/c++/14/bits/locale_facets_nonio.h",
            "/usr/include/c++/14/bits/locale_facets_nonio.tcc",
            "/usr/include/c++/14/bits/localefwd.h",
            "/usr/include/c++/14/bits/mask_array.h",
            "/usr/include/c++/14/bits/max_size_type.h",
            "/usr/include/c++/14/bits/memory_resource.h",
            "/usr/include/c++/14/bits/memoryfwd.h",
            "/usr/include/c++/14/bits/mofunc_impl.h",
            "/usr/include/c++/14/bits/move.h",
            "/usr/include/c++/14/bits/move_only_function.h",
            "/usr/include/c++/14/bits/nested_exception.h",
            "/usr/include/c++/14/bits/new_allocator.h",
            "/usr/include/c++/14/bits/node_handle.h",
            "/usr/include/c++/14/bits/ostream.tcc",
            "/usr/include/c++/14/bits/ostream_insert.h",
            "/usr/include/c++/14/bits/out_ptr.h",
            "/usr/include/c++/14/bits/parse_numbers.h",
            "/usr/include/c++/14/bits/postypes.h",
            "/usr/include/c++/14/bits/predefined_ops.h",
            "/usr/include/c++/14/bits/ptr_traits.h",
            "/usr/include/c++/14/bits/quoted_string.h",
            "/usr/include/c++/14/bits/random.h",
            "/usr/include/c++/14/bits/random.tcc",
            "/usr/include/c++/14/bits/range_access.h",
            "/usr/include/c++/14/bits/ranges_algo.h",
            "/usr/include/c++/14/bits/ranges_algobase.h",
            "/usr/include/c++/14/bits/ranges_base.h",
            "/usr/include/c++/14/bits/ranges_cmp.h",
            "/usr/include/c++/14/bits/ranges_uninitialized.h",
            "/usr/include/c++/14/bits/ranges_util.h",
            "/usr/include/c++/14/bits/refwrap.h",
            "/usr/include/c++/14/bits/regex.h",
            "/usr/include/c++/14/bits/regex.tcc",
            "/usr/include/c++/14/bits/regex_automaton.h",
            "/usr/include/c++/14/bits/regex_automaton.tcc",
            "/usr/include/c++/14/bits/regex_compiler.h",
            "/usr/include/c++/14/bits/regex_compiler.tcc",
            "/usr/include/c++/14/bits/regex_constants.h",
            "/usr/include/c++/14/bits/regex_error.h",
            "/usr/include/c++/14/bits/regex_executor.h",
            "/usr/include/c++/14/bits/regex_executor.tcc",
            "/usr/include/c++/14/bits/regex_scanner.h",
            "/usr/include/c++/14/bits/regex_scanner.tcc",
            "/usr/include/c++/14/bits/requires_hosted.h",
            "/usr/include/c++/14/bits/sat_arith.h",
            "/usr/include/c++/14/bits/semaphore_base.h",
            "/usr/include/c++/14/bits/shared_ptr.h",
            "/usr/include/c++/14/bits/shared_ptr_atomic.h",
            "/usr/include/c++/14/bits/shared_ptr_base.h",
            "/usr/include/c++/14/bits/slice_array.h",
            "/usr/include/c++/14/bits/specfun.h",
            "/usr/include/c++/14/bits/sstream.tcc",
            "/usr/include/c++/14/bits/std_abs.h",
            "/usr/include/c++/14/bits/std_function.h",
            "/usr/include/c++/14/bits/std_mutex.h",
            "/usr/include/c++/14/bits/std_thread.h",
            "/usr/include/c++/14/bits/stl_algo.h",
            "/usr/include/c++/14/bits/stl_algobase.h",
            "/usr/include/c++/14/bits/stl_bvector.h",
            "/usr/include/c++/14/bits/stl_construct.h",
            "/usr/include/c++/14/bits/stl_deque.h",
            "/usr/include/c++/14/bits/stl_function.h",
            "/usr/include/c++/14/bits/stl_heap.h",
            "/usr/include/c++/14/bits/stl_iterator.h",
            "/usr/include/c++/14/bits/stl_iterator_base_funcs.h",
            "/usr/include/c++/14/bits/stl_iterator_base_types.h",
            "/usr/include/c++/14/bits/stl_list.h",
            "/usr/include/c++/14/bits/stl_map.h",
            "/usr/include/c++/14/bits/stl_multimap.h",
            "/usr/include/c++/14/bits/stl_multiset.h",
            "/usr/include/c++/14/bits/stl_numeric.h",
            "/usr/include/c++/14/bits/stl_pair.h",
            "/usr/include/c++/14/bits/stl_queue.h",
            "/usr/include/c++/14/bits/stl_raw_storage_iter.h",
            "/usr/include/c++/14/bits/stl_relops.h",
            "/usr/include/c++/14/bits/stl_set.h",
            "/usr/include/c++/14/bits/stl_stack.h",
            "/usr/include/c++/14/bits/stl_tempbuf.h",
            "/usr/include/c++/14/bits/stl_tree.h",
            "/usr/include/c++/14/bits/stl_uninitialized.h",
            "/usr/include/c++/14/bits/stl_vector.h",
            "/usr/include/c++/14/bits/stream_iterator.h",
            "/usr/include/c++/14/bits/streambuf.tcc",
            "/usr/include/c++/14/bits/streambuf_iterator.h",
            "/usr/include/c++/14/bits/string_view.tcc",
            "/usr/include/c++/14/bits/stringfwd.h",
            "/usr/include/c++/14/bits/text_encoding-data.h",
            "/usr/include/c++/14/bits/this_thread_sleep.h",
            "/usr/include/c++/14/bits/unicode-data.h",
            "/usr/include/c++/14/bits/unicode.h",
            "/usr/include/c++/14/bits/uniform_int_dist.h",
            "/usr/include/c++/14/bits/unique_lock.h",
            "/usr/include/c++/14/bits/unique_ptr.h",
            "/usr/include/c++/14/bits/unordered_map.h",
            "/usr/include/c++/14/bits/unordered_set.h",
            "/usr/include/c++/14/bits/uses_allocator.h",
            "/usr/include/c++/14/bits/uses_allocator_args.h",
            "/usr/include/c++/14/bits/utility.h",
            "/usr/include/c++/14/bits/valarray_after.h",
            "/usr/include/c++/14/bits/valarray_array.h",
            "/usr/include/c++/14/bits/valarray_array.tcc",
            "/usr/include/c++/14/bits/valarray_before.h",
            "/usr/include/c++/14/bits/vector.tcc",
            "/usr/include/c++/14/bits/version.h",
            "/usr/include/c++/14/bitset",
            "/usr/include/c++/14/cassert",
            "/usr/include/c++/14/ccomplex",
            "/usr/include/c++/14/cctype",
            "/usr/include/c++/14/cerrno",
            "/usr/include/c++/14/cfenv",
            "/usr/include/c++/14/cfloat",
            "/usr/include/c++/14/charconv",
            "/usr/include/c++/14/chrono",
            "/usr/include/c++/14/cinttypes",
            "/usr/include/c++/14/ciso646",
            "/usr/include/c++/14/climits",
            "/usr/include/c++/14/clocale",
            "/usr/include/c++/14/cmath",
            "/usr/include/c++/14/codecvt",
            "/usr/include/c++/14/compare",
            "/usr/include/c++/14/complex",
            "/usr/include/c++/14/complex.h",
            "/usr/include/c++/14/concepts",
            "/usr/include/c++/14/condition_variable",
            "/usr/include/c++/14/coroutine",
            "/usr/include/c++/14/csetjmp",
            "/usr/include/c++/14/csignal",
            "/usr/include/c++/14/cstdalign",
            "/usr/include/c++/14/cstdarg",
            "/usr/include/c++/14/cstdbool",
            "/usr/include/c++/14/cstddef",
            "/usr/include/c++/14/cstdint",
            "/usr/include/c++/14/cstdio",
            "/usr/include/c++/14/cstdlib",
            "/usr/include/c++/14/cstring",
            "/usr/include/c++/14/ctgmath",
            "/usr/include/c++/14/ctime",
            "/usr/include/c++/14/cuchar",
            "/usr/include/c++/14/cwchar",
            "/usr/include/c++/14/cwctype",
            "/usr/include/c++/14/cxxabi.h",
            "/usr/include/c++/14/debug/assertions.h",
            "/usr/include/c++/14/debug/bitset",
            "/usr/include/c++/14/debug/debug.h",
            "/usr/include/c++/14/debug/deque",
            "/usr/include/c++/14/debug/formatter.h",
            "/usr/include/c++/14/debug/forward_list",
            "/usr/include/c++/14/debug/functions.h",
            "/usr/include/c++/14/debug/helper_functions.h",
            "/usr/include/c++/14/debug/list",
            "/usr/include/c++/14/debug/macros.h",
            "/usr/include/c++/14/debug/map",
            "/usr/include/c++/14/debug/map.h",
            "/usr/include/c++/14/debug/multimap.h",
            "/usr/include/c++/14/debug/multiset.h",
            "/usr/include/c++/14/debug/safe_base.h",
            "/usr/include/c++/14/debug/safe_container.h",
            "/usr/include/c++/14/debug/safe_iterator.h",
            "/usr/include/c++/14/debug/safe_iterator.tcc",
            "/usr/include/c++/14/debug/safe_local_iterator.h",
            "/usr/include/c++/14/debug/safe_local_iterator.tcc",
            "/usr/include/c++/14/debug/safe_sequence.h",
            "/usr/include/c++/14/debug/safe_sequence.tcc",
            "/usr/include/c++/14/debug/safe_unordered_base.h",
            "/usr/include/c++/14/debug/safe_unordered_container.h",
            "/usr/include/c++/14/debug/safe_unordered_container.tcc",
            "/usr/include/c++/14/debug/set",
            "/usr/include/c++/14/debug/set.h",
            "/usr/include/c++/14/debug/stl_iterator.h",
            "/usr/include/c++/14/debug/string",
            "/usr/include/c++/14/debug/unordered_map",
            "/usr/include/c++/14/debug/unordered_set",
            "/usr/include/c++/14/debug/vector",
            "/usr/include/c++/14/decimal/decimal",
            "/usr/include/c++/14/decimal/decimal.h",
            "/usr/include/c++/14/deque",
            "/usr/include/c++/14/exception",
            "/usr/include/c++/14/execution",
            "/usr/include/c++/14/expected",
            "/usr/include/c++/14/experimental/algorithm",
            "/usr/include/c++/14/experimental/any",
            "/usr/include/c++/14/experimental/array",
            "/usr/include/c++/14/experimental/bits/fs_dir.h",
            "/usr/include/c++/14/experimental/bits/fs_fwd.h",
            "/usr/include/c++/14/experimental/bits/fs_ops.h",
            "/usr/include/c++/14/experimental/bits/fs_path.h",
            "/usr/include/c++/14/experimental/bits/lfts_config.h",
            "/usr/include/c++/14/experimental/bits/net.h",
            "/usr/include/c++/14/experimental/bits/numeric_traits.h",
            "/usr/include/c++/14/experimental/bits/shared_ptr.h",
            "/usr/include/c++/14/experimental/bits/simd.h",
            "/usr/include/c++/14/experimental/bits/simd_builtin.h",
            "/usr/include/c++/14/experimental/bits/simd_converter.h",
            "/usr/include/c++/14/experimental/bits/simd_detail.h",
            "/usr/include/c++/14/experimental/bits/simd_fixed_size.h",
            "/usr/include/c++/14/experimental/bits/simd_math.h",
            "/usr/include/c++/14/experimental/bits/simd_neon.h",
            "/usr/include/c++/14/experimental/bits/simd_ppc.h",
            "/usr/include/c++/14/experimental/bits/simd_scalar.h",
            "/usr/include/c++/14/experimental/bits/simd_sve.h",
            "/usr/include/c++/14/experimental/bits/simd_x86.h",
            "/usr/include/c++/14/experimental/bits/simd_x86_conversions.h",
            "/usr/include/c++/14/experimental/bits/string_view.tcc",
            "/usr/include/c++/14/experimental/buffer",
            "/usr/include/c++/14/experimental/chrono",
            "/usr/include/c++/14/experimental/contract",
            "/usr/include/c++/14/experimental/deque",
            "/usr/include/c++/14/experimental/executor",
            "/usr/include/c++/14/experimental/filesystem",
            "/usr/include/c++/14/experimental/forward_list",
            "/usr/include/c++/14/experimental/functional",
            "/usr/include/c++/14/experimental/internet",
            "/usr/include/c++/14/experimental/io_context",
            "/usr/include/c++/14/experimental/iterator",
            "/usr/include/c++/14/experimental/list",
            "/usr/include/c++/14/experimental/map",
            "/usr/include/c++/14/experimental/memory",
            "/usr/include/c++/14/experimental/memory_resource",
            "/usr/include/c++/14/experimental/net",
            "/usr/include/c++/14/experimental/netfwd",
            "/usr/include/c++/14/experimental/numeric",
            "/usr/include/c++/14/experimental/optional",
            "/usr/include/c++/14/experimental/propagate_const",
            "/usr/include/c++/14/experimental/random",
            "/usr/include/c++/14/experimental/ratio",
            "/usr/include/c++/14/experimental/regex",
            "/usr/include/c++/14/experimental/scope",
            "/usr/include/c++/14/experimental/set",
            "/usr/include/c++/14/experimental/simd",
            "/usr/include/c++/14/experimental/socket",
            "/usr/include/c++/14/experimental/source_location",
            "/usr/include/c++/14/experimental/string",
            "/usr/include/c++/14/experimental/string_view",
            "/usr/include/c++/14/experimental/synchronized_value",
            "/usr/include/c++/14/experimental/system_error",
            "/usr/include/c++/14/experimental/timer",
            "/usr/include/c++/14/experimental/tuple",
            "/usr/include/c++/14/experimental/type_traits",
            "/usr/include/c++/14/experimental/unordered_map",
            "/usr/include/c++/14/experimental/unordered_set",
            "/usr/include/c++/14/experimental/utility",
            "/usr/include/c++/14/experimental/vector",
            "/usr/include/c++/14/ext/algorithm",
            "/usr/include/c++/14/ext/aligned_buffer.h",
            "/usr/include/c++/14/ext/alloc_traits.h",
            "/usr/include/c++/14/ext/atomicity.h",
            "/usr/include/c++/14/ext/bitmap_allocator.h",
            "/usr/include/c++/14/ext/cast.h",
            "/usr/include/c++/14/ext/cmath",
            "/usr/include/c++/14/ext/codecvt_specializations.h",
            "/usr/include/c++/14/ext/concurrence.h",
            "/usr/include/c++/14/ext/debug_allocator.h",
            "/usr/include/c++/14/ext/enc_filebuf.h",
            "/usr/include/c++/14/ext/extptr_allocator.h",
            "/usr/include/c++/14/ext/functional",
            "/usr/include/c++/14/ext/hash_map",
            "/usr/include/c++/14/ext/hash_set",
            "/usr/include/c++/14/ext/iterator",
            "/usr/include/c++/14/ext/malloc_allocator.h",
            "/usr/include/c++/14/ext/memory",
            "/usr/include/c++/14/ext/mt_allocator.h",
            "/usr/include/c++/14/ext/new_allocator.h",
            "/usr/include/c++/14/ext/numeric",
            "/usr/include/c++/14/ext/numeric_traits.h",
            "/usr/include/c++/14/ext/pb_ds/assoc_container.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/bin_search_tree_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/iterators_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/node_iterators.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/point_iterators.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/policy_access_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/r_erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/rotate_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/bin_search_tree_/traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/binary_heap_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/const_iterator.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/entry_cmp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/entry_pred.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/iterators_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/point_const_iterator.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/policy_access_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/resize_policy.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binary_heap_/trace_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_/binomial_heap_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_base_/binomial_heap_base_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_base_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_base_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_base_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_base_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_base_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/binomial_heap_base_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/branch_policy/branch_policy.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/branch_policy/null_node_metadata.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/branch_policy/traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/cc_ht_map_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/cmp_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/cond_key_dtor_entry_dealtor.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/constructor_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/constructor_destructor_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/constructor_destructor_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/debug_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/debug_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/entry_list_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/erase_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/erase_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/find_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/insert_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/insert_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/iterators_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/policy_access_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/resize_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/resize_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/resize_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/size_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cc_hash_table_map_/trace_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/cond_dealtor.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/container_base_dispatch.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/debug_map_base.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/eq_fn/eq_by_less.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/eq_fn/hash_eq_fn.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/constructor_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/constructor_destructor_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/constructor_destructor_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/debug_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/debug_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/erase_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/erase_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/find_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/find_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/gp_ht_map_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/insert_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/insert_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/iterator_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/policy_access_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/resize_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/resize_no_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/resize_store_hash_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/gp_hash_table_map_/trace_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/direct_mask_range_hashing_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/direct_mod_range_hashing_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/linear_probe_fn_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/mask_based_range_hashing.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/mod_based_range_hashing.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/probe_fn_base.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/quadratic_probe_fn_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/ranged_hash_fn.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/ranged_probe_fn.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/sample_probe_fn.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/sample_range_hashing.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/sample_ranged_hash_fn.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/hash_fn/sample_ranged_probe_fn.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/const_iterator.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/iterators_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/left_child_next_sibling_heap_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/node.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/point_const_iterator.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/policy_access_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/left_child_next_sibling_heap_/trace_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/constructor_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/entry_metadata_base.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/iterators_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/lu_map_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_map_/trace_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_policy/lu_counter_metadata.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/list_update_policy/sample_update_policy.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/iterators_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/node_iterators.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/ov_tree_map_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/policy_access_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/ov_tree_map_/traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pairing_heap_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pairing_heap_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pairing_heap_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pairing_heap_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pairing_heap_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pairing_heap_/pairing_heap_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pairing_heap_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/insert_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/iterators_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/pat_trie_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/pat_trie_base.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/policy_access_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/r_erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/rotate_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/split_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/synth_access_traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/trace_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/pat_trie_/update_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/priority_queue_base_dispatch.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/node.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/rb_tree_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rb_tree_map_/traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rc_binomial_heap_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rc_binomial_heap_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rc_binomial_heap_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rc_binomial_heap_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rc_binomial_heap_/rc.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rc_binomial_heap_/rc_binomial_heap_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rc_binomial_heap_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/rc_binomial_heap_/trace_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/cc_hash_max_collision_check_resize_trigger_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/hash_exponential_size_policy_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/hash_load_check_resize_trigger_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/hash_load_check_resize_trigger_size_base.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/hash_prime_size_policy_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/hash_standard_resize_policy_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/sample_resize_policy.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/sample_resize_trigger.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/resize_policy/sample_size_policy.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/info_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/node.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/splay_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/splay_tree_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/splay_tree_/traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/standard_policies.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/thin_heap_/constructors_destructor_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/thin_heap_/debug_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/thin_heap_/erase_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/thin_heap_/find_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/thin_heap_/insert_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/thin_heap_/split_join_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/thin_heap_/thin_heap_.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/thin_heap_/trace_fn_imps.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/tree_policy/node_metadata_selector.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/tree_policy/order_statistics_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/tree_policy/sample_tree_node_update.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/tree_trace_base.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/trie_policy/node_metadata_selector.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/trie_policy/order_statistics_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/trie_policy/prefix_search_node_update_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/trie_policy/sample_trie_access_traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/trie_policy/sample_trie_node_update.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/trie_policy/trie_policy_base.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/trie_policy/trie_string_access_traits_imp.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/type_utils.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/types_traits.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/unordered_iterator/const_iterator.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/unordered_iterator/iterator.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/unordered_iterator/point_const_iterator.hpp",
            "/usr/include/c++/14/ext/pb_ds/detail/unordered_iterator/point_iterator.hpp",
            "/usr/include/c++/14/ext/pb_ds/exception.hpp",
            "/usr/include/c++/14/ext/pb_ds/hash_policy.hpp",
            "/usr/include/c++/14/ext/pb_ds/list_update_policy.hpp",
            "/usr/include/c++/14/ext/pb_ds/priority_queue.hpp",
            "/usr/include/c++/14/ext/pb_ds/tag_and_trait.hpp",
            "/usr/include/c++/14/ext/pb_ds/tree_policy.hpp",
            "/usr/include/c++/14/ext/pb_ds/trie_policy.hpp",
            "/usr/include/c++/14/ext/pod_char_traits.h",
            "/usr/include/c++/14/ext/pointer.h",
            "/usr/include/c++/14/ext/pool_allocator.h",
            "/usr/include/c++/14/ext/random",
            "/usr/include/c++/14/ext/random.tcc",
            "/usr/include/c++/14/ext/rb_tree",
            "/usr/include/c++/14/ext/rc_string_base.h",
            "/usr/include/c++/14/ext/rope",
            "/usr/include/c++/14/ext/ropeimpl.h",
            "/usr/include/c++/14/ext/slist",
            "/usr/include/c++/14/ext/sso_string_base.h",
            "/usr/include/c++/14/ext/stdio_filebuf.h",
            "/usr/include/c++/14/ext/stdio_sync_filebuf.h",
            "/usr/include/c++/14/ext/string_conversions.h",
            "/usr/include/c++/14/ext/throw_allocator.h",
            "/usr/include/c++/14/ext/type_traits.h",
            "/usr/include/c++/14/ext/typelist.h",
            "/usr/include/c++/14/ext/vstring.h",
            "/usr/include/c++/14/ext/vstring.tcc",
            "/usr/include/c++/14/ext/vstring_fwd.h",
            "/usr/include/c++/14/ext/vstring_util.h",
            "/usr/include/c++/14/fenv.h",
            "/usr/include/c++/14/filesystem",
            "/usr/include/c++/14/format",
            "/usr/include/c++/14/forward_list",
            "/usr/include/c++/14/fstream",
            "/usr/include/c++/14/functional",
            "/usr/include/c++/14/future",
            "/usr/include/c++/14/generator",
            "/usr/include/c++/14/initializer_list",
            "/usr/include/c++/14/iomanip",
            "/usr/include/c++/14/ios",
            "/usr/include/c++/14/iosfwd",
            "/usr/include/c++/14/iostream",
            "/usr/include/c++/14/istream",
            "/usr/include/c++/14/iterator",
            "/usr/include/c++/14/latch",
            "/usr/include/c++/14/limits",
            "/usr/include/c++/14/list",
            "/usr/include/c++/14/locale",
            "/usr/include/c++/14/map",
            "/usr/include/c++/14/math.h",
            "/usr/include/c++/14/memory",
            "/usr/include/c++/14/memory_resource",
            "/usr/include/c++/14/mutex",
            "/usr/include/c++/14/new",
            "/usr/include/c++/14/numbers",
            "/usr/include/c++/14/numeric",
            "/usr/include/c++/14/optional",
            "/usr/include/c++/14/ostream",
            "/usr/include/c++/14/parallel/algo.h",
            "/usr/include/c++/14/parallel/algobase.h",
            "/usr/include/c++/14/parallel/algorithm",
            "/usr/include/c++/14/parallel/algorithmfwd.h",
            "/usr/include/c++/14/parallel/balanced_quicksort.h",
            "/usr/include/c++/14/parallel/base.h",
            "/usr/include/c++/14/parallel/basic_iterator.h",
            "/usr/include/c++/14/parallel/checkers.h",
            "/usr/include/c++/14/parallel/compatibility.h",
            "/usr/include/c++/14/parallel/compiletime_settings.h",
            "/usr/include/c++/14/parallel/equally_split.h",
            "/usr/include/c++/14/parallel/features.h",
            "/usr/include/c++/14/parallel/find.h",
            "/usr/include/c++/14/parallel/find_selectors.h",
            "/usr/include/c++/14/parallel/for_each.h",
            "/usr/include/c++/14/parallel/for_each_selectors.h",
            "/usr/include/c++/14/parallel/iterator.h",
            "/usr/include/c++/14/parallel/list_partition.h",
            "/usr/include/c++/14/parallel/losertree.h",
            "/usr/include/c++/14/parallel/merge.h",
            "/usr/include/c++/14/parallel/multiseq_selection.h",
            "/usr/include/c++/14/parallel/multiway_merge.h",
            "/usr/include/c++/14/parallel/multiway_mergesort.h",
            "/usr/include/c++/14/parallel/numeric",
            "/usr/include/c++/14/parallel/numericfwd.h",
            "/usr/include/c++/14/parallel/omp_loop.h",
            "/usr/include/c++/14/parallel/omp_loop_static.h",
            "/usr/include/c++/14/parallel/par_loop.h",
            "/usr/include/c++/14/parallel/parallel.h",
            "/usr/include/c++/14/parallel/partial_sum.h",
            "/usr/include/c++/14/parallel/partition.h",
            "/usr/include/c++/14/parallel/queue.h",
            "/usr/include/c++/14/parallel/quicksort.h",
            "/usr/include/c++/14/parallel/random_number.h",
            "/usr/include/c++/14/parallel/random_shuffle.h",
            "/usr/include/c++/14/parallel/search.h",
            "/usr/include/c++/14/parallel/set_operations.h",
            "/usr/include/c++/14/parallel/settings.h",
            "/usr/include/c++/14/parallel/sort.h",
            "/usr/include/c++/14/parallel/tags.h",
            "/usr/include/c++/14/parallel/types.h",
            "/usr/include/c++/14/parallel/unique_copy.h",
            "/usr/include/c++/14/parallel/workstealing.h",
            "/usr/include/c++/14/print",
            "/usr/include/c++/14/pstl/algorithm_fwd.h",
            "/usr/include/c++/14/pstl/algorithm_impl.h",
            "/usr/include/c++/14/pstl/execution_defs.h",
            "/usr/include/c++/14/pstl/execution_impl.h",
            "/usr/include/c++/14/pstl/glue_algorithm_defs.h",
            "/usr/include/c++/14/pstl/glue_algorithm_impl.h",
            "/usr/include/c++/14/pstl/glue_execution_defs.h",
            "/usr/include/c++/14/pstl/glue_memory_defs.h",
            "/usr/include/c++/14/pstl/glue_memory_impl.h",
            "/usr/include/c++/14/pstl/glue_numeric_defs.h",
            "/usr/include/c++/14/pstl/glue_numeric_impl.h",
            "/usr/include/c++/14/pstl/memory_impl.h",
            "/usr/include/c++/14/pstl/numeric_fwd.h",
            "/usr/include/c++/14/pstl/numeric_impl.h",
            "/usr/include/c++/14/pstl/parallel_backend.h",
            "/usr/include/c++/14/pstl/parallel_backend_serial.h",
            "/usr/include/c++/14/pstl/parallel_backend_tbb.h",
            "/usr/include/c++/14/pstl/parallel_backend_utils.h",
            "/usr/include/c++/14/pstl/parallel_impl.h",
            "/usr/include/c++/14/pstl/pstl_config.h",
            "/usr/include/c++/14/pstl/unseq_backend_simd.h",
            "/usr/include/c++/14/pstl/utils.h",
            "/usr/include/c++/14/queue",
            "/usr/include/c++/14/random",
            "/usr/include/c++/14/ranges",
            "/usr/include/c++/14/ratio",
            "/usr/include/c++/14/regex",
            "/usr/include/c++/14/scoped_allocator",
            "/usr/include/c++/14/semaphore",
            "/usr/include/c++/14/set",
            "/usr/include/c++/14/shared_mutex",
            "/usr/include/c++/14/source_location",
            "/usr/include/c++/14/span",
            "/usr/include/c++/14/spanstream",
            "/usr/include/c++/14/sstream",
            "/usr/include/c++/14/stack",
            "/usr/include/c++/14/stacktrace",
            "/usr/include/c++/14/stdatomic.h",
            "/usr/include/c++/14/stdexcept",
            "/usr/include/c++/14/stdfloat",
            "/usr/include/c++/14/stdlib.h",
            "/usr/include/c++/14/stop_token",
            "/usr/include/c++/14/streambuf",
            "/usr/include/c++/14/string",
            "/usr/include/c++/14/string_view",
            "/usr/include/c++/14/syncstream",
            "/usr/include/c++/14/system_error",
            "/usr/include/c++/14/text_encoding",
            "/usr/include/c++/14/tgmath.h",
            "/usr/include/c++/14/thread",
            "/usr/include/c++/14/tr1/array",
            "/usr/include/c++/14/tr1/bessel_function.tcc",
            "/usr/include/c++/14/tr1/beta_function.tcc",
            "/usr/include/c++/14/tr1/ccomplex",
            "/usr/include/c++/14/tr1/cctype",
            "/usr/include/c++/14/tr1/cfenv",
            "/usr/include/c++/14/tr1/cfloat",
            "/usr/include/c++/14/tr1/cinttypes",
            "/usr/include/c++/14/tr1/climits",
            "/usr/include/c++/14/tr1/cmath",
            "/usr/include/c++/14/tr1/complex",
            "/usr/include/c++/14/tr1/complex.h",
            "/usr/include/c++/14/tr1/cstdarg",
            "/usr/include/c++/14/tr1/cstdbool",
            "/usr/include/c++/14/tr1/cstdint",
            "/usr/include/c++/14/tr1/cstdio",
            "/usr/include/c++/14/tr1/cstdlib",
            "/usr/include/c++/14/tr1/ctgmath",
            "/usr/include/c++/14/tr1/ctime",
            "/usr/include/c++/14/tr1/ctype.h",
            "/usr/include/c++/14/tr1/cwchar",
            "/usr/include/c++/14/tr1/cwctype",
            "/usr/include/c++/14/tr1/ell_integral.tcc",
            "/usr/include/c++/14/tr1/exp_integral.tcc",
            "/usr/include/c++/14/tr1/fenv.h",
            "/usr/include/c++/14/tr1/float.h",
            "/usr/include/c++/14/tr1/functional",
            "/usr/include/c++/14/tr1/functional_hash.h",
            "/usr/include/c++/14/tr1/gamma.tcc",
            "/usr/include/c++/14/tr1/hashtable.h",
            "/usr/include/c++/14/tr1/hashtable_policy.h",
            "/usr/include/c++/14/tr1/hypergeometric.tcc",
            "/usr/include/c++/14/tr1/inttypes.h",
            "/usr/include/c++/14/tr1/legendre_function.tcc",
            "/usr/include/c++/14/tr1/limits.h",
            "/usr/include/c++/14/tr1/math.h",
            "/usr/include/c++/14/tr1/memory",
            "/usr/include/c++/14/tr1/modified_bessel_func.tcc",
            "/usr/include/c++/14/tr1/poly_hermite.tcc",
            "/usr/include/c++/14/tr1/poly_laguerre.tcc",
            "/usr/include/c++/14/tr1/random",
            "/usr/include/c++/14/tr1/random.h",
            "/usr/include/c++/14/tr1/random.tcc",
            "/usr/include/c++/14/tr1/regex",
            "/usr/include/c++/14/tr1/riemann_zeta.tcc",
            "/usr/include/c++/14/tr1/shared_ptr.h",
            "/usr/include/c++/14/tr1/special_function_util.h",
            "/usr/include/c++/14/tr1/stdarg.h",
            "/usr/include/c++/14/tr1/stdbool.h",
            "/usr/include/c++/14/tr1/stdint.h",
            "/usr/include/c++/14/tr1/stdio.h",
            "/usr/include/c++/14/tr1/stdlib.h",
            "/usr/include/c++/14/tr1/tgmath.h",
            "/usr/include/c++/14/tr1/tuple",
            "/usr/include/c++/14/tr1/type_traits",
            "/usr/include/c++/14/tr1/unordered_map",
            "/usr/include/c++/14/tr1/unordered_map.h",
            "/usr/include/c++/14/tr1/unordered_set",
            "/usr/include/c++/14/tr1/unordered_set.h",
            "/usr/include/c++/14/tr1/utility",
            "/usr/include/c++/14/tr1/wchar.h",
            "/usr/include/c++/14/tr1/wctype.h",
            "/usr/include/c++/14/tr2/bool_set",
            "/usr/include/c++/14/tr2/bool_set.tcc",
            "/usr/include/c++/14/tr2/dynamic_bitset",
            "/usr/include/c++/14/tr2/dynamic_bitset.tcc",
            "/usr/include/c++/14/tr2/ratio",
            "/usr/include/c++/14/tr2/type_traits",
            "/usr/include/c++/14/tuple",
            "/usr/include/c++/14/type_traits",
            "/usr/include/c++/14/typeindex",
            "/usr/include/c++/14/typeinfo",
            "/usr/include/c++/14/unordered_map",
            "/usr/include/c++/14/unordered_set",
            "/usr/include/c++/14/utility",
            "/usr/include/c++/14/valarray",
            "/usr/include/c++/14/variant",
            "/usr/include/c++/14/vector",
            "/usr/include/c++/14/version",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/atomic_word.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/basic_file.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/c++allocator.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/c++config.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/c++io.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/c++locale.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/cpu_defines.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/ctype_base.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/ctype_inline.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/cxxabi_tweaks.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/error_constants.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/extc++.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/gthr-default.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/gthr-posix.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/gthr-single.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/gthr.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/messages_members.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/opt_random.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/os_defines.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/stdc++.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/stdtr1c++.h",
            "/usr/include/x86_64-linux-gnu/c++/14/bits/time_members.h",
            "/usr/include/x86_64-linux-gnu/c++/14/ext/opt_random.h",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libstdc++.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libstdc++exp.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libstdc++fs.a",
            "/usr/lib/gcc/x86_64-linux-gnu/14/libsupc++.a",
            "/usr/share/doc/gcc-14-base/C++/README.libstdc++-baseline.amd64",
            "/usr/share/doc/gcc-14-base/C++/changelog.libstdc++.gz",
            "/usr/share/doc/gcc-14-base/C++/libstdc++_symbols.txt.amd64"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libstdc++6@14.2.0-19",
          "Name": "libstdc++6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "13f22117cb429f4d"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33",
            "/usr/share/gcc/python/libstdcxx/__init__.py",
            "/usr/share/gcc/python/libstdcxx/v6/__init__.py",
            "/usr/share/gcc/python/libstdcxx/v6/printers.py",
            "/usr/share/gcc/python/libstdcxx/v6/xmethods.py",
            "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33-gdb.py"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsysprof-capture-4-dev@48.0-2",
          "Name": "libsysprof-capture-4-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsysprof-capture-4-dev@48.0-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "d737885e5a9dbb71"
          },
          "Version": "48.0",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "sysprof",
          "SrcVersion": "48.0",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "BSD-2-Clause-Patent",
            "BSD-3-Clause",
            "public-domain",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/sysprof-6/sysprof-address.h",
            "/usr/include/sysprof-6/sysprof-capture-condition.h",
            "/usr/include/sysprof-6/sysprof-capture-cursor.h",
            "/usr/include/sysprof-6/sysprof-capture-reader.h",
            "/usr/include/sysprof-6/sysprof-capture-types.h",
            "/usr/include/sysprof-6/sysprof-capture-writer.h",
            "/usr/include/sysprof-6/sysprof-capture.h",
            "/usr/include/sysprof-6/sysprof-clock.h",
            "/usr/include/sysprof-6/sysprof-collector.h",
            "/usr/include/sysprof-6/sysprof-macros.h",
            "/usr/include/sysprof-6/sysprof-platform.h",
            "/usr/include/sysprof-6/sysprof-version-macros.h",
            "/usr/include/sysprof-6/sysprof-version.h",
            "/usr/lib/x86_64-linux-gnu/libsysprof-capture-4.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/sysprof-capture-4.pc",
            "/usr/share/doc/libsysprof-capture-4-dev/changelog.Debian.gz",
            "/usr/share/doc/libsysprof-capture-4-dev/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsystemd0@257.13-1~deb13u1",
          "Name": "libsystemd0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsystemd0@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "b0cd86eb50280666"
          },
          "Version": "257.13",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "systemd",
          "SrcVersion": "257.13",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "CC0-1.0",
            "GPL-2 with Linux-syscall-note exception",
            "MIT",
            "public-domain",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libcap2@1:2.75-10+deb13u1+b3"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsystemd.so.0.40.0",
            "/usr/share/doc/libsystemd0/NEWS.Debian.gz",
            "/usr/share/doc/libsystemd0/changelog.Debian.gz",
            "/usr/share/doc/libsystemd0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libtasn1-6@4.20.0-2+deb13u1",
          "Name": "libtasn1-6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libtasn1-6@4.20.0-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "3bb6d7980a1cb0e1"
          },
          "Version": "4.20.0",
          "Release": "2+deb13u1",
          "Arch": "amd64",
          "SrcName": "libtasn1-6",
          "SrcVersion": "4.20.0",
          "SrcRelease": "2+deb13u1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "LGPL-2.1-only",
            "GPL-3.0-only",
            "GFDL-1.3-only"
          ],
          "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libtasn1.so.6.6.4",
            "/usr/share/doc/libtasn1-6/AUTHORS",
            "/usr/share/doc/libtasn1-6/README.md",
            "/usr/share/doc/libtasn1-6/THANKS",
            "/usr/share/doc/libtasn1-6/changelog.Debian.gz",
            "/usr/share/doc/libtasn1-6/changelog.gz",
            "/usr/share/doc/libtasn1-6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libthai-data@0.1.29-2",
          "Name": "libthai-data",
          "Identifier": {
            "PURL": "pkg:deb/debian/libthai-data@0.1.29-2?arch=all\u0026distro=debian-13.7",
            "UID": "cb9d446a324c772e"
          },
          "Version": "0.1.29",
          "Release": "2",
          "Arch": "all",
          "SrcName": "libthai",
          "SrcVersion": "0.1.29",
          "SrcRelease": "2",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Theppitak Karoonboonyanan \u003cthep@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/share/doc/libthai-data/changelog.Debian.gz",
            "/usr/share/doc/libthai-data/changelog.gz",
            "/usr/share/doc/libthai-data/copyright",
            "/usr/share/libthai/thbrk.tri"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libthai0@0.1.29-2+b1",
          "Name": "libthai0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libthai0@0.1.29-2%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "6a84ef0deea63d9e"
          },
          "Version": "0.1.29",
          "Release": "2+b1",
          "Arch": "amd64",
          "SrcName": "libthai",
          "SrcVersion": "0.1.29",
          "SrcRelease": "2",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Theppitak Karoonboonyanan \u003cthep@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libdatrie1@0.2.13-3+b1",
            "libthai-data@0.1.29-2"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libthai.so.0.3.1",
            "/usr/share/doc/libthai0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libthai0/changelog.Debian.gz",
            "/usr/share/doc/libthai0/changelog.gz",
            "/usr/share/doc/libthai0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libtiff6@4.7.0-3+deb13u3",
          "Name": "libtiff6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libtiff6@4.7.0-3%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "fce4530ba34e0f3b"
          },
          "Version": "4.7.0",
          "Release": "3+deb13u3",
          "Arch": "amd64",
          "SrcName": "tiff",
          "SrcVersion": "4.7.0",
          "SrcRelease": "3+deb13u3",
          "Licenses": [
            "Hylafax"
          ],
          "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libdeflate0@1.23-2",
            "libjbig0@2.1-6.1+b2",
            "libjpeg62-turbo@1:2.1.5-4",
            "liblerc4@4.0.0+ds-5",
            "liblzma5@5.8.1-1+deb13u2",
            "libwebp7@1.5.0-0.1",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libtiff.so.6.1.0",
            "/usr/share/doc/libtiff6/changelog.Debian.gz",
            "/usr/share/doc/libtiff6/changelog.gz",
            "/usr/share/doc/libtiff6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libtinfo6@6.5+20250216-2",
          "Name": "libtinfo6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "c19e4ba0186ba329"
          },
          "Version": "6.5+20250216",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "ncurses",
          "SrcVersion": "6.5+20250216",
          "SrcRelease": "2",
          "Licenses": [
            "MIT/X11",
            "X11",
            "BSD-3-Clause"
          ],
          "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libtic.so.6.5",
            "/usr/lib/x86_64-linux-gnu/libtinfo.so.6.5",
            "/usr/share/doc/libtinfo6/changelog.Debian.gz",
            "/usr/share/doc/libtinfo6/changelog.gz",
            "/usr/share/doc/libtinfo6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libtsan2@14.2.0-19",
          "Name": "libtsan2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libtsan2@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "ebe9e262d69d1af8"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libtsan.so.2.0.0",
            "/usr/share/lintian/overrides/libtsan2"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libubsan1@14.2.0-19",
          "Name": "libubsan1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libubsan1@14.2.0-19?arch=amd64\u0026distro=debian-13.7",
            "UID": "aef08e2dbf33febf"
          },
          "Version": "14.2.0",
          "Release": "19",
          "Arch": "amd64",
          "SrcName": "gcc-14",
          "SrcVersion": "14.2.0",
          "SrcRelease": "19",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-14-base@14.2.0-19",
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libubsan.so.1.0.0",
            "/usr/share/lintian/overrides/libubsan1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libudev1@257.13-1~deb13u1",
          "Name": "libudev1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libudev1@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "9d7053ae266a0055"
          },
          "Version": "257.13",
          "Release": "1~deb13u1",
          "Arch": "amd64",
          "SrcName": "systemd",
          "SrcVersion": "257.13",
          "SrcRelease": "1~deb13u1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "CC0-1.0",
            "GPL-2 with Linux-syscall-note exception",
            "MIT",
            "public-domain",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libcap2@1:2.75-10+deb13u1+b3"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libudev.so.1.7.10",
            "/usr/share/doc/libudev1/NEWS.Debian.gz",
            "/usr/share/doc/libudev1/changelog.Debian.gz",
            "/usr/share/doc/libudev1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libunistring5@1.3-2",
          "Name": "libunistring5",
          "Identifier": {
            "PURL": "pkg:deb/debian/libunistring5@1.3-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "eb39021851e24a53"
          },
          "Version": "1.3",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libunistring",
          "SrcVersion": "1.3",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "LGPL-3.0-or-later",
            "LGPL-2.0-or-later",
            "GFDL-1.3-or-later",
            "GFDL-1.2-or-later",
            "LGPL-3.0-only",
            "LGPL-2.1-or-later",
            "BSD-3-Clause",
            "ISC",
            "Unicode-DFS-2016",
            "public-domain",
            "FreeSoftware",
            "GPL-2.0-or-later",
            "GPL-2+ with distribution exception",
            "MIT",
            "X11",
            "GPL-3.0-only",
            "GPL-2.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Jörg Frings-Fürst \u003cdebian@jff.email\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libunistring.so.5.2.0",
            "/usr/share/doc/libunistring5/changelog.Debian.gz",
            "/usr/share/doc/libunistring5/changelog.gz",
            "/usr/share/doc/libunistring5/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libuuid1@2.41.5-0+deb13u1",
          "Name": "libuuid1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "3a03f1816c93c994"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libuuid.so.1.3.0",
            "/usr/share/doc/libuuid1/NEWS.Debian.gz",
            "/usr/share/doc/libuuid1/changelog.Debian.gz",
            "/usr/share/doc/libuuid1/changelog.gz",
            "/usr/share/doc/libuuid1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libwebp7@1.5.0-0.1",
          "Name": "libwebp7",
          "Identifier": {
            "PURL": "pkg:deb/debian/libwebp7@1.5.0-0.1?arch=amd64\u0026distro=debian-13.7",
            "UID": "af88b187c972b82e"
          },
          "Version": "1.5.0",
          "Release": "0.1",
          "Arch": "amd64",
          "SrcName": "libwebp",
          "SrcVersion": "1.5.0",
          "SrcRelease": "0.1",
          "Licenses": [
            "BSD-3-Clause",
            "Apache-2.0"
          ],
          "Maintainer": "Jeff Breidenbach \u003cjab@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libsharpyuv0@1.5.0-0.1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libwebp.so.7.1.10",
            "/usr/share/doc/libwebp7/changelog.Debian.gz",
            "/usr/share/doc/libwebp7/changelog.gz",
            "/usr/share/doc/libwebp7/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libwebpdemux2@1.5.0-0.1",
          "Name": "libwebpdemux2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libwebpdemux2@1.5.0-0.1?arch=amd64\u0026distro=debian-13.7",
            "UID": "46472c1dd3bc9272"
          },
          "Version": "1.5.0",
          "Release": "0.1",
          "Arch": "amd64",
          "SrcName": "libwebp",
          "SrcVersion": "1.5.0",
          "SrcRelease": "0.1",
          "Licenses": [
            "BSD-3-Clause",
            "Apache-2.0"
          ],
          "Maintainer": "Jeff Breidenbach \u003cjab@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libwebp7@1.5.0-0.1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libwebpdemux.so.2.0.16",
            "/usr/share/doc/libwebpdemux2/changelog.Debian.gz",
            "/usr/share/doc/libwebpdemux2/changelog.gz",
            "/usr/share/doc/libwebpdemux2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libwebpmux3@1.5.0-0.1",
          "Name": "libwebpmux3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libwebpmux3@1.5.0-0.1?arch=amd64\u0026distro=debian-13.7",
            "UID": "f02c9fe4b67523f6"
          },
          "Version": "1.5.0",
          "Release": "0.1",
          "Arch": "amd64",
          "SrcName": "libwebp",
          "SrcVersion": "1.5.0",
          "SrcRelease": "0.1",
          "Licenses": [
            "BSD-3-Clause",
            "Apache-2.0"
          ],
          "Maintainer": "Jeff Breidenbach \u003cjab@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libwebp7@1.5.0-0.1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libwebpmux.so.3.1.1",
            "/usr/share/doc/libwebpmux3/changelog.Debian.gz",
            "/usr/share/doc/libwebpmux3/changelog.gz",
            "/usr/share/doc/libwebpmux3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libwmflite-0.2-7@0.2.13-1.1+b3",
          "Name": "libwmflite-0.2-7",
          "Identifier": {
            "PURL": "pkg:deb/debian/libwmflite-0.2-7@0.2.13-1.1%2Bb3?arch=amd64\u0026distro=debian-13.7",
            "UID": "f6d8786f0859502c"
          },
          "Version": "0.2.13",
          "Release": "1.1+b3",
          "Arch": "amd64",
          "SrcName": "libwmf",
          "SrcVersion": "0.2.13",
          "SrcRelease": "1.1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "AGPL-3 with Font exception",
            "GD",
            "ISC",
            "public-domain",
            "LGPL-2.0-only"
          ],
          "Maintainer": "Yangfl \u003cmmyangfl@gmail.com\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libwmflite-0.2.so.7.0.6",
            "/usr/share/doc/libwmflite-0.2-7/NEWS.Debian.gz",
            "/usr/share/doc/libwmflite-0.2-7/changelog.Debian.amd64.gz",
            "/usr/share/doc/libwmflite-0.2-7/changelog.Debian.gz",
            "/usr/share/doc/libwmflite-0.2-7/changelog.gz",
            "/usr/share/doc/libwmflite-0.2-7/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libx11-6@2:1.8.12-1",
          "Name": "libx11-6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libx11-6@1.8.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2",
            "UID": "93086fe1330bae05"
          },
          "Version": "1.8.12",
          "Release": "1",
          "Epoch": 2,
          "Arch": "amd64",
          "SrcName": "libx11",
          "SrcVersion": "1.8.12",
          "SrcRelease": "1",
          "SrcEpoch": 2,
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libx11-data@2:1.8.12-1",
            "libxcb1@1.17.0-2+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libX11.so.6.4.0",
            "/usr/share/doc/libx11-6/changelog.Debian.gz",
            "/usr/share/doc/libx11-6/changelog.gz",
            "/usr/share/doc/libx11-6/copyright",
            "/usr/share/lintian/overrides/libx11-6"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libx11-data@2:1.8.12-1",
          "Name": "libx11-data",
          "Identifier": {
            "PURL": "pkg:deb/debian/libx11-data@1.8.12-1?arch=all\u0026distro=debian-13.7\u0026epoch=2",
            "UID": "c47635e95e857889"
          },
          "Version": "1.8.12",
          "Release": "1",
          "Epoch": 2,
          "Arch": "all",
          "SrcName": "libx11",
          "SrcVersion": "1.8.12",
          "SrcRelease": "1",
          "SrcEpoch": 2,
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/share/X11/XErrorDB",
            "/usr/share/X11/locale/C/Compose",
            "/usr/share/X11/locale/C/XI18N_OBJS",
            "/usr/share/X11/locale/C/XLC_LOCALE",
            "/usr/share/X11/locale/am_ET.UTF-8/Compose",
            "/usr/share/X11/locale/am_ET.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/am_ET.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/armscii-8/Compose",
            "/usr/share/X11/locale/armscii-8/XI18N_OBJS",
            "/usr/share/X11/locale/armscii-8/XLC_LOCALE",
            "/usr/share/X11/locale/compose.dir",
            "/usr/share/X11/locale/cs_CZ.UTF-8/Compose",
            "/usr/share/X11/locale/cs_CZ.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/cs_CZ.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/el_GR.UTF-8/Compose",
            "/usr/share/X11/locale/el_GR.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/el_GR.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/en_US.UTF-8/Compose",
            "/usr/share/X11/locale/en_US.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/en_US.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/fi_FI.UTF-8/Compose",
            "/usr/share/X11/locale/fi_FI.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/fi_FI.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/georgian-academy/Compose",
            "/usr/share/X11/locale/georgian-academy/XI18N_OBJS",
            "/usr/share/X11/locale/georgian-academy/XLC_LOCALE",
            "/usr/share/X11/locale/georgian-ps/Compose",
            "/usr/share/X11/locale/georgian-ps/XI18N_OBJS",
            "/usr/share/X11/locale/georgian-ps/XLC_LOCALE",
            "/usr/share/X11/locale/ibm-cp1133/Compose",
            "/usr/share/X11/locale/ibm-cp1133/XI18N_OBJS",
            "/usr/share/X11/locale/ibm-cp1133/XLC_LOCALE",
            "/usr/share/X11/locale/iscii-dev/Compose",
            "/usr/share/X11/locale/iscii-dev/XI18N_OBJS",
            "/usr/share/X11/locale/iscii-dev/XLC_LOCALE",
            "/usr/share/X11/locale/isiri-3342/Compose",
            "/usr/share/X11/locale/isiri-3342/XI18N_OBJS",
            "/usr/share/X11/locale/isiri-3342/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-1/Compose",
            "/usr/share/X11/locale/iso8859-1/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-1/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-10/Compose",
            "/usr/share/X11/locale/iso8859-10/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-10/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-11/Compose",
            "/usr/share/X11/locale/iso8859-11/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-11/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-13/Compose",
            "/usr/share/X11/locale/iso8859-13/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-13/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-14/Compose",
            "/usr/share/X11/locale/iso8859-14/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-14/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-15/Compose",
            "/usr/share/X11/locale/iso8859-15/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-15/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-2/Compose",
            "/usr/share/X11/locale/iso8859-2/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-2/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-3/Compose",
            "/usr/share/X11/locale/iso8859-3/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-3/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-4/Compose",
            "/usr/share/X11/locale/iso8859-4/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-4/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-5/Compose",
            "/usr/share/X11/locale/iso8859-5/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-5/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-6/Compose",
            "/usr/share/X11/locale/iso8859-6/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-6/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-7/Compose",
            "/usr/share/X11/locale/iso8859-7/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-7/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-8/Compose",
            "/usr/share/X11/locale/iso8859-8/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-8/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-9/Compose",
            "/usr/share/X11/locale/iso8859-9/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-9/XLC_LOCALE",
            "/usr/share/X11/locale/iso8859-9e/Compose",
            "/usr/share/X11/locale/iso8859-9e/XI18N_OBJS",
            "/usr/share/X11/locale/iso8859-9e/XLC_LOCALE",
            "/usr/share/X11/locale/ja.JIS/Compose",
            "/usr/share/X11/locale/ja.JIS/XI18N_OBJS",
            "/usr/share/X11/locale/ja.JIS/XLC_LOCALE",
            "/usr/share/X11/locale/ja.SJIS/Compose",
            "/usr/share/X11/locale/ja.SJIS/XI18N_OBJS",
            "/usr/share/X11/locale/ja.SJIS/XLC_LOCALE",
            "/usr/share/X11/locale/ja/Compose",
            "/usr/share/X11/locale/ja/XI18N_OBJS",
            "/usr/share/X11/locale/ja/XLC_LOCALE",
            "/usr/share/X11/locale/ja_JP.UTF-8/Compose",
            "/usr/share/X11/locale/ja_JP.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/ja_JP.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/km_KH.UTF-8/Compose",
            "/usr/share/X11/locale/km_KH.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/km_KH.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/ko/Compose",
            "/usr/share/X11/locale/ko/XI18N_OBJS",
            "/usr/share/X11/locale/ko/XLC_LOCALE",
            "/usr/share/X11/locale/ko_KR.UTF-8/Compose",
            "/usr/share/X11/locale/ko_KR.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/ko_KR.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/koi8-c/Compose",
            "/usr/share/X11/locale/koi8-c/XI18N_OBJS",
            "/usr/share/X11/locale/koi8-c/XLC_LOCALE",
            "/usr/share/X11/locale/koi8-r/Compose",
            "/usr/share/X11/locale/koi8-r/XI18N_OBJS",
            "/usr/share/X11/locale/koi8-r/XLC_LOCALE",
            "/usr/share/X11/locale/koi8-u/Compose",
            "/usr/share/X11/locale/koi8-u/XI18N_OBJS",
            "/usr/share/X11/locale/koi8-u/XLC_LOCALE",
            "/usr/share/X11/locale/locale.alias",
            "/usr/share/X11/locale/locale.dir",
            "/usr/share/X11/locale/microsoft-cp1251/Compose",
            "/usr/share/X11/locale/microsoft-cp1251/XI18N_OBJS",
            "/usr/share/X11/locale/microsoft-cp1251/XLC_LOCALE",
            "/usr/share/X11/locale/microsoft-cp1255/Compose",
            "/usr/share/X11/locale/microsoft-cp1255/XI18N_OBJS",
            "/usr/share/X11/locale/microsoft-cp1255/XLC_LOCALE",
            "/usr/share/X11/locale/microsoft-cp1256/Compose",
            "/usr/share/X11/locale/microsoft-cp1256/XI18N_OBJS",
            "/usr/share/X11/locale/microsoft-cp1256/XLC_LOCALE",
            "/usr/share/X11/locale/mulelao-1/Compose",
            "/usr/share/X11/locale/mulelao-1/XI18N_OBJS",
            "/usr/share/X11/locale/mulelao-1/XLC_LOCALE",
            "/usr/share/X11/locale/nokhchi-1/Compose",
            "/usr/share/X11/locale/nokhchi-1/XI18N_OBJS",
            "/usr/share/X11/locale/nokhchi-1/XLC_LOCALE",
            "/usr/share/X11/locale/pt_BR.UTF-8/Compose",
            "/usr/share/X11/locale/pt_BR.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/pt_BR.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/pt_PT.UTF-8/Compose",
            "/usr/share/X11/locale/pt_PT.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/pt_PT.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/ru_RU.UTF-8/Compose",
            "/usr/share/X11/locale/ru_RU.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/ru_RU.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/sr_RS.UTF-8/Compose",
            "/usr/share/X11/locale/sr_RS.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/sr_RS.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/tatar-cyr/Compose",
            "/usr/share/X11/locale/tatar-cyr/XI18N_OBJS",
            "/usr/share/X11/locale/tatar-cyr/XLC_LOCALE",
            "/usr/share/X11/locale/th_TH.UTF-8/Compose",
            "/usr/share/X11/locale/th_TH.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/th_TH.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/th_TH/Compose",
            "/usr/share/X11/locale/th_TH/XI18N_OBJS",
            "/usr/share/X11/locale/th_TH/XLC_LOCALE",
            "/usr/share/X11/locale/tscii-0/Compose",
            "/usr/share/X11/locale/tscii-0/XI18N_OBJS",
            "/usr/share/X11/locale/tscii-0/XLC_LOCALE",
            "/usr/share/X11/locale/vi_VN.tcvn/Compose",
            "/usr/share/X11/locale/vi_VN.tcvn/XI18N_OBJS",
            "/usr/share/X11/locale/vi_VN.tcvn/XLC_LOCALE",
            "/usr/share/X11/locale/vi_VN.viscii/Compose",
            "/usr/share/X11/locale/vi_VN.viscii/XI18N_OBJS",
            "/usr/share/X11/locale/vi_VN.viscii/XLC_LOCALE",
            "/usr/share/X11/locale/zh_CN.UTF-8/Compose",
            "/usr/share/X11/locale/zh_CN.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/zh_CN.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/zh_CN.gb18030/Compose",
            "/usr/share/X11/locale/zh_CN.gb18030/XI18N_OBJS",
            "/usr/share/X11/locale/zh_CN.gb18030/XLC_LOCALE",
            "/usr/share/X11/locale/zh_CN.gbk/Compose",
            "/usr/share/X11/locale/zh_CN.gbk/XI18N_OBJS",
            "/usr/share/X11/locale/zh_CN.gbk/XLC_LOCALE",
            "/usr/share/X11/locale/zh_CN/Compose",
            "/usr/share/X11/locale/zh_CN/XI18N_OBJS",
            "/usr/share/X11/locale/zh_CN/XLC_LOCALE",
            "/usr/share/X11/locale/zh_HK.UTF-8/Compose",
            "/usr/share/X11/locale/zh_HK.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/zh_HK.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/zh_HK.big5/Compose",
            "/usr/share/X11/locale/zh_HK.big5/XI18N_OBJS",
            "/usr/share/X11/locale/zh_HK.big5/XLC_LOCALE",
            "/usr/share/X11/locale/zh_HK.big5hkscs/Compose",
            "/usr/share/X11/locale/zh_HK.big5hkscs/XI18N_OBJS",
            "/usr/share/X11/locale/zh_HK.big5hkscs/XLC_LOCALE",
            "/usr/share/X11/locale/zh_TW.UTF-8/Compose",
            "/usr/share/X11/locale/zh_TW.UTF-8/XI18N_OBJS",
            "/usr/share/X11/locale/zh_TW.UTF-8/XLC_LOCALE",
            "/usr/share/X11/locale/zh_TW.big5/Compose",
            "/usr/share/X11/locale/zh_TW.big5/XI18N_OBJS",
            "/usr/share/X11/locale/zh_TW.big5/XLC_LOCALE",
            "/usr/share/X11/locale/zh_TW/Compose",
            "/usr/share/X11/locale/zh_TW/XI18N_OBJS",
            "/usr/share/X11/locale/zh_TW/XLC_LOCALE",
            "/usr/share/doc/libx11-data/changelog.Debian.gz",
            "/usr/share/doc/libx11-data/changelog.gz",
            "/usr/share/doc/libx11-data/copyright",
            "/usr/share/man/man5/Compose.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxau6@1:1.0.11-1",
          "Name": "libxau6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxau6@1.0.11-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "bd9f90113e450df8"
          },
          "Version": "1.0.11",
          "Release": "1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libxau",
          "SrcVersion": "1.0.11",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libXau.so.6.0.0",
            "/usr/share/doc/libxau6/changelog.Debian.gz",
            "/usr/share/doc/libxau6/changelog.gz",
            "/usr/share/doc/libxau6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxcb-render0@1.17.0-2+b1",
          "Name": "libxcb-render0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxcb-render0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d91324997b2d2b5f"
          },
          "Version": "1.17.0",
          "Release": "2+b1",
          "Arch": "amd64",
          "SrcName": "libxcb",
          "SrcVersion": "1.17.0",
          "SrcRelease": "2",
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libxcb1@1.17.0-2+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.0",
            "/usr/share/doc/libxcb-render0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libxcb-render0/changelog.Debian.gz",
            "/usr/share/doc/libxcb-render0/changelog.gz",
            "/usr/share/doc/libxcb-render0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxcb-shm0@1.17.0-2+b1",
          "Name": "libxcb-shm0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxcb-shm0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "90e280350344c070"
          },
          "Version": "1.17.0",
          "Release": "2+b1",
          "Arch": "amd64",
          "SrcName": "libxcb",
          "SrcVersion": "1.17.0",
          "SrcRelease": "2",
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libxcb1@1.17.0-2+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libxcb-shm.so.0.0.0",
            "/usr/share/doc/libxcb-shm0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libxcb-shm0/changelog.Debian.gz",
            "/usr/share/doc/libxcb-shm0/changelog.gz",
            "/usr/share/doc/libxcb-shm0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxcb1@1.17.0-2+b1",
          "Name": "libxcb1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxcb1@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "a0305cc93021701d"
          },
          "Version": "1.17.0",
          "Release": "2+b1",
          "Arch": "amd64",
          "SrcName": "libxcb",
          "SrcVersion": "1.17.0",
          "SrcRelease": "2",
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libxau6@1:1.0.11-1",
            "libxdmcp6@1:1.1.5-1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0",
            "/usr/share/doc/libxcb1/changelog.Debian.amd64.gz",
            "/usr/share/doc/libxcb1/changelog.Debian.gz",
            "/usr/share/doc/libxcb1/changelog.gz",
            "/usr/share/doc/libxcb1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxdmcp6@1:1.1.5-1",
          "Name": "libxdmcp6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxdmcp6@1.1.5-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "78c53e90ce259d88"
          },
          "Version": "1.1.5",
          "Release": "1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libxdmcp",
          "SrcVersion": "1.1.5",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0",
            "/usr/share/doc/libxdmcp6/changelog.Debian.gz",
            "/usr/share/doc/libxdmcp6/changelog.gz",
            "/usr/share/doc/libxdmcp6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxext6@2:1.3.4-1+b3",
          "Name": "libxext6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxext6@1.3.4-1%2Bb3?arch=amd64\u0026distro=debian-13.7\u0026epoch=2",
            "UID": "4ac7c149632dd87e"
          },
          "Version": "1.3.4",
          "Release": "1+b3",
          "Epoch": 2,
          "Arch": "amd64",
          "SrcName": "libxext",
          "SrcVersion": "1.3.4",
          "SrcRelease": "1",
          "SrcEpoch": 2,
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libx11-6@2:1.8.12-1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libXext.so.6.4.0",
            "/usr/share/doc/libxext6/changelog.Debian.amd64.gz",
            "/usr/share/doc/libxext6/changelog.Debian.gz",
            "/usr/share/doc/libxext6/changelog.gz",
            "/usr/share/doc/libxext6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Name": "libxml2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "Version": "2.12.7+dfsg+really2.9.14",
          "Release": "2.1+deb13u3",
          "Arch": "amd64",
          "SrcName": "libxml2",
          "SrcVersion": "2.12.7+dfsg+really2.9.14",
          "SrcRelease": "2.1+deb13u3",
          "Licenses": [
            "MIT-1",
            "ISC"
          ],
          "Maintainer": "Debian XML/SGML Group \u003cdebian-xml-sgml-pkgs@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "liblzma5@5.8.1-1+deb13u2",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libxml2.so.2.9.14",
            "/usr/share/doc/libxml2/README.Debian",
            "/usr/share/doc/libxml2/README.md",
            "/usr/share/doc/libxml2/changelog.Debian.gz",
            "/usr/share/doc/libxml2/changelog.gz",
            "/usr/share/doc/libxml2/copyright",
            "/usr/share/lintian/overrides/libxml2"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxrender1@1:0.9.12-1",
          "Name": "libxrender1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxrender1@0.9.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "722920b43ac156d2"
          },
          "Version": "0.9.12",
          "Release": "1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libxrender",
          "SrcVersion": "0.9.12",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libx11-6@2:1.8.12-1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libXrender.so.1.3.0",
            "/usr/share/doc/libxrender1/changelog.Debian.gz",
            "/usr/share/doc/libxrender1/changelog.gz",
            "/usr/share/doc/libxrender1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxxhash0@0.8.3-2",
          "Name": "libxxhash0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxxhash0@0.8.3-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "29b199fff138a1f3"
          },
          "Version": "0.8.3",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "xxhash",
          "SrcVersion": "0.8.3",
          "SrcRelease": "2",
          "Licenses": [
            "BSD-2-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Josue Ortega \u003cjosue@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libxxhash.so.0.8.3",
            "/usr/share/doc/libxxhash0/changelog.Debian.gz",
            "/usr/share/doc/libxxhash0/changelog.gz",
            "/usr/share/doc/libxxhash0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libzip5@1.11.3-2",
          "Name": "libzip5",
          "Identifier": {
            "PURL": "pkg:deb/debian/libzip5@1.11.3-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "b80fd432882f80a5"
          },
          "Version": "1.11.3",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libzip",
          "SrcVersion": "1.11.3",
          "SrcRelease": "2",
          "Licenses": [
            "BSD-3-Clause",
            "Apache-2.0",
            "GPL-3.0-only"
          ],
          "Maintainer": "Debian Libzip Maintainers \u003clibzip@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbz2-1.0@1.0.8-6",
            "libc6@2.41-12+deb13u4",
            "liblzma5@5.8.1-1+deb13u2",
            "libssl3t64@3.5.7-1~deb13u3",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libzip.so.5.5",
            "/usr/share/doc/libzip5/changelog.Debian.gz",
            "/usr/share/doc/libzip5/changelog.gz",
            "/usr/share/doc/libzip5/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libzstd1@1.5.7+dfsg-1",
          "Name": "libzstd1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1edaaf7c1b6cdf0a"
          },
          "Version": "1.5.7+dfsg",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "libzstd",
          "SrcVersion": "1.5.7+dfsg",
          "SrcRelease": "1",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-only",
            "Zlib",
            "MIT"
          ],
          "Maintainer": "RPM packaging team \u003cteam+pkg-rpm@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libzstd.so.1.5.7",
            "/usr/share/doc/libzstd1/changelog.Debian.gz",
            "/usr/share/doc/libzstd1/changelog.gz",
            "/usr/share/doc/libzstd1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "linux-libc-dev@6.12.113-1",
          "Name": "linux-libc-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "Version": "6.12.113",
          "Release": "1",
          "Arch": "all",
          "SrcName": "linux",
          "SrcVersion": "6.12.113",
          "SrcRelease": "1",
          "Licenses": [
            "GPL-2.0-only",
            "GPL-2+-or-X11",
            "Unicode-data",
            "Xen-interface",
            "LGPL-2.1-only",
            "BSD-2-Clause"
          ],
          "Maintainer": "Debian Kernel Team \u003cdebian-kernel@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/include/asm-generic/auxvec.h",
            "/usr/include/asm-generic/bitsperlong.h",
            "/usr/include/asm-generic/bpf_perf_event.h",
            "/usr/include/asm-generic/errno-base.h",
            "/usr/include/asm-generic/errno.h",
            "/usr/include/asm-generic/fcntl.h",
            "/usr/include/asm-generic/hugetlb_encode.h",
            "/usr/include/asm-generic/int-l64.h",
            "/usr/include/asm-generic/int-ll64.h",
            "/usr/include/asm-generic/ioctl.h",
            "/usr/include/asm-generic/ioctls.h",
            "/usr/include/asm-generic/ipcbuf.h",
            "/usr/include/asm-generic/kvm_para.h",
            "/usr/include/asm-generic/mman-common.h",
            "/usr/include/asm-generic/mman.h",
            "/usr/include/asm-generic/msgbuf.h",
            "/usr/include/asm-generic/param.h",
            "/usr/include/asm-generic/poll.h",
            "/usr/include/asm-generic/posix_types.h",
            "/usr/include/asm-generic/resource.h",
            "/usr/include/asm-generic/sembuf.h",
            "/usr/include/asm-generic/setup.h",
            "/usr/include/asm-generic/shmbuf.h",
            "/usr/include/asm-generic/siginfo.h",
            "/usr/include/asm-generic/signal-defs.h",
            "/usr/include/asm-generic/signal.h",
            "/usr/include/asm-generic/socket.h",
            "/usr/include/asm-generic/sockios.h",
            "/usr/include/asm-generic/stat.h",
            "/usr/include/asm-generic/statfs.h",
            "/usr/include/asm-generic/swab.h",
            "/usr/include/asm-generic/termbits-common.h",
            "/usr/include/asm-generic/termbits.h",
            "/usr/include/asm-generic/termios.h",
            "/usr/include/asm-generic/types.h",
            "/usr/include/asm-generic/ucontext.h",
            "/usr/include/asm-generic/unistd.h",
            "/usr/include/drm/amdgpu_drm.h",
            "/usr/include/drm/armada_drm.h",
            "/usr/include/drm/drm.h",
            "/usr/include/drm/drm_fourcc.h",
            "/usr/include/drm/drm_mode.h",
            "/usr/include/drm/drm_sarea.h",
            "/usr/include/drm/etnaviv_drm.h",
            "/usr/include/drm/exynos_drm.h",
            "/usr/include/drm/habanalabs_accel.h",
            "/usr/include/drm/i915_drm.h",
            "/usr/include/drm/ivpu_accel.h",
            "/usr/include/drm/lima_drm.h",
            "/usr/include/drm/msm_drm.h",
            "/usr/include/drm/nouveau_drm.h",
            "/usr/include/drm/omap_drm.h",
            "/usr/include/drm/panfrost_drm.h",
            "/usr/include/drm/panthor_drm.h",
            "/usr/include/drm/pvr_drm.h",
            "/usr/include/drm/qaic_accel.h",
            "/usr/include/drm/qxl_drm.h",
            "/usr/include/drm/radeon_drm.h",
            "/usr/include/drm/tegra_drm.h",
            "/usr/include/drm/v3d_drm.h",
            "/usr/include/drm/vc4_drm.h",
            "/usr/include/drm/vgem_drm.h",
            "/usr/include/drm/virtgpu_drm.h",
            "/usr/include/drm/vmwgfx_drm.h",
            "/usr/include/drm/xe_drm.h",
            "/usr/include/linux/a.out.h",
            "/usr/include/linux/acct.h",
            "/usr/include/linux/acrn.h",
            "/usr/include/linux/adb.h",
            "/usr/include/linux/adfs_fs.h",
            "/usr/include/linux/affs_hardblocks.h",
            "/usr/include/linux/agpgart.h",
            "/usr/include/linux/aio_abi.h",
            "/usr/include/linux/am437x-vpfe.h",
            "/usr/include/linux/amt.h",
            "/usr/include/linux/android/binder.h",
            "/usr/include/linux/android/binderfs.h",
            "/usr/include/linux/apm_bios.h",
            "/usr/include/linux/arcfb.h",
            "/usr/include/linux/arm_sdei.h",
            "/usr/include/linux/aspeed-lpc-ctrl.h",
            "/usr/include/linux/aspeed-p2a-ctrl.h",
            "/usr/include/linux/aspeed-video.h",
            "/usr/include/linux/atalk.h",
            "/usr/include/linux/atm.h",
            "/usr/include/linux/atm_eni.h",
            "/usr/include/linux/atm_he.h",
            "/usr/include/linux/atm_idt77105.h",
            "/usr/include/linux/atm_nicstar.h",
            "/usr/include/linux/atm_tcp.h",
            "/usr/include/linux/atm_zatm.h",
            "/usr/include/linux/atmapi.h",
            "/usr/include/linux/atmarp.h",
            "/usr/include/linux/atmbr2684.h",
            "/usr/include/linux/atmclip.h",
            "/usr/include/linux/atmdev.h",
            "/usr/include/linux/atmioc.h",
            "/usr/include/linux/atmlec.h",
            "/usr/include/linux/atmmpc.h",
            "/usr/include/linux/atmppp.h",
            "/usr/include/linux/atmsap.h",
            "/usr/include/linux/atmsvc.h",
            "/usr/include/linux/audit.h",
            "/usr/include/linux/auto_dev-ioctl.h",
            "/usr/include/linux/auto_fs.h",
            "/usr/include/linux/auto_fs4.h",
            "/usr/include/linux/auxvec.h",
            "/usr/include/linux/ax25.h",
            "/usr/include/linux/batadv_packet.h",
            "/usr/include/linux/batman_adv.h",
            "/usr/include/linux/baycom.h",
            "/usr/include/linux/bcm933xx_hcs.h",
            "/usr/include/linux/bfs_fs.h",
            "/usr/include/linux/binfmts.h",
            "/usr/include/linux/bits.h",
            "/usr/include/linux/blkdev.h",
            "/usr/include/linux/blkpg.h",
            "/usr/include/linux/blktrace_api.h",
            "/usr/include/linux/blkzoned.h",
            "/usr/include/linux/bpf.h",
            "/usr/include/linux/bpf_common.h",
            "/usr/include/linux/bpf_perf_event.h",
            "/usr/include/linux/bpqether.h",
            "/usr/include/linux/bsg.h",
            "/usr/include/linux/bt-bmc.h",
            "/usr/include/linux/btf.h",
            "/usr/include/linux/btrfs.h",
            "/usr/include/linux/btrfs_tree.h",
            "/usr/include/linux/byteorder/big_endian.h",
            "/usr/include/linux/byteorder/little_endian.h",
            "/usr/include/linux/cachefiles.h",
            "/usr/include/linux/caif/caif_socket.h",
            "/usr/include/linux/caif/if_caif.h",
            "/usr/include/linux/can.h",
            "/usr/include/linux/can/bcm.h",
            "/usr/include/linux/can/error.h",
            "/usr/include/linux/can/gw.h",
            "/usr/include/linux/can/isotp.h",
            "/usr/include/linux/can/j1939.h",
            "/usr/include/linux/can/netlink.h",
            "/usr/include/linux/can/raw.h",
            "/usr/include/linux/can/vxcan.h",
            "/usr/include/linux/capability.h",
            "/usr/include/linux/capi.h",
            "/usr/include/linux/cciss_defs.h",
            "/usr/include/linux/cciss_ioctl.h",
            "/usr/include/linux/ccs.h",
            "/usr/include/linux/cdrom.h",
            "/usr/include/linux/cec-funcs.h",
            "/usr/include/linux/cec.h",
            "/usr/include/linux/cfm_bridge.h",
            "/usr/include/linux/cgroupstats.h",
            "/usr/include/linux/chio.h",
            "/usr/include/linux/cifs/cifs_mount.h",
            "/usr/include/linux/cifs/cifs_netlink.h",
            "/usr/include/linux/close_range.h",
            "/usr/include/linux/cn_proc.h",
            "/usr/include/linux/coda.h",
            "/usr/include/linux/coff.h",
            "/usr/include/linux/comedi.h",
            "/usr/include/linux/connector.h",
            "/usr/include/linux/const.h",
            "/usr/include/linux/coresight-stm.h",
            "/usr/include/linux/counter.h",
            "/usr/include/linux/cramfs_fs.h",
            "/usr/include/linux/cryptouser.h",
            "/usr/include/linux/cuda.h",
            "/usr/include/linux/cxl_mem.h",
            "/usr/include/linux/cyclades.h",
            "/usr/include/linux/cycx_cfm.h",
            "/usr/include/linux/dcbnl.h",
            "/usr/include/linux/dccp.h",
            "/usr/include/linux/devlink.h",
            "/usr/include/linux/dlm.h",
            "/usr/include/linux/dlm_device.h",
            "/usr/include/linux/dlm_plock.h",
            "/usr/include/linux/dlmconstants.h",
            "/usr/include/linux/dm-ioctl.h",
            "/usr/include/linux/dm-log-userspace.h",
            "/usr/include/linux/dma-buf.h",
            "/usr/include/linux/dma-heap.h",
            "/usr/include/linux/dns_resolver.h",
            "/usr/include/linux/dpll.h",
            "/usr/include/linux/dqblk_xfs.h",
            "/usr/include/linux/dvb/audio.h",
            "/usr/include/linux/dvb/ca.h",
            "/usr/include/linux/dvb/dmx.h",
            "/usr/include/linux/dvb/frontend.h",
            "/usr/include/linux/dvb/net.h",
            "/usr/include/linux/dvb/osd.h",
            "/usr/include/linux/dvb/version.h",
            "/usr/include/linux/dvb/video.h",
            "/usr/include/linux/dw100.h",
            "/usr/include/linux/edd.h",
            "/usr/include/linux/efs_fs_sb.h",
            "/usr/include/linux/elf-em.h",
            "/usr/include/linux/elf-fdpic.h",
            "/usr/include/linux/elf.h",
            "/usr/include/linux/errno.h",
            "/usr/include/linux/errqueue.h",
            "/usr/include/linux/erspan.h",
            "/usr/include/linux/ethtool.h",
            "/usr/include/linux/ethtool_netlink.h",
            "/usr/include/linux/eventfd.h",
            "/usr/include/linux/eventpoll.h",
            "/usr/include/linux/exfat.h",
            "/usr/include/linux/ext4.h",
            "/usr/include/linux/f2fs.h",
            "/usr/include/linux/fadvise.h",
            "/usr/include/linux/falloc.h",
            "/usr/include/linux/fanotify.h",
            "/usr/include/linux/fb.h",
            "/usr/include/linux/fcntl.h",
            "/usr/include/linux/fd.h",
            "/usr/include/linux/fdreg.h",
            "/usr/include/linux/fib_rules.h",
            "/usr/include/linux/fiemap.h",
            "/usr/include/linux/filter.h",
            "/usr/include/linux/firewire-cdev.h",
            "/usr/include/linux/firewire-constants.h",
            "/usr/include/linux/fou.h",
            "/usr/include/linux/fpga-dfl.h",
            "/usr/include/linux/fs.h",
            "/usr/include/linux/fscrypt.h",
            "/usr/include/linux/fsi.h",
            "/usr/include/linux/fsl_hypervisor.h",
            "/usr/include/linux/fsl_mc.h",
            "/usr/include/linux/fsmap.h",
            "/usr/include/linux/fsverity.h",
            "/usr/include/linux/fuse.h",
            "/usr/include/linux/futex.h",
            "/usr/include/linux/gameport.h",
            "/usr/include/linux/gen_stats.h",
            "/usr/include/linux/genetlink.h",
            "/usr/include/linux/genwqe/genwqe_card.h",
            "/usr/include/linux/gfs2_ondisk.h",
            "/usr/include/linux/gpio.h",
            "/usr/include/linux/gsmmux.h",
            "/usr/include/linux/gtp.h",
            "/usr/include/linux/handshake.h",
            "/usr/include/linux/hash_info.h",
            "/usr/include/linux/hdlc.h",
            "/usr/include/linux/hdlc/ioctl.h",
            "/usr/include/linux/hdlcdrv.h",
            "/usr/include/linux/hdreg.h",
            "/usr/include/linux/hid.h",
            "/usr/include/linux/hiddev.h",
            "/usr/include/linux/hidraw.h",
            "/usr/include/linux/hpet.h",
            "/usr/include/linux/hsi/cs-protocol.h",
            "/usr/include/linux/hsi/hsi_char.h",
            "/usr/include/linux/hsr_netlink.h",
            "/usr/include/linux/hw_breakpoint.h",
            "/usr/include/linux/hyperv.h",
            "/usr/include/linux/i2c-dev.h",
            "/usr/include/linux/i2c.h",
            "/usr/include/linux/i2o-dev.h",
            "/usr/include/linux/i8k.h",
            "/usr/include/linux/icmp.h",
            "/usr/include/linux/icmpv6.h",
            "/usr/include/linux/idxd.h",
            "/usr/include/linux/if.h",
            "/usr/include/linux/if_addr.h",
            "/usr/include/linux/if_addrlabel.h",
            "/usr/include/linux/if_alg.h",
            "/usr/include/linux/if_arcnet.h",
            "/usr/include/linux/if_arp.h",
            "/usr/include/linux/if_bonding.h",
            "/usr/include/linux/if_bridge.h",
            "/usr/include/linux/if_cablemodem.h",
            "/usr/include/linux/if_eql.h",
            "/usr/include/linux/if_ether.h",
            "/usr/include/linux/if_fc.h",
            "/usr/include/linux/if_fddi.h",
            "/usr/include/linux/if_hippi.h",
            "/usr/include/linux/if_infiniband.h",
            "/usr/include/linux/if_link.h",
            "/usr/include/linux/if_ltalk.h",
            "/usr/include/linux/if_macsec.h",
            "/usr/include/linux/if_packet.h",
            "/usr/include/linux/if_phonet.h",
            "/usr/include/linux/if_plip.h",
            "/usr/include/linux/if_ppp.h",
            "/usr/include/linux/if_pppol2tp.h",
            "/usr/include/linux/if_pppox.h",
            "/usr/include/linux/if_slip.h",
            "/usr/include/linux/if_team.h",
            "/usr/include/linux/if_tun.h",
            "/usr/include/linux/if_tunnel.h",
            "/usr/include/linux/if_vlan.h",
            "/usr/include/linux/if_x25.h",
            "/usr/include/linux/if_xdp.h",
            "/usr/include/linux/ife.h",
            "/usr/include/linux/igmp.h",
            "/usr/include/linux/iio/buffer.h",
            "/usr/include/linux/iio/events.h",
            "/usr/include/linux/iio/types.h",
            "/usr/include/linux/ila.h",
            "/usr/include/linux/in.h",
            "/usr/include/linux/in6.h",
            "/usr/include/linux/in_route.h",
            "/usr/include/linux/inet_diag.h",
            "/usr/include/linux/inotify.h",
            "/usr/include/linux/input-event-codes.h",
            "/usr/include/linux/input.h",
            "/usr/include/linux/io_uring.h",
            "/usr/include/linux/ioam6.h",
            "/usr/include/linux/ioam6_genl.h",
            "/usr/include/linux/ioam6_iptunnel.h",
            "/usr/include/linux/ioctl.h",
            "/usr/include/linux/iommufd.h",
            "/usr/include/linux/ioprio.h",
            "/usr/include/linux/ip.h",
            "/usr/include/linux/ip6_tunnel.h",
            "/usr/include/linux/ip_vs.h",
            "/usr/include/linux/ipc.h",
            "/usr/include/linux/ipmi.h",
            "/usr/include/linux/ipmi_bmc.h",
            "/usr/include/linux/ipmi_msgdefs.h",
            "/usr/include/linux/ipmi_ssif_bmc.h",
            "/usr/include/linux/ipsec.h",
            "/usr/include/linux/ipv6.h",
            "/usr/include/linux/ipv6_route.h",
            "/usr/include/linux/irqnr.h",
            "/usr/include/linux/isdn/capicmd.h",
            "/usr/include/linux/iso_fs.h",
            "/usr/include/linux/isst_if.h",
            "/usr/include/linux/ivtv.h",
            "/usr/include/linux/ivtvfb.h",
            "/usr/include/linux/jffs2.h",
            "/usr/include/linux/joystick.h",
            "/usr/include/linux/kcm.h",
            "/usr/include/linux/kcmp.h",
            "/usr/include/linux/kcov.h",
            "/usr/include/linux/kd.h",
            "/usr/include/linux/kdev_t.h",
            "/usr/include/linux/kernel-page-flags.h",
            "/usr/include/linux/kernel.h",
            "/usr/include/linux/kernelcapi.h",
            "/usr/include/linux/kexec.h",
            "/usr/include/linux/keyboard.h",
            "/usr/include/linux/keyctl.h",
            "/usr/include/linux/kfd_ioctl.h",
            "/usr/include/linux/kfd_sysfs.h",
            "/usr/include/linux/kvm.h",
            "/usr/include/linux/kvm_para.h",
            "/usr/include/linux/l2tp.h",
            "/usr/include/linux/landlock.h",
            "/usr/include/linux/libc-compat.h",
            "/usr/include/linux/limits.h",
            "/usr/include/linux/lirc.h",
            "/usr/include/linux/llc.h",
            "/usr/include/linux/loadpin.h",
            "/usr/include/linux/loop.h",
            "/usr/include/linux/lp.h",
            "/usr/include/linux/lsm.h",
            "/usr/include/linux/lwtunnel.h",
            "/usr/include/linux/magic.h",
            "/usr/include/linux/major.h",
            "/usr/include/linux/map_to_14segment.h",
            "/usr/include/linux/map_to_7segment.h",
            "/usr/include/linux/matroxfb.h",
            "/usr/include/linux/max2175.h",
            "/usr/include/linux/mctp.h",
            "/usr/include/linux/mdio.h",
            "/usr/include/linux/media-bus-format.h",
            "/usr/include/linux/media.h",
            "/usr/include/linux/media/raspberrypi/pisp_be_config.h",
            "/usr/include/linux/media/raspberrypi/pisp_common.h",
            "/usr/include/linux/mei.h",
            "/usr/include/linux/mei_uuid.h",
            "/usr/include/linux/membarrier.h",
            "/usr/include/linux/memfd.h",
            "/usr/include/linux/mempolicy.h",
            "/usr/include/linux/mii.h",
            "/usr/include/linux/minix_fs.h",
            "/usr/include/linux/misc/bcm_vk.h",
            "/usr/include/linux/mman.h",
            "/usr/include/linux/mmc/ioctl.h",
            "/usr/include/linux/mmtimer.h",
            "/usr/include/linux/module.h",
            "/usr/include/linux/mount.h",
            "/usr/include/linux/mpls.h",
            "/usr/include/linux/mpls_iptunnel.h",
            "/usr/include/linux/mptcp.h",
            "/usr/include/linux/mptcp_pm.h",
            "/usr/include/linux/mqueue.h",
            "/usr/include/linux/mroute.h",
            "/usr/include/linux/mroute6.h",
            "/usr/include/linux/mrp_bridge.h",
            "/usr/include/linux/msdos_fs.h",
            "/usr/include/linux/msg.h",
            "/usr/include/linux/mtio.h",
            "/usr/include/linux/nbd-netlink.h",
            "/usr/include/linux/nbd.h",
            "/usr/include/linux/ncsi.h",
            "/usr/include/linux/ndctl.h",
            "/usr/include/linux/neighbour.h",
            "/usr/include/linux/net.h",
            "/usr/include/linux/net_dropmon.h",
            "/usr/include/linux/net_namespace.h",
            "/usr/include/linux/net_tstamp.h",
            "/usr/include/linux/netconf.h",
            "/usr/include/linux/netdev.h",
            "/usr/include/linux/netdevice.h",
            "/usr/include/linux/netfilter.h",
            "/usr/include/linux/netfilter/ipset/ip_set.h",
            "/usr/include/linux/netfilter/ipset/ip_set_bitmap.h",
            "/usr/include/linux/netfilter/ipset/ip_set_hash.h",
            "/usr/include/linux/netfilter/ipset/ip_set_list.h",
            "/usr/include/linux/netfilter/nf_conntrack_common.h",
            "/usr/include/linux/netfilter/nf_conntrack_ftp.h",
            "/usr/include/linux/netfilter/nf_conntrack_sctp.h",
            "/usr/include/linux/netfilter/nf_conntrack_tcp.h",
            "/usr/include/linux/netfilter/nf_conntrack_tuple_common.h",
            "/usr/include/linux/netfilter/nf_log.h",
            "/usr/include/linux/netfilter/nf_nat.h",
            "/usr/include/linux/netfilter/nf_synproxy.h",
            "/usr/include/linux/netfilter/nf_tables.h",
            "/usr/include/linux/netfilter/nf_tables_compat.h",
            "/usr/include/linux/netfilter/nfnetlink.h",
            "/usr/include/linux/netfilter/nfnetlink_acct.h",
            "/usr/include/linux/netfilter/nfnetlink_compat.h",
            "/usr/include/linux/netfilter/nfnetlink_conntrack.h",
            "/usr/include/linux/netfilter/nfnetlink_cthelper.h",
            "/usr/include/linux/netfilter/nfnetlink_cttimeout.h",
            "/usr/include/linux/netfilter/nfnetlink_hook.h",
            "/usr/include/linux/netfilter/nfnetlink_log.h",
            "/usr/include/linux/netfilter/nfnetlink_osf.h",
            "/usr/include/linux/netfilter/nfnetlink_queue.h",
            "/usr/include/linux/netfilter/x_tables.h",
            "/usr/include/linux/netfilter/xt_AUDIT.h",
            "/usr/include/linux/netfilter/xt_CHECKSUM.h",
            "/usr/include/linux/netfilter/xt_CLASSIFY.h",
            "/usr/include/linux/netfilter/xt_CONNMARK.h",
            "/usr/include/linux/netfilter/xt_CONNSECMARK.h",
            "/usr/include/linux/netfilter/xt_CT.h",
            "/usr/include/linux/netfilter/xt_DSCP.h",
            "/usr/include/linux/netfilter/xt_HMARK.h",
            "/usr/include/linux/netfilter/xt_IDLETIMER.h",
            "/usr/include/linux/netfilter/xt_LED.h",
            "/usr/include/linux/netfilter/xt_LOG.h",
            "/usr/include/linux/netfilter/xt_MARK.h",
            "/usr/include/linux/netfilter/xt_NFLOG.h",
            "/usr/include/linux/netfilter/xt_NFQUEUE.h",
            "/usr/include/linux/netfilter/xt_RATEEST.h",
            "/usr/include/linux/netfilter/xt_SECMARK.h",
            "/usr/include/linux/netfilter/xt_SYNPROXY.h",
            "/usr/include/linux/netfilter/xt_TCPMSS.h",
            "/usr/include/linux/netfilter/xt_TCPOPTSTRIP.h",
            "/usr/include/linux/netfilter/xt_TEE.h",
            "/usr/include/linux/netfilter/xt_TPROXY.h",
            "/usr/include/linux/netfilter/xt_addrtype.h",
            "/usr/include/linux/netfilter/xt_bpf.h",
            "/usr/include/linux/netfilter/xt_cgroup.h",
            "/usr/include/linux/netfilter/xt_cluster.h",
            "/usr/include/linux/netfilter/xt_comment.h",
            "/usr/include/linux/netfilter/xt_connbytes.h",
            "/usr/include/linux/netfilter/xt_connlabel.h",
            "/usr/include/linux/netfilter/xt_connlimit.h",
            "/usr/include/linux/netfilter/xt_connmark.h",
            "/usr/include/linux/netfilter/xt_conntrack.h",
            "/usr/include/linux/netfilter/xt_cpu.h",
            "/usr/include/linux/netfilter/xt_dccp.h",
            "/usr/include/linux/netfilter/xt_devgroup.h",
            "/usr/include/linux/netfilter/xt_dscp.h",
            "/usr/include/linux/netfilter/xt_ecn.h",
            "/usr/include/linux/netfilter/xt_esp.h",
            "/usr/include/linux/netfilter/xt_hashlimit.h",
            "/usr/include/linux/netfilter/xt_helper.h",
            "/usr/include/linux/netfilter/xt_ipcomp.h",
            "/usr/include/linux/netfilter/xt_iprange.h",
            "/usr/include/linux/netfilter/xt_ipvs.h",
            "/usr/include/linux/netfilter/xt_l2tp.h",
            "/usr/include/linux/netfilter/xt_length.h",
            "/usr/include/linux/netfilter/xt_limit.h",
            "/usr/include/linux/netfilter/xt_mac.h",
            "/usr/include/linux/netfilter/xt_mark.h",
            "/usr/include/linux/netfilter/xt_multiport.h",
            "/usr/include/linux/netfilter/xt_nfacct.h",
            "/usr/include/linux/netfilter/xt_osf.h",
            "/usr/include/linux/netfilter/xt_owner.h",
            "/usr/include/linux/netfilter/xt_physdev.h",
            "/usr/include/linux/netfilter/xt_pkttype.h",
            "/usr/include/linux/netfilter/xt_policy.h",
            "/usr/include/linux/netfilter/xt_quota.h",
            "/usr/include/linux/netfilter/xt_rateest.h",
            "/usr/include/linux/netfilter/xt_realm.h",
            "/usr/include/linux/netfilter/xt_recent.h",
            "/usr/include/linux/netfilter/xt_rpfilter.h",
            "/usr/include/linux/netfilter/xt_sctp.h",
            "/usr/include/linux/netfilter/xt_set.h",
            "/usr/include/linux/netfilter/xt_socket.h",
            "/usr/include/linux/netfilter/xt_state.h",
            "/usr/include/linux/netfilter/xt_statistic.h",
            "/usr/include/linux/netfilter/xt_string.h",
            "/usr/include/linux/netfilter/xt_tcpmss.h",
            "/usr/include/linux/netfilter/xt_tcpudp.h",
            "/usr/include/linux/netfilter/xt_time.h",
            "/usr/include/linux/netfilter/xt_u32.h",
            "/usr/include/linux/netfilter_arp.h",
            "/usr/include/linux/netfilter_arp/arp_tables.h",
            "/usr/include/linux/netfilter_arp/arpt_mangle.h",
            "/usr/include/linux/netfilter_bridge.h",
            "/usr/include/linux/netfilter_bridge/ebt_802_3.h",
            "/usr/include/linux/netfilter_bridge/ebt_among.h",
            "/usr/include/linux/netfilter_bridge/ebt_arp.h",
            "/usr/include/linux/netfilter_bridge/ebt_arpreply.h",
            "/usr/include/linux/netfilter_bridge/ebt_ip.h",
            "/usr/include/linux/netfilter_bridge/ebt_ip6.h",
            "/usr/include/linux/netfilter_bridge/ebt_limit.h",
            "/usr/include/linux/netfilter_bridge/ebt_log.h",
            "/usr/include/linux/netfilter_bridge/ebt_mark_m.h",
            "/usr/include/linux/netfilter_bridge/ebt_mark_t.h",
            "/usr/include/linux/netfilter_bridge/ebt_nat.h",
            "/usr/include/linux/netfilter_bridge/ebt_nflog.h",
            "/usr/include/linux/netfilter_bridge/ebt_pkttype.h",
            "/usr/include/linux/netfilter_bridge/ebt_redirect.h",
            "/usr/include/linux/netfilter_bridge/ebt_stp.h",
            "/usr/include/linux/netfilter_bridge/ebt_vlan.h",
            "/usr/include/linux/netfilter_bridge/ebtables.h",
            "/usr/include/linux/netfilter_ipv4.h",
            "/usr/include/linux/netfilter_ipv4/ip_tables.h",
            "/usr/include/linux/netfilter_ipv4/ipt_CLUSTERIP.h",
            "/usr/include/linux/netfilter_ipv4/ipt_ECN.h",
            "/usr/include/linux/netfilter_ipv4/ipt_LOG.h",
            "/usr/include/linux/netfilter_ipv4/ipt_REJECT.h",
            "/usr/include/linux/netfilter_ipv4/ipt_TTL.h",
            "/usr/include/linux/netfilter_ipv4/ipt_ah.h",
            "/usr/include/linux/netfilter_ipv4/ipt_ecn.h",
            "/usr/include/linux/netfilter_ipv4/ipt_ttl.h",
            "/usr/include/linux/netfilter_ipv6.h",
            "/usr/include/linux/netfilter_ipv6/ip6_tables.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_HL.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_LOG.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_NPT.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_REJECT.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_ah.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_frag.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_hl.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_ipv6header.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_mh.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_opts.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_rt.h",
            "/usr/include/linux/netfilter_ipv6/ip6t_srh.h",
            "/usr/include/linux/netlink.h",
            "/usr/include/linux/netlink_diag.h",
            "/usr/include/linux/netrom.h",
            "/usr/include/linux/nexthop.h",
            "/usr/include/linux/nfc.h",
            "/usr/include/linux/nfs.h",
            "/usr/include/linux/nfs2.h",
            "/usr/include/linux/nfs3.h",
            "/usr/include/linux/nfs4.h",
            "/usr/include/linux/nfs4_mount.h",
            "/usr/include/linux/nfs_fs.h",
            "/usr/include/linux/nfs_idmap.h",
            "/usr/include/linux/nfs_mount.h",
            "/usr/include/linux/nfsacl.h",
            "/usr/include/linux/nfsd/cld.h",
            "/usr/include/linux/nfsd/debug.h",
            "/usr/include/linux/nfsd/export.h",
            "/usr/include/linux/nfsd/stats.h",
            "/usr/include/linux/nfsd_netlink.h",
            "/usr/include/linux/nilfs2_api.h",
            "/usr/include/linux/nilfs2_ondisk.h",
            "/usr/include/linux/nitro_enclaves.h",
            "/usr/include/linux/nl80211-vnd-intel.h",
            "/usr/include/linux/nl80211.h",
            "/usr/include/linux/npcm-video.h",
            "/usr/include/linux/nsfs.h",
            "/usr/include/linux/nsm.h",
            "/usr/include/linux/ntsync.h",
            "/usr/include/linux/nubus.h",
            "/usr/include/linux/nvme_ioctl.h",
            "/usr/include/linux/nvram.h",
            "/usr/include/linux/omap3isp.h",
            "/usr/include/linux/omapfb.h",
            "/usr/include/linux/oom.h",
            "/usr/include/linux/openat2.h",
            "/usr/include/linux/openvswitch.h",
            "/usr/include/linux/packet_diag.h",
            "/usr/include/linux/papr_pdsm.h",
            "/usr/include/linux/param.h",
            "/usr/include/linux/parport.h",
            "/usr/include/linux/patchkey.h",
            "/usr/include/linux/pci.h",
            "/usr/include/linux/pci_regs.h",
            "/usr/include/linux/pcitest.h",
            "/usr/include/linux/perf_event.h",
            "/usr/include/linux/personality.h",
            "/usr/include/linux/pfkeyv2.h",
            "/usr/include/linux/pfrut.h",
            "/usr/include/linux/pg.h",
            "/usr/include/linux/phantom.h",
            "/usr/include/linux/phonet.h",
            "/usr/include/linux/pidfd.h",
            "/usr/include/linux/pkt_cls.h",
            "/usr/include/linux/pkt_sched.h",
            "/usr/include/linux/pktcdvd.h",
            "/usr/include/linux/pmu.h",
            "/usr/include/linux/poll.h",
            "/usr/include/linux/posix_acl.h",
            "/usr/include/linux/posix_acl_xattr.h",
            "/usr/include/linux/posix_types.h",
            "/usr/include/linux/ppdev.h",
            "/usr/include/linux/ppp-comp.h",
            "/usr/include/linux/ppp-ioctl.h",
            "/usr/include/linux/ppp_defs.h",
            "/usr/include/linux/pps.h",
            "/usr/include/linux/pr.h",
            "/usr/include/linux/prctl.h",
            "/usr/include/linux/psample.h",
            "/usr/include/linux/psci.h",
            "/usr/include/linux/psp-dbc.h",
            "/usr/include/linux/psp-sev.h",
            "/usr/include/linux/ptp_clock.h",
            "/usr/include/linux/ptrace.h",
            "/usr/include/linux/qemu_fw_cfg.h",
            "/usr/include/linux/qnx4_fs.h",
            "/usr/include/linux/qnxtypes.h",
            "/usr/include/linux/qrtr.h",
            "/usr/include/linux/quota.h",
            "/usr/include/linux/radeonfb.h",
            "/usr/include/linux/raid/md_p.h",
            "/usr/include/linux/raid/md_u.h",
            "/usr/include/linux/random.h",
            "/usr/include/linux/rds.h",
            "/usr/include/linux/reboot.h",
            "/usr/include/linux/reiserfs_fs.h",
            "/usr/include/linux/reiserfs_xattr.h",
            "/usr/include/linux/remoteproc_cdev.h",
            "/usr/include/linux/resource.h",
            "/usr/include/linux/rfkill.h",
            "/usr/include/linux/rio_cm_cdev.h",
            "/usr/include/linux/rio_mport_cdev.h",
            "/usr/include/linux/rkisp1-config.h",
            "/usr/include/linux/romfs_fs.h",
            "/usr/include/linux/rose.h",
            "/usr/include/linux/route.h",
            "/usr/include/linux/rpl.h",
            "/usr/include/linux/rpl_iptunnel.h",
            "/usr/include/linux/rpmsg.h",
            "/usr/include/linux/rpmsg_types.h",
            "/usr/include/linux/rseq.h",
            "/usr/include/linux/rtc.h",
            "/usr/include/linux/rtnetlink.h",
            "/usr/include/linux/rxrpc.h",
            "/usr/include/linux/scc.h",
            "/usr/include/linux/sched.h",
            "/usr/include/linux/sched/types.h",
            "/usr/include/linux/scif_ioctl.h",
            "/usr/include/linux/screen_info.h",
            "/usr/include/linux/sctp.h",
            "/usr/include/linux/seccomp.h",
            "/usr/include/linux/securebits.h",
            "/usr/include/linux/sed-opal.h",
            "/usr/include/linux/seg6.h",
            "/usr/include/linux/seg6_genl.h",
            "/usr/include/linux/seg6_hmac.h",
            "/usr/include/linux/seg6_iptunnel.h",
            "/usr/include/linux/seg6_local.h",
            "/usr/include/linux/selinux_netlink.h",
            "/usr/include/linux/sem.h",
            "/usr/include/linux/serial.h",
            "/usr/include/linux/serial_core.h",
            "/usr/include/linux/serial_reg.h",
            "/usr/include/linux/serio.h",
            "/usr/include/linux/sev-guest.h",
            "/usr/include/linux/shm.h",
            "/usr/include/linux/signal.h",
            "/usr/include/linux/signalfd.h",
            "/usr/include/linux/smc.h",
            "/usr/include/linux/smc_diag.h",
            "/usr/include/linux/smiapp.h",
            "/usr/include/linux/snmp.h",
            "/usr/include/linux/sock_diag.h",
            "/usr/include/linux/socket.h",
            "/usr/include/linux/sockios.h",
            "/usr/include/linux/sonet.h",
            "/usr/include/linux/sonypi.h",
            "/usr/include/linux/sound.h",
            "/usr/include/linux/soundcard.h",
            "/usr/include/linux/spi/spi.h",
            "/usr/include/linux/spi/spidev.h",
            "/usr/include/linux/stat.h",
            "/usr/include/linux/stddef.h",
            "/usr/include/linux/stm.h",
            "/usr/include/linux/string.h",
            "/usr/include/linux/sunrpc/debug.h",
            "/usr/include/linux/surface_aggregator/cdev.h",
            "/usr/include/linux/surface_aggregator/dtx.h",
            "/usr/include/linux/suspend_ioctls.h",
            "/usr/include/linux/swab.h",
            "/usr/include/linux/switchtec_ioctl.h",
            "/usr/include/linux/sync_file.h",
            "/usr/include/linux/synclink.h",
            "/usr/include/linux/sysctl.h",
            "/usr/include/linux/sysinfo.h",
            "/usr/include/linux/target_core_user.h",
            "/usr/include/linux/taskstats.h",
            "/usr/include/linux/tc_act/tc_bpf.h",
            "/usr/include/linux/tc_act/tc_connmark.h",
            "/usr/include/linux/tc_act/tc_csum.h",
            "/usr/include/linux/tc_act/tc_ct.h",
            "/usr/include/linux/tc_act/tc_ctinfo.h",
            "/usr/include/linux/tc_act/tc_defact.h",
            "/usr/include/linux/tc_act/tc_gact.h",
            "/usr/include/linux/tc_act/tc_gate.h",
            "/usr/include/linux/tc_act/tc_ife.h",
            "/usr/include/linux/tc_act/tc_mirred.h",
            "/usr/include/linux/tc_act/tc_mpls.h",
            "/usr/include/linux/tc_act/tc_nat.h",
            "/usr/include/linux/tc_act/tc_pedit.h",
            "/usr/include/linux/tc_act/tc_sample.h",
            "/usr/include/linux/tc_act/tc_skbedit.h",
            "/usr/include/linux/tc_act/tc_skbmod.h",
            "/usr/include/linux/tc_act/tc_tunnel_key.h",
            "/usr/include/linux/tc_act/tc_vlan.h",
            "/usr/include/linux/tc_ematch/tc_em_cmp.h",
            "/usr/include/linux/tc_ematch/tc_em_ipt.h",
            "/usr/include/linux/tc_ematch/tc_em_meta.h",
            "/usr/include/linux/tc_ematch/tc_em_nbyte.h",
            "/usr/include/linux/tc_ematch/tc_em_text.h",
            "/usr/include/linux/tcp.h",
            "/usr/include/linux/tcp_metrics.h",
            "/usr/include/linux/tdx-guest.h",
            "/usr/include/linux/tee.h",
            "/usr/include/linux/termios.h",
            "/usr/include/linux/thermal.h",
            "/usr/include/linux/thp7312.h",
            "/usr/include/linux/time.h",
            "/usr/include/linux/time_types.h",
            "/usr/include/linux/timerfd.h",
            "/usr/include/linux/times.h",
            "/usr/include/linux/timex.h",
            "/usr/include/linux/tiocl.h",
            "/usr/include/linux/tipc.h",
            "/usr/include/linux/tipc_config.h",
            "/usr/include/linux/tipc_netlink.h",
            "/usr/include/linux/tipc_sockets_diag.h",
            "/usr/include/linux/tls.h",
            "/usr/include/linux/toshiba.h",
            "/usr/include/linux/tps6594_pfsm.h",
            "/usr/include/linux/trace_mmap.h",
            "/usr/include/linux/tty.h",
            "/usr/include/linux/tty_flags.h",
            "/usr/include/linux/types.h",
            "/usr/include/linux/ublk_cmd.h",
            "/usr/include/linux/udf_fs_i.h",
            "/usr/include/linux/udmabuf.h",
            "/usr/include/linux/udp.h",
            "/usr/include/linux/uhid.h",
            "/usr/include/linux/uinput.h",
            "/usr/include/linux/uio.h",
            "/usr/include/linux/uleds.h",
            "/usr/include/linux/ultrasound.h",
            "/usr/include/linux/um_timetravel.h",
            "/usr/include/linux/un.h",
            "/usr/include/linux/unistd.h",
            "/usr/include/linux/unix_diag.h",
            "/usr/include/linux/usb/audio.h",
            "/usr/include/linux/usb/cdc-wdm.h",
            "/usr/include/linux/usb/cdc.h",
            "/usr/include/linux/usb/ch11.h",
            "/usr/include/linux/usb/ch9.h",
            "/usr/include/linux/usb/charger.h",
            "/usr/include/linux/usb/functionfs.h",
            "/usr/include/linux/usb/g_hid.h",
            "/usr/include/linux/usb/g_printer.h",
            "/usr/include/linux/usb/g_uvc.h",
            "/usr/include/linux/usb/gadgetfs.h",
            "/usr/include/linux/usb/midi.h",
            "/usr/include/linux/usb/raw_gadget.h",
            "/usr/include/linux/usb/tmc.h",
            "/usr/include/linux/usb/video.h",
            "/usr/include/linux/usbdevice_fs.h",
            "/usr/include/linux/usbip.h",
            "/usr/include/linux/user_events.h",
            "/usr/include/linux/userfaultfd.h",
            "/usr/include/linux/userio.h",
            "/usr/include/linux/utime.h",
            "/usr/include/linux/utsname.h",
            "/usr/include/linux/uuid.h",
            "/usr/include/linux/uvcvideo.h",
            "/usr/include/linux/v4l2-common.h",
            "/usr/include/linux/v4l2-controls.h",
            "/usr/include/linux/v4l2-dv-timings.h",
            "/usr/include/linux/v4l2-mediabus.h",
            "/usr/include/linux/v4l2-subdev.h",
            "/usr/include/linux/vbox_err.h",
            "/usr/include/linux/vbox_vmmdev_types.h",
            "/usr/include/linux/vboxguest.h",
            "/usr/include/linux/vdpa.h",
            "/usr/include/linux/vduse.h",
            "/usr/include/linux/version.h",
            "/usr/include/linux/vesa.h",
            "/usr/include/linux/veth.h",
            "/usr/include/linux/vfio.h",
            "/usr/include/linux/vfio_ccw.h",
            "/usr/include/linux/vfio_zdev.h",
            "/usr/include/linux/vhost.h",
            "/usr/include/linux/vhost_types.h",
            "/usr/include/linux/videodev2.h",
            "/usr/include/linux/virtio_9p.h",
            "/usr/include/linux/virtio_balloon.h",
            "/usr/include/linux/virtio_blk.h",
            "/usr/include/linux/virtio_bt.h",
            "/usr/include/linux/virtio_config.h",
            "/usr/include/linux/virtio_console.h",
            "/usr/include/linux/virtio_crypto.h",
            "/usr/include/linux/virtio_fs.h",
            "/usr/include/linux/virtio_gpio.h",
            "/usr/include/linux/virtio_gpu.h",
            "/usr/include/linux/virtio_i2c.h",
            "/usr/include/linux/virtio_ids.h",
            "/usr/include/linux/virtio_input.h",
            "/usr/include/linux/virtio_iommu.h",
            "/usr/include/linux/virtio_mem.h",
            "/usr/include/linux/virtio_mmio.h",
            "/usr/include/linux/virtio_net.h",
            "/usr/include/linux/virtio_pci.h",
            "/usr/include/linux/virtio_pcidev.h",
            "/usr/include/linux/virtio_pmem.h",
            "/usr/include/linux/virtio_ring.h",
            "/usr/include/linux/virtio_rng.h",
            "/usr/include/linux/virtio_scmi.h",
            "/usr/include/linux/virtio_scsi.h",
            "/usr/include/linux/virtio_snd.h",
            "/usr/include/linux/virtio_types.h",
            "/usr/include/linux/virtio_vsock.h",
            "/usr/include/linux/vm_sockets.h",
            "/usr/include/linux/vm_sockets_diag.h",
            "/usr/include/linux/vmcore.h",
            "/usr/include/linux/vsockmon.h",
            "/usr/include/linux/vt.h",
            "/usr/include/linux/vtpm_proxy.h",
            "/usr/include/linux/wait.h",
            "/usr/include/linux/watch_queue.h",
            "/usr/include/linux/watchdog.h",
            "/usr/include/linux/wireguard.h",
            "/usr/include/linux/wireless.h",
            "/usr/include/linux/wmi.h",
            "/usr/include/linux/wwan.h",
            "/usr/include/linux/x25.h",
            "/usr/include/linux/xattr.h",
            "/usr/include/linux/xdp_diag.h",
            "/usr/include/linux/xfrm.h",
            "/usr/include/linux/xilinx-v4l2-controls.h",
            "/usr/include/linux/zorro.h",
            "/usr/include/linux/zorro_ids.h",
            "/usr/include/misc/cxl.h",
            "/usr/include/misc/fastrpc.h",
            "/usr/include/misc/mrvl_cn10k_dpi.h",
            "/usr/include/misc/ocxl.h",
            "/usr/include/misc/pvpanic.h",
            "/usr/include/misc/uacce/hisi_qm.h",
            "/usr/include/misc/uacce/uacce.h",
            "/usr/include/misc/xilinx_sdfec.h",
            "/usr/include/mtd/inftl-user.h",
            "/usr/include/mtd/mtd-abi.h",
            "/usr/include/mtd/mtd-user.h",
            "/usr/include/mtd/nftl-user.h",
            "/usr/include/mtd/ubi-user.h",
            "/usr/include/rdma/bnxt_re-abi.h",
            "/usr/include/rdma/cxgb4-abi.h",
            "/usr/include/rdma/efa-abi.h",
            "/usr/include/rdma/erdma-abi.h",
            "/usr/include/rdma/hfi/hfi1_ioctl.h",
            "/usr/include/rdma/hfi/hfi1_user.h",
            "/usr/include/rdma/hns-abi.h",
            "/usr/include/rdma/ib_user_ioctl_cmds.h",
            "/usr/include/rdma/ib_user_ioctl_verbs.h",
            "/usr/include/rdma/ib_user_mad.h",
            "/usr/include/rdma/ib_user_sa.h",
            "/usr/include/rdma/ib_user_verbs.h",
            "/usr/include/rdma/irdma-abi.h",
            "/usr/include/rdma/mana-abi.h",
            "/usr/include/rdma/mlx4-abi.h",
            "/usr/include/rdma/mlx5-abi.h",
            "/usr/include/rdma/mlx5_user_ioctl_cmds.h",
            "/usr/include/rdma/mlx5_user_ioctl_verbs.h",
            "/usr/include/rdma/mthca-abi.h",
            "/usr/include/rdma/ocrdma-abi.h",
            "/usr/include/rdma/qedr-abi.h",
            "/usr/include/rdma/rdma_netlink.h",
            "/usr/include/rdma/rdma_user_cm.h",
            "/usr/include/rdma/rdma_user_ioctl.h",
            "/usr/include/rdma/rdma_user_ioctl_cmds.h",
            "/usr/include/rdma/rdma_user_rxe.h",
            "/usr/include/rdma/rvt-abi.h",
            "/usr/include/rdma/siw-abi.h",
            "/usr/include/rdma/vmw_pvrdma-abi.h",
            "/usr/include/regulator/regulator.h",
            "/usr/include/scsi/cxlflash_ioctl.h",
            "/usr/include/scsi/fc/fc_els.h",
            "/usr/include/scsi/fc/fc_fs.h",
            "/usr/include/scsi/fc/fc_gs.h",
            "/usr/include/scsi/fc/fc_ns.h",
            "/usr/include/scsi/scsi_bsg_fc.h",
            "/usr/include/scsi/scsi_bsg_mpi3mr.h",
            "/usr/include/scsi/scsi_bsg_ufs.h",
            "/usr/include/scsi/scsi_netlink.h",
            "/usr/include/scsi/scsi_netlink_fc.h",
            "/usr/include/sound/asequencer.h",
            "/usr/include/sound/asoc.h",
            "/usr/include/sound/asound.h",
            "/usr/include/sound/asound_fm.h",
            "/usr/include/sound/compress_offload.h",
            "/usr/include/sound/compress_params.h",
            "/usr/include/sound/emu10k1.h",
            "/usr/include/sound/firewire.h",
            "/usr/include/sound/hdsp.h",
            "/usr/include/sound/hdspm.h",
            "/usr/include/sound/intel/avs/tokens.h",
            "/usr/include/sound/sb16_csp.h",
            "/usr/include/sound/scarlett2.h",
            "/usr/include/sound/sfnt_info.h",
            "/usr/include/sound/skl-tplg-interface.h",
            "/usr/include/sound/snd_ar_tokens.h",
            "/usr/include/sound/snd_sst_tokens.h",
            "/usr/include/sound/sof/abi.h",
            "/usr/include/sound/sof/fw.h",
            "/usr/include/sound/sof/header.h",
            "/usr/include/sound/sof/tokens.h",
            "/usr/include/sound/tlv.h",
            "/usr/include/sound/usb_stream.h",
            "/usr/include/video/edid.h",
            "/usr/include/video/sisfb.h",
            "/usr/include/video/uvesafb.h",
            "/usr/include/xen/evtchn.h",
            "/usr/include/xen/gntalloc.h",
            "/usr/include/xen/gntdev.h",
            "/usr/include/xen/privcmd.h",
            "/usr/lib/linux/uapi/alpha/asm/a.out.h",
            "/usr/lib/linux/uapi/alpha/asm/auxvec.h",
            "/usr/lib/linux/uapi/alpha/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/alpha/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/alpha/asm/byteorder.h",
            "/usr/lib/linux/uapi/alpha/asm/compiler.h",
            "/usr/lib/linux/uapi/alpha/asm/console.h",
            "/usr/lib/linux/uapi/alpha/asm/errno.h",
            "/usr/lib/linux/uapi/alpha/asm/fcntl.h",
            "/usr/lib/linux/uapi/alpha/asm/fpu.h",
            "/usr/lib/linux/uapi/alpha/asm/gentrap.h",
            "/usr/lib/linux/uapi/alpha/asm/ioctl.h",
            "/usr/lib/linux/uapi/alpha/asm/ioctls.h",
            "/usr/lib/linux/uapi/alpha/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/alpha/asm/mman.h",
            "/usr/lib/linux/uapi/alpha/asm/msgbuf.h",
            "/usr/lib/linux/uapi/alpha/asm/pal.h",
            "/usr/lib/linux/uapi/alpha/asm/param.h",
            "/usr/lib/linux/uapi/alpha/asm/poll.h",
            "/usr/lib/linux/uapi/alpha/asm/posix_types.h",
            "/usr/lib/linux/uapi/alpha/asm/ptrace.h",
            "/usr/lib/linux/uapi/alpha/asm/reg.h",
            "/usr/lib/linux/uapi/alpha/asm/regdef.h",
            "/usr/lib/linux/uapi/alpha/asm/resource.h",
            "/usr/lib/linux/uapi/alpha/asm/sembuf.h",
            "/usr/lib/linux/uapi/alpha/asm/setup.h",
            "/usr/lib/linux/uapi/alpha/asm/shmbuf.h",
            "/usr/lib/linux/uapi/alpha/asm/sigcontext.h",
            "/usr/lib/linux/uapi/alpha/asm/siginfo.h",
            "/usr/lib/linux/uapi/alpha/asm/signal.h",
            "/usr/lib/linux/uapi/alpha/asm/socket.h",
            "/usr/lib/linux/uapi/alpha/asm/sockios.h",
            "/usr/lib/linux/uapi/alpha/asm/stat.h",
            "/usr/lib/linux/uapi/alpha/asm/statfs.h",
            "/usr/lib/linux/uapi/alpha/asm/swab.h",
            "/usr/lib/linux/uapi/alpha/asm/sysinfo.h",
            "/usr/lib/linux/uapi/alpha/asm/termbits.h",
            "/usr/lib/linux/uapi/alpha/asm/termios.h",
            "/usr/lib/linux/uapi/alpha/asm/types.h",
            "/usr/lib/linux/uapi/alpha/asm/unistd.h",
            "/usr/lib/linux/uapi/alpha/asm/unistd_32.h",
            "/usr/lib/linux/uapi/arm/asm/auxvec.h",
            "/usr/lib/linux/uapi/arm/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/arm/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/arm/asm/byteorder.h",
            "/usr/lib/linux/uapi/arm/asm/errno.h",
            "/usr/lib/linux/uapi/arm/asm/fcntl.h",
            "/usr/lib/linux/uapi/arm/asm/hwcap.h",
            "/usr/lib/linux/uapi/arm/asm/ioctl.h",
            "/usr/lib/linux/uapi/arm/asm/ioctls.h",
            "/usr/lib/linux/uapi/arm/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/arm/asm/kvm_para.h",
            "/usr/lib/linux/uapi/arm/asm/mman.h",
            "/usr/lib/linux/uapi/arm/asm/msgbuf.h",
            "/usr/lib/linux/uapi/arm/asm/param.h",
            "/usr/lib/linux/uapi/arm/asm/perf_regs.h",
            "/usr/lib/linux/uapi/arm/asm/poll.h",
            "/usr/lib/linux/uapi/arm/asm/posix_types.h",
            "/usr/lib/linux/uapi/arm/asm/ptrace.h",
            "/usr/lib/linux/uapi/arm/asm/resource.h",
            "/usr/lib/linux/uapi/arm/asm/sembuf.h",
            "/usr/lib/linux/uapi/arm/asm/setup.h",
            "/usr/lib/linux/uapi/arm/asm/shmbuf.h",
            "/usr/lib/linux/uapi/arm/asm/sigcontext.h",
            "/usr/lib/linux/uapi/arm/asm/siginfo.h",
            "/usr/lib/linux/uapi/arm/asm/signal.h",
            "/usr/lib/linux/uapi/arm/asm/socket.h",
            "/usr/lib/linux/uapi/arm/asm/sockios.h",
            "/usr/lib/linux/uapi/arm/asm/stat.h",
            "/usr/lib/linux/uapi/arm/asm/statfs.h",
            "/usr/lib/linux/uapi/arm/asm/swab.h",
            "/usr/lib/linux/uapi/arm/asm/termbits.h",
            "/usr/lib/linux/uapi/arm/asm/termios.h",
            "/usr/lib/linux/uapi/arm/asm/types.h",
            "/usr/lib/linux/uapi/arm/asm/unistd-eabi.h",
            "/usr/lib/linux/uapi/arm/asm/unistd-oabi.h",
            "/usr/lib/linux/uapi/arm/asm/unistd.h",
            "/usr/lib/linux/uapi/arm64/asm/auxvec.h",
            "/usr/lib/linux/uapi/arm64/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/arm64/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/arm64/asm/byteorder.h",
            "/usr/lib/linux/uapi/arm64/asm/errno.h",
            "/usr/lib/linux/uapi/arm64/asm/fcntl.h",
            "/usr/lib/linux/uapi/arm64/asm/hwcap.h",
            "/usr/lib/linux/uapi/arm64/asm/ioctl.h",
            "/usr/lib/linux/uapi/arm64/asm/ioctls.h",
            "/usr/lib/linux/uapi/arm64/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/arm64/asm/kvm.h",
            "/usr/lib/linux/uapi/arm64/asm/kvm_para.h",
            "/usr/lib/linux/uapi/arm64/asm/mman.h",
            "/usr/lib/linux/uapi/arm64/asm/msgbuf.h",
            "/usr/lib/linux/uapi/arm64/asm/param.h",
            "/usr/lib/linux/uapi/arm64/asm/perf_regs.h",
            "/usr/lib/linux/uapi/arm64/asm/poll.h",
            "/usr/lib/linux/uapi/arm64/asm/posix_types.h",
            "/usr/lib/linux/uapi/arm64/asm/ptrace.h",
            "/usr/lib/linux/uapi/arm64/asm/resource.h",
            "/usr/lib/linux/uapi/arm64/asm/sembuf.h",
            "/usr/lib/linux/uapi/arm64/asm/setup.h",
            "/usr/lib/linux/uapi/arm64/asm/shmbuf.h",
            "/usr/lib/linux/uapi/arm64/asm/sigcontext.h",
            "/usr/lib/linux/uapi/arm64/asm/siginfo.h",
            "/usr/lib/linux/uapi/arm64/asm/signal.h",
            "/usr/lib/linux/uapi/arm64/asm/socket.h",
            "/usr/lib/linux/uapi/arm64/asm/sockios.h",
            "/usr/lib/linux/uapi/arm64/asm/stat.h",
            "/usr/lib/linux/uapi/arm64/asm/statfs.h",
            "/usr/lib/linux/uapi/arm64/asm/sve_context.h",
            "/usr/lib/linux/uapi/arm64/asm/swab.h",
            "/usr/lib/linux/uapi/arm64/asm/termbits.h",
            "/usr/lib/linux/uapi/arm64/asm/termios.h",
            "/usr/lib/linux/uapi/arm64/asm/types.h",
            "/usr/lib/linux/uapi/arm64/asm/ucontext.h",
            "/usr/lib/linux/uapi/arm64/asm/unistd.h",
            "/usr/lib/linux/uapi/arm64/asm/unistd_64.h",
            "/usr/lib/linux/uapi/loongarch/asm/auxvec.h",
            "/usr/lib/linux/uapi/loongarch/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/loongarch/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/loongarch/asm/break.h",
            "/usr/lib/linux/uapi/loongarch/asm/byteorder.h",
            "/usr/lib/linux/uapi/loongarch/asm/errno.h",
            "/usr/lib/linux/uapi/loongarch/asm/fcntl.h",
            "/usr/lib/linux/uapi/loongarch/asm/hwcap.h",
            "/usr/lib/linux/uapi/loongarch/asm/ioctl.h",
            "/usr/lib/linux/uapi/loongarch/asm/ioctls.h",
            "/usr/lib/linux/uapi/loongarch/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/loongarch/asm/kvm.h",
            "/usr/lib/linux/uapi/loongarch/asm/kvm_para.h",
            "/usr/lib/linux/uapi/loongarch/asm/mman.h",
            "/usr/lib/linux/uapi/loongarch/asm/msgbuf.h",
            "/usr/lib/linux/uapi/loongarch/asm/param.h",
            "/usr/lib/linux/uapi/loongarch/asm/perf_regs.h",
            "/usr/lib/linux/uapi/loongarch/asm/poll.h",
            "/usr/lib/linux/uapi/loongarch/asm/posix_types.h",
            "/usr/lib/linux/uapi/loongarch/asm/ptrace.h",
            "/usr/lib/linux/uapi/loongarch/asm/reg.h",
            "/usr/lib/linux/uapi/loongarch/asm/resource.h",
            "/usr/lib/linux/uapi/loongarch/asm/sembuf.h",
            "/usr/lib/linux/uapi/loongarch/asm/setup.h",
            "/usr/lib/linux/uapi/loongarch/asm/shmbuf.h",
            "/usr/lib/linux/uapi/loongarch/asm/sigcontext.h",
            "/usr/lib/linux/uapi/loongarch/asm/siginfo.h",
            "/usr/lib/linux/uapi/loongarch/asm/signal.h",
            "/usr/lib/linux/uapi/loongarch/asm/socket.h",
            "/usr/lib/linux/uapi/loongarch/asm/sockios.h",
            "/usr/lib/linux/uapi/loongarch/asm/stat.h",
            "/usr/lib/linux/uapi/loongarch/asm/statfs.h",
            "/usr/lib/linux/uapi/loongarch/asm/swab.h",
            "/usr/lib/linux/uapi/loongarch/asm/termbits.h",
            "/usr/lib/linux/uapi/loongarch/asm/termios.h",
            "/usr/lib/linux/uapi/loongarch/asm/types.h",
            "/usr/lib/linux/uapi/loongarch/asm/ucontext.h",
            "/usr/lib/linux/uapi/loongarch/asm/unistd.h",
            "/usr/lib/linux/uapi/loongarch/asm/unistd_64.h",
            "/usr/lib/linux/uapi/m68k/asm/a.out.h",
            "/usr/lib/linux/uapi/m68k/asm/auxvec.h",
            "/usr/lib/linux/uapi/m68k/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo-amiga.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo-apollo.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo-atari.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo-hp300.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo-mac.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo-q40.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo-virt.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo-vme.h",
            "/usr/lib/linux/uapi/m68k/asm/bootinfo.h",
            "/usr/lib/linux/uapi/m68k/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/m68k/asm/byteorder.h",
            "/usr/lib/linux/uapi/m68k/asm/cachectl.h",
            "/usr/lib/linux/uapi/m68k/asm/errno.h",
            "/usr/lib/linux/uapi/m68k/asm/fcntl.h",
            "/usr/lib/linux/uapi/m68k/asm/ioctl.h",
            "/usr/lib/linux/uapi/m68k/asm/ioctls.h",
            "/usr/lib/linux/uapi/m68k/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/m68k/asm/mman.h",
            "/usr/lib/linux/uapi/m68k/asm/msgbuf.h",
            "/usr/lib/linux/uapi/m68k/asm/param.h",
            "/usr/lib/linux/uapi/m68k/asm/poll.h",
            "/usr/lib/linux/uapi/m68k/asm/posix_types.h",
            "/usr/lib/linux/uapi/m68k/asm/ptrace.h",
            "/usr/lib/linux/uapi/m68k/asm/resource.h",
            "/usr/lib/linux/uapi/m68k/asm/sembuf.h",
            "/usr/lib/linux/uapi/m68k/asm/setup.h",
            "/usr/lib/linux/uapi/m68k/asm/shmbuf.h",
            "/usr/lib/linux/uapi/m68k/asm/sigcontext.h",
            "/usr/lib/linux/uapi/m68k/asm/siginfo.h",
            "/usr/lib/linux/uapi/m68k/asm/signal.h",
            "/usr/lib/linux/uapi/m68k/asm/socket.h",
            "/usr/lib/linux/uapi/m68k/asm/sockios.h",
            "/usr/lib/linux/uapi/m68k/asm/stat.h",
            "/usr/lib/linux/uapi/m68k/asm/statfs.h",
            "/usr/lib/linux/uapi/m68k/asm/swab.h",
            "/usr/lib/linux/uapi/m68k/asm/termbits.h",
            "/usr/lib/linux/uapi/m68k/asm/termios.h",
            "/usr/lib/linux/uapi/m68k/asm/types.h",
            "/usr/lib/linux/uapi/m68k/asm/unistd.h",
            "/usr/lib/linux/uapi/m68k/asm/unistd_32.h",
            "/usr/lib/linux/uapi/mips/asm/auxvec.h",
            "/usr/lib/linux/uapi/mips/asm/bitfield.h",
            "/usr/lib/linux/uapi/mips/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/mips/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/mips/asm/break.h",
            "/usr/lib/linux/uapi/mips/asm/byteorder.h",
            "/usr/lib/linux/uapi/mips/asm/cachectl.h",
            "/usr/lib/linux/uapi/mips/asm/errno.h",
            "/usr/lib/linux/uapi/mips/asm/fcntl.h",
            "/usr/lib/linux/uapi/mips/asm/hwcap.h",
            "/usr/lib/linux/uapi/mips/asm/inst.h",
            "/usr/lib/linux/uapi/mips/asm/ioctl.h",
            "/usr/lib/linux/uapi/mips/asm/ioctls.h",
            "/usr/lib/linux/uapi/mips/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/mips/asm/kvm.h",
            "/usr/lib/linux/uapi/mips/asm/kvm_para.h",
            "/usr/lib/linux/uapi/mips/asm/mman.h",
            "/usr/lib/linux/uapi/mips/asm/msgbuf.h",
            "/usr/lib/linux/uapi/mips/asm/param.h",
            "/usr/lib/linux/uapi/mips/asm/perf_regs.h",
            "/usr/lib/linux/uapi/mips/asm/poll.h",
            "/usr/lib/linux/uapi/mips/asm/posix_types.h",
            "/usr/lib/linux/uapi/mips/asm/ptrace.h",
            "/usr/lib/linux/uapi/mips/asm/reg.h",
            "/usr/lib/linux/uapi/mips/asm/resource.h",
            "/usr/lib/linux/uapi/mips/asm/sembuf.h",
            "/usr/lib/linux/uapi/mips/asm/setup.h",
            "/usr/lib/linux/uapi/mips/asm/sgidefs.h",
            "/usr/lib/linux/uapi/mips/asm/shmbuf.h",
            "/usr/lib/linux/uapi/mips/asm/sigcontext.h",
            "/usr/lib/linux/uapi/mips/asm/siginfo.h",
            "/usr/lib/linux/uapi/mips/asm/signal.h",
            "/usr/lib/linux/uapi/mips/asm/socket.h",
            "/usr/lib/linux/uapi/mips/asm/sockios.h",
            "/usr/lib/linux/uapi/mips/asm/stat.h",
            "/usr/lib/linux/uapi/mips/asm/statfs.h",
            "/usr/lib/linux/uapi/mips/asm/swab.h",
            "/usr/lib/linux/uapi/mips/asm/sysmips.h",
            "/usr/lib/linux/uapi/mips/asm/termbits.h",
            "/usr/lib/linux/uapi/mips/asm/termios.h",
            "/usr/lib/linux/uapi/mips/asm/types.h",
            "/usr/lib/linux/uapi/mips/asm/ucontext.h",
            "/usr/lib/linux/uapi/mips/asm/unistd.h",
            "/usr/lib/linux/uapi/mips/asm/unistd_n32.h",
            "/usr/lib/linux/uapi/mips/asm/unistd_n64.h",
            "/usr/lib/linux/uapi/mips/asm/unistd_o32.h",
            "/usr/lib/linux/uapi/parisc/asm/auxvec.h",
            "/usr/lib/linux/uapi/parisc/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/parisc/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/parisc/asm/byteorder.h",
            "/usr/lib/linux/uapi/parisc/asm/cachectl.h",
            "/usr/lib/linux/uapi/parisc/asm/errno.h",
            "/usr/lib/linux/uapi/parisc/asm/fcntl.h",
            "/usr/lib/linux/uapi/parisc/asm/ioctl.h",
            "/usr/lib/linux/uapi/parisc/asm/ioctls.h",
            "/usr/lib/linux/uapi/parisc/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/parisc/asm/mman.h",
            "/usr/lib/linux/uapi/parisc/asm/msgbuf.h",
            "/usr/lib/linux/uapi/parisc/asm/param.h",
            "/usr/lib/linux/uapi/parisc/asm/pdc.h",
            "/usr/lib/linux/uapi/parisc/asm/poll.h",
            "/usr/lib/linux/uapi/parisc/asm/posix_types.h",
            "/usr/lib/linux/uapi/parisc/asm/ptrace.h",
            "/usr/lib/linux/uapi/parisc/asm/resource.h",
            "/usr/lib/linux/uapi/parisc/asm/sembuf.h",
            "/usr/lib/linux/uapi/parisc/asm/setup.h",
            "/usr/lib/linux/uapi/parisc/asm/shmbuf.h",
            "/usr/lib/linux/uapi/parisc/asm/sigcontext.h",
            "/usr/lib/linux/uapi/parisc/asm/siginfo.h",
            "/usr/lib/linux/uapi/parisc/asm/signal.h",
            "/usr/lib/linux/uapi/parisc/asm/socket.h",
            "/usr/lib/linux/uapi/parisc/asm/sockios.h",
            "/usr/lib/linux/uapi/parisc/asm/stat.h",
            "/usr/lib/linux/uapi/parisc/asm/statfs.h",
            "/usr/lib/linux/uapi/parisc/asm/swab.h",
            "/usr/lib/linux/uapi/parisc/asm/termbits.h",
            "/usr/lib/linux/uapi/parisc/asm/termios.h",
            "/usr/lib/linux/uapi/parisc/asm/types.h",
            "/usr/lib/linux/uapi/parisc/asm/unistd.h",
            "/usr/lib/linux/uapi/parisc/asm/unistd_32.h",
            "/usr/lib/linux/uapi/parisc/asm/unistd_64.h",
            "/usr/lib/linux/uapi/powerpc/asm/auxvec.h",
            "/usr/lib/linux/uapi/powerpc/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/powerpc/asm/bootx.h",
            "/usr/lib/linux/uapi/powerpc/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/powerpc/asm/byteorder.h",
            "/usr/lib/linux/uapi/powerpc/asm/cputable.h",
            "/usr/lib/linux/uapi/powerpc/asm/eeh.h",
            "/usr/lib/linux/uapi/powerpc/asm/elf.h",
            "/usr/lib/linux/uapi/powerpc/asm/epapr_hcalls.h",
            "/usr/lib/linux/uapi/powerpc/asm/errno.h",
            "/usr/lib/linux/uapi/powerpc/asm/fcntl.h",
            "/usr/lib/linux/uapi/powerpc/asm/ioctl.h",
            "/usr/lib/linux/uapi/powerpc/asm/ioctls.h",
            "/usr/lib/linux/uapi/powerpc/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/powerpc/asm/kvm.h",
            "/usr/lib/linux/uapi/powerpc/asm/kvm_para.h",
            "/usr/lib/linux/uapi/powerpc/asm/mman.h",
            "/usr/lib/linux/uapi/powerpc/asm/msgbuf.h",
            "/usr/lib/linux/uapi/powerpc/asm/nvram.h",
            "/usr/lib/linux/uapi/powerpc/asm/opal-prd.h",
            "/usr/lib/linux/uapi/powerpc/asm/papr-miscdev.h",
            "/usr/lib/linux/uapi/powerpc/asm/papr-sysparm.h",
            "/usr/lib/linux/uapi/powerpc/asm/papr-vpd.h",
            "/usr/lib/linux/uapi/powerpc/asm/param.h",
            "/usr/lib/linux/uapi/powerpc/asm/perf_event.h",
            "/usr/lib/linux/uapi/powerpc/asm/perf_regs.h",
            "/usr/lib/linux/uapi/powerpc/asm/poll.h",
            "/usr/lib/linux/uapi/powerpc/asm/posix_types.h",
            "/usr/lib/linux/uapi/powerpc/asm/ps3fb.h",
            "/usr/lib/linux/uapi/powerpc/asm/ptrace.h",
            "/usr/lib/linux/uapi/powerpc/asm/resource.h",
            "/usr/lib/linux/uapi/powerpc/asm/sembuf.h",
            "/usr/lib/linux/uapi/powerpc/asm/setup.h",
            "/usr/lib/linux/uapi/powerpc/asm/shmbuf.h",
            "/usr/lib/linux/uapi/powerpc/asm/sigcontext.h",
            "/usr/lib/linux/uapi/powerpc/asm/siginfo.h",
            "/usr/lib/linux/uapi/powerpc/asm/signal.h",
            "/usr/lib/linux/uapi/powerpc/asm/socket.h",
            "/usr/lib/linux/uapi/powerpc/asm/sockios.h",
            "/usr/lib/linux/uapi/powerpc/asm/spu_info.h",
            "/usr/lib/linux/uapi/powerpc/asm/stat.h",
            "/usr/lib/linux/uapi/powerpc/asm/statfs.h",
            "/usr/lib/linux/uapi/powerpc/asm/swab.h",
            "/usr/lib/linux/uapi/powerpc/asm/termbits.h",
            "/usr/lib/linux/uapi/powerpc/asm/termios.h",
            "/usr/lib/linux/uapi/powerpc/asm/tm.h",
            "/usr/lib/linux/uapi/powerpc/asm/types.h",
            "/usr/lib/linux/uapi/powerpc/asm/ucontext.h",
            "/usr/lib/linux/uapi/powerpc/asm/unistd.h",
            "/usr/lib/linux/uapi/powerpc/asm/unistd_32.h",
            "/usr/lib/linux/uapi/powerpc/asm/unistd_64.h",
            "/usr/lib/linux/uapi/powerpc/asm/vas-api.h",
            "/usr/lib/linux/uapi/riscv/asm/auxvec.h",
            "/usr/lib/linux/uapi/riscv/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/riscv/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/riscv/asm/byteorder.h",
            "/usr/lib/linux/uapi/riscv/asm/elf.h",
            "/usr/lib/linux/uapi/riscv/asm/errno.h",
            "/usr/lib/linux/uapi/riscv/asm/fcntl.h",
            "/usr/lib/linux/uapi/riscv/asm/hwcap.h",
            "/usr/lib/linux/uapi/riscv/asm/hwprobe.h",
            "/usr/lib/linux/uapi/riscv/asm/ioctl.h",
            "/usr/lib/linux/uapi/riscv/asm/ioctls.h",
            "/usr/lib/linux/uapi/riscv/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/riscv/asm/kvm.h",
            "/usr/lib/linux/uapi/riscv/asm/mman.h",
            "/usr/lib/linux/uapi/riscv/asm/msgbuf.h",
            "/usr/lib/linux/uapi/riscv/asm/param.h",
            "/usr/lib/linux/uapi/riscv/asm/perf_regs.h",
            "/usr/lib/linux/uapi/riscv/asm/poll.h",
            "/usr/lib/linux/uapi/riscv/asm/posix_types.h",
            "/usr/lib/linux/uapi/riscv/asm/ptrace.h",
            "/usr/lib/linux/uapi/riscv/asm/resource.h",
            "/usr/lib/linux/uapi/riscv/asm/sembuf.h",
            "/usr/lib/linux/uapi/riscv/asm/setup.h",
            "/usr/lib/linux/uapi/riscv/asm/shmbuf.h",
            "/usr/lib/linux/uapi/riscv/asm/sigcontext.h",
            "/usr/lib/linux/uapi/riscv/asm/siginfo.h",
            "/usr/lib/linux/uapi/riscv/asm/signal.h",
            "/usr/lib/linux/uapi/riscv/asm/socket.h",
            "/usr/lib/linux/uapi/riscv/asm/sockios.h",
            "/usr/lib/linux/uapi/riscv/asm/stat.h",
            "/usr/lib/linux/uapi/riscv/asm/statfs.h",
            "/usr/lib/linux/uapi/riscv/asm/swab.h",
            "/usr/lib/linux/uapi/riscv/asm/termbits.h",
            "/usr/lib/linux/uapi/riscv/asm/termios.h",
            "/usr/lib/linux/uapi/riscv/asm/types.h",
            "/usr/lib/linux/uapi/riscv/asm/ucontext.h",
            "/usr/lib/linux/uapi/riscv/asm/unistd.h",
            "/usr/lib/linux/uapi/riscv/asm/unistd_32.h",
            "/usr/lib/linux/uapi/riscv/asm/unistd_64.h",
            "/usr/lib/linux/uapi/s390/asm/auxvec.h",
            "/usr/lib/linux/uapi/s390/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/s390/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/s390/asm/byteorder.h",
            "/usr/lib/linux/uapi/s390/asm/chpid.h",
            "/usr/lib/linux/uapi/s390/asm/chsc.h",
            "/usr/lib/linux/uapi/s390/asm/clp.h",
            "/usr/lib/linux/uapi/s390/asm/cmb.h",
            "/usr/lib/linux/uapi/s390/asm/dasd.h",
            "/usr/lib/linux/uapi/s390/asm/errno.h",
            "/usr/lib/linux/uapi/s390/asm/fcntl.h",
            "/usr/lib/linux/uapi/s390/asm/fs3270.h",
            "/usr/lib/linux/uapi/s390/asm/guarded_storage.h",
            "/usr/lib/linux/uapi/s390/asm/hwctrset.h",
            "/usr/lib/linux/uapi/s390/asm/hypfs.h",
            "/usr/lib/linux/uapi/s390/asm/ioctl.h",
            "/usr/lib/linux/uapi/s390/asm/ioctls.h",
            "/usr/lib/linux/uapi/s390/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/s390/asm/ipl.h",
            "/usr/lib/linux/uapi/s390/asm/kvm.h",
            "/usr/lib/linux/uapi/s390/asm/kvm_para.h",
            "/usr/lib/linux/uapi/s390/asm/kvm_perf.h",
            "/usr/lib/linux/uapi/s390/asm/mman.h",
            "/usr/lib/linux/uapi/s390/asm/monwriter.h",
            "/usr/lib/linux/uapi/s390/asm/msgbuf.h",
            "/usr/lib/linux/uapi/s390/asm/param.h",
            "/usr/lib/linux/uapi/s390/asm/perf_regs.h",
            "/usr/lib/linux/uapi/s390/asm/pkey.h",
            "/usr/lib/linux/uapi/s390/asm/poll.h",
            "/usr/lib/linux/uapi/s390/asm/posix_types.h",
            "/usr/lib/linux/uapi/s390/asm/ptrace.h",
            "/usr/lib/linux/uapi/s390/asm/qeth.h",
            "/usr/lib/linux/uapi/s390/asm/raw3270.h",
            "/usr/lib/linux/uapi/s390/asm/resource.h",
            "/usr/lib/linux/uapi/s390/asm/runtime_instr.h",
            "/usr/lib/linux/uapi/s390/asm/schid.h",
            "/usr/lib/linux/uapi/s390/asm/sclp_ctl.h",
            "/usr/lib/linux/uapi/s390/asm/sembuf.h",
            "/usr/lib/linux/uapi/s390/asm/setup.h",
            "/usr/lib/linux/uapi/s390/asm/shmbuf.h",
            "/usr/lib/linux/uapi/s390/asm/sie.h",
            "/usr/lib/linux/uapi/s390/asm/sigcontext.h",
            "/usr/lib/linux/uapi/s390/asm/siginfo.h",
            "/usr/lib/linux/uapi/s390/asm/signal.h",
            "/usr/lib/linux/uapi/s390/asm/socket.h",
            "/usr/lib/linux/uapi/s390/asm/sockios.h",
            "/usr/lib/linux/uapi/s390/asm/stat.h",
            "/usr/lib/linux/uapi/s390/asm/statfs.h",
            "/usr/lib/linux/uapi/s390/asm/sthyi.h",
            "/usr/lib/linux/uapi/s390/asm/swab.h",
            "/usr/lib/linux/uapi/s390/asm/tape390.h",
            "/usr/lib/linux/uapi/s390/asm/termbits.h",
            "/usr/lib/linux/uapi/s390/asm/termios.h",
            "/usr/lib/linux/uapi/s390/asm/types.h",
            "/usr/lib/linux/uapi/s390/asm/ucontext.h",
            "/usr/lib/linux/uapi/s390/asm/unistd.h",
            "/usr/lib/linux/uapi/s390/asm/unistd_32.h",
            "/usr/lib/linux/uapi/s390/asm/unistd_64.h",
            "/usr/lib/linux/uapi/s390/asm/uvdevice.h",
            "/usr/lib/linux/uapi/s390/asm/virtio-ccw.h",
            "/usr/lib/linux/uapi/s390/asm/vmcp.h",
            "/usr/lib/linux/uapi/s390/asm/vtoc.h",
            "/usr/lib/linux/uapi/s390/asm/zcrypt.h",
            "/usr/lib/linux/uapi/sh/asm/auxvec.h",
            "/usr/lib/linux/uapi/sh/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/sh/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/sh/asm/byteorder.h",
            "/usr/lib/linux/uapi/sh/asm/cachectl.h",
            "/usr/lib/linux/uapi/sh/asm/cpu-features.h",
            "/usr/lib/linux/uapi/sh/asm/errno.h",
            "/usr/lib/linux/uapi/sh/asm/fcntl.h",
            "/usr/lib/linux/uapi/sh/asm/hw_breakpoint.h",
            "/usr/lib/linux/uapi/sh/asm/ioctl.h",
            "/usr/lib/linux/uapi/sh/asm/ioctls.h",
            "/usr/lib/linux/uapi/sh/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/sh/asm/mman.h",
            "/usr/lib/linux/uapi/sh/asm/msgbuf.h",
            "/usr/lib/linux/uapi/sh/asm/param.h",
            "/usr/lib/linux/uapi/sh/asm/poll.h",
            "/usr/lib/linux/uapi/sh/asm/posix_types.h",
            "/usr/lib/linux/uapi/sh/asm/posix_types_32.h",
            "/usr/lib/linux/uapi/sh/asm/ptrace.h",
            "/usr/lib/linux/uapi/sh/asm/ptrace_32.h",
            "/usr/lib/linux/uapi/sh/asm/resource.h",
            "/usr/lib/linux/uapi/sh/asm/sembuf.h",
            "/usr/lib/linux/uapi/sh/asm/setup.h",
            "/usr/lib/linux/uapi/sh/asm/shmbuf.h",
            "/usr/lib/linux/uapi/sh/asm/sigcontext.h",
            "/usr/lib/linux/uapi/sh/asm/siginfo.h",
            "/usr/lib/linux/uapi/sh/asm/signal.h",
            "/usr/lib/linux/uapi/sh/asm/socket.h",
            "/usr/lib/linux/uapi/sh/asm/sockios.h",
            "/usr/lib/linux/uapi/sh/asm/stat.h",
            "/usr/lib/linux/uapi/sh/asm/statfs.h",
            "/usr/lib/linux/uapi/sh/asm/swab.h",
            "/usr/lib/linux/uapi/sh/asm/termbits.h",
            "/usr/lib/linux/uapi/sh/asm/termios.h",
            "/usr/lib/linux/uapi/sh/asm/types.h",
            "/usr/lib/linux/uapi/sh/asm/ucontext.h",
            "/usr/lib/linux/uapi/sh/asm/unistd.h",
            "/usr/lib/linux/uapi/sh/asm/unistd_32.h",
            "/usr/lib/linux/uapi/sparc/asm/apc.h",
            "/usr/lib/linux/uapi/sparc/asm/asi.h",
            "/usr/lib/linux/uapi/sparc/asm/auxvec.h",
            "/usr/lib/linux/uapi/sparc/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/sparc/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/sparc/asm/byteorder.h",
            "/usr/lib/linux/uapi/sparc/asm/display7seg.h",
            "/usr/lib/linux/uapi/sparc/asm/envctrl.h",
            "/usr/lib/linux/uapi/sparc/asm/errno.h",
            "/usr/lib/linux/uapi/sparc/asm/fbio.h",
            "/usr/lib/linux/uapi/sparc/asm/fcntl.h",
            "/usr/lib/linux/uapi/sparc/asm/ioctl.h",
            "/usr/lib/linux/uapi/sparc/asm/ioctls.h",
            "/usr/lib/linux/uapi/sparc/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/sparc/asm/mman.h",
            "/usr/lib/linux/uapi/sparc/asm/msgbuf.h",
            "/usr/lib/linux/uapi/sparc/asm/openpromio.h",
            "/usr/lib/linux/uapi/sparc/asm/oradax.h",
            "/usr/lib/linux/uapi/sparc/asm/param.h",
            "/usr/lib/linux/uapi/sparc/asm/perfctr.h",
            "/usr/lib/linux/uapi/sparc/asm/poll.h",
            "/usr/lib/linux/uapi/sparc/asm/posix_types.h",
            "/usr/lib/linux/uapi/sparc/asm/psr.h",
            "/usr/lib/linux/uapi/sparc/asm/psrcompat.h",
            "/usr/lib/linux/uapi/sparc/asm/pstate.h",
            "/usr/lib/linux/uapi/sparc/asm/ptrace.h",
            "/usr/lib/linux/uapi/sparc/asm/resource.h",
            "/usr/lib/linux/uapi/sparc/asm/sembuf.h",
            "/usr/lib/linux/uapi/sparc/asm/setup.h",
            "/usr/lib/linux/uapi/sparc/asm/shmbuf.h",
            "/usr/lib/linux/uapi/sparc/asm/sigcontext.h",
            "/usr/lib/linux/uapi/sparc/asm/siginfo.h",
            "/usr/lib/linux/uapi/sparc/asm/signal.h",
            "/usr/lib/linux/uapi/sparc/asm/socket.h",
            "/usr/lib/linux/uapi/sparc/asm/sockios.h",
            "/usr/lib/linux/uapi/sparc/asm/stat.h",
            "/usr/lib/linux/uapi/sparc/asm/statfs.h",
            "/usr/lib/linux/uapi/sparc/asm/swab.h",
            "/usr/lib/linux/uapi/sparc/asm/termbits.h",
            "/usr/lib/linux/uapi/sparc/asm/termios.h",
            "/usr/lib/linux/uapi/sparc/asm/traps.h",
            "/usr/lib/linux/uapi/sparc/asm/types.h",
            "/usr/lib/linux/uapi/sparc/asm/uctx.h",
            "/usr/lib/linux/uapi/sparc/asm/unistd.h",
            "/usr/lib/linux/uapi/sparc/asm/unistd_32.h",
            "/usr/lib/linux/uapi/sparc/asm/unistd_64.h",
            "/usr/lib/linux/uapi/sparc/asm/utrap.h",
            "/usr/lib/linux/uapi/sparc/asm/watchdog.h",
            "/usr/lib/linux/uapi/x86/asm/a.out.h",
            "/usr/lib/linux/uapi/x86/asm/amd_hsmp.h",
            "/usr/lib/linux/uapi/x86/asm/auxvec.h",
            "/usr/lib/linux/uapi/x86/asm/bitsperlong.h",
            "/usr/lib/linux/uapi/x86/asm/boot.h",
            "/usr/lib/linux/uapi/x86/asm/bootparam.h",
            "/usr/lib/linux/uapi/x86/asm/bpf_perf_event.h",
            "/usr/lib/linux/uapi/x86/asm/byteorder.h",
            "/usr/lib/linux/uapi/x86/asm/debugreg.h",
            "/usr/lib/linux/uapi/x86/asm/e820.h",
            "/usr/lib/linux/uapi/x86/asm/elf.h",
            "/usr/lib/linux/uapi/x86/asm/errno.h",
            "/usr/lib/linux/uapi/x86/asm/fcntl.h",
            "/usr/lib/linux/uapi/x86/asm/hw_breakpoint.h",
            "/usr/lib/linux/uapi/x86/asm/hwcap2.h",
            "/usr/lib/linux/uapi/x86/asm/ioctl.h",
            "/usr/lib/linux/uapi/x86/asm/ioctls.h",
            "/usr/lib/linux/uapi/x86/asm/ipcbuf.h",
            "/usr/lib/linux/uapi/x86/asm/ist.h",
            "/usr/lib/linux/uapi/x86/asm/kvm.h",
            "/usr/lib/linux/uapi/x86/asm/kvm_para.h",
            "/usr/lib/linux/uapi/x86/asm/kvm_perf.h",
            "/usr/lib/linux/uapi/x86/asm/ldt.h",
            "/usr/lib/linux/uapi/x86/asm/mce.h",
            "/usr/lib/linux/uapi/x86/asm/mman.h",
            "/usr/lib/linux/uapi/x86/asm/msgbuf.h",
            "/usr/lib/linux/uapi/x86/asm/msr.h",
            "/usr/lib/linux/uapi/x86/asm/mtrr.h",
            "/usr/lib/linux/uapi/x86/asm/param.h",
            "/usr/lib/linux/uapi/x86/asm/perf_regs.h",
            "/usr/lib/linux/uapi/x86/asm/poll.h",
            "/usr/lib/linux/uapi/x86/asm/posix_types.h",
            "/usr/lib/linux/uapi/x86/asm/posix_types_32.h",
            "/usr/lib/linux/uapi/x86/asm/posix_types_64.h",
            "/usr/lib/linux/uapi/x86/asm/posix_types_x32.h",
            "/usr/lib/linux/uapi/x86/asm/prctl.h",
            "/usr/lib/linux/uapi/x86/asm/processor-flags.h",
            "/usr/lib/linux/uapi/x86/asm/ptrace-abi.h",
            "/usr/lib/linux/uapi/x86/asm/ptrace.h",
            "/usr/lib/linux/uapi/x86/asm/resource.h",
            "/usr/lib/linux/uapi/x86/asm/sembuf.h",
            "/usr/lib/linux/uapi/x86/asm/setup.h",
            "/usr/lib/linux/uapi/x86/asm/setup_data.h",
            "/usr/lib/linux/uapi/x86/asm/sgx.h",
            "/usr/lib/linux/uapi/x86/asm/shmbuf.h",
            "/usr/lib/linux/uapi/x86/asm/sigcontext.h",
            "/usr/lib/linux/uapi/x86/asm/sigcontext32.h",
            "/usr/lib/linux/uapi/x86/asm/siginfo.h",
            "/usr/lib/linux/uapi/x86/asm/signal.h",
            "/usr/lib/linux/uapi/x86/asm/socket.h",
            "/usr/lib/linux/uapi/x86/asm/sockios.h",
            "/usr/lib/linux/uapi/x86/asm/stat.h",
            "/usr/lib/linux/uapi/x86/asm/statfs.h",
            "/usr/lib/linux/uapi/x86/asm/svm.h",
            "/usr/lib/linux/uapi/x86/asm/swab.h",
            "/usr/lib/linux/uapi/x86/asm/termbits.h",
            "/usr/lib/linux/uapi/x86/asm/termios.h",
            "/usr/lib/linux/uapi/x86/asm/types.h",
            "/usr/lib/linux/uapi/x86/asm/ucontext.h",
            "/usr/lib/linux/uapi/x86/asm/unistd.h",
            "/usr/lib/linux/uapi/x86/asm/unistd_32.h",
            "/usr/lib/linux/uapi/x86/asm/unistd_64.h",
            "/usr/lib/linux/uapi/x86/asm/unistd_x32.h",
            "/usr/lib/linux/uapi/x86/asm/vm86.h",
            "/usr/lib/linux/uapi/x86/asm/vmx.h",
            "/usr/lib/linux/uapi/x86/asm/vsyscall.h",
            "/usr/share/doc/linux-libc-dev/changelog.Debian.gz",
            "/usr/share/doc/linux-libc-dev/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "login@1:4.16.0-2+really2.41.5-0+deb13u1",
          "Name": "login",
          "Identifier": {
            "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "dc99754e767c40b9"
          },
          "Version": "4.16.0-2+really2.41.5",
          "Release": "0+deb13u1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit1@1:4.0.2-2+deb13u1",
            "libc6@2.41-12+deb13u4",
            "libcrypt1@1:4.4.38-1",
            "libpam-modules@1.7.0-5",
            "libpam-runtime@1.7.0-5",
            "libpam0g@1.7.0-5"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/login",
            "/usr/bin/newgrp",
            "/usr/sbin/nologin",
            "/usr/share/bash-completion/completions/newgrp",
            "/usr/share/doc/login/NEWS.Debian.gz",
            "/usr/share/doc/login/changelog.Debian.gz",
            "/usr/share/doc/login/changelog.gz",
            "/usr/share/doc/login/copyright",
            "/usr/share/lintian/overrides/login",
            "/usr/share/man/de/man1/login.1.gz",
            "/usr/share/man/de/man1/newgrp.1.gz",
            "/usr/share/man/de/man8/nologin.8.gz",
            "/usr/share/man/fr/man1/login.1.gz",
            "/usr/share/man/man1/login.1.gz",
            "/usr/share/man/man1/newgrp.1.gz",
            "/usr/share/man/man8/nologin.8.gz",
            "/usr/share/man/pl/man1/login.1.gz",
            "/usr/share/man/pl/man1/newgrp.1.gz",
            "/usr/share/man/pl/man8/nologin.8.gz",
            "/usr/share/man/ro/man1/login.1.gz",
            "/usr/share/man/ro/man1/newgrp.1.gz",
            "/usr/share/man/ro/man8/nologin.8.gz",
            "/usr/share/man/sr/man1/login.1.gz",
            "/usr/share/man/sr/man1/newgrp.1.gz",
            "/usr/share/man/sr/man8/nologin.8.gz",
            "/usr/share/man/uk/man1/login.1.gz",
            "/usr/share/man/uk/man1/newgrp.1.gz",
            "/usr/share/man/uk/man8/nologin.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "login.defs@1:4.17.4-2",
          "Name": "login.defs",
          "Identifier": {
            "PURL": "pkg:deb/debian/login.defs@4.17.4-2?arch=all\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "b6a337588c67d5a3"
          },
          "Version": "4.17.4",
          "Release": "2",
          "Epoch": 1,
          "Arch": "all",
          "SrcName": "shadow",
          "SrcVersion": "4.17.4",
          "SrcRelease": "2",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-3-Clause",
            "GPL-1.0-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/login.defs/NEWS.Debian.gz",
            "/usr/share/doc/login.defs/changelog.Debian.gz",
            "/usr/share/doc/login.defs/changelog.gz",
            "/usr/share/doc/login.defs/copyright",
            "/usr/share/man/de/man5/login.defs.5.gz",
            "/usr/share/man/fr/man5/login.defs.5.gz",
            "/usr/share/man/it/man5/login.defs.5.gz",
            "/usr/share/man/ja/man5/login.defs.5.gz",
            "/usr/share/man/man5/login.defs.5.gz",
            "/usr/share/man/ru/man5/login.defs.5.gz",
            "/usr/share/man/uk/man5/login.defs.5.gz",
            "/usr/share/man/zh_CN/man5/login.defs.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "m4@1.4.19-8",
          "Name": "m4",
          "Identifier": {
            "PURL": "pkg:deb/debian/m4@1.4.19-8?arch=amd64\u0026distro=debian-13.7",
            "UID": "535a53b8c53825af"
          },
          "Version": "1.4.19",
          "Release": "8",
          "Arch": "amd64",
          "SrcName": "m4",
          "SrcVersion": "1.4.19",
          "SrcRelease": "8",
          "Licenses": [
            "GPL-2.0-or-later",
            "GFDL-1.3-or-later"
          ],
          "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/m4",
            "/usr/share/doc/m4/NEWS.gz",
            "/usr/share/doc/m4/README.gz",
            "/usr/share/doc/m4/THANKS.gz",
            "/usr/share/doc/m4/TODO",
            "/usr/share/doc/m4/changelog.Debian.gz",
            "/usr/share/doc/m4/changelog.gz",
            "/usr/share/doc/m4/copyright",
            "/usr/share/doc/m4/examples/COPYING",
            "/usr/share/doc/m4/examples/capitalize.m4",
            "/usr/share/doc/m4/examples/capitalize2.m4",
            "/usr/share/doc/m4/examples/comments.m4",
            "/usr/share/doc/m4/examples/curry.m4",
            "/usr/share/doc/m4/examples/ddivert.m4",
            "/usr/share/doc/m4/examples/debug.m4",
            "/usr/share/doc/m4/examples/esyscmd.m4",
            "/usr/share/doc/m4/examples/exp.m4",
            "/usr/share/doc/m4/examples/file.m4",
            "/usr/share/doc/m4/examples/foo",
            "/usr/share/doc/m4/examples/foreach.m4",
            "/usr/share/doc/m4/examples/foreach2.m4",
            "/usr/share/doc/m4/examples/foreachq.m4",
            "/usr/share/doc/m4/examples/foreachq2.m4",
            "/usr/share/doc/m4/examples/foreachq3.m4",
            "/usr/share/doc/m4/examples/foreachq4.m4",
            "/usr/share/doc/m4/examples/forloop.m4",
            "/usr/share/doc/m4/examples/forloop2.m4",
            "/usr/share/doc/m4/examples/forloop3.m4",
            "/usr/share/doc/m4/examples/fstab.m4",
            "/usr/share/doc/m4/examples/hanoi.m4",
            "/usr/share/doc/m4/examples/incl-test.m4",
            "/usr/share/doc/m4/examples/incl.m4",
            "/usr/share/doc/m4/examples/include.m4",
            "/usr/share/doc/m4/examples/indir.m4",
            "/usr/share/doc/m4/examples/join.m4",
            "/usr/share/doc/m4/examples/loop.m4",
            "/usr/share/doc/m4/examples/misc.m4",
            "/usr/share/doc/m4/examples/multiquotes.m4",
            "/usr/share/doc/m4/examples/patsubst.m4",
            "/usr/share/doc/m4/examples/pushpop.m4",
            "/usr/share/doc/m4/examples/quote.m4",
            "/usr/share/doc/m4/examples/regexp.m4",
            "/usr/share/doc/m4/examples/reverse.m4",
            "/usr/share/doc/m4/examples/stack.m4",
            "/usr/share/doc/m4/examples/stack_sep.m4",
            "/usr/share/doc/m4/examples/sync-lines.m4",
            "/usr/share/doc/m4/examples/sysv-args.m4",
            "/usr/share/doc/m4/examples/trace.m4",
            "/usr/share/doc/m4/examples/translit.m4",
            "/usr/share/doc/m4/examples/undivert.incl",
            "/usr/share/doc/m4/examples/undivert.m4",
            "/usr/share/doc/m4/examples/wrap.m4",
            "/usr/share/doc/m4/examples/wrapfifo.m4",
            "/usr/share/doc/m4/examples/wraplifo.m4",
            "/usr/share/doc/m4/examples/wraplifo2.m4",
            "/usr/share/info/m4.info-1.gz",
            "/usr/share/info/m4.info-2.gz",
            "/usr/share/info/m4.info.gz",
            "/usr/share/locale/bg/LC_MESSAGES/m4.mo",
            "/usr/share/locale/cs/LC_MESSAGES/m4.mo",
            "/usr/share/locale/da/LC_MESSAGES/m4.mo",
            "/usr/share/locale/de/LC_MESSAGES/m4.mo",
            "/usr/share/locale/el/LC_MESSAGES/m4.mo",
            "/usr/share/locale/eo/LC_MESSAGES/m4.mo",
            "/usr/share/locale/es/LC_MESSAGES/m4.mo",
            "/usr/share/locale/fi/LC_MESSAGES/m4.mo",
            "/usr/share/locale/fr/LC_MESSAGES/m4.mo",
            "/usr/share/locale/ga/LC_MESSAGES/m4.mo",
            "/usr/share/locale/gl/LC_MESSAGES/m4.mo",
            "/usr/share/locale/hr/LC_MESSAGES/m4.mo",
            "/usr/share/locale/id/LC_MESSAGES/m4.mo",
            "/usr/share/locale/ja/LC_MESSAGES/m4.mo",
            "/usr/share/locale/ko/LC_MESSAGES/m4.mo",
            "/usr/share/locale/nl/LC_MESSAGES/m4.mo",
            "/usr/share/locale/pl/LC_MESSAGES/m4.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/m4.mo",
            "/usr/share/locale/ro/LC_MESSAGES/m4.mo",
            "/usr/share/locale/ru/LC_MESSAGES/m4.mo",
            "/usr/share/locale/sr/LC_MESSAGES/m4.mo",
            "/usr/share/locale/sv/LC_MESSAGES/m4.mo",
            "/usr/share/locale/uk/LC_MESSAGES/m4.mo",
            "/usr/share/locale/vi/LC_MESSAGES/m4.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/m4.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/m4.mo",
            "/usr/share/man/man1/m4.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "make@4.4.1-2",
          "Name": "make",
          "Identifier": {
            "PURL": "pkg:deb/debian/make@4.4.1-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "18f484563ae07d1"
          },
          "Version": "4.4.1",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "make-dfsg",
          "SrcVersion": "4.4.1",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only"
          ],
          "Maintainer": "Stephen Kitt \u003cskitt@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/make",
            "/usr/bin/make-first-existing-target",
            "/usr/include/gnumake.h",
            "/usr/share/doc/make/ABOUT-NLS.gz",
            "/usr/share/doc/make/AUTHORS.gz",
            "/usr/share/doc/make/Explanations.gz",
            "/usr/share/doc/make/NEWS.Debian.gz",
            "/usr/share/doc/make/NEWS.gz",
            "/usr/share/doc/make/README.customs.gz",
            "/usr/share/doc/make/README.gz",
            "/usr/share/doc/make/README.source",
            "/usr/share/doc/make/changelog.Debian.gz",
            "/usr/share/doc/make/changelog.gz",
            "/usr/share/doc/make/copyright",
            "/usr/share/locale/be/LC_MESSAGES/make.mo",
            "/usr/share/locale/bg/LC_MESSAGES/make.mo",
            "/usr/share/locale/cs/LC_MESSAGES/make.mo",
            "/usr/share/locale/da/LC_MESSAGES/make.mo",
            "/usr/share/locale/de/LC_MESSAGES/make.mo",
            "/usr/share/locale/es/LC_MESSAGES/make.mo",
            "/usr/share/locale/fi/LC_MESSAGES/make.mo",
            "/usr/share/locale/fr/LC_MESSAGES/make.mo",
            "/usr/share/locale/ga/LC_MESSAGES/make.mo",
            "/usr/share/locale/gl/LC_MESSAGES/make.mo",
            "/usr/share/locale/he/LC_MESSAGES/make.mo",
            "/usr/share/locale/hr/LC_MESSAGES/make.mo",
            "/usr/share/locale/id/LC_MESSAGES/make.mo",
            "/usr/share/locale/it/LC_MESSAGES/make.mo",
            "/usr/share/locale/ja/LC_MESSAGES/make.mo",
            "/usr/share/locale/ko/LC_MESSAGES/make.mo",
            "/usr/share/locale/lt/LC_MESSAGES/make.mo",
            "/usr/share/locale/nl/LC_MESSAGES/make.mo",
            "/usr/share/locale/pl/LC_MESSAGES/make.mo",
            "/usr/share/locale/pt/LC_MESSAGES/make.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/make.mo",
            "/usr/share/locale/ro/LC_MESSAGES/make.mo",
            "/usr/share/locale/ru/LC_MESSAGES/make.mo",
            "/usr/share/locale/sr/LC_MESSAGES/make.mo",
            "/usr/share/locale/sv/LC_MESSAGES/make.mo",
            "/usr/share/locale/tr/LC_MESSAGES/make.mo",
            "/usr/share/locale/uk/LC_MESSAGES/make.mo",
            "/usr/share/locale/vi/LC_MESSAGES/make.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/make.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/make.mo",
            "/usr/share/man/man1/make-first-existing-target.1.gz",
            "/usr/share/man/man1/make.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "mawk@1.3.4.20250131-1",
          "Name": "mawk",
          "Identifier": {
            "PURL": "pkg:deb/debian/mawk@1.3.4.20250131-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "fc097c5651b898a7"
          },
          "Version": "1.3.4.20250131",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "mawk",
          "SrcVersion": "1.3.4.20250131",
          "SrcRelease": "1",
          "Licenses": [
            "GPL-2.0-only",
            "X11",
            "CC-BY-3.0"
          ],
          "Maintainer": "Boyuan Yang \u003cbyang@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/mawk",
            "/usr/share/doc/mawk/ACKNOWLEDGMENT",
            "/usr/share/doc/mawk/README",
            "/usr/share/doc/mawk/changelog.Debian.gz",
            "/usr/share/doc/mawk/changelog.gz",
            "/usr/share/doc/mawk/copyright",
            "/usr/share/doc/mawk/examples/ct_length.awk",
            "/usr/share/doc/mawk/examples/decl.awk",
            "/usr/share/doc/mawk/examples/deps.awk",
            "/usr/share/doc/mawk/examples/eatc.awk",
            "/usr/share/doc/mawk/examples/gdecl.awk",
            "/usr/share/doc/mawk/examples/hcal",
            "/usr/share/doc/mawk/examples/hical",
            "/usr/share/doc/mawk/examples/nocomment.awk",
            "/usr/share/doc/mawk/examples/primes.awk",
            "/usr/share/doc/mawk/examples/qsort.awk",
            "/usr/share/man/man1/mawk.1.gz",
            "/usr/share/man/man7/mawk-arrays.7.gz",
            "/usr/share/man/man7/mawk-code.7.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "media-types@13.0.0",
          "Name": "media-types",
          "Identifier": {
            "PURL": "pkg:deb/debian/media-types@13.0.0?arch=all\u0026distro=debian-13.7",
            "UID": "e319defa76efcdd1"
          },
          "Version": "13.0.0",
          "Arch": "all",
          "SrcName": "media-types",
          "SrcVersion": "13.0.0",
          "Licenses": [
            "ad-hoc"
          ],
          "Maintainer": "Mime-Support Packagers \u003cteam+debian-mimesupport-packagers@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/share/bug/media-types/presubj",
            "/usr/share/doc/media-types/changelog.gz",
            "/usr/share/doc/media-types/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "mount@2.41.5-0+deb13u1",
          "Name": "mount",
          "Identifier": {
            "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d781ec5616a75c78"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/mount",
            "/usr/bin/umount",
            "/usr/sbin/losetup",
            "/usr/sbin/swapoff",
            "/usr/sbin/swapon",
            "/usr/share/bash-completion/completions/losetup",
            "/usr/share/bash-completion/completions/mount",
            "/usr/share/bash-completion/completions/swapoff",
            "/usr/share/bash-completion/completions/swapon",
            "/usr/share/bash-completion/completions/umount",
            "/usr/share/doc/mount/NEWS.Debian.gz",
            "/usr/share/doc/mount/changelog.Debian.gz",
            "/usr/share/doc/mount/changelog.gz",
            "/usr/share/doc/mount/copyright",
            "/usr/share/doc/mount/examples/filesystems",
            "/usr/share/doc/mount/examples/fstab",
            "/usr/share/doc/mount/examples/mount.fstab",
            "/usr/share/doc/mount/mount.txt",
            "/usr/share/lintian/overrides/mount",
            "/usr/share/man/man5/fstab.5.gz",
            "/usr/share/man/man8/losetup.8.gz",
            "/usr/share/man/man8/mount.8.gz",
            "/usr/share/man/man8/swapon.8.gz",
            "/usr/share/man/man8/umount.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "native-architecture@0.2.6",
          "Name": "native-architecture",
          "Identifier": {
            "PURL": "pkg:deb/debian/native-architecture@0.2.6?arch=all\u0026distro=debian-13.7",
            "UID": "d04e3efbe240ab3c"
          },
          "Version": "0.2.6",
          "Arch": "all",
          "SrcName": "architecture-properties",
          "SrcVersion": "0.2.6",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Architecture Properties Maintainers \u003carchitecture-properties@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/share/doc/native-architecture/changelog.gz",
            "/usr/share/doc/native-architecture/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "ncurses-base@6.5+20250216-2",
          "Name": "ncurses-base",
          "Identifier": {
            "PURL": "pkg:deb/debian/ncurses-base@6.5%2B20250216-2?arch=all\u0026distro=debian-13.7",
            "UID": "767a0231348a5cb5"
          },
          "Version": "6.5+20250216",
          "Release": "2",
          "Arch": "all",
          "SrcName": "ncurses",
          "SrcVersion": "6.5+20250216",
          "SrcRelease": "2",
          "Licenses": [
            "MIT/X11",
            "X11",
            "BSD-3-Clause"
          ],
          "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/ncurses-base/FAQ",
            "/usr/share/doc/ncurses-base/TODO.Debian",
            "/usr/share/doc/ncurses-base/changelog.Debian.gz",
            "/usr/share/doc/ncurses-base/changelog.gz",
            "/usr/share/doc/ncurses-base/copyright",
            "/usr/share/lintian/overrides/ncurses-base",
            "/usr/share/tabset/std",
            "/usr/share/tabset/stdcrt",
            "/usr/share/tabset/vt100",
            "/usr/share/tabset/vt300",
            "/usr/share/terminfo/E/Eterm",
            "/usr/share/terminfo/a/ansi",
            "/usr/share/terminfo/c/cons25",
            "/usr/share/terminfo/c/cygwin",
            "/usr/share/terminfo/d/dumb",
            "/usr/share/terminfo/h/hurd",
            "/usr/share/terminfo/l/linux",
            "/usr/share/terminfo/m/mach",
            "/usr/share/terminfo/m/mach-bold",
            "/usr/share/terminfo/m/mach-color",
            "/usr/share/terminfo/m/mach-gnu",
            "/usr/share/terminfo/m/mach-gnu-color",
            "/usr/share/terminfo/p/pcansi",
            "/usr/share/terminfo/r/rxvt",
            "/usr/share/terminfo/r/rxvt-basic",
            "/usr/share/terminfo/r/rxvt-unicode",
            "/usr/share/terminfo/r/rxvt-unicode-256color",
            "/usr/share/terminfo/s/screen",
            "/usr/share/terminfo/s/screen-256color",
            "/usr/share/terminfo/s/screen-256color-bce",
            "/usr/share/terminfo/s/screen-bce",
            "/usr/share/terminfo/s/screen-s",
            "/usr/share/terminfo/s/screen-w",
            "/usr/share/terminfo/s/screen.xterm-256color",
            "/usr/share/terminfo/s/sun",
            "/usr/share/terminfo/t/tmux",
            "/usr/share/terminfo/t/tmux-256color",
            "/usr/share/terminfo/v/vt100",
            "/usr/share/terminfo/v/vt102",
            "/usr/share/terminfo/v/vt220",
            "/usr/share/terminfo/v/vt52",
            "/usr/share/terminfo/w/wsvt25",
            "/usr/share/terminfo/w/wsvt25m",
            "/usr/share/terminfo/x/xterm",
            "/usr/share/terminfo/x/xterm-256color",
            "/usr/share/terminfo/x/xterm-color",
            "/usr/share/terminfo/x/xterm-mono",
            "/usr/share/terminfo/x/xterm-r5",
            "/usr/share/terminfo/x/xterm-r6",
            "/usr/share/terminfo/x/xterm-vt220",
            "/usr/share/terminfo/x/xterm-xfree86"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "ncurses-bin@6.5+20250216-2",
          "Name": "ncurses-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/ncurses-bin@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "5b541563cf6587e5"
          },
          "Version": "6.5+20250216",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "ncurses",
          "SrcVersion": "6.5+20250216",
          "SrcRelease": "2",
          "Licenses": [
            "MIT/X11",
            "X11",
            "BSD-3-Clause"
          ],
          "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/clear",
            "/usr/bin/infocmp",
            "/usr/bin/tabs",
            "/usr/bin/tic",
            "/usr/bin/toe",
            "/usr/bin/tput",
            "/usr/bin/tset",
            "/usr/share/doc/ncurses-bin/changelog.Debian.gz",
            "/usr/share/doc/ncurses-bin/changelog.gz",
            "/usr/share/doc/ncurses-bin/copyright",
            "/usr/share/man/man1/captoinfo.1.gz",
            "/usr/share/man/man1/clear.1.gz",
            "/usr/share/man/man1/infocmp.1.gz",
            "/usr/share/man/man1/infotocap.1.gz",
            "/usr/share/man/man1/tabs.1.gz",
            "/usr/share/man/man1/tic.1.gz",
            "/usr/share/man/man1/toe.1.gz",
            "/usr/share/man/man1/tput.1.gz",
            "/usr/share/man/man1/tset.1.gz",
            "/usr/share/man/man5/scr_dump.5.gz",
            "/usr/share/man/man5/term.5.gz",
            "/usr/share/man/man5/terminfo.5.gz",
            "/usr/share/man/man5/user_caps.5.gz",
            "/usr/share/man/man7/term.7.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "netbase@6.5",
          "Name": "netbase",
          "Identifier": {
            "PURL": "pkg:deb/debian/netbase@6.5?arch=all\u0026distro=debian-13.7",
            "UID": "9929ff265179fc61"
          },
          "Version": "6.5",
          "Arch": "all",
          "SrcName": "netbase",
          "SrcVersion": "6.5",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/share/doc/netbase/changelog.gz",
            "/usr/share/doc/netbase/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "openssl@3.5.7-1~deb13u3",
          "Name": "openssl",
          "Identifier": {
            "PURL": "pkg:deb/debian/openssl@3.5.7-1~deb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "8d6c820bcbcea8d1"
          },
          "Version": "3.5.7",
          "Release": "1~deb13u3",
          "Arch": "amd64",
          "SrcName": "openssl",
          "SrcVersion": "3.5.7",
          "SrcRelease": "1~deb13u3",
          "Licenses": [
            "Apache-2.0",
            "Artistic-2.0",
            "GPL-1.0-or-later",
            "GPL-1.0-only"
          ],
          "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/c_rehash",
            "/usr/bin/openssl",
            "/usr/lib/ssl/misc/CA.pl",
            "/usr/lib/ssl/misc/tsget.pl",
            "/usr/share/doc/openssl/HOWTO/certificates.txt.gz",
            "/usr/share/doc/openssl/HOWTO/documenting-functions-and-macros.md.gz",
            "/usr/share/doc/openssl/HOWTO/keys.txt.gz",
            "/usr/share/doc/openssl/NEWS.md.gz",
            "/usr/share/doc/openssl/README-ENGINES.md.gz",
            "/usr/share/doc/openssl/README-PROVIDERS.md.gz",
            "/usr/share/doc/openssl/README-QUIC.md.gz",
            "/usr/share/doc/openssl/README.Debian",
            "/usr/share/doc/openssl/README.md.gz",
            "/usr/share/doc/openssl/changelog.Debian.gz",
            "/usr/share/doc/openssl/changelog.gz",
            "/usr/share/doc/openssl/copyright",
            "/usr/share/doc/openssl/fingerprints.txt",
            "/usr/share/lintian/overrides/openssl",
            "/usr/share/man/man1/CA.pl.1ssl.gz",
            "/usr/share/man/man1/openssl-asn1parse.1ssl.gz",
            "/usr/share/man/man1/openssl-ca.1ssl.gz",
            "/usr/share/man/man1/openssl-ciphers.1ssl.gz",
            "/usr/share/man/man1/openssl-cmds.1ssl.gz",
            "/usr/share/man/man1/openssl-cmp.1ssl.gz",
            "/usr/share/man/man1/openssl-cms.1ssl.gz",
            "/usr/share/man/man1/openssl-crl.1ssl.gz",
            "/usr/share/man/man1/openssl-crl2pkcs7.1ssl.gz",
            "/usr/share/man/man1/openssl-dgst.1ssl.gz",
            "/usr/share/man/man1/openssl-dhparam.1ssl.gz",
            "/usr/share/man/man1/openssl-dsa.1ssl.gz",
            "/usr/share/man/man1/openssl-dsaparam.1ssl.gz",
            "/usr/share/man/man1/openssl-ec.1ssl.gz",
            "/usr/share/man/man1/openssl-ecparam.1ssl.gz",
            "/usr/share/man/man1/openssl-enc.1ssl.gz",
            "/usr/share/man/man1/openssl-engine.1ssl.gz",
            "/usr/share/man/man1/openssl-errstr.1ssl.gz",
            "/usr/share/man/man1/openssl-fipsinstall.1ssl.gz",
            "/usr/share/man/man1/openssl-format-options.1ssl.gz",
            "/usr/share/man/man1/openssl-gendsa.1ssl.gz",
            "/usr/share/man/man1/openssl-genpkey.1ssl.gz",
            "/usr/share/man/man1/openssl-genrsa.1ssl.gz",
            "/usr/share/man/man1/openssl-info.1ssl.gz",
            "/usr/share/man/man1/openssl-kdf.1ssl.gz",
            "/usr/share/man/man1/openssl-list.1ssl.gz",
            "/usr/share/man/man1/openssl-mac.1ssl.gz",
            "/usr/share/man/man1/openssl-namedisplay-options.1ssl.gz",
            "/usr/share/man/man1/openssl-nseq.1ssl.gz",
            "/usr/share/man/man1/openssl-ocsp.1ssl.gz",
            "/usr/share/man/man1/openssl-passphrase-options.1ssl.gz",
            "/usr/share/man/man1/openssl-passwd.1ssl.gz",
            "/usr/share/man/man1/openssl-pkcs12.1ssl.gz",
            "/usr/share/man/man1/openssl-pkcs7.1ssl.gz",
            "/usr/share/man/man1/openssl-pkcs8.1ssl.gz",
            "/usr/share/man/man1/openssl-pkey.1ssl.gz",
            "/usr/share/man/man1/openssl-pkeyparam.1ssl.gz",
            "/usr/share/man/man1/openssl-pkeyutl.1ssl.gz",
            "/usr/share/man/man1/openssl-prime.1ssl.gz",
            "/usr/share/man/man1/openssl-rand.1ssl.gz",
            "/usr/share/man/man1/openssl-rehash.1ssl.gz",
            "/usr/share/man/man1/openssl-req.1ssl.gz",
            "/usr/share/man/man1/openssl-rsa.1ssl.gz",
            "/usr/share/man/man1/openssl-rsautl.1ssl.gz",
            "/usr/share/man/man1/openssl-s_client.1ssl.gz",
            "/usr/share/man/man1/openssl-s_server.1ssl.gz",
            "/usr/share/man/man1/openssl-s_time.1ssl.gz",
            "/usr/share/man/man1/openssl-sess_id.1ssl.gz",
            "/usr/share/man/man1/openssl-skeyutl.1ssl.gz",
            "/usr/share/man/man1/openssl-smime.1ssl.gz",
            "/usr/share/man/man1/openssl-speed.1ssl.gz",
            "/usr/share/man/man1/openssl-spkac.1ssl.gz",
            "/usr/share/man/man1/openssl-srp.1ssl.gz",
            "/usr/share/man/man1/openssl-storeutl.1ssl.gz",
            "/usr/share/man/man1/openssl-ts.1ssl.gz",
            "/usr/share/man/man1/openssl-verification-options.1ssl.gz",
            "/usr/share/man/man1/openssl-verify.1ssl.gz",
            "/usr/share/man/man1/openssl-version.1ssl.gz",
            "/usr/share/man/man1/openssl-x509.1ssl.gz",
            "/usr/share/man/man1/openssl.1ssl.gz",
            "/usr/share/man/man1/tsget.1ssl.gz",
            "/usr/share/man/man5/config.5ssl.gz",
            "/usr/share/man/man5/fips_config.5ssl.gz",
            "/usr/share/man/man5/x509v3_config.5ssl.gz",
            "/usr/share/man/man7/EVP_ASYM_CIPHER-RSA.7ssl.gz",
            "/usr/share/man/man7/EVP_ASYM_CIPHER-SM2.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-AES.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-ARIA.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-BLOWFISH.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-CAMELLIA.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-CAST.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-CHACHA.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-DES.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-IDEA.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-NULL.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-RC2.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-RC4.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-RC5.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-SEED.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-SM4.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-ARGON2.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-HKDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-HMAC-DRBG.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-KB.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-KRB5KDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-PBKDF1.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-PBKDF2.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-PKCS12KDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-PVKKDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-SCRYPT.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-SS.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-SSHKDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-TLS13_KDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-TLS1_PRF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-X942-ASN1.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-X942-CONCAT.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-X963.7ssl.gz",
            "/usr/share/man/man7/EVP_KEM-EC.7ssl.gz",
            "/usr/share/man/man7/EVP_KEM-ML-KEM.7ssl.gz",
            "/usr/share/man/man7/EVP_KEM-RSA.7ssl.gz",
            "/usr/share/man/man7/EVP_KEM-X25519.7ssl.gz",
            "/usr/share/man/man7/EVP_KEYEXCH-DH.7ssl.gz",
            "/usr/share/man/man7/EVP_KEYEXCH-ECDH.7ssl.gz",
            "/usr/share/man/man7/EVP_KEYEXCH-X25519.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-BLAKE2.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-CMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-GMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-HMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-KMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-Poly1305.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-Siphash.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-BLAKE2.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-KECCAK.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MD2.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MD4.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MD5-SHA1.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MD5.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MDC2.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-NULL.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-RIPEMD160.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SHA1.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SHA2.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SHA3.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SHAKE.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SM3.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-WHIRLPOOL.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-common.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-DH.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-DSA.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-EC.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-FFC.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-HMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-ML-DSA.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-ML-KEM.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-RSA.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-SLH-DSA.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-SM2.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-X25519.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-CRNG-TEST.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-CTR-DRBG.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-HASH-DRBG.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-HMAC-DRBG.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-JITTER.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-SEED-SRC.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-TEST-RAND.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-DSA.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-ECDSA.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-ED25519.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-HMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-ML-DSA.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-RSA.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-SLH-DSA.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-FIPS.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-base.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-default.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-legacy.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-null.7ssl.gz",
            "/usr/share/man/man7/OSSL_STORE-winstore.7ssl.gz",
            "/usr/share/man/man7/RAND.7ssl.gz",
            "/usr/share/man/man7/RSA-PSS.7ssl.gz",
            "/usr/share/man/man7/X25519.7ssl.gz",
            "/usr/share/man/man7/bio.7ssl.gz",
            "/usr/share/man/man7/ct.7ssl.gz",
            "/usr/share/man/man7/des_modes.7ssl.gz",
            "/usr/share/man/man7/evp.7ssl.gz",
            "/usr/share/man/man7/fips_module.7ssl.gz",
            "/usr/share/man/man7/life_cycle-cipher.7ssl.gz",
            "/usr/share/man/man7/life_cycle-digest.7ssl.gz",
            "/usr/share/man/man7/life_cycle-kdf.7ssl.gz",
            "/usr/share/man/man7/life_cycle-mac.7ssl.gz",
            "/usr/share/man/man7/life_cycle-pkey.7ssl.gz",
            "/usr/share/man/man7/life_cycle-rand.7ssl.gz",
            "/usr/share/man/man7/openssl-core.h.7ssl.gz",
            "/usr/share/man/man7/openssl-core_dispatch.h.7ssl.gz",
            "/usr/share/man/man7/openssl-core_names.h.7ssl.gz",
            "/usr/share/man/man7/openssl-env.7ssl.gz",
            "/usr/share/man/man7/openssl-glossary.7ssl.gz",
            "/usr/share/man/man7/openssl-qlog.7ssl.gz",
            "/usr/share/man/man7/openssl-quic-concurrency.7ssl.gz",
            "/usr/share/man/man7/openssl-quic.7ssl.gz",
            "/usr/share/man/man7/openssl-threads.7ssl.gz",
            "/usr/share/man/man7/openssl_user_macros.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-introduction.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-libcrypto-introduction.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-libraries-introduction.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-libssl-introduction.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-migration.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-quic-client-block.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-quic-client-non-block.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-quic-introduction.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-quic-multi-stream.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-quic-server-block.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-quic-server-non-block.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-tls-client-block.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-tls-client-non-block.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-tls-introduction.7ssl.gz",
            "/usr/share/man/man7/ossl-guide-tls-server-block.7ssl.gz",
            "/usr/share/man/man7/ossl_store-file.7ssl.gz",
            "/usr/share/man/man7/ossl_store.7ssl.gz",
            "/usr/share/man/man7/passphrase-encoding.7ssl.gz",
            "/usr/share/man/man7/property.7ssl.gz",
            "/usr/share/man/man7/provider-asym_cipher.7ssl.gz",
            "/usr/share/man/man7/provider-base.7ssl.gz",
            "/usr/share/man/man7/provider-cipher.7ssl.gz",
            "/usr/share/man/man7/provider-decoder.7ssl.gz",
            "/usr/share/man/man7/provider-digest.7ssl.gz",
            "/usr/share/man/man7/provider-encoder.7ssl.gz",
            "/usr/share/man/man7/provider-kdf.7ssl.gz",
            "/usr/share/man/man7/provider-kem.7ssl.gz",
            "/usr/share/man/man7/provider-keyexch.7ssl.gz",
            "/usr/share/man/man7/provider-keymgmt.7ssl.gz",
            "/usr/share/man/man7/provider-mac.7ssl.gz",
            "/usr/share/man/man7/provider-object.7ssl.gz",
            "/usr/share/man/man7/provider-rand.7ssl.gz",
            "/usr/share/man/man7/provider-signature.7ssl.gz",
            "/usr/share/man/man7/provider-skeymgmt.7ssl.gz",
            "/usr/share/man/man7/provider-storemgmt.7ssl.gz",
            "/usr/share/man/man7/provider.7ssl.gz",
            "/usr/share/man/man7/proxy-certificates.7ssl.gz",
            "/usr/share/man/man7/x509.7ssl.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "openssl-provider-legacy@3.5.7-1~deb13u3",
          "Name": "openssl-provider-legacy",
          "Identifier": {
            "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.7-1~deb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "abf96993e584b023"
          },
          "Version": "3.5.7",
          "Release": "1~deb13u3",
          "Arch": "amd64",
          "SrcName": "openssl",
          "SrcVersion": "3.5.7",
          "SrcRelease": "1~deb13u3",
          "Licenses": [
            "Apache-2.0",
            "Artistic-2.0",
            "GPL-1.0-or-later",
            "GPL-1.0-only"
          ],
          "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libssl3t64@3.5.7-1~deb13u3"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so",
            "/usr/share/doc/openssl-provider-legacy/changelog.Debian.gz",
            "/usr/share/doc/openssl-provider-legacy/changelog.gz",
            "/usr/share/doc/openssl-provider-legacy/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "passwd@1:4.17.4-2",
          "Name": "passwd",
          "Identifier": {
            "PURL": "pkg:deb/debian/passwd@4.17.4-2?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "7e83ab5858a7a76d"
          },
          "Version": "4.17.4",
          "Release": "2",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "shadow",
          "SrcVersion": "4.17.4",
          "SrcRelease": "2",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-3-Clause",
            "GPL-1.0-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "base-passwd@3.6.7",
            "libacl1@2.3.2-2+b1",
            "libattr1@1:2.5.2-3",
            "libaudit1@1:4.0.2-2+deb13u1",
            "libbsd0@0.12.2-2",
            "libc6@2.41-12+deb13u4",
            "libcrypt1@1:4.4.38-1",
            "libpam-modules@1.7.0-5",
            "libpam0g@1.7.0-5",
            "libselinux1@3.8.1-1",
            "libsemanage2@3.8.1-1",
            "login.defs@1:4.17.4-2"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/chage",
            "/usr/bin/chfn",
            "/usr/bin/chsh",
            "/usr/bin/expiry",
            "/usr/bin/gpasswd",
            "/usr/bin/passwd",
            "/usr/lib/tmpfiles.d/passwd.conf",
            "/usr/sbin/chgpasswd",
            "/usr/sbin/chpasswd",
            "/usr/sbin/groupadd",
            "/usr/sbin/groupdel",
            "/usr/sbin/groupmod",
            "/usr/sbin/grpck",
            "/usr/sbin/grpconv",
            "/usr/sbin/grpunconv",
            "/usr/sbin/newusers",
            "/usr/sbin/pwck",
            "/usr/sbin/pwconv",
            "/usr/sbin/pwunconv",
            "/usr/sbin/shadowconfig",
            "/usr/sbin/useradd",
            "/usr/sbin/userdel",
            "/usr/sbin/usermod",
            "/usr/sbin/vipw",
            "/usr/share/doc/passwd/NEWS.Debian.gz",
            "/usr/share/doc/passwd/README.Debian",
            "/usr/share/doc/passwd/TODO.Debian",
            "/usr/share/doc/passwd/changelog.Debian.gz",
            "/usr/share/doc/passwd/changelog.gz",
            "/usr/share/doc/passwd/copyright",
            "/usr/share/doc/passwd/examples/passwd.expire.cron",
            "/usr/share/lintian/overrides/passwd",
            "/usr/share/locale/bs/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ca/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/cs/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/da/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/de/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/dz/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/el/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/es/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/eu/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/fi/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/fr/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/gl/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/he/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/hu/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/id/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/it/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ja/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ka/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/kk/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/km/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ko/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/nb/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ne/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/nl/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/nn/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/pl/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/pt/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ro/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ru/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/sk/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/sq/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/sv/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/tl/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/tr/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/uk/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/vi/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/shadow.mo",
            "/usr/share/man/cs/man1/expiry.1.gz",
            "/usr/share/man/cs/man1/gpasswd.1.gz",
            "/usr/share/man/cs/man5/gshadow.5.gz",
            "/usr/share/man/cs/man5/passwd.5.gz",
            "/usr/share/man/cs/man5/shadow.5.gz",
            "/usr/share/man/cs/man8/groupadd.8.gz",
            "/usr/share/man/cs/man8/groupdel.8.gz",
            "/usr/share/man/cs/man8/groupmod.8.gz",
            "/usr/share/man/cs/man8/grpck.8.gz",
            "/usr/share/man/cs/man8/vipw.8.gz",
            "/usr/share/man/da/man1/chfn.1.gz",
            "/usr/share/man/da/man5/gshadow.5.gz",
            "/usr/share/man/da/man8/groupdel.8.gz",
            "/usr/share/man/da/man8/vipw.8.gz",
            "/usr/share/man/de/man1/chage.1.gz",
            "/usr/share/man/de/man1/chfn.1.gz",
            "/usr/share/man/de/man1/chsh.1.gz",
            "/usr/share/man/de/man1/expiry.1.gz",
            "/usr/share/man/de/man1/gpasswd.1.gz",
            "/usr/share/man/de/man1/passwd.1.gz",
            "/usr/share/man/de/man5/gshadow.5.gz",
            "/usr/share/man/de/man5/passwd.5.gz",
            "/usr/share/man/de/man5/shadow.5.gz",
            "/usr/share/man/de/man8/chgpasswd.8.gz",
            "/usr/share/man/de/man8/chpasswd.8.gz",
            "/usr/share/man/de/man8/groupadd.8.gz",
            "/usr/share/man/de/man8/groupdel.8.gz",
            "/usr/share/man/de/man8/groupmod.8.gz",
            "/usr/share/man/de/man8/grpck.8.gz",
            "/usr/share/man/de/man8/newusers.8.gz",
            "/usr/share/man/de/man8/pwck.8.gz",
            "/usr/share/man/de/man8/pwconv.8.gz",
            "/usr/share/man/de/man8/useradd.8.gz",
            "/usr/share/man/de/man8/userdel.8.gz",
            "/usr/share/man/de/man8/usermod.8.gz",
            "/usr/share/man/de/man8/vipw.8.gz",
            "/usr/share/man/fi/man1/chfn.1.gz",
            "/usr/share/man/fi/man1/chsh.1.gz",
            "/usr/share/man/fr/man1/chage.1.gz",
            "/usr/share/man/fr/man1/chfn.1.gz",
            "/usr/share/man/fr/man1/chsh.1.gz",
            "/usr/share/man/fr/man1/expiry.1.gz",
            "/usr/share/man/fr/man1/gpasswd.1.gz",
            "/usr/share/man/fr/man1/passwd.1.gz",
            "/usr/share/man/fr/man5/gshadow.5.gz",
            "/usr/share/man/fr/man5/passwd.5.gz",
            "/usr/share/man/fr/man5/shadow.5.gz",
            "/usr/share/man/fr/man5/subgid.5.gz",
            "/usr/share/man/fr/man5/subuid.5.gz",
            "/usr/share/man/fr/man8/chgpasswd.8.gz",
            "/usr/share/man/fr/man8/chpasswd.8.gz",
            "/usr/share/man/fr/man8/groupadd.8.gz",
            "/usr/share/man/fr/man8/groupdel.8.gz",
            "/usr/share/man/fr/man8/groupmod.8.gz",
            "/usr/share/man/fr/man8/grpck.8.gz",
            "/usr/share/man/fr/man8/newusers.8.gz",
            "/usr/share/man/fr/man8/pwck.8.gz",
            "/usr/share/man/fr/man8/pwconv.8.gz",
            "/usr/share/man/fr/man8/useradd.8.gz",
            "/usr/share/man/fr/man8/userdel.8.gz",
            "/usr/share/man/fr/man8/usermod.8.gz",
            "/usr/share/man/fr/man8/vipw.8.gz",
            "/usr/share/man/hu/man1/chsh.1.gz",
            "/usr/share/man/hu/man1/gpasswd.1.gz",
            "/usr/share/man/hu/man1/passwd.1.gz",
            "/usr/share/man/hu/man5/passwd.5.gz",
            "/usr/share/man/id/man1/chsh.1.gz",
            "/usr/share/man/id/man8/useradd.8.gz",
            "/usr/share/man/it/man1/chage.1.gz",
            "/usr/share/man/it/man1/chfn.1.gz",
            "/usr/share/man/it/man1/chsh.1.gz",
            "/usr/share/man/it/man1/expiry.1.gz",
            "/usr/share/man/it/man1/gpasswd.1.gz",
            "/usr/share/man/it/man1/passwd.1.gz",
            "/usr/share/man/it/man5/gshadow.5.gz",
            "/usr/share/man/it/man5/passwd.5.gz",
            "/usr/share/man/it/man5/shadow.5.gz",
            "/usr/share/man/it/man8/chgpasswd.8.gz",
            "/usr/share/man/it/man8/chpasswd.8.gz",
            "/usr/share/man/it/man8/groupadd.8.gz",
            "/usr/share/man/it/man8/groupdel.8.gz",
            "/usr/share/man/it/man8/groupmod.8.gz",
            "/usr/share/man/it/man8/grpck.8.gz",
            "/usr/share/man/it/man8/newusers.8.gz",
            "/usr/share/man/it/man8/pwck.8.gz",
            "/usr/share/man/it/man8/pwconv.8.gz",
            "/usr/share/man/it/man8/useradd.8.gz",
            "/usr/share/man/it/man8/userdel.8.gz",
            "/usr/share/man/it/man8/usermod.8.gz",
            "/usr/share/man/it/man8/vipw.8.gz",
            "/usr/share/man/ja/man1/chage.1.gz",
            "/usr/share/man/ja/man1/chfn.1.gz",
            "/usr/share/man/ja/man1/chsh.1.gz",
            "/usr/share/man/ja/man1/expiry.1.gz",
            "/usr/share/man/ja/man1/gpasswd.1.gz",
            "/usr/share/man/ja/man1/passwd.1.gz",
            "/usr/share/man/ja/man5/passwd.5.gz",
            "/usr/share/man/ja/man5/shadow.5.gz",
            "/usr/share/man/ja/man8/chpasswd.8.gz",
            "/usr/share/man/ja/man8/groupadd.8.gz",
            "/usr/share/man/ja/man8/groupdel.8.gz",
            "/usr/share/man/ja/man8/groupmod.8.gz",
            "/usr/share/man/ja/man8/grpck.8.gz",
            "/usr/share/man/ja/man8/newusers.8.gz",
            "/usr/share/man/ja/man8/pwck.8.gz",
            "/usr/share/man/ja/man8/pwconv.8.gz",
            "/usr/share/man/ja/man8/useradd.8.gz",
            "/usr/share/man/ja/man8/userdel.8.gz",
            "/usr/share/man/ja/man8/usermod.8.gz",
            "/usr/share/man/ja/man8/vipw.8.gz",
            "/usr/share/man/ko/man1/chfn.1.gz",
            "/usr/share/man/ko/man1/chsh.1.gz",
            "/usr/share/man/ko/man5/passwd.5.gz",
            "/usr/share/man/ko/man8/vipw.8.gz",
            "/usr/share/man/man1/chage.1.gz",
            "/usr/share/man/man1/chfn.1.gz",
            "/usr/share/man/man1/chsh.1.gz",
            "/usr/share/man/man1/expiry.1.gz",
            "/usr/share/man/man1/gpasswd.1.gz",
            "/usr/share/man/man1/passwd.1.gz",
            "/usr/share/man/man5/gshadow.5.gz",
            "/usr/share/man/man5/passwd.5.gz",
            "/usr/share/man/man5/shadow.5.gz",
            "/usr/share/man/man5/subgid.5.gz",
            "/usr/share/man/man5/subuid.5.gz",
            "/usr/share/man/man8/chgpasswd.8.gz",
            "/usr/share/man/man8/chpasswd.8.gz",
            "/usr/share/man/man8/groupadd.8.gz",
            "/usr/share/man/man8/groupdel.8.gz",
            "/usr/share/man/man8/groupmod.8.gz",
            "/usr/share/man/man8/grpck.8.gz",
            "/usr/share/man/man8/newusers.8.gz",
            "/usr/share/man/man8/pwck.8.gz",
            "/usr/share/man/man8/pwconv.8.gz",
            "/usr/share/man/man8/shadowconfig.8.gz",
            "/usr/share/man/man8/useradd.8.gz",
            "/usr/share/man/man8/userdel.8.gz",
            "/usr/share/man/man8/usermod.8.gz",
            "/usr/share/man/man8/vipw.8.gz",
            "/usr/share/man/pl/man1/chage.1.gz",
            "/usr/share/man/pl/man1/chsh.1.gz",
            "/usr/share/man/pl/man1/expiry.1.gz",
            "/usr/share/man/pl/man8/groupadd.8.gz",
            "/usr/share/man/pl/man8/groupdel.8.gz",
            "/usr/share/man/pl/man8/groupmod.8.gz",
            "/usr/share/man/pl/man8/grpck.8.gz",
            "/usr/share/man/pl/man8/userdel.8.gz",
            "/usr/share/man/pl/man8/usermod.8.gz",
            "/usr/share/man/pl/man8/vipw.8.gz",
            "/usr/share/man/pt_BR/man1/gpasswd.1.gz",
            "/usr/share/man/pt_BR/man5/passwd.5.gz",
            "/usr/share/man/pt_BR/man5/shadow.5.gz",
            "/usr/share/man/pt_BR/man8/groupadd.8.gz",
            "/usr/share/man/pt_BR/man8/groupdel.8.gz",
            "/usr/share/man/pt_BR/man8/groupmod.8.gz",
            "/usr/share/man/ru/man1/chage.1.gz",
            "/usr/share/man/ru/man1/chfn.1.gz",
            "/usr/share/man/ru/man1/chsh.1.gz",
            "/usr/share/man/ru/man1/expiry.1.gz",
            "/usr/share/man/ru/man1/gpasswd.1.gz",
            "/usr/share/man/ru/man1/passwd.1.gz",
            "/usr/share/man/ru/man5/gshadow.5.gz",
            "/usr/share/man/ru/man5/passwd.5.gz",
            "/usr/share/man/ru/man5/shadow.5.gz",
            "/usr/share/man/ru/man8/chgpasswd.8.gz",
            "/usr/share/man/ru/man8/chpasswd.8.gz",
            "/usr/share/man/ru/man8/groupadd.8.gz",
            "/usr/share/man/ru/man8/groupdel.8.gz",
            "/usr/share/man/ru/man8/groupmod.8.gz",
            "/usr/share/man/ru/man8/grpck.8.gz",
            "/usr/share/man/ru/man8/newusers.8.gz",
            "/usr/share/man/ru/man8/pwck.8.gz",
            "/usr/share/man/ru/man8/pwconv.8.gz",
            "/usr/share/man/ru/man8/useradd.8.gz",
            "/usr/share/man/ru/man8/userdel.8.gz",
            "/usr/share/man/ru/man8/usermod.8.gz",
            "/usr/share/man/ru/man8/vipw.8.gz",
            "/usr/share/man/sv/man1/chage.1.gz",
            "/usr/share/man/sv/man1/chsh.1.gz",
            "/usr/share/man/sv/man1/expiry.1.gz",
            "/usr/share/man/sv/man1/passwd.1.gz",
            "/usr/share/man/sv/man5/gshadow.5.gz",
            "/usr/share/man/sv/man5/passwd.5.gz",
            "/usr/share/man/sv/man8/groupadd.8.gz",
            "/usr/share/man/sv/man8/groupdel.8.gz",
            "/usr/share/man/sv/man8/groupmod.8.gz",
            "/usr/share/man/sv/man8/grpck.8.gz",
            "/usr/share/man/sv/man8/pwck.8.gz",
            "/usr/share/man/sv/man8/userdel.8.gz",
            "/usr/share/man/sv/man8/vipw.8.gz",
            "/usr/share/man/tr/man1/chage.1.gz",
            "/usr/share/man/tr/man1/chfn.1.gz",
            "/usr/share/man/tr/man1/passwd.1.gz",
            "/usr/share/man/tr/man5/passwd.5.gz",
            "/usr/share/man/tr/man5/shadow.5.gz",
            "/usr/share/man/tr/man8/groupadd.8.gz",
            "/usr/share/man/tr/man8/groupdel.8.gz",
            "/usr/share/man/tr/man8/groupmod.8.gz",
            "/usr/share/man/tr/man8/useradd.8.gz",
            "/usr/share/man/tr/man8/userdel.8.gz",
            "/usr/share/man/tr/man8/usermod.8.gz",
            "/usr/share/man/uk/man1/chage.1.gz",
            "/usr/share/man/uk/man1/chfn.1.gz",
            "/usr/share/man/uk/man1/chsh.1.gz",
            "/usr/share/man/uk/man1/expiry.1.gz",
            "/usr/share/man/uk/man1/gpasswd.1.gz",
            "/usr/share/man/uk/man1/passwd.1.gz",
            "/usr/share/man/uk/man5/gshadow.5.gz",
            "/usr/share/man/uk/man5/passwd.5.gz",
            "/usr/share/man/uk/man5/shadow.5.gz",
            "/usr/share/man/uk/man8/chgpasswd.8.gz",
            "/usr/share/man/uk/man8/chpasswd.8.gz",
            "/usr/share/man/uk/man8/groupadd.8.gz",
            "/usr/share/man/uk/man8/groupdel.8.gz",
            "/usr/share/man/uk/man8/groupmod.8.gz",
            "/usr/share/man/uk/man8/grpck.8.gz",
            "/usr/share/man/uk/man8/newusers.8.gz",
            "/usr/share/man/uk/man8/pwck.8.gz",
            "/usr/share/man/uk/man8/pwconv.8.gz",
            "/usr/share/man/uk/man8/useradd.8.gz",
            "/usr/share/man/uk/man8/userdel.8.gz",
            "/usr/share/man/uk/man8/usermod.8.gz",
            "/usr/share/man/uk/man8/vipw.8.gz",
            "/usr/share/man/zh_CN/man1/chage.1.gz",
            "/usr/share/man/zh_CN/man1/chfn.1.gz",
            "/usr/share/man/zh_CN/man1/chsh.1.gz",
            "/usr/share/man/zh_CN/man1/expiry.1.gz",
            "/usr/share/man/zh_CN/man1/gpasswd.1.gz",
            "/usr/share/man/zh_CN/man1/passwd.1.gz",
            "/usr/share/man/zh_CN/man5/gshadow.5.gz",
            "/usr/share/man/zh_CN/man5/passwd.5.gz",
            "/usr/share/man/zh_CN/man5/shadow.5.gz",
            "/usr/share/man/zh_CN/man8/chgpasswd.8.gz",
            "/usr/share/man/zh_CN/man8/chpasswd.8.gz",
            "/usr/share/man/zh_CN/man8/groupadd.8.gz",
            "/usr/share/man/zh_CN/man8/groupdel.8.gz",
            "/usr/share/man/zh_CN/man8/groupmod.8.gz",
            "/usr/share/man/zh_CN/man8/grpck.8.gz",
            "/usr/share/man/zh_CN/man8/newusers.8.gz",
            "/usr/share/man/zh_CN/man8/pwck.8.gz",
            "/usr/share/man/zh_CN/man8/pwconv.8.gz",
            "/usr/share/man/zh_CN/man8/useradd.8.gz",
            "/usr/share/man/zh_CN/man8/userdel.8.gz",
            "/usr/share/man/zh_CN/man8/usermod.8.gz",
            "/usr/share/man/zh_CN/man8/vipw.8.gz",
            "/usr/share/man/zh_TW/man1/chfn.1.gz",
            "/usr/share/man/zh_TW/man1/chsh.1.gz",
            "/usr/share/man/zh_TW/man5/passwd.5.gz",
            "/usr/share/man/zh_TW/man8/chpasswd.8.gz",
            "/usr/share/man/zh_TW/man8/groupadd.8.gz",
            "/usr/share/man/zh_TW/man8/groupdel.8.gz",
            "/usr/share/man/zh_TW/man8/groupmod.8.gz",
            "/usr/share/man/zh_TW/man8/useradd.8.gz",
            "/usr/share/man/zh_TW/man8/userdel.8.gz",
            "/usr/share/man/zh_TW/man8/usermod.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "patch@2.8-2",
          "Name": "patch",
          "Identifier": {
            "PURL": "pkg:deb/debian/patch@2.8-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "32c212c94bbfc9f6"
          },
          "Version": "2.8",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "patch",
          "SrcVersion": "2.8",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only"
          ],
          "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/patch",
            "/usr/share/doc/patch/AUTHORS",
            "/usr/share/doc/patch/NEWS.gz",
            "/usr/share/doc/patch/README",
            "/usr/share/doc/patch/changelog.Debian.gz",
            "/usr/share/doc/patch/changelog.gz",
            "/usr/share/doc/patch/copyright",
            "/usr/share/man/man1/patch.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "perl@5.40.1-6+deb13u1",
          "Name": "perl",
          "Identifier": {
            "PURL": "pkg:deb/debian/perl@5.40.1-6%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "18e3540e0d9ac388"
          },
          "Version": "5.40.1",
          "Release": "6+deb13u1",
          "Arch": "amd64",
          "SrcName": "perl",
          "SrcVersion": "5.40.1",
          "SrcRelease": "6+deb13u1",
          "Licenses": [
            "GPL-1.0-or-later",
            "Artistic-2.0",
            "MIT",
            "REGCOMP",
            "GPL-2.0-with-bison-exception+",
            "Unicode",
            "BZIP",
            "Zlib",
            "GPL-2.0-or-later",
            "FSFAP",
            "BSD-3-clause-with-weird-numbering",
            "CC0-1.0",
            "TEXT-TABS",
            "BSD-4-clause-POWERDOG",
            "BSD-3-clause-GENERIC",
            "BSD-3-Clause",
            "SDBM-PUBLIC-DOMAIN",
            "DONT-CHANGE-THE-GPL",
            "Artistic-dist",
            "LGPL-2.1-only",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "Artistic-2"
          ],
          "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libperl5.40@5.40.1-6+deb13u1",
            "perl-base@5.40.1-6+deb13u1",
            "perl-modules-5.40@5.40.1-6+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/corelist",
            "/usr/bin/cpan",
            "/usr/bin/enc2xs",
            "/usr/bin/encguess",
            "/usr/bin/h2ph",
            "/usr/bin/h2xs",
            "/usr/bin/instmodsh",
            "/usr/bin/json_pp",
            "/usr/bin/libnetcfg",
            "/usr/bin/perlbug",
            "/usr/bin/perldoc",
            "/usr/bin/perlivp",
            "/usr/bin/perlthanks",
            "/usr/bin/piconv",
            "/usr/bin/pl2pm",
            "/usr/bin/pod2html",
            "/usr/bin/pod2man",
            "/usr/bin/pod2text",
            "/usr/bin/pod2usage",
            "/usr/bin/podchecker",
            "/usr/bin/prove",
            "/usr/bin/ptar",
            "/usr/bin/ptardiff",
            "/usr/bin/ptargrep",
            "/usr/bin/shasum",
            "/usr/bin/splain",
            "/usr/bin/streamzip",
            "/usr/bin/xsubpp",
            "/usr/bin/zipdetails",
            "/usr/share/doc/perl/README.Debian",
            "/usr/share/doc/perl/changelog.Debian.gz",
            "/usr/share/doc/perl/changelog.gz",
            "/usr/share/doc/perl/copyright",
            "/usr/share/lintian/overrides/perl",
            "/usr/share/man/man1/corelist.1.gz",
            "/usr/share/man/man1/cpan.1.gz",
            "/usr/share/man/man1/enc2xs.1.gz",
            "/usr/share/man/man1/encguess.1.gz",
            "/usr/share/man/man1/h2ph.1.gz",
            "/usr/share/man/man1/h2xs.1.gz",
            "/usr/share/man/man1/instmodsh.1.gz",
            "/usr/share/man/man1/json_pp.1.gz",
            "/usr/share/man/man1/libnetcfg.1.gz",
            "/usr/share/man/man1/perlbug.1.gz",
            "/usr/share/man/man1/perlivp.1.gz",
            "/usr/share/man/man1/piconv.1.gz",
            "/usr/share/man/man1/pl2pm.1.gz",
            "/usr/share/man/man1/pod2html.1.gz",
            "/usr/share/man/man1/pod2man.1.gz",
            "/usr/share/man/man1/pod2text.1.gz",
            "/usr/share/man/man1/pod2usage.1.gz",
            "/usr/share/man/man1/podchecker.1.gz",
            "/usr/share/man/man1/prove.1.gz",
            "/usr/share/man/man1/ptar.1.gz",
            "/usr/share/man/man1/ptardiff.1.gz",
            "/usr/share/man/man1/ptargrep.1.gz",
            "/usr/share/man/man1/shasum.1.gz",
            "/usr/share/man/man1/splain.1.gz",
            "/usr/share/man/man1/streamzip.1.gz",
            "/usr/share/man/man1/xsubpp.1.gz",
            "/usr/share/man/man1/zipdetails.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "perl-base@5.40.1-6+deb13u1",
          "Name": "perl-base",
          "Identifier": {
            "PURL": "pkg:deb/debian/perl-base@5.40.1-6%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e64a633beeac3a7d"
          },
          "Version": "5.40.1",
          "Release": "6+deb13u1",
          "Arch": "amd64",
          "SrcName": "perl",
          "SrcVersion": "5.40.1",
          "SrcRelease": "6+deb13u1",
          "Licenses": [
            "GPL-1.0-or-later",
            "Artistic-2.0",
            "MIT",
            "REGCOMP",
            "GPL-2.0-with-bison-exception+",
            "Unicode",
            "BZIP",
            "Zlib",
            "GPL-2.0-or-later",
            "FSFAP",
            "BSD-3-clause-with-weird-numbering",
            "CC0-1.0",
            "TEXT-TABS",
            "BSD-4-clause-POWERDOG",
            "BSD-3-clause-GENERIC",
            "BSD-3-Clause",
            "SDBM-PUBLIC-DOMAIN",
            "DONT-CHANGE-THE-GPL",
            "Artistic-dist",
            "LGPL-2.1-only",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "Artistic-2"
          ],
          "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/perl",
            "/usr/bin/perl5.40.1",
            "/usr/lib/x86_64-linux-gnu/perl-base/AutoLoader.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Carp.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Carp/Heavy.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Config.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Config_git.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/Config_heavy.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/Cwd.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/DynaLoader.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Errno.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Exporter.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Exporter/Heavy.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Fcntl.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Basename.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Glob.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Path.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Temp.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/FileHandle.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long/Parser.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Hash/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/File.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Handle.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Pipe.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Seekable.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Select.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/INET.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/IP.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/UNIX.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open2.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open3.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/List/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/POSIX.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Scalar/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/SelectSaver.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Socket.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Symbol.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Text/ParseWords.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Text/Tabs.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Text/Wrap.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Tie/Hash.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/XSLoader.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/attributes.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/Cwd/Cwd.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/Fcntl/Fcntl.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/File/Glob/Glob.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/Hash/Util/Util.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/IO/IO.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/List/Util/Util.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/POSIX/POSIX.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/Socket/Socket.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/attributes/attributes.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/re/re.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/base.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/builtin.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/bytes.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/constant.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/feature.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/fields.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/integer.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/lib.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/locale.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/overload.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/overloading.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/parent.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/re.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/strict.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Age.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bmg.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Cf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Ea.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/EqUIdeo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/GCB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Gc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Hst.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identif2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identifi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InPC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InSC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Isc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jg.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFCQC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFDQC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCCF.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCQC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKDQC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Na1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NameAlia.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nv.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/PerlDeci.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/SB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Sc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Scx.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Tc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Uc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Vo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/WB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlLB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlSCX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/NA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V100.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V11.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V110.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V120.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V130.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V140.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V150.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V20.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V30.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V31.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V32.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V40.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V41.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V50.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V51.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V52.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V60.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V61.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V70.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V80.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V90.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Alpha/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/B.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/BN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/CS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/EN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ES.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ET.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/L.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/NSM.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ON.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/R.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/WS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiM/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Blk/NB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/C.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/O.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CE/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CI/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCF/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCM/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWKCF/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWL/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWT/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWU/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Cased/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/A.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/ATAR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/B.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/BR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/DB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NK.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/OV.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/VR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CompEx/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/DI/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dash/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dep/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dia/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Com.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Enc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Fin.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Font.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Init.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Iso.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Med.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nar.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/NonCanon.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sqr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sub.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sup.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Vert.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EBase/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EComp/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EPres/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/A.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/H.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/Na.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/W.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Emoji/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ext/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/ExtPict/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/CN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/EX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LV.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LVT.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/PP.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/SM.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/XX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/C.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/L.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/LC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ll.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/M.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Me.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nd.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/No.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/P.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pd.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pe.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Po.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ps.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/S.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sk.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/So.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Z.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Zs.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrBase/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrExt/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hex/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hst/NA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hyphen/T.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDS/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Allowed.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Restrict.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/DefaultI.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Exclusio.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Inclusio.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/LimitedU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotChara.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotNFKC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotXID.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Obsolete.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Recommen.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Technica.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Uncommon.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ideo/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/10_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/11_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/13_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/14_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/15_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/7_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/8_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/9_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Bottom.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/BottomAn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Left.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/LeftAndR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/NA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Overstru.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Right.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Top.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndBo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndL2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndLe.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndRi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/VisualOr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Avagraha.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Bindu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Cantilla.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona4.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona5.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona6.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona7.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona8.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona9.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consonan.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Geminati.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Invisibl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Nukta.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Number.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Other.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/PureKill.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Syllable.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/ToneMark.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Virama.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Visarga.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Vowel.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelDep.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelInd.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Ain.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Alef.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Beh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Dal.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/FarsiYeh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Feh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Gaf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Hah.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/HanifiRo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Kaf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Lam.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/NoJoinin.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Noon.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Qaf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Reh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Sad.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Seen.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Tah.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Waw.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Yeh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/C.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/D.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/L.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/R.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/T.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/U.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AI.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CJ.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CM.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/EX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/GL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/ID.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/OP.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PO.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/QU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/SA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/XX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lower/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Math/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/M.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Di.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/None.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Nu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/11.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/12.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/13.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/14.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/15.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/16.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/17.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/18.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/19.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_16.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_4.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_6.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_8.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/200.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2_3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/300.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_16.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_4.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/400.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/500.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/600.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/700.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/800.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/900.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PCM/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PatSyn/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Alnum.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Assigned.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Blank.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Graph.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PerlWord.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PosixPun.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Print.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/SpacePer.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Title.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Word.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/XPosixPu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlAny.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCh2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCha.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlFol.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIsI.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlNch.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPat.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPr2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPro.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlQuo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/QMark/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/AT.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/CL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/EX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/FO.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LE.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LO.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/NU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/SC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/ST.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/Sp.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/UP.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/XX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SD/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/STerm/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Arab.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Beng.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cprt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cyrl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Deva.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Dupl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Geor.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Glag.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gong.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gonm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gran.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Grek.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gujr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Guru.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Han.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hang.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hira.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Kana.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Knda.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Latn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Limb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Linb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mlym.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mong.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mult.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Orya.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Sinh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Syrc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Taml.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Telu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zinh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zyyy.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Adlm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Arab.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Armn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Beng.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bhks.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bopo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cakm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cham.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Copt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cprt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cyrl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Deva.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Diak.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Dupl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Ethi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Geor.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Glag.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gong.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gonm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gran.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Grek.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gujr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Guru.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Han.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hang.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hebr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hira.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmng.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmnp.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kana.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khar.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khmr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khoj.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Knda.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kthi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lana.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lao.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Latn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Limb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lina.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Linb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mlym.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mong.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mult.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mymr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nand.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nko.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Orya.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Phlp.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Rohg.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Shrd.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sind.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sinh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Syrc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tagb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Takr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Talu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Taml.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tang.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Telu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Thaa.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tibt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tirh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Vith.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Xsux.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yezi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zinh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zyyy.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zzzz.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Term/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/UIdeo/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Upper/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/VS/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/R.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/U.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/EX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/Extend.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/FO.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/HL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/KA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/LE.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/ML.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/NU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/WSegSpac.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/XX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDS/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/utf8.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/vars.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/warnings.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/warnings/register.pm",
            "/usr/share/doc/perl-base/changelog.Debian.gz",
            "/usr/share/doc/perl-base/changelog.gz",
            "/usr/share/doc/perl-base/copyright",
            "/usr/share/doc/perl/AUTHORS.gz",
            "/usr/share/doc/perl/Documentation",
            "/usr/share/lintian/overrides/perl-base",
            "/usr/share/man/man1/perl.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "perl-modules-5.40@5.40.1-6+deb13u1",
          "Name": "perl-modules-5.40",
          "Identifier": {
            "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6%2Bdeb13u1?arch=all\u0026distro=debian-13.7",
            "UID": "c866326379cc085"
          },
          "Version": "5.40.1",
          "Release": "6+deb13u1",
          "Arch": "all",
          "SrcName": "perl",
          "SrcVersion": "5.40.1",
          "SrcRelease": "6+deb13u1",
          "Licenses": [
            "GPL-1.0-or-later",
            "Artistic-2.0",
            "MIT",
            "REGCOMP",
            "GPL-2.0-with-bison-exception+",
            "Unicode",
            "BZIP",
            "Zlib",
            "GPL-2.0-or-later",
            "FSFAP",
            "BSD-3-clause-with-weird-numbering",
            "CC0-1.0",
            "TEXT-TABS",
            "BSD-4-clause-POWERDOG",
            "BSD-3-clause-GENERIC",
            "BSD-3-Clause",
            "SDBM-PUBLIC-DOMAIN",
            "DONT-CHANGE-THE-GPL",
            "Artistic-dist",
            "LGPL-2.1-only",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "Artistic-2"
          ],
          "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "perl-base@5.40.1-6+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/doc/perl-modules-5.40/README.Debian",
            "/usr/share/doc/perl-modules-5.40/changelog.Debian.gz",
            "/usr/share/doc/perl-modules-5.40/changelog.gz",
            "/usr/share/doc/perl-modules-5.40/copyright",
            "/usr/share/perl/5.40.1/AnyDBM_File.pm",
            "/usr/share/perl/5.40.1/App/Cpan.pm",
            "/usr/share/perl/5.40.1/App/Prove.pm",
            "/usr/share/perl/5.40.1/App/Prove/State.pm",
            "/usr/share/perl/5.40.1/App/Prove/State/Result.pm",
            "/usr/share/perl/5.40.1/App/Prove/State/Result/Test.pm",
            "/usr/share/perl/5.40.1/Archive/Tar.pm",
            "/usr/share/perl/5.40.1/Archive/Tar/Constant.pm",
            "/usr/share/perl/5.40.1/Archive/Tar/File.pm",
            "/usr/share/perl/5.40.1/Attribute/Handlers.pm",
            "/usr/share/perl/5.40.1/AutoLoader.pm",
            "/usr/share/perl/5.40.1/AutoSplit.pm",
            "/usr/share/perl/5.40.1/B/Deparse.pm",
            "/usr/share/perl/5.40.1/B/Op_private.pm",
            "/usr/share/perl/5.40.1/Benchmark.pm",
            "/usr/share/perl/5.40.1/CORE.pod",
            "/usr/share/perl/5.40.1/CPAN.pm",
            "/usr/share/perl/5.40.1/CPAN/API/HOWTO.pod",
            "/usr/share/perl/5.40.1/CPAN/Author.pm",
            "/usr/share/perl/5.40.1/CPAN/Bundle.pm",
            "/usr/share/perl/5.40.1/CPAN/CacheMgr.pm",
            "/usr/share/perl/5.40.1/CPAN/Complete.pm",
            "/usr/share/perl/5.40.1/CPAN/Debug.pm",
            "/usr/share/perl/5.40.1/CPAN/DeferredCode.pm",
            "/usr/share/perl/5.40.1/CPAN/Distribution.pm",
            "/usr/share/perl/5.40.1/CPAN/Distroprefs.pm",
            "/usr/share/perl/5.40.1/CPAN/Distrostatus.pm",
            "/usr/share/perl/5.40.1/CPAN/Exception/RecursiveDependency.pm",
            "/usr/share/perl/5.40.1/CPAN/Exception/blocked_urllist.pm",
            "/usr/share/perl/5.40.1/CPAN/Exception/yaml_not_installed.pm",
            "/usr/share/perl/5.40.1/CPAN/Exception/yaml_process_error.pm",
            "/usr/share/perl/5.40.1/CPAN/FTP.pm",
            "/usr/share/perl/5.40.1/CPAN/FTP/netrc.pm",
            "/usr/share/perl/5.40.1/CPAN/FirstTime.pm",
            "/usr/share/perl/5.40.1/CPAN/HTTP/Client.pm",
            "/usr/share/perl/5.40.1/CPAN/HTTP/Credentials.pm",
            "/usr/share/perl/5.40.1/CPAN/HandleConfig.pm",
            "/usr/share/perl/5.40.1/CPAN/Index.pm",
            "/usr/share/perl/5.40.1/CPAN/InfoObj.pm",
            "/usr/share/perl/5.40.1/CPAN/Kwalify.pm",
            "/usr/share/perl/5.40.1/CPAN/Kwalify/distroprefs.dd",
            "/usr/share/perl/5.40.1/CPAN/Kwalify/distroprefs.yml",
            "/usr/share/perl/5.40.1/CPAN/LWP/UserAgent.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/Converter.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/Feature.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/History.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_0.pod",
            "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_1.pod",
            "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_2.pod",
            "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_3.pod",
            "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_4.pod",
            "/usr/share/perl/5.40.1/CPAN/Meta/Merge.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/Prereqs.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/Requirements.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/Requirements/Range.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/Spec.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/Validator.pm",
            "/usr/share/perl/5.40.1/CPAN/Meta/YAML.pm",
            "/usr/share/perl/5.40.1/CPAN/Mirrors.pm",
            "/usr/share/perl/5.40.1/CPAN/Module.pm",
            "/usr/share/perl/5.40.1/CPAN/Nox.pm",
            "/usr/share/perl/5.40.1/CPAN/Plugin.pm",
            "/usr/share/perl/5.40.1/CPAN/Plugin/Specfile.pm",
            "/usr/share/perl/5.40.1/CPAN/Prompt.pm",
            "/usr/share/perl/5.40.1/CPAN/Queue.pm",
            "/usr/share/perl/5.40.1/CPAN/Shell.pm",
            "/usr/share/perl/5.40.1/CPAN/Tarzip.pm",
            "/usr/share/perl/5.40.1/CPAN/URL.pm",
            "/usr/share/perl/5.40.1/CPAN/Version.pm",
            "/usr/share/perl/5.40.1/Carp.pm",
            "/usr/share/perl/5.40.1/Carp/Heavy.pm",
            "/usr/share/perl/5.40.1/Class/Struct.pm",
            "/usr/share/perl/5.40.1/Compress/Zlib.pm",
            "/usr/share/perl/5.40.1/Config/Extensions.pm",
            "/usr/share/perl/5.40.1/Config/Perl/V.pm",
            "/usr/share/perl/5.40.1/DB.pm",
            "/usr/share/perl/5.40.1/DBM_Filter.pm",
            "/usr/share/perl/5.40.1/DBM_Filter/compress.pm",
            "/usr/share/perl/5.40.1/DBM_Filter/encode.pm",
            "/usr/share/perl/5.40.1/DBM_Filter/int32.pm",
            "/usr/share/perl/5.40.1/DBM_Filter/null.pm",
            "/usr/share/perl/5.40.1/DBM_Filter/utf8.pm",
            "/usr/share/perl/5.40.1/Devel/SelfStubber.pm",
            "/usr/share/perl/5.40.1/Digest.pm",
            "/usr/share/perl/5.40.1/Digest/base.pm",
            "/usr/share/perl/5.40.1/Digest/file.pm",
            "/usr/share/perl/5.40.1/DirHandle.pm",
            "/usr/share/perl/5.40.1/Dumpvalue.pm",
            "/usr/share/perl/5.40.1/Encode/Changes.e2x",
            "/usr/share/perl/5.40.1/Encode/ConfigLocal_PM.e2x",
            "/usr/share/perl/5.40.1/Encode/Makefile_PL.e2x",
            "/usr/share/perl/5.40.1/Encode/PerlIO.pod",
            "/usr/share/perl/5.40.1/Encode/README.e2x",
            "/usr/share/perl/5.40.1/Encode/Supported.pod",
            "/usr/share/perl/5.40.1/Encode/_PM.e2x",
            "/usr/share/perl/5.40.1/Encode/_T.e2x",
            "/usr/share/perl/5.40.1/Encode/encode.h",
            "/usr/share/perl/5.40.1/English.pm",
            "/usr/share/perl/5.40.1/Env.pm",
            "/usr/share/perl/5.40.1/Exporter.pm",
            "/usr/share/perl/5.40.1/Exporter/Heavy.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Base.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Unix.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/VMS.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Windows.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Windows/BCC.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Windows/GCC.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Windows/MSVC.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/aix.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/android.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/cygwin.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/darwin.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/dec_osf.pm",
            "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/os2.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Command.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Command/MM.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Constant.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Constant/Base.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Constant/ProxySubs.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Constant/Utils.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Constant/XS.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Embed.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Install.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Installed.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Liblist.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Liblist/Kid.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MANIFEST.SKIP",
            "/usr/share/perl/5.40.1/ExtUtils/MM.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_AIX.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_Any.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_BeOS.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_Cygwin.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_DOS.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_Darwin.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_MacOS.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_NW5.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_OS2.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_OS390.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_QNX.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_UWIN.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_Unix.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_VMS.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_VOS.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_Win32.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MM_Win95.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MY.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MakeMaker.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/Config.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/FAQ.pod",
            "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/Locale.pm",
            "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/Tutorial.pod",
            "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/version.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Manifest.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Miniperl.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Mkbootstrap.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Mksymlists.pm",
            "/usr/share/perl/5.40.1/ExtUtils/PL2Bat.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Packlist.pm",
            "/usr/share/perl/5.40.1/ExtUtils/ParseXS.pm",
            "/usr/share/perl/5.40.1/ExtUtils/ParseXS.pod",
            "/usr/share/perl/5.40.1/ExtUtils/ParseXS/Constants.pm",
            "/usr/share/perl/5.40.1/ExtUtils/ParseXS/CountLines.pm",
            "/usr/share/perl/5.40.1/ExtUtils/ParseXS/Eval.pm",
            "/usr/share/perl/5.40.1/ExtUtils/ParseXS/Utilities.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Typemaps.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Typemaps/Cmd.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Typemaps/InputMap.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Typemaps/OutputMap.pm",
            "/usr/share/perl/5.40.1/ExtUtils/Typemaps/Type.pm",
            "/usr/share/perl/5.40.1/ExtUtils/testlib.pm",
            "/usr/share/perl/5.40.1/ExtUtils/typemap",
            "/usr/share/perl/5.40.1/ExtUtils/xsubpp",
            "/usr/share/perl/5.40.1/Fatal.pm",
            "/usr/share/perl/5.40.1/File/Basename.pm",
            "/usr/share/perl/5.40.1/File/Compare.pm",
            "/usr/share/perl/5.40.1/File/Copy.pm",
            "/usr/share/perl/5.40.1/File/Fetch.pm",
            "/usr/share/perl/5.40.1/File/Find.pm",
            "/usr/share/perl/5.40.1/File/GlobMapper.pm",
            "/usr/share/perl/5.40.1/File/Path.pm",
            "/usr/share/perl/5.40.1/File/Temp.pm",
            "/usr/share/perl/5.40.1/File/stat.pm",
            "/usr/share/perl/5.40.1/FileCache.pm",
            "/usr/share/perl/5.40.1/FileHandle.pm",
            "/usr/share/perl/5.40.1/Filter/Simple.pm",
            "/usr/share/perl/5.40.1/FindBin.pm",
            "/usr/share/perl/5.40.1/Getopt/Long.pm",
            "/usr/share/perl/5.40.1/Getopt/Long/Parser.pm",
            "/usr/share/perl/5.40.1/Getopt/Std.pm",
            "/usr/share/perl/5.40.1/HTTP/Tiny.pm",
            "/usr/share/perl/5.40.1/I18N/Collate.pm",
            "/usr/share/perl/5.40.1/I18N/LangTags.pm",
            "/usr/share/perl/5.40.1/I18N/LangTags/Detect.pm",
            "/usr/share/perl/5.40.1/I18N/LangTags/List.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Adapter/Bzip2.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Adapter/Deflate.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Adapter/Identity.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Base.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Base/Common.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Bzip2.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Deflate.pm",
            "/usr/share/perl/5.40.1/IO/Compress/FAQ.pod",
            "/usr/share/perl/5.40.1/IO/Compress/Gzip.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Gzip/Constants.pm",
            "/usr/share/perl/5.40.1/IO/Compress/RawDeflate.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Zip.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Zip/Constants.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Zlib/Constants.pm",
            "/usr/share/perl/5.40.1/IO/Compress/Zlib/Extra.pm",
            "/usr/share/perl/5.40.1/IO/Socket/IP.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/Adapter/Bunzip2.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/Adapter/Identity.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/Adapter/Inflate.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/AnyInflate.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/AnyUncompress.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/Base.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/Bunzip2.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/Gunzip.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/Inflate.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/RawInflate.pm",
            "/usr/share/perl/5.40.1/IO/Uncompress/Unzip.pm",
            "/usr/share/perl/5.40.1/IO/Zlib.pm",
            "/usr/share/perl/5.40.1/IPC/Cmd.pm",
            "/usr/share/perl/5.40.1/IPC/Open2.pm",
            "/usr/share/perl/5.40.1/IPC/Open3.pm",
            "/usr/share/perl/5.40.1/Internals.pod",
            "/usr/share/perl/5.40.1/JSON/PP.pm",
            "/usr/share/perl/5.40.1/JSON/PP/Boolean.pm",
            "/usr/share/perl/5.40.1/Locale/Maketext.pm",
            "/usr/share/perl/5.40.1/Locale/Maketext.pod",
            "/usr/share/perl/5.40.1/Locale/Maketext/Cookbook.pod",
            "/usr/share/perl/5.40.1/Locale/Maketext/Guts.pm",
            "/usr/share/perl/5.40.1/Locale/Maketext/GutsLoader.pm",
            "/usr/share/perl/5.40.1/Locale/Maketext/Simple.pm",
            "/usr/share/perl/5.40.1/Locale/Maketext/TPJ13.pod",
            "/usr/share/perl/5.40.1/Math/BigFloat.pm",
            "/usr/share/perl/5.40.1/Math/BigFloat/Trace.pm",
            "/usr/share/perl/5.40.1/Math/BigInt.pm",
            "/usr/share/perl/5.40.1/Math/BigInt/Calc.pm",
            "/usr/share/perl/5.40.1/Math/BigInt/Lib.pm",
            "/usr/share/perl/5.40.1/Math/BigInt/Trace.pm",
            "/usr/share/perl/5.40.1/Math/BigRat.pm",
            "/usr/share/perl/5.40.1/Math/BigRat/Trace.pm",
            "/usr/share/perl/5.40.1/Math/Complex.pm",
            "/usr/share/perl/5.40.1/Math/Trig.pm",
            "/usr/share/perl/5.40.1/Memoize.pm",
            "/usr/share/perl/5.40.1/Memoize/AnyDBM_File.pm",
            "/usr/share/perl/5.40.1/Memoize/Expire.pm",
            "/usr/share/perl/5.40.1/Memoize/NDBM_File.pm",
            "/usr/share/perl/5.40.1/Memoize/SDBM_File.pm",
            "/usr/share/perl/5.40.1/Memoize/Storable.pm",
            "/usr/share/perl/5.40.1/Module/CoreList.pm",
            "/usr/share/perl/5.40.1/Module/CoreList.pod",
            "/usr/share/perl/5.40.1/Module/CoreList/Utils.pm",
            "/usr/share/perl/5.40.1/Module/Load.pm",
            "/usr/share/perl/5.40.1/Module/Load/Conditional.pm",
            "/usr/share/perl/5.40.1/Module/Loaded.pm",
            "/usr/share/perl/5.40.1/Module/Metadata.pm",
            "/usr/share/perl/5.40.1/NEXT.pm",
            "/usr/share/perl/5.40.1/Net/Cmd.pm",
            "/usr/share/perl/5.40.1/Net/Config.pm",
            "/usr/share/perl/5.40.1/Net/Domain.pm",
            "/usr/share/perl/5.40.1/Net/FTP.pm",
            "/usr/share/perl/5.40.1/Net/FTP/A.pm",
            "/usr/share/perl/5.40.1/Net/FTP/E.pm",
            "/usr/share/perl/5.40.1/Net/FTP/I.pm",
            "/usr/share/perl/5.40.1/Net/FTP/L.pm",
            "/usr/share/perl/5.40.1/Net/FTP/dataconn.pm",
            "/usr/share/perl/5.40.1/Net/NNTP.pm",
            "/usr/share/perl/5.40.1/Net/Netrc.pm",
            "/usr/share/perl/5.40.1/Net/POP3.pm",
            "/usr/share/perl/5.40.1/Net/Ping.pm",
            "/usr/share/perl/5.40.1/Net/SMTP.pm",
            "/usr/share/perl/5.40.1/Net/Time.pm",
            "/usr/share/perl/5.40.1/Net/hostent.pm",
            "/usr/share/perl/5.40.1/Net/libnetFAQ.pod",
            "/usr/share/perl/5.40.1/Net/netent.pm",
            "/usr/share/perl/5.40.1/Net/protoent.pm",
            "/usr/share/perl/5.40.1/Net/servent.pm",
            "/usr/share/perl/5.40.1/Params/Check.pm",
            "/usr/share/perl/5.40.1/Parse/CPAN/Meta.pm",
            "/usr/share/perl/5.40.1/Perl/OSType.pm",
            "/usr/share/perl/5.40.1/PerlIO.pm",
            "/usr/share/perl/5.40.1/PerlIO/scalar.pm",
            "/usr/share/perl/5.40.1/PerlIO/via/QuotedPrint.pm",
            "/usr/share/perl/5.40.1/Pod/Checker.pm",
            "/usr/share/perl/5.40.1/Pod/Escapes.pm",
            "/usr/share/perl/5.40.1/Pod/Functions.pm",
            "/usr/share/perl/5.40.1/Pod/Html.pm",
            "/usr/share/perl/5.40.1/Pod/Html/Util.pm",
            "/usr/share/perl/5.40.1/Pod/Man.pm",
            "/usr/share/perl/5.40.1/Pod/ParseLink.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/BaseTo.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/GetOptsOO.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToANSI.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToChecker.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToMan.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToNroff.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToPod.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToRtf.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToTerm.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToText.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToTk.pm",
            "/usr/share/perl/5.40.1/Pod/Perldoc/ToXml.pm",
            "/usr/share/perl/5.40.1/Pod/Simple.pm",
            "/usr/share/perl/5.40.1/Pod/Simple.pod",
            "/usr/share/perl/5.40.1/Pod/Simple/BlackBox.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/Checker.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/Debug.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/DumpAsText.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/DumpAsXML.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/HTML.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/HTMLBatch.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/HTMLLegacy.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/JustPod.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/LinkSection.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/Methody.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/Progress.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/PullParser.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/PullParserEndToken.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/PullParserStartToken.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/PullParserTextToken.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/PullParserToken.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/RTF.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/Search.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/SimpleTree.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/Subclassing.pod",
            "/usr/share/perl/5.40.1/Pod/Simple/Text.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/TextContent.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/TiedOutFH.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/Transcode.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/TranscodeDumb.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/TranscodeSmart.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/XHTML.pm",
            "/usr/share/perl/5.40.1/Pod/Simple/XMLOutStream.pm",
            "/usr/share/perl/5.40.1/Pod/Text.pm",
            "/usr/share/perl/5.40.1/Pod/Text/Color.pm",
            "/usr/share/perl/5.40.1/Pod/Text/Overstrike.pm",
            "/usr/share/perl/5.40.1/Pod/Text/Termcap.pm",
            "/usr/share/perl/5.40.1/Pod/Usage.pm",
            "/usr/share/perl/5.40.1/Safe.pm",
            "/usr/share/perl/5.40.1/Search/Dict.pm",
            "/usr/share/perl/5.40.1/SelectSaver.pm",
            "/usr/share/perl/5.40.1/SelfLoader.pm",
            "/usr/share/perl/5.40.1/Symbol.pm",
            "/usr/share/perl/5.40.1/TAP/Base.pm",
            "/usr/share/perl/5.40.1/TAP/Formatter/Base.pm",
            "/usr/share/perl/5.40.1/TAP/Formatter/Color.pm",
            "/usr/share/perl/5.40.1/TAP/Formatter/Console.pm",
            "/usr/share/perl/5.40.1/TAP/Formatter/Console/ParallelSession.pm",
            "/usr/share/perl/5.40.1/TAP/Formatter/Console/Session.pm",
            "/usr/share/perl/5.40.1/TAP/Formatter/File.pm",
            "/usr/share/perl/5.40.1/TAP/Formatter/File/Session.pm",
            "/usr/share/perl/5.40.1/TAP/Formatter/Session.pm",
            "/usr/share/perl/5.40.1/TAP/Harness.pm",
            "/usr/share/perl/5.40.1/TAP/Harness/Beyond.pod",
            "/usr/share/perl/5.40.1/TAP/Harness/Env.pm",
            "/usr/share/perl/5.40.1/TAP/Object.pm",
            "/usr/share/perl/5.40.1/TAP/Parser.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Aggregator.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Grammar.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Iterator.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Iterator/Array.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Iterator/Process.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Iterator/Stream.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/IteratorFactory.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Multiplexer.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result/Bailout.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result/Comment.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result/Plan.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result/Pragma.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result/Test.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result/Unknown.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result/Version.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Result/YAML.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/ResultFactory.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Scheduler.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Scheduler/Job.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Scheduler/Spinner.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/Source.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/Executable.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/File.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/Handle.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/Perl.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/RawTAP.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/YAMLish/Reader.pm",
            "/usr/share/perl/5.40.1/TAP/Parser/YAMLish/Writer.pm",
            "/usr/share/perl/5.40.1/Term/ANSIColor.pm",
            "/usr/share/perl/5.40.1/Term/Cap.pm",
            "/usr/share/perl/5.40.1/Term/Complete.pm",
            "/usr/share/perl/5.40.1/Term/ReadLine.pm",
            "/usr/share/perl/5.40.1/Term/Table.pm",
            "/usr/share/perl/5.40.1/Term/Table/Cell.pm",
            "/usr/share/perl/5.40.1/Term/Table/CellStack.pm",
            "/usr/share/perl/5.40.1/Term/Table/HashBase.pm",
            "/usr/share/perl/5.40.1/Term/Table/LineBreak.pm",
            "/usr/share/perl/5.40.1/Term/Table/Spacer.pm",
            "/usr/share/perl/5.40.1/Term/Table/Util.pm",
            "/usr/share/perl/5.40.1/Test.pm",
            "/usr/share/perl/5.40.1/Test/Builder.pm",
            "/usr/share/perl/5.40.1/Test/Builder/Formatter.pm",
            "/usr/share/perl/5.40.1/Test/Builder/IO/Scalar.pm",
            "/usr/share/perl/5.40.1/Test/Builder/Module.pm",
            "/usr/share/perl/5.40.1/Test/Builder/Tester.pm",
            "/usr/share/perl/5.40.1/Test/Builder/Tester/Color.pm",
            "/usr/share/perl/5.40.1/Test/Builder/TodoDiag.pm",
            "/usr/share/perl/5.40.1/Test/Harness.pm",
            "/usr/share/perl/5.40.1/Test/More.pm",
            "/usr/share/perl/5.40.1/Test/Simple.pm",
            "/usr/share/perl/5.40.1/Test/Tester.pm",
            "/usr/share/perl/5.40.1/Test/Tester/Capture.pm",
            "/usr/share/perl/5.40.1/Test/Tester/CaptureRunner.pm",
            "/usr/share/perl/5.40.1/Test/Tester/Delegate.pm",
            "/usr/share/perl/5.40.1/Test/Tutorial.pod",
            "/usr/share/perl/5.40.1/Test/use/ok.pm",
            "/usr/share/perl/5.40.1/Test2.pm",
            "/usr/share/perl/5.40.1/Test2/API.pm",
            "/usr/share/perl/5.40.1/Test2/API/Breakage.pm",
            "/usr/share/perl/5.40.1/Test2/API/Context.pm",
            "/usr/share/perl/5.40.1/Test2/API/Instance.pm",
            "/usr/share/perl/5.40.1/Test2/API/InterceptResult.pm",
            "/usr/share/perl/5.40.1/Test2/API/InterceptResult/Event.pm",
            "/usr/share/perl/5.40.1/Test2/API/InterceptResult/Facet.pm",
            "/usr/share/perl/5.40.1/Test2/API/InterceptResult/Hub.pm",
            "/usr/share/perl/5.40.1/Test2/API/InterceptResult/Squasher.pm",
            "/usr/share/perl/5.40.1/Test2/API/Stack.pm",
            "/usr/share/perl/5.40.1/Test2/AsyncSubtest.pm",
            "/usr/share/perl/5.40.1/Test2/AsyncSubtest/Event/Attach.pm",
            "/usr/share/perl/5.40.1/Test2/AsyncSubtest/Event/Detach.pm",
            "/usr/share/perl/5.40.1/Test2/AsyncSubtest/Formatter.pm",
            "/usr/share/perl/5.40.1/Test2/AsyncSubtest/Hub.pm",
            "/usr/share/perl/5.40.1/Test2/Bundle.pm",
            "/usr/share/perl/5.40.1/Test2/Bundle/Extended.pm",
            "/usr/share/perl/5.40.1/Test2/Bundle/More.pm",
            "/usr/share/perl/5.40.1/Test2/Bundle/Simple.pm",
            "/usr/share/perl/5.40.1/Test2/Compare.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Array.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Bag.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Base.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Bool.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Custom.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/DeepRef.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Delta.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Event.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/EventMeta.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Float.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Hash.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Isa.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Meta.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Negatable.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Number.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Object.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/OrderedSubset.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Pattern.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Ref.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Regex.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Scalar.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Set.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/String.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Undef.pm",
            "/usr/share/perl/5.40.1/Test2/Compare/Wildcard.pm",
            "/usr/share/perl/5.40.1/Test2/Event.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Bail.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Diag.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Encoding.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Exception.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Fail.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Generic.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Note.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Ok.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Pass.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Plan.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Skip.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Subtest.pm",
            "/usr/share/perl/5.40.1/Test2/Event/TAP/Version.pm",
            "/usr/share/perl/5.40.1/Test2/Event/V2.pm",
            "/usr/share/perl/5.40.1/Test2/Event/Waiting.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/About.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Amnesty.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Assert.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Control.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Error.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Hub.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Info.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Info/Table.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Meta.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Parent.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Plan.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Render.pm",
            "/usr/share/perl/5.40.1/Test2/EventFacet/Trace.pm",
            "/usr/share/perl/5.40.1/Test2/Formatter.pm",
            "/usr/share/perl/5.40.1/Test2/Formatter/TAP.pm",
            "/usr/share/perl/5.40.1/Test2/Hub.pm",
            "/usr/share/perl/5.40.1/Test2/Hub/Interceptor.pm",
            "/usr/share/perl/5.40.1/Test2/Hub/Interceptor/Terminator.pm",
            "/usr/share/perl/5.40.1/Test2/Hub/Subtest.pm",
            "/usr/share/perl/5.40.1/Test2/IPC.pm",
            "/usr/share/perl/5.40.1/Test2/IPC/Driver.pm",
            "/usr/share/perl/5.40.1/Test2/IPC/Driver/Files.pm",
            "/usr/share/perl/5.40.1/Test2/Manual.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Anatomy.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/API.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/Context.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/EndToEnd.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/Event.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/Hubs.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/IPC.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/Utilities.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Concurrency.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Contributing.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Testing.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Testing/Introduction.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Testing/Migrating.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Testing/Planning.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Testing/Todo.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/FirstTool.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Formatter.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Nesting.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Plugin/TestExit.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Plugin/TestingDone.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Plugin/ToolCompletes.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Plugin/ToolStarts.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Subtest.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/TestBuilder.pm",
            "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Testing.pm",
            "/usr/share/perl/5.40.1/Test2/Mock.pm",
            "/usr/share/perl/5.40.1/Test2/Plugin.pm",
            "/usr/share/perl/5.40.1/Test2/Plugin/BailOnFail.pm",
            "/usr/share/perl/5.40.1/Test2/Plugin/DieOnFail.pm",
            "/usr/share/perl/5.40.1/Test2/Plugin/ExitSummary.pm",
            "/usr/share/perl/5.40.1/Test2/Plugin/SRand.pm",
            "/usr/share/perl/5.40.1/Test2/Plugin/Times.pm",
            "/usr/share/perl/5.40.1/Test2/Plugin/UTF8.pm",
            "/usr/share/perl/5.40.1/Test2/Require.pm",
            "/usr/share/perl/5.40.1/Test2/Require/AuthorTesting.pm",
            "/usr/share/perl/5.40.1/Test2/Require/AutomatedTesting.pm",
            "/usr/share/perl/5.40.1/Test2/Require/EnvVar.pm",
            "/usr/share/perl/5.40.1/Test2/Require/ExtendedTesting.pm",
            "/usr/share/perl/5.40.1/Test2/Require/Fork.pm",
            "/usr/share/perl/5.40.1/Test2/Require/Module.pm",
            "/usr/share/perl/5.40.1/Test2/Require/NonInteractiveTesting.pm",
            "/usr/share/perl/5.40.1/Test2/Require/Perl.pm",
            "/usr/share/perl/5.40.1/Test2/Require/RealFork.pm",
            "/usr/share/perl/5.40.1/Test2/Require/ReleaseTesting.pm",
            "/usr/share/perl/5.40.1/Test2/Require/Threads.pm",
            "/usr/share/perl/5.40.1/Test2/Suite.pm",
            "/usr/share/perl/5.40.1/Test2/Todo.pm",
            "/usr/share/perl/5.40.1/Test2/Tools.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/AsyncSubtest.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Basic.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Class.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/ClassicCompare.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Compare.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Defer.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Encoding.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Event.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Exception.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Exports.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/GenTemp.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Grab.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Mock.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Ref.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Refcount.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Spec.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Subtest.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Target.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Tester.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Tiny.pm",
            "/usr/share/perl/5.40.1/Test2/Tools/Warnings.pm",
            "/usr/share/perl/5.40.1/Test2/Transition.pod",
            "/usr/share/perl/5.40.1/Test2/Util.pm",
            "/usr/share/perl/5.40.1/Test2/Util/ExternalMeta.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Facets2Legacy.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Grabber.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Guard.pm",
            "/usr/share/perl/5.40.1/Test2/Util/HashBase.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Importer.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Ref.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Stash.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Sub.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Table.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Table/Cell.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Table/LineBreak.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Term.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Times.pm",
            "/usr/share/perl/5.40.1/Test2/Util/Trace.pm",
            "/usr/share/perl/5.40.1/Test2/V0.pm",
            "/usr/share/perl/5.40.1/Test2/Workflow.pm",
            "/usr/share/perl/5.40.1/Test2/Workflow/BlockBase.pm",
            "/usr/share/perl/5.40.1/Test2/Workflow/Build.pm",
            "/usr/share/perl/5.40.1/Test2/Workflow/Runner.pm",
            "/usr/share/perl/5.40.1/Test2/Workflow/Task.pm",
            "/usr/share/perl/5.40.1/Test2/Workflow/Task/Action.pm",
            "/usr/share/perl/5.40.1/Test2/Workflow/Task/Group.pm",
            "/usr/share/perl/5.40.1/Text/Abbrev.pm",
            "/usr/share/perl/5.40.1/Text/Balanced.pm",
            "/usr/share/perl/5.40.1/Text/ParseWords.pm",
            "/usr/share/perl/5.40.1/Text/Tabs.pm",
            "/usr/share/perl/5.40.1/Text/Wrap.pm",
            "/usr/share/perl/5.40.1/Thread.pm",
            "/usr/share/perl/5.40.1/Thread/Queue.pm",
            "/usr/share/perl/5.40.1/Thread/Semaphore.pm",
            "/usr/share/perl/5.40.1/Tie/Array.pm",
            "/usr/share/perl/5.40.1/Tie/File.pm",
            "/usr/share/perl/5.40.1/Tie/Handle.pm",
            "/usr/share/perl/5.40.1/Tie/Hash.pm",
            "/usr/share/perl/5.40.1/Tie/Hash/NamedCapture.pm",
            "/usr/share/perl/5.40.1/Tie/Memoize.pm",
            "/usr/share/perl/5.40.1/Tie/RefHash.pm",
            "/usr/share/perl/5.40.1/Tie/Scalar.pm",
            "/usr/share/perl/5.40.1/Tie/StdHandle.pm",
            "/usr/share/perl/5.40.1/Tie/SubstrHash.pm",
            "/usr/share/perl/5.40.1/Time/Local.pm",
            "/usr/share/perl/5.40.1/Time/gmtime.pm",
            "/usr/share/perl/5.40.1/Time/localtime.pm",
            "/usr/share/perl/5.40.1/Time/tm.pm",
            "/usr/share/perl/5.40.1/UNIVERSAL.pm",
            "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Big5.pm",
            "/usr/share/perl/5.40.1/Unicode/Collate/CJK/GB2312.pm",
            "/usr/share/perl/5.40.1/Unicode/Collate/CJK/JISX0208.pm",
            "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Korean.pm",
            "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Pinyin.pm",
            "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Stroke.pm",
            "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Zhuyin.pm",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/af.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ar.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/as.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/az.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/be.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/bn.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ca.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/cs.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/cu.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/cy.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/da.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/de_at_ph.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/de_phone.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/dsb.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ee.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/eo.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/es.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/es_trad.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/et.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fa.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fi.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fi_phone.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fil.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fo.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fr_ca.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/gu.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ha.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/haw.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/he.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/hi.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/hr.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/hu.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/hy.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ig.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/is.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ja.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/kk.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/kl.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/kn.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ko.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/kok.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/lkt.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ln.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/lt.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/lv.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/mk.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ml.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/mr.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/mt.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/nb.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/nn.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/nso.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/om.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/or.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/pa.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/pl.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ro.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sa.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/se.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/si.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/si_dict.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sk.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sl.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sq.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sr.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sv.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sv_refo.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ta.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/te.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/th.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/tn.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/to.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/tr.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ug_cyrl.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/uk.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ur.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/vi.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/vo.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/wae.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/wo.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/yo.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_big5.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_gb.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_pin.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_strk.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_zhu.pl",
            "/usr/share/perl/5.40.1/Unicode/Collate/allkeys.txt",
            "/usr/share/perl/5.40.1/Unicode/Collate/keys.txt",
            "/usr/share/perl/5.40.1/Unicode/UCD.pm",
            "/usr/share/perl/5.40.1/User/grent.pm",
            "/usr/share/perl/5.40.1/User/pwent.pm",
            "/usr/share/perl/5.40.1/XSLoader.pm",
            "/usr/share/perl/5.40.1/_charnames.pm",
            "/usr/share/perl/5.40.1/autodie.pm",
            "/usr/share/perl/5.40.1/autodie/Scope/Guard.pm",
            "/usr/share/perl/5.40.1/autodie/Scope/GuardStack.pm",
            "/usr/share/perl/5.40.1/autodie/Util.pm",
            "/usr/share/perl/5.40.1/autodie/exception.pm",
            "/usr/share/perl/5.40.1/autodie/exception/system.pm",
            "/usr/share/perl/5.40.1/autodie/hints.pm",
            "/usr/share/perl/5.40.1/autodie/skip.pm",
            "/usr/share/perl/5.40.1/autouse.pm",
            "/usr/share/perl/5.40.1/base.pm",
            "/usr/share/perl/5.40.1/bigfloat.pm",
            "/usr/share/perl/5.40.1/bigint.pm",
            "/usr/share/perl/5.40.1/bignum.pm",
            "/usr/share/perl/5.40.1/bigrat.pm",
            "/usr/share/perl/5.40.1/blib.pm",
            "/usr/share/perl/5.40.1/builtin.pm",
            "/usr/share/perl/5.40.1/bytes.pm",
            "/usr/share/perl/5.40.1/charnames.pm",
            "/usr/share/perl/5.40.1/constant.pm",
            "/usr/share/perl/5.40.1/deprecate.pm",
            "/usr/share/perl/5.40.1/diagnostics.pm",
            "/usr/share/perl/5.40.1/dumpvar.pl",
            "/usr/share/perl/5.40.1/encoding/warnings.pm",
            "/usr/share/perl/5.40.1/experimental.pm",
            "/usr/share/perl/5.40.1/feature.pm",
            "/usr/share/perl/5.40.1/fields.pm",
            "/usr/share/perl/5.40.1/filetest.pm",
            "/usr/share/perl/5.40.1/if.pm",
            "/usr/share/perl/5.40.1/integer.pm",
            "/usr/share/perl/5.40.1/less.pm",
            "/usr/share/perl/5.40.1/locale.pm",
            "/usr/share/perl/5.40.1/meta_notation.pm",
            "/usr/share/perl/5.40.1/ok.pm",
            "/usr/share/perl/5.40.1/open.pm",
            "/usr/share/perl/5.40.1/overload.pm",
            "/usr/share/perl/5.40.1/overload/numbers.pm",
            "/usr/share/perl/5.40.1/overloading.pm",
            "/usr/share/perl/5.40.1/parent.pm",
            "/usr/share/perl/5.40.1/perl5db.pl",
            "/usr/share/perl/5.40.1/perlfaq.pm",
            "/usr/share/perl/5.40.1/pod/perldiag.pod",
            "/usr/share/perl/5.40.1/sigtrap.pm",
            "/usr/share/perl/5.40.1/sort.pm",
            "/usr/share/perl/5.40.1/stable.pm",
            "/usr/share/perl/5.40.1/strict.pm",
            "/usr/share/perl/5.40.1/subs.pm",
            "/usr/share/perl/5.40.1/unicore/Blocks.txt",
            "/usr/share/perl/5.40.1/unicore/CombiningClass.pl",
            "/usr/share/perl/5.40.1/unicore/Decomposition.pl",
            "/usr/share/perl/5.40.1/unicore/Name.pl",
            "/usr/share/perl/5.40.1/unicore/Name.pm",
            "/usr/share/perl/5.40.1/unicore/NamedSequences.txt",
            "/usr/share/perl/5.40.1/unicore/SpecialCasing.txt",
            "/usr/share/perl/5.40.1/unicore/TestNorm.pl",
            "/usr/share/perl/5.40.1/unicore/To/Age.pl",
            "/usr/share/perl/5.40.1/unicore/To/Bc.pl",
            "/usr/share/perl/5.40.1/unicore/To/Bmg.pl",
            "/usr/share/perl/5.40.1/unicore/To/Bpb.pl",
            "/usr/share/perl/5.40.1/unicore/To/Bpt.pl",
            "/usr/share/perl/5.40.1/unicore/To/Cf.pl",
            "/usr/share/perl/5.40.1/unicore/To/Ea.pl",
            "/usr/share/perl/5.40.1/unicore/To/EqUIdeo.pl",
            "/usr/share/perl/5.40.1/unicore/To/GCB.pl",
            "/usr/share/perl/5.40.1/unicore/To/Gc.pl",
            "/usr/share/perl/5.40.1/unicore/To/Hst.pl",
            "/usr/share/perl/5.40.1/unicore/To/Identif2.pl",
            "/usr/share/perl/5.40.1/unicore/To/Identifi.pl",
            "/usr/share/perl/5.40.1/unicore/To/InPC.pl",
            "/usr/share/perl/5.40.1/unicore/To/InSC.pl",
            "/usr/share/perl/5.40.1/unicore/To/Isc.pl",
            "/usr/share/perl/5.40.1/unicore/To/Jg.pl",
            "/usr/share/perl/5.40.1/unicore/To/Jt.pl",
            "/usr/share/perl/5.40.1/unicore/To/Lb.pl",
            "/usr/share/perl/5.40.1/unicore/To/Lc.pl",
            "/usr/share/perl/5.40.1/unicore/To/NFCQC.pl",
            "/usr/share/perl/5.40.1/unicore/To/NFDQC.pl",
            "/usr/share/perl/5.40.1/unicore/To/NFKCCF.pl",
            "/usr/share/perl/5.40.1/unicore/To/NFKCQC.pl",
            "/usr/share/perl/5.40.1/unicore/To/NFKDQC.pl",
            "/usr/share/perl/5.40.1/unicore/To/Na1.pl",
            "/usr/share/perl/5.40.1/unicore/To/NameAlia.pl",
            "/usr/share/perl/5.40.1/unicore/To/Nt.pl",
            "/usr/share/perl/5.40.1/unicore/To/Nv.pl",
            "/usr/share/perl/5.40.1/unicore/To/PerlDeci.pl",
            "/usr/share/perl/5.40.1/unicore/To/SB.pl",
            "/usr/share/perl/5.40.1/unicore/To/Sc.pl",
            "/usr/share/perl/5.40.1/unicore/To/Scx.pl",
            "/usr/share/perl/5.40.1/unicore/To/Tc.pl",
            "/usr/share/perl/5.40.1/unicore/To/Uc.pl",
            "/usr/share/perl/5.40.1/unicore/To/Vo.pl",
            "/usr/share/perl/5.40.1/unicore/To/WB.pl",
            "/usr/share/perl/5.40.1/unicore/To/_PerlLB.pl",
            "/usr/share/perl/5.40.1/unicore/To/_PerlSCX.pl",
            "/usr/share/perl/5.40.1/unicore/UCD.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/NA.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V100.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V11.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V110.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V120.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V130.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V140.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V150.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V20.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V30.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V31.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V32.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V40.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V41.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V50.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V51.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V52.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V60.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V61.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V70.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V80.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Age/V90.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Alpha/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/AL.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/AN.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/B.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/BN.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/CS.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/EN.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/ES.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/ET.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/L.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/NSM.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/ON.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/R.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bc/WS.pl",
            "/usr/share/perl/5.40.1/unicore/lib/BidiC/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/BidiM/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Blk/NB.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bpt/C.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bpt/N.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Bpt/O.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CE/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CI/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CWCF/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CWCM/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CWKCF/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CWL/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CWT/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CWU/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Cased/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/A.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/AL.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/AR.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/ATAR.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/B.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/BR.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/DB.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/NK.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/NR.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/OV.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ccc/VR.pl",
            "/usr/share/perl/5.40.1/unicore/lib/CompEx/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/DI/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dash/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dep/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dia/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Com.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Enc.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Fin.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Font.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Init.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Iso.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Med.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Nar.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Nb.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/NonCanon.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Sqr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Sub.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Sup.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Dt/Vert.pl",
            "/usr/share/perl/5.40.1/unicore/lib/EBase/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/EComp/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/EPres/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ea/A.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ea/H.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ea/N.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ea/Na.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ea/W.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Emoji/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ext/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/ExtPict/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GCB/CN.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GCB/EX.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GCB/LV.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GCB/LVT.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GCB/PP.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GCB/SM.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GCB/XX.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/C.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Cf.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Cn.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/L.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/LC.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Ll.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Lm.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Lo.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Lu.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/M.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Mc.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Me.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Mn.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/N.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Nd.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Nl.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/No.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/P.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Pc.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Pd.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Pe.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Pf.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Pi.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Po.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Ps.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/S.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Sc.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Sk.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Sm.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/So.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Z.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Gc/Zs.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GrBase/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/GrExt/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Hex/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Hst/NA.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Hyphen/T.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IDC/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IDS/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdStatus/Allowed.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdStatus/Restrict.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/DefaultI.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/Exclusio.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/Inclusio.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/LimitedU.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/NotChara.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/NotNFKC.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/NotXID.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/Obsolete.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/Recommen.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/Technica.pl",
            "/usr/share/perl/5.40.1/unicore/lib/IdType/Uncommon.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Ideo/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/10_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/11_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/12_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/12_1.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/13_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/14_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/15_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/2_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/2_1.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/3_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/3_1.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/3_2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/4_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/4_1.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/5_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/5_1.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/5_2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/6_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/6_1.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/6_2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/6_3.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/7_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/8_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/In/9_0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/Bottom.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/BottomAn.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/Left.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/LeftAndR.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/NA.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/Overstru.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/Right.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/Top.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/TopAndBo.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/TopAndL2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/TopAndLe.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/TopAndRi.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InPC/VisualOr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Avagraha.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Bindu.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Cantilla.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona3.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona4.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona5.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona6.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona7.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona8.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona9.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Consonan.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Geminati.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Invisibl.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Nukta.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Number.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Other.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/PureKill.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Syllable.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/ToneMark.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Virama.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Visarga.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/Vowel.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/VowelDep.pl",
            "/usr/share/perl/5.40.1/unicore/lib/InSC/VowelInd.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Ain.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Alef.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Beh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Dal.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/FarsiYeh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Feh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Gaf.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Hah.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/HanifiRo.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Kaf.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Lam.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/NoJoinin.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Noon.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Qaf.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Reh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Sad.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Seen.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Tah.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Waw.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jg/Yeh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jt/C.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jt/D.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jt/L.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jt/R.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jt/T.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Jt/U.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/AI.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/AL.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/BA.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/BB.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/CJ.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/CL.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/CM.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/EX.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/GL.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/ID.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/IN.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/IS.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/NS.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/NU.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/OP.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/PO.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/PR.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/QU.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/SA.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lb/XX.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Lower/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Math/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/NFCQC/M.pl",
            "/usr/share/perl/5.40.1/unicore/lib/NFCQC/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/NFDQC/N.pl",
            "/usr/share/perl/5.40.1/unicore/lib/NFDQC/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/NFKCQC/N.pl",
            "/usr/share/perl/5.40.1/unicore/lib/NFKCQC/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/NFKDQC/N.pl",
            "/usr/share/perl/5.40.1/unicore/lib/NFKDQC/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nt/Di.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nt/None.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nt/Nu.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/0.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/1.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/10.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/100.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/1000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/10000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/100000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/11.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/12.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/13.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/14.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/15.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/16.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/17.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/18.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/19.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/1_16.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/1_2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/1_3.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/1_4.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/1_6.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/1_8.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/20.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/200.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/2000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/20000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/2_3.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/3.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/30.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/300.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/3000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/30000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/3_16.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/3_4.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/4.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/40.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/400.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/4000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/40000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/5.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/50.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/500.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/5000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/50000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/6.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/60.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/600.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/6000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/60000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/7.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/70.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/700.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/7000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/70000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/8.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/80.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/800.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/8000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/80000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/9.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/90.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/900.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/9000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Nv/90000.pl",
            "/usr/share/perl/5.40.1/unicore/lib/PCM/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/PatSyn/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/Alnum.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/Assigned.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/Blank.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/Graph.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/PerlWord.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/PosixPun.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/Print.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/SpacePer.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/Title.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/Word.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/XPosixPu.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlAny.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlCh2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlCha.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlFol.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlIDC.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlIDS.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlIsI.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlNch.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlPat.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlPr2.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlPro.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlQuo.pl",
            "/usr/share/perl/5.40.1/unicore/lib/QMark/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/AT.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/CL.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/EX.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/FO.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/LE.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/LO.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/NU.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/SC.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/ST.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/Sp.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/UP.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SB/XX.pl",
            "/usr/share/perl/5.40.1/unicore/lib/SD/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/STerm/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Arab.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Beng.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Cprt.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Cyrl.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Deva.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Dupl.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Geor.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Glag.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Gong.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Gonm.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Gran.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Grek.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Gujr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Guru.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Han.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Hang.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Hira.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Kana.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Knda.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Latn.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Limb.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Linb.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Mlym.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Mong.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Mult.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Orya.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Sinh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Syrc.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Taml.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Telu.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Zinh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Sc/Zyyy.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Adlm.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Arab.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Armn.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Beng.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Bhks.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Bopo.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Cakm.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Cham.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Copt.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Cprt.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Cyrl.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Deva.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Diak.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Dupl.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Ethi.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Geor.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Glag.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Gong.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Gonm.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Gran.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Grek.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Gujr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Guru.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Han.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Hang.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Hebr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Hira.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Hmng.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Hmnp.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Kana.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Khar.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Khmr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Khoj.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Knda.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Kthi.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Lana.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Lao.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Latn.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Limb.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Lina.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Linb.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Mlym.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Mong.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Mult.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Mymr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Nand.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Nko.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Orya.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Phlp.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Rohg.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Shrd.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Sind.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Sinh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Syrc.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Tagb.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Takr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Talu.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Taml.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Tang.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Telu.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Thaa.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Tibt.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Tirh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Vith.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Xsux.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Yezi.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Yi.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Zinh.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Zyyy.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Scx/Zzzz.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Term/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/UIdeo/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Upper/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/VS/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Vo/R.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Vo/Tr.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Vo/Tu.pl",
            "/usr/share/perl/5.40.1/unicore/lib/Vo/U.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/EX.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/Extend.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/FO.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/HL.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/KA.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/LE.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/MB.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/ML.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/MN.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/NU.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/WSegSpac.pl",
            "/usr/share/perl/5.40.1/unicore/lib/WB/XX.pl",
            "/usr/share/perl/5.40.1/unicore/lib/XIDC/Y.pl",
            "/usr/share/perl/5.40.1/unicore/lib/XIDS/Y.pl",
            "/usr/share/perl/5.40.1/unicore/uni_keywords.pl",
            "/usr/share/perl/5.40.1/unicore/version",
            "/usr/share/perl/5.40.1/utf8.pm",
            "/usr/share/perl/5.40.1/vars.pm",
            "/usr/share/perl/5.40.1/version.pm",
            "/usr/share/perl/5.40.1/version.pod",
            "/usr/share/perl/5.40.1/version/Internals.pod",
            "/usr/share/perl/5.40.1/version/regex.pm",
            "/usr/share/perl/5.40.1/vmsish.pm",
            "/usr/share/perl/5.40.1/warnings.pm",
            "/usr/share/perl/5.40.1/warnings/register.pm"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "pkg-config@1.8.1-4",
          "Name": "pkg-config",
          "Identifier": {
            "PURL": "pkg:deb/debian/pkg-config@1.8.1-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "e99764b65905b8c2"
          },
          "Version": "1.8.1",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "pkgconf",
          "SrcVersion": "1.8.1",
          "SrcRelease": "4",
          "Licenses": [
            "ISC",
            "BSD-4-Clause",
            "BSD-2-Clause",
            "X11",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "pkgconf@1.8.1-4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/doc/pkg-config/changelog.Debian.gz",
            "/usr/share/doc/pkg-config/changelog.gz",
            "/usr/share/doc/pkg-config/copyright",
            "/usr/share/lintian/overrides/pkg-config"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "pkgconf@1.8.1-4",
          "Name": "pkgconf",
          "Identifier": {
            "PURL": "pkg:deb/debian/pkgconf@1.8.1-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "9eaecff43b7da66d"
          },
          "Version": "1.8.1",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "pkgconf",
          "SrcVersion": "1.8.1",
          "SrcRelease": "4",
          "Licenses": [
            "ISC",
            "BSD-4-Clause",
            "BSD-2-Clause",
            "X11",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "pkgconf-bin@1.8.1-4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/share/aclocal/pkg.m4",
            "/usr/share/doc/pkgconf/changelog.Debian.gz",
            "/usr/share/doc/pkgconf/changelog.gz",
            "/usr/share/doc/pkgconf/copyright",
            "/usr/share/lintian/overrides/pkgconf",
            "/usr/share/man/man1/pkgconf.1.gz",
            "/usr/share/man/man5/pc.5.gz",
            "/usr/share/man/man5/pkgconf-personality.5.gz",
            "/usr/share/man/man7/pkg.m4.7.gz",
            "/usr/share/pkgconfig/personality.d/x86_64-linux-gnu.personality"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "pkgconf-bin@1.8.1-4",
          "Name": "pkgconf-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/pkgconf-bin@1.8.1-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "179335d459bd88f"
          },
          "Version": "1.8.1",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "pkgconf",
          "SrcVersion": "1.8.1",
          "SrcRelease": "4",
          "Licenses": [
            "ISC",
            "BSD-4-Clause",
            "BSD-2-Clause",
            "X11",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libpkgconf3@1.8.1-4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/pkgconf",
            "/usr/share/doc/pkgconf-bin/AUTHORS",
            "/usr/share/doc/pkgconf-bin/README.md.gz",
            "/usr/share/doc/pkgconf-bin/changelog.Debian.gz",
            "/usr/share/doc/pkgconf-bin/changelog.gz",
            "/usr/share/doc/pkgconf-bin/copyright",
            "/usr/share/lintian/overrides/pkgconf-bin"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "procps@2:4.0.4-9",
          "Name": "procps",
          "Identifier": {
            "PURL": "pkg:deb/debian/procps@4.0.4-9?arch=amd64\u0026distro=debian-13.7\u0026epoch=2",
            "UID": "28d80c05bde14572"
          },
          "Version": "4.0.4",
          "Release": "9",
          "Epoch": 2,
          "Arch": "amd64",
          "SrcName": "procps",
          "SrcVersion": "4.0.4",
          "SrcRelease": "9",
          "SrcEpoch": 2,
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.0-or-later",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "init-system-helpers@1.69~deb13u1",
            "libc6@2.41-12+deb13u4",
            "libncursesw6@6.5+20250216-2",
            "libproc2-0@2:4.0.4-9",
            "libsystemd0@257.13-1~deb13u1",
            "libtinfo6@6.5+20250216-2"
          ],
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "InstalledFiles": [
            "/usr/bin/free",
            "/usr/bin/kill",
            "/usr/bin/pgrep",
            "/usr/bin/pidwait",
            "/usr/bin/pmap",
            "/usr/bin/ps",
            "/usr/bin/pwdx",
            "/usr/bin/skill",
            "/usr/bin/slabtop",
            "/usr/bin/tload",
            "/usr/bin/top",
            "/usr/bin/uptime",
            "/usr/bin/vmstat",
            "/usr/bin/w",
            "/usr/bin/watch",
            "/usr/sbin/sysctl",
            "/usr/share/bug/procps/presubj",
            "/usr/share/doc/procps/FAQ.gz",
            "/usr/share/doc/procps/NEWS.Debian.gz",
            "/usr/share/doc/procps/README.Debian",
            "/usr/share/doc/procps/bugs.md",
            "/usr/share/doc/procps/changelog.Debian.gz",
            "/usr/share/doc/procps/changelog.gz",
            "/usr/share/doc/procps/copyright",
            "/usr/share/lintian/overrides/procps",
            "/usr/share/locale/de/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/es/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/fr/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/ka/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/ko/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/pl/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/ro/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/sv/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/uk/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/vi/LC_MESSAGES/procps-ng.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/procps-ng.mo",
            "/usr/share/man/de/man1/free.1.gz",
            "/usr/share/man/de/man1/kill.1.gz",
            "/usr/share/man/de/man1/pgrep.1.gz",
            "/usr/share/man/de/man1/pidof.1.gz",
            "/usr/share/man/de/man1/pmap.1.gz",
            "/usr/share/man/de/man1/ps.1.gz",
            "/usr/share/man/de/man1/pwdx.1.gz",
            "/usr/share/man/de/man1/skill.1.gz",
            "/usr/share/man/de/man1/slabtop.1.gz",
            "/usr/share/man/de/man1/tload.1.gz",
            "/usr/share/man/de/man1/uptime.1.gz",
            "/usr/share/man/de/man1/w.1.gz",
            "/usr/share/man/de/man1/watch.1.gz",
            "/usr/share/man/de/man5/sysctl.conf.5.gz",
            "/usr/share/man/de/man8/sysctl.8.gz",
            "/usr/share/man/de/man8/vmstat.8.gz",
            "/usr/share/man/fr/man1/free.1.gz",
            "/usr/share/man/fr/man1/kill.1.gz",
            "/usr/share/man/fr/man1/pmap.1.gz",
            "/usr/share/man/fr/man1/ps.1.gz",
            "/usr/share/man/fr/man1/pwdx.1.gz",
            "/usr/share/man/fr/man1/skill.1.gz",
            "/usr/share/man/fr/man1/slabtop.1.gz",
            "/usr/share/man/fr/man1/tload.1.gz",
            "/usr/share/man/fr/man1/uptime.1.gz",
            "/usr/share/man/fr/man1/w.1.gz",
            "/usr/share/man/fr/man1/watch.1.gz",
            "/usr/share/man/fr/man5/sysctl.conf.5.gz",
            "/usr/share/man/fr/man8/sysctl.8.gz",
            "/usr/share/man/fr/man8/vmstat.8.gz",
            "/usr/share/man/man1/free.1.gz",
            "/usr/share/man/man1/kill.1.gz",
            "/usr/share/man/man1/pgrep.1.gz",
            "/usr/share/man/man1/pmap.1.gz",
            "/usr/share/man/man1/ps.1.gz",
            "/usr/share/man/man1/pwdx.1.gz",
            "/usr/share/man/man1/skill.1.gz",
            "/usr/share/man/man1/slabtop.1.gz",
            "/usr/share/man/man1/tload.1.gz",
            "/usr/share/man/man1/top.1.gz",
            "/usr/share/man/man1/uptime.1.gz",
            "/usr/share/man/man1/w.1.gz",
            "/usr/share/man/man1/watch.1.gz",
            "/usr/share/man/man3/procps.3.gz",
            "/usr/share/man/man3/procps_misc.3.gz",
            "/usr/share/man/man3/procps_pids.3.gz",
            "/usr/share/man/man5/sysctl.conf.5.gz",
            "/usr/share/man/man8/sysctl.8.gz",
            "/usr/share/man/man8/vmstat.8.gz",
            "/usr/share/man/pl/man1/free.1.gz",
            "/usr/share/man/pl/man1/pgrep.1.gz",
            "/usr/share/man/pl/man1/pmap.1.gz",
            "/usr/share/man/pl/man1/uptime.1.gz",
            "/usr/share/man/pl/man3/procps.3.gz",
            "/usr/share/man/pl/man3/procps_misc.3.gz",
            "/usr/share/man/pl/man3/procps_pids.3.gz",
            "/usr/share/man/pl/man8/vmstat.8.gz",
            "/usr/share/man/pt_BR/man1/free.1.gz",
            "/usr/share/man/pt_BR/man1/kill.1.gz",
            "/usr/share/man/pt_BR/man1/pmap.1.gz",
            "/usr/share/man/pt_BR/man1/pwdx.1.gz",
            "/usr/share/man/pt_BR/man1/skill.1.gz",
            "/usr/share/man/pt_BR/man1/slabtop.1.gz",
            "/usr/share/man/pt_BR/man1/tload.1.gz",
            "/usr/share/man/pt_BR/man1/uptime.1.gz",
            "/usr/share/man/pt_BR/man1/w.1.gz",
            "/usr/share/man/pt_BR/man1/watch.1.gz",
            "/usr/share/man/pt_BR/man5/sysctl.conf.5.gz",
            "/usr/share/man/pt_BR/man8/sysctl.8.gz",
            "/usr/share/man/pt_BR/man8/vmstat.8.gz",
            "/usr/share/man/ro/man1/free.1.gz",
            "/usr/share/man/ro/man1/kill.1.gz",
            "/usr/share/man/ro/man1/pgrep.1.gz",
            "/usr/share/man/ro/man1/pidof.1.gz",
            "/usr/share/man/ro/man1/pmap.1.gz",
            "/usr/share/man/ro/man1/ps.1.gz",
            "/usr/share/man/ro/man1/pwdx.1.gz",
            "/usr/share/man/ro/man1/skill.1.gz",
            "/usr/share/man/ro/man1/slabtop.1.gz",
            "/usr/share/man/ro/man1/tload.1.gz",
            "/usr/share/man/ro/man1/top.1.gz",
            "/usr/share/man/ro/man1/uptime.1.gz",
            "/usr/share/man/ro/man1/w.1.gz",
            "/usr/share/man/ro/man1/watch.1.gz",
            "/usr/share/man/ro/man3/procps.3.gz",
            "/usr/share/man/ro/man3/procps_misc.3.gz",
            "/usr/share/man/ro/man3/procps_pids.3.gz",
            "/usr/share/man/ro/man5/sysctl.conf.5.gz",
            "/usr/share/man/ro/man8/sysctl.8.gz",
            "/usr/share/man/ro/man8/vmstat.8.gz",
            "/usr/share/man/sv/man1/free.1.gz",
            "/usr/share/man/sv/man1/kill.1.gz",
            "/usr/share/man/sv/man1/pgrep.1.gz",
            "/usr/share/man/sv/man1/pidof.1.gz",
            "/usr/share/man/sv/man1/pmap.1.gz",
            "/usr/share/man/sv/man1/ps.1.gz",
            "/usr/share/man/sv/man1/pwdx.1.gz",
            "/usr/share/man/sv/man1/skill.1.gz",
            "/usr/share/man/sv/man1/slabtop.1.gz",
            "/usr/share/man/sv/man1/tload.1.gz",
            "/usr/share/man/sv/man1/top.1.gz",
            "/usr/share/man/sv/man1/uptime.1.gz",
            "/usr/share/man/sv/man1/w.1.gz",
            "/usr/share/man/sv/man1/watch.1.gz",
            "/usr/share/man/sv/man3/procps.3.gz",
            "/usr/share/man/sv/man3/procps_misc.3.gz",
            "/usr/share/man/sv/man3/procps_pids.3.gz",
            "/usr/share/man/sv/man5/sysctl.conf.5.gz",
            "/usr/share/man/sv/man8/sysctl.8.gz",
            "/usr/share/man/sv/man8/vmstat.8.gz",
            "/usr/share/man/uk/man1/free.1.gz",
            "/usr/share/man/uk/man1/kill.1.gz",
            "/usr/share/man/uk/man1/pgrep.1.gz",
            "/usr/share/man/uk/man1/pidof.1.gz",
            "/usr/share/man/uk/man1/pmap.1.gz",
            "/usr/share/man/uk/man1/ps.1.gz",
            "/usr/share/man/uk/man1/pwdx.1.gz",
            "/usr/share/man/uk/man1/skill.1.gz",
            "/usr/share/man/uk/man1/slabtop.1.gz",
            "/usr/share/man/uk/man1/tload.1.gz",
            "/usr/share/man/uk/man1/top.1.gz",
            "/usr/share/man/uk/man1/uptime.1.gz",
            "/usr/share/man/uk/man1/w.1.gz",
            "/usr/share/man/uk/man1/watch.1.gz",
            "/usr/share/man/uk/man3/procps.3.gz",
            "/usr/share/man/uk/man3/procps_misc.3.gz",
            "/usr/share/man/uk/man3/procps_pids.3.gz",
            "/usr/share/man/uk/man5/sysctl.conf.5.gz",
            "/usr/share/man/uk/man8/sysctl.8.gz",
            "/usr/share/man/uk/man8/vmstat.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "python3@3.13.5-1",
          "Name": "python3",
          "Identifier": {
            "PURL": "pkg:deb/debian/python3@3.13.5-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e8754b51d41818ae"
          },
          "Version": "3.13.5",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "python3-defaults",
          "SrcVersion": "3.13.5",
          "SrcRelease": "1",
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libpython3-stdlib@3.13.5-1",
            "python3.13@3.13.5-2+deb13u5"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/valgrind/python3.supp",
            "/usr/share/doc-base/python3.python-policy",
            "/usr/share/doc/python3/README.Debian",
            "/usr/share/doc/python3/changelog.Debian.gz",
            "/usr/share/doc/python3/copyright",
            "/usr/share/doc/python3/python-policy.txt.gz",
            "/usr/share/lintian/overrides/python3",
            "/usr/share/python3/python.mk",
            "/usr/share/python3/runtime.d/public_modules.rtinstall",
            "/usr/share/python3/runtime.d/public_modules.rtremove"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "python3-minimal@3.13.5-1",
          "Name": "python3-minimal",
          "Identifier": {
            "PURL": "pkg:deb/debian/python3-minimal@3.13.5-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "c57860140dd4093f"
          },
          "Version": "3.13.5",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "python3-defaults",
          "SrcVersion": "3.13.5",
          "SrcRelease": "1",
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "dpkg@1.22.22"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/bin/py3clean",
            "/usr/bin/py3compile",
            "/usr/share/doc/python3-minimal/README.Debian",
            "/usr/share/doc/python3-minimal/changelog.Debian.gz",
            "/usr/share/doc/python3-minimal/copyright",
            "/usr/share/man/man1/py3clean.1.gz",
            "/usr/share/man/man1/py3compile.1.gz",
            "/usr/share/man/man1/py3versions.1.gz",
            "/usr/share/python3/debian_defaults",
            "/usr/share/python3/debpython/__init__.py",
            "/usr/share/python3/debpython/files.py",
            "/usr/share/python3/debpython/interpreter.py",
            "/usr/share/python3/debpython/option.py",
            "/usr/share/python3/debpython/version.py",
            "/usr/share/python3/py3versions.py"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "python3-packaging@25.0-1",
          "Name": "python3-packaging",
          "Identifier": {
            "PURL": "pkg:deb/debian/python3-packaging@25.0-1?arch=all\u0026distro=debian-13.7",
            "UID": "40ea0288298aa720"
          },
          "Version": "25.0",
          "Release": "1",
          "Arch": "all",
          "SrcName": "python-packaging",
          "SrcVersion": "25.0",
          "SrcRelease": "1",
          "Licenses": [
            "Apache-2.0",
            "BSD-2-Clause",
            "MIT",
            "BSD-3-Clause"
          ],
          "Maintainer": "Debian Python Team \u003cteam+python@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/lib/python3/dist-packages/packaging-25.0.dist-info/INSTALLER",
            "/usr/lib/python3/dist-packages/packaging-25.0.dist-info/METADATA",
            "/usr/lib/python3/dist-packages/packaging-25.0.dist-info/WHEEL",
            "/usr/lib/python3/dist-packages/packaging/__init__.py",
            "/usr/lib/python3/dist-packages/packaging/_elffile.py",
            "/usr/lib/python3/dist-packages/packaging/_manylinux.py",
            "/usr/lib/python3/dist-packages/packaging/_musllinux.py",
            "/usr/lib/python3/dist-packages/packaging/_parser.py",
            "/usr/lib/python3/dist-packages/packaging/_structures.py",
            "/usr/lib/python3/dist-packages/packaging/_tokenizer.py",
            "/usr/lib/python3/dist-packages/packaging/licenses/__init__.py",
            "/usr/lib/python3/dist-packages/packaging/licenses/_spdx.py",
            "/usr/lib/python3/dist-packages/packaging/markers.py",
            "/usr/lib/python3/dist-packages/packaging/metadata.py",
            "/usr/lib/python3/dist-packages/packaging/py.typed",
            "/usr/lib/python3/dist-packages/packaging/requirements.py",
            "/usr/lib/python3/dist-packages/packaging/specifiers.py",
            "/usr/lib/python3/dist-packages/packaging/tags.py",
            "/usr/lib/python3/dist-packages/packaging/utils.py",
            "/usr/lib/python3/dist-packages/packaging/version.py",
            "/usr/share/doc/python3-packaging/changelog.Debian.gz",
            "/usr/share/doc/python3-packaging/changelog.gz",
            "/usr/share/doc/python3-packaging/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "python3.13@3.13.5-2+deb13u5",
          "Name": "python3.13",
          "Identifier": {
            "PURL": "pkg:deb/debian/python3.13@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "c039d7d84076b819"
          },
          "Version": "3.13.5",
          "Release": "2+deb13u5",
          "Arch": "amd64",
          "SrcName": "python3.13",
          "SrcVersion": "3.13.5",
          "SrcRelease": "2+deb13u5",
          "Licenses": [
            "GPL-2.0-only",
            "text://Redistribution and use in source and binary forms, with or without",
            "text://By obtaining, using, and/or copying this software and/or its",
            "text://Permission to use, copy, modify, and distribute this software and",
            "text://This software is provided 'as-is', without any express or implied",
            "text://Permission  is  hereby granted,  free  of charge,  to  any person",
            "text://Permission is hereby granted, free of charge, to any person obtaining",
            "text://Permission to use, copy, modify, and distribute this software and its",
            "text://This software is provided as-is, without express or implied",
            "text://Permission to use, copy, modify, and distribute this software for any",
            "text://* Permission to use this software in any way is granted without"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libpython3.13-stdlib@3.13.5-2+deb13u5",
            "media-types@13.0.0",
            "python3.13-minimal@3.13.5-2+deb13u5",
            "tzdata@2026c-0+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/bin/pydoc3.13",
            "/usr/bin/pygettext3.13",
            "/usr/share/applications/python3.13.desktop",
            "/usr/share/doc/python3.13/ACKS.gz",
            "/usr/share/doc/python3.13/NEWS.gz",
            "/usr/share/doc/python3.13/README.Debian",
            "/usr/share/doc/python3.13/README.rst.gz",
            "/usr/share/doc/python3.13/README.venv",
            "/usr/share/doc/python3.13/changelog.Debian.gz",
            "/usr/share/doc/python3.13/copyright",
            "/usr/share/lintian/overrides/python3.13",
            "/usr/share/man/man1/pdb3.13.1.gz",
            "/usr/share/man/man1/pydoc3.13.1.gz",
            "/usr/share/man/man1/pygettext3.13.1.gz",
            "/usr/share/pixmaps/python3.13.xpm"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "python3.13-minimal@3.13.5-2+deb13u5",
          "Name": "python3.13-minimal",
          "Identifier": {
            "PURL": "pkg:deb/debian/python3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "9f929573ac64edf"
          },
          "Version": "3.13.5",
          "Release": "2+deb13u5",
          "Arch": "amd64",
          "SrcName": "python3.13",
          "SrcVersion": "3.13.5",
          "SrcRelease": "2+deb13u5",
          "Licenses": [
            "GPL-2.0-only",
            "text://Redistribution and use in source and binary forms, with or without",
            "text://By obtaining, using, and/or copying this software and/or its",
            "text://Permission to use, copy, modify, and distribute this software and",
            "text://This software is provided 'as-is', without any express or implied",
            "text://Permission  is  hereby granted,  free  of charge,  to  any person",
            "text://Permission is hereby granted, free of charge, to any person obtaining",
            "text://Permission to use, copy, modify, and distribute this software and its",
            "text://This software is provided as-is, without express or implied",
            "text://Permission to use, copy, modify, and distribute this software for any",
            "text://* Permission to use this software in any way is granted without"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libexpat1@2.9.0-1~deb13u1",
            "libpython3.13-minimal@3.13.5-2+deb13u5",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/bin/python3.13",
            "/usr/lib/binfmt.d/python3.13.conf",
            "/usr/share/binfmts/python3.13",
            "/usr/share/doc/python3.13-minimal/README.Debian.gz",
            "/usr/share/doc/python3.13-minimal/changelog.Debian.gz",
            "/usr/share/doc/python3.13-minimal/copyright",
            "/usr/share/lintian/overrides/python3.13-minimal",
            "/usr/share/man/man1/python3.13.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "re2c@4.1-1",
          "Name": "re2c",
          "Identifier": {
            "PURL": "pkg:deb/debian/re2c@4.1-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "f190d448d166b5ee"
          },
          "Version": "4.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "re2c",
          "SrcVersion": "4.1",
          "SrcRelease": "1",
          "Licenses": [
            "public-domain",
            "PHP-3.01",
            "Zend-2.00",
            "Apache-2.0"
          ],
          "Maintainer": "Jeroen Ploemen \u003cjcfp@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libstdc++6@14.2.0-19"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/re2c",
            "/usr/bin/re2d",
            "/usr/bin/re2go",
            "/usr/bin/re2hs",
            "/usr/bin/re2js",
            "/usr/bin/re2ocaml",
            "/usr/bin/re2py",
            "/usr/bin/re2rust",
            "/usr/bin/re2v",
            "/usr/bin/re2zig",
            "/usr/share/doc/re2c/changelog.Debian.gz",
            "/usr/share/doc/re2c/changelog.gz",
            "/usr/share/doc/re2c/copyright",
            "/usr/share/doc/re2c/examples/c/01_basic.c",
            "/usr/share/doc/re2c/examples/c/01_basic.re",
            "/usr/share/doc/re2c/examples/c/conditions/parse_u32_blocks.c",
            "/usr/share/doc/re2c/examples/c/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/c/conditions/parse_u32_conditions.c",
            "/usr/share/doc/re2c/examples/c/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/c/encodings/unicode_identifier.c",
            "/usr/share/doc/re2c/examples/c/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/c/eof/01_sentinel.c",
            "/usr/share/doc/re2c/examples/c/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/c/eof/02_bounds_checking.c",
            "/usr/share/doc/re2c/examples/c/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/c/eof/03_eof_rule.c",
            "/usr/share/doc/re2c/examples/c/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/c/eof/04_fake_sentinel.c",
            "/usr/share/doc/re2c/examples/c/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/c/eof/05_fake_sentinel_eof_rule.c",
            "/usr/share/doc/re2c/examples/c/eof/05_fake_sentinel_eof_rule.re",
            "/usr/share/doc/re2c/examples/c/fill/01_fill.c",
            "/usr/share/doc/re2c/examples/c/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/c/fill/02_fill.c",
            "/usr/share/doc/re2c/examples/c/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/c/generic_api/ifstream.c",
            "/usr/share/doc/re2c/examples/c/generic_api/ifstream.re",
            "/usr/share/doc/re2c/examples/c/headers/header.c",
            "/usr/share/doc/re2c/examples/c/headers/header.re",
            "/usr/share/doc/re2c/examples/c/headers/lexer/state.h",
            "/usr/share/doc/re2c/examples/c/includes/definitions.h",
            "/usr/share/doc/re2c/examples/c/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/c/includes/include.c",
            "/usr/share/doc/re2c/examples/c/includes/include.re",
            "/usr/share/doc/re2c/examples/c/real_world/cxx98.c",
            "/usr/share/doc/re2c/examples/c/real_world/cxx98.re",
            "/usr/share/doc/re2c/examples/c/reuse/braille.c",
            "/usr/share/doc/re2c/examples/c/reuse/braille.re",
            "/usr/share/doc/re2c/examples/c/reuse/braille.ucs2.txt",
            "/usr/share/doc/re2c/examples/c/reuse/braille.utf32.txt",
            "/usr/share/doc/re2c/examples/c/reuse/braille.utf8.txt",
            "/usr/share/doc/re2c/examples/c/reuse/reuse.c",
            "/usr/share/doc/re2c/examples/c/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/c/reuse/usedir.c",
            "/usr/share/doc/re2c/examples/c/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/c/state/push.c",
            "/usr/share/doc/re2c/examples/c/state/push.re",
            "/usr/share/doc/re2c/examples/c/submatch/01_stags.c",
            "/usr/share/doc/re2c/examples/c/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/c/submatch/01_stags_fill.c",
            "/usr/share/doc/re2c/examples/c/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/c/submatch/02_mtags.c",
            "/usr/share/doc/re2c/examples/c/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/c/submatch/03_captures.c",
            "/usr/share/doc/re2c/examples/c/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/c/submatch/04_posix_captures.c",
            "/usr/share/doc/re2c/examples/c/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/c/submatch/http_rfc7230.c",
            "/usr/share/doc/re2c/examples/c/submatch/http_rfc7230.re",
            "/usr/share/doc/re2c/examples/c/submatch/parse_etc_passwd.c",
            "/usr/share/doc/re2c/examples/c/submatch/parse_etc_passwd.re",
            "/usr/share/doc/re2c/examples/c/submatch/parse_options.c",
            "/usr/share/doc/re2c/examples/c/submatch/parse_options.re",
            "/usr/share/doc/re2c/examples/c/submatch/parse_records.c",
            "/usr/share/doc/re2c/examples/c/submatch/parse_records.re",
            "/usr/share/doc/re2c/examples/c/submatch/uri_rfc3986.c",
            "/usr/share/doc/re2c/examples/c/submatch/uri_rfc3986.re",
            "/usr/share/doc/re2c/examples/d/01_basic.d",
            "/usr/share/doc/re2c/examples/d/01_basic.re",
            "/usr/share/doc/re2c/examples/d/conditions/parse_u32_blocks.d",
            "/usr/share/doc/re2c/examples/d/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/d/conditions/parse_u32_conditions.d",
            "/usr/share/doc/re2c/examples/d/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/d/encodings/unicode_identifier.d",
            "/usr/share/doc/re2c/examples/d/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/d/eof/01_sentinel.d",
            "/usr/share/doc/re2c/examples/d/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/d/eof/02_bounds_checking.d",
            "/usr/share/doc/re2c/examples/d/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/d/eof/03_eof_rule.d",
            "/usr/share/doc/re2c/examples/d/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/d/eof/04_fake_sentinel.d",
            "/usr/share/doc/re2c/examples/d/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/d/fill/01_fill.d",
            "/usr/share/doc/re2c/examples/d/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/d/fill/02_fill.d",
            "/usr/share/doc/re2c/examples/d/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/d/headers/header.d",
            "/usr/share/doc/re2c/examples/d/headers/header.re",
            "/usr/share/doc/re2c/examples/d/headers/lexer/state.d",
            "/usr/share/doc/re2c/examples/d/includes/definitions.d",
            "/usr/share/doc/re2c/examples/d/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/d/includes/include.d",
            "/usr/share/doc/re2c/examples/d/includes/include.re",
            "/usr/share/doc/re2c/examples/d/reuse/reuse.d",
            "/usr/share/doc/re2c/examples/d/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/d/reuse/usedir.d",
            "/usr/share/doc/re2c/examples/d/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/d/state/push.d",
            "/usr/share/doc/re2c/examples/d/state/push.re",
            "/usr/share/doc/re2c/examples/d/submatch/01_stags.d",
            "/usr/share/doc/re2c/examples/d/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/d/submatch/01_stags_fill.d",
            "/usr/share/doc/re2c/examples/d/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/d/submatch/02_mtags.d",
            "/usr/share/doc/re2c/examples/d/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/d/submatch/03_captures.d",
            "/usr/share/doc/re2c/examples/d/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/d/submatch/04_posix_captures.d",
            "/usr/share/doc/re2c/examples/d/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/go/01_basic.go",
            "/usr/share/doc/re2c/examples/go/01_basic.re",
            "/usr/share/doc/re2c/examples/go/conditions/parse_u32_blocks.go",
            "/usr/share/doc/re2c/examples/go/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/go/conditions/parse_u32_conditions.go",
            "/usr/share/doc/re2c/examples/go/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/go/encodings/unicode_identifier.go",
            "/usr/share/doc/re2c/examples/go/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/go/eof/01_sentinel.go",
            "/usr/share/doc/re2c/examples/go/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/go/eof/02_bounds_checking.go",
            "/usr/share/doc/re2c/examples/go/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/go/eof/03_eof_rule.go",
            "/usr/share/doc/re2c/examples/go/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/go/eof/04_fake_sentinel.go",
            "/usr/share/doc/re2c/examples/go/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/go/fill/01_fill.go",
            "/usr/share/doc/re2c/examples/go/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/go/fill/02_fill.go",
            "/usr/share/doc/re2c/examples/go/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/go/headers/header.go",
            "/usr/share/doc/re2c/examples/go/headers/header.re",
            "/usr/share/doc/re2c/examples/go/headers/lexer/state.go",
            "/usr/share/doc/re2c/examples/go/includes/definitions.go",
            "/usr/share/doc/re2c/examples/go/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/go/includes/include.go",
            "/usr/share/doc/re2c/examples/go/includes/include.re",
            "/usr/share/doc/re2c/examples/go/reuse/reuse.go",
            "/usr/share/doc/re2c/examples/go/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/go/reuse/usedir.go",
            "/usr/share/doc/re2c/examples/go/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/go/state/push.go",
            "/usr/share/doc/re2c/examples/go/state/push.re",
            "/usr/share/doc/re2c/examples/go/submatch/01_stags.go",
            "/usr/share/doc/re2c/examples/go/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/go/submatch/01_stags_fill.go",
            "/usr/share/doc/re2c/examples/go/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/go/submatch/02_mtags.go",
            "/usr/share/doc/re2c/examples/go/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/go/submatch/03_captures.go",
            "/usr/share/doc/re2c/examples/go/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/go/submatch/04_posix_captures.go",
            "/usr/share/doc/re2c/examples/go/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/haskell/01_basic.hs",
            "/usr/share/doc/re2c/examples/haskell/01_basic.re",
            "/usr/share/doc/re2c/examples/haskell/conditions/parse_u32_blocks.hs",
            "/usr/share/doc/re2c/examples/haskell/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/haskell/conditions/parse_u32_conditions.hs",
            "/usr/share/doc/re2c/examples/haskell/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/haskell/encodings/unicode_identifier.hs",
            "/usr/share/doc/re2c/examples/haskell/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/haskell/eof/01_sentinel.hs",
            "/usr/share/doc/re2c/examples/haskell/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/haskell/eof/02_bounds_checking.hs",
            "/usr/share/doc/re2c/examples/haskell/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/haskell/eof/03_eof_rule.hs",
            "/usr/share/doc/re2c/examples/haskell/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/haskell/eof/04_fake_sentinel.hs",
            "/usr/share/doc/re2c/examples/haskell/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/haskell/fill/01_fill.hs",
            "/usr/share/doc/re2c/examples/haskell/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/haskell/fill/02_fill.hs",
            "/usr/share/doc/re2c/examples/haskell/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/haskell/headers/header.hs",
            "/usr/share/doc/re2c/examples/haskell/headers/header.re",
            "/usr/share/doc/re2c/examples/haskell/headers/lexer/state.hs",
            "/usr/share/doc/re2c/examples/haskell/includes/definitions.hs",
            "/usr/share/doc/re2c/examples/haskell/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/haskell/includes/include.hs",
            "/usr/share/doc/re2c/examples/haskell/includes/include.re",
            "/usr/share/doc/re2c/examples/haskell/reuse/reuse.hs",
            "/usr/share/doc/re2c/examples/haskell/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/haskell/reuse/usedir.hs",
            "/usr/share/doc/re2c/examples/haskell/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/haskell/state/push.hs",
            "/usr/share/doc/re2c/examples/haskell/state/push.re",
            "/usr/share/doc/re2c/examples/haskell/submatch/01_stags.hs",
            "/usr/share/doc/re2c/examples/haskell/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/haskell/submatch/01_stags_fill.hs",
            "/usr/share/doc/re2c/examples/haskell/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/haskell/submatch/02_mtags.hs",
            "/usr/share/doc/re2c/examples/haskell/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/haskell/submatch/03_captures.hs",
            "/usr/share/doc/re2c/examples/haskell/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/java/01_basic.java",
            "/usr/share/doc/re2c/examples/java/01_basic.re",
            "/usr/share/doc/re2c/examples/java/conditions/parse_u32_blocks.java",
            "/usr/share/doc/re2c/examples/java/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/java/conditions/parse_u32_conditions.java",
            "/usr/share/doc/re2c/examples/java/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/java/encodings/unicode_identifier.java",
            "/usr/share/doc/re2c/examples/java/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/java/eof/01_sentinel.java",
            "/usr/share/doc/re2c/examples/java/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/java/eof/02_bounds_checking.java",
            "/usr/share/doc/re2c/examples/java/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/java/eof/03_eof_rule.java",
            "/usr/share/doc/re2c/examples/java/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/java/eof/04_fake_sentinel.java",
            "/usr/share/doc/re2c/examples/java/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/java/fill/01_fill.java",
            "/usr/share/doc/re2c/examples/java/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/java/fill/02_fill.java",
            "/usr/share/doc/re2c/examples/java/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/java/headers/header.java",
            "/usr/share/doc/re2c/examples/java/headers/header.re",
            "/usr/share/doc/re2c/examples/java/headers/lexer/state.java",
            "/usr/share/doc/re2c/examples/java/includes/definitions.java",
            "/usr/share/doc/re2c/examples/java/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/java/includes/include.java",
            "/usr/share/doc/re2c/examples/java/includes/include.re",
            "/usr/share/doc/re2c/examples/java/reuse/reuse.java",
            "/usr/share/doc/re2c/examples/java/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/java/reuse/usedir.java",
            "/usr/share/doc/re2c/examples/java/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/java/state/push.java",
            "/usr/share/doc/re2c/examples/java/state/push.re",
            "/usr/share/doc/re2c/examples/java/submatch/01_stags.java",
            "/usr/share/doc/re2c/examples/java/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/java/submatch/01_stags_fill.java",
            "/usr/share/doc/re2c/examples/java/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/java/submatch/02_mtags.java",
            "/usr/share/doc/re2c/examples/java/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/java/submatch/03_captures.java",
            "/usr/share/doc/re2c/examples/java/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/java/submatch/04_posix_captures.java",
            "/usr/share/doc/re2c/examples/java/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/js/01_basic.js",
            "/usr/share/doc/re2c/examples/js/01_basic.re",
            "/usr/share/doc/re2c/examples/js/conditions/parse_u32_blocks.js",
            "/usr/share/doc/re2c/examples/js/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/js/conditions/parse_u32_conditions.js",
            "/usr/share/doc/re2c/examples/js/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/js/encodings/unicode_identifier.js",
            "/usr/share/doc/re2c/examples/js/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/js/eof/01_sentinel.js",
            "/usr/share/doc/re2c/examples/js/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/js/eof/02_bounds_checking.js",
            "/usr/share/doc/re2c/examples/js/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/js/eof/03_eof_rule.js",
            "/usr/share/doc/re2c/examples/js/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/js/eof/04_fake_sentinel.js",
            "/usr/share/doc/re2c/examples/js/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/js/fill/01_fill.js",
            "/usr/share/doc/re2c/examples/js/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/js/fill/02_fill.js",
            "/usr/share/doc/re2c/examples/js/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/js/headers/header.js",
            "/usr/share/doc/re2c/examples/js/headers/header.re",
            "/usr/share/doc/re2c/examples/js/headers/lexer/state.js",
            "/usr/share/doc/re2c/examples/js/includes/definitions.js",
            "/usr/share/doc/re2c/examples/js/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/js/includes/include.js",
            "/usr/share/doc/re2c/examples/js/includes/include.re",
            "/usr/share/doc/re2c/examples/js/reuse/reuse.js",
            "/usr/share/doc/re2c/examples/js/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/js/reuse/usedir.js",
            "/usr/share/doc/re2c/examples/js/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/js/state/push.js",
            "/usr/share/doc/re2c/examples/js/state/push.re",
            "/usr/share/doc/re2c/examples/js/submatch/01_stags.js",
            "/usr/share/doc/re2c/examples/js/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/js/submatch/01_stags_fill.js",
            "/usr/share/doc/re2c/examples/js/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/js/submatch/02_mtags.js",
            "/usr/share/doc/re2c/examples/js/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/js/submatch/03_captures.js",
            "/usr/share/doc/re2c/examples/js/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/js/submatch/04_posix_captures.js",
            "/usr/share/doc/re2c/examples/js/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/ocaml/01_basic.ml",
            "/usr/share/doc/re2c/examples/ocaml/01_basic.re",
            "/usr/share/doc/re2c/examples/ocaml/conditions/parse_u32_blocks.ml",
            "/usr/share/doc/re2c/examples/ocaml/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/ocaml/conditions/parse_u32_conditions.ml",
            "/usr/share/doc/re2c/examples/ocaml/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/ocaml/encodings/unicode_identifier.ml",
            "/usr/share/doc/re2c/examples/ocaml/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/ocaml/eof/01_sentinel.ml",
            "/usr/share/doc/re2c/examples/ocaml/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/ocaml/eof/02_bounds_checking.ml",
            "/usr/share/doc/re2c/examples/ocaml/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/ocaml/eof/03_eof_rule.ml",
            "/usr/share/doc/re2c/examples/ocaml/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/ocaml/eof/04_fake_sentinel.ml",
            "/usr/share/doc/re2c/examples/ocaml/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/ocaml/fill/01_fill.ml",
            "/usr/share/doc/re2c/examples/ocaml/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/ocaml/fill/02_fill.ml",
            "/usr/share/doc/re2c/examples/ocaml/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/ocaml/headers/header.ml",
            "/usr/share/doc/re2c/examples/ocaml/headers/header.re",
            "/usr/share/doc/re2c/examples/ocaml/headers/lexer/state.ml",
            "/usr/share/doc/re2c/examples/ocaml/includes/definitions.ml",
            "/usr/share/doc/re2c/examples/ocaml/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/ocaml/includes/include.ml",
            "/usr/share/doc/re2c/examples/ocaml/includes/include.re",
            "/usr/share/doc/re2c/examples/ocaml/reuse/reuse.ml",
            "/usr/share/doc/re2c/examples/ocaml/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/ocaml/reuse/usedir.ml",
            "/usr/share/doc/re2c/examples/ocaml/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/ocaml/state/push.ml",
            "/usr/share/doc/re2c/examples/ocaml/state/push.re",
            "/usr/share/doc/re2c/examples/ocaml/submatch/01_stags.ml",
            "/usr/share/doc/re2c/examples/ocaml/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/ocaml/submatch/01_stags_fill.ml",
            "/usr/share/doc/re2c/examples/ocaml/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/ocaml/submatch/02_mtags.ml",
            "/usr/share/doc/re2c/examples/ocaml/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/ocaml/submatch/03_captures.ml",
            "/usr/share/doc/re2c/examples/ocaml/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/ocaml/submatch/04_posix_captures.ml",
            "/usr/share/doc/re2c/examples/ocaml/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/python/01_basic.py",
            "/usr/share/doc/re2c/examples/python/01_basic.re",
            "/usr/share/doc/re2c/examples/python/conditions/parse_u32_blocks.py",
            "/usr/share/doc/re2c/examples/python/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/python/conditions/parse_u32_conditions.py",
            "/usr/share/doc/re2c/examples/python/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/python/encodings/unicode_identifier.py",
            "/usr/share/doc/re2c/examples/python/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/python/eof/01_sentinel.py",
            "/usr/share/doc/re2c/examples/python/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/python/eof/02_bounds_checking.py",
            "/usr/share/doc/re2c/examples/python/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/python/eof/03_eof_rule.py",
            "/usr/share/doc/re2c/examples/python/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/python/eof/04_fake_sentinel.py",
            "/usr/share/doc/re2c/examples/python/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/python/fill/01_fill.py",
            "/usr/share/doc/re2c/examples/python/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/python/fill/02_fill.py",
            "/usr/share/doc/re2c/examples/python/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/python/headers/header.py",
            "/usr/share/doc/re2c/examples/python/headers/header.re",
            "/usr/share/doc/re2c/examples/python/headers/lexer/__init__.py",
            "/usr/share/doc/re2c/examples/python/headers/lexer/state.py",
            "/usr/share/doc/re2c/examples/python/includes/definitions.py",
            "/usr/share/doc/re2c/examples/python/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/python/includes/include.py",
            "/usr/share/doc/re2c/examples/python/includes/include.re",
            "/usr/share/doc/re2c/examples/python/reuse/reuse.py",
            "/usr/share/doc/re2c/examples/python/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/python/reuse/usedir.py",
            "/usr/share/doc/re2c/examples/python/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/python/state/push.py",
            "/usr/share/doc/re2c/examples/python/state/push.re",
            "/usr/share/doc/re2c/examples/python/submatch/01_stags.py",
            "/usr/share/doc/re2c/examples/python/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/python/submatch/01_stags_fill.py",
            "/usr/share/doc/re2c/examples/python/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/python/submatch/02_mtags.py",
            "/usr/share/doc/re2c/examples/python/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/python/submatch/03_captures.py",
            "/usr/share/doc/re2c/examples/python/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/python/submatch/04_posix_captures.py",
            "/usr/share/doc/re2c/examples/python/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/rust/01_basic.re",
            "/usr/share/doc/re2c/examples/rust/01_basic.rs",
            "/usr/share/doc/re2c/examples/rust/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/rust/conditions/parse_u32_blocks.rs",
            "/usr/share/doc/re2c/examples/rust/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/rust/conditions/parse_u32_conditions.rs",
            "/usr/share/doc/re2c/examples/rust/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/rust/encodings/unicode_identifier.rs",
            "/usr/share/doc/re2c/examples/rust/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/rust/eof/01_sentinel.rs",
            "/usr/share/doc/re2c/examples/rust/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/rust/eof/02_bounds_checking.rs",
            "/usr/share/doc/re2c/examples/rust/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/rust/eof/03_eof_rule.rs",
            "/usr/share/doc/re2c/examples/rust/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/rust/eof/04_fake_sentinel.rs",
            "/usr/share/doc/re2c/examples/rust/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/rust/fill/01_fill.rs",
            "/usr/share/doc/re2c/examples/rust/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/rust/fill/02_fill.rs",
            "/usr/share/doc/re2c/examples/rust/headers/header.re",
            "/usr/share/doc/re2c/examples/rust/headers/header.rs",
            "/usr/share/doc/re2c/examples/rust/headers/lexer/mod.rs",
            "/usr/share/doc/re2c/examples/rust/headers/lexer/state.rs",
            "/usr/share/doc/re2c/examples/rust/includes/definitions.rs",
            "/usr/share/doc/re2c/examples/rust/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/rust/includes/include.re",
            "/usr/share/doc/re2c/examples/rust/includes/include.rs",
            "/usr/share/doc/re2c/examples/rust/real_world/c.re",
            "/usr/share/doc/re2c/examples/rust/real_world/c.rs",
            "/usr/share/doc/re2c/examples/rust/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/rust/reuse/reuse.rs",
            "/usr/share/doc/re2c/examples/rust/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/rust/reuse/usedir.rs",
            "/usr/share/doc/re2c/examples/rust/state/push.re",
            "/usr/share/doc/re2c/examples/rust/state/push.rs",
            "/usr/share/doc/re2c/examples/rust/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/rust/submatch/01_stags.rs",
            "/usr/share/doc/re2c/examples/rust/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/rust/submatch/01_stags_fill.rs",
            "/usr/share/doc/re2c/examples/rust/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/rust/submatch/02_mtags.rs",
            "/usr/share/doc/re2c/examples/rust/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/rust/submatch/03_captures.rs",
            "/usr/share/doc/re2c/examples/rust/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/rust/submatch/04_posix_captures.rs",
            "/usr/share/doc/re2c/examples/v/01_basic.re",
            "/usr/share/doc/re2c/examples/v/01_basic.v",
            "/usr/share/doc/re2c/examples/v/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/v/conditions/parse_u32_blocks.v",
            "/usr/share/doc/re2c/examples/v/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/v/conditions/parse_u32_conditions.v",
            "/usr/share/doc/re2c/examples/v/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/v/encodings/unicode_identifier.v",
            "/usr/share/doc/re2c/examples/v/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/v/eof/01_sentinel.v",
            "/usr/share/doc/re2c/examples/v/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/v/eof/02_bounds_checking.v",
            "/usr/share/doc/re2c/examples/v/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/v/eof/03_eof_rule.v",
            "/usr/share/doc/re2c/examples/v/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/v/eof/04_fake_sentinel.v",
            "/usr/share/doc/re2c/examples/v/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/v/fill/01_fill.v",
            "/usr/share/doc/re2c/examples/v/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/v/fill/02_fill.v",
            "/usr/share/doc/re2c/examples/v/headers/header.re",
            "/usr/share/doc/re2c/examples/v/headers/header.v",
            "/usr/share/doc/re2c/examples/v/headers/lexer/state.v",
            "/usr/share/doc/re2c/examples/v/includes/definitions.v",
            "/usr/share/doc/re2c/examples/v/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/v/includes/include.re",
            "/usr/share/doc/re2c/examples/v/includes/include.v",
            "/usr/share/doc/re2c/examples/v/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/v/reuse/reuse.v",
            "/usr/share/doc/re2c/examples/v/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/v/reuse/usedir.v",
            "/usr/share/doc/re2c/examples/v/state/push.re",
            "/usr/share/doc/re2c/examples/v/state/push.v",
            "/usr/share/doc/re2c/examples/v/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/v/submatch/01_stags.v",
            "/usr/share/doc/re2c/examples/v/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/v/submatch/01_stags_fill.v",
            "/usr/share/doc/re2c/examples/v/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/v/submatch/02_mtags.v",
            "/usr/share/doc/re2c/examples/v/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/v/submatch/03_captures.v",
            "/usr/share/doc/re2c/examples/v/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/v/submatch/04_posix_captures.v",
            "/usr/share/doc/re2c/examples/zig/01_basic.re",
            "/usr/share/doc/re2c/examples/zig/01_basic.zig",
            "/usr/share/doc/re2c/examples/zig/conditions/parse_u32_blocks.re",
            "/usr/share/doc/re2c/examples/zig/conditions/parse_u32_blocks.zig",
            "/usr/share/doc/re2c/examples/zig/conditions/parse_u32_conditions.re",
            "/usr/share/doc/re2c/examples/zig/conditions/parse_u32_conditions.zig",
            "/usr/share/doc/re2c/examples/zig/encodings/unicode_identifier.re",
            "/usr/share/doc/re2c/examples/zig/encodings/unicode_identifier.zig",
            "/usr/share/doc/re2c/examples/zig/eof/01_sentinel.re",
            "/usr/share/doc/re2c/examples/zig/eof/01_sentinel.zig",
            "/usr/share/doc/re2c/examples/zig/eof/02_bounds_checking.re",
            "/usr/share/doc/re2c/examples/zig/eof/02_bounds_checking.zig",
            "/usr/share/doc/re2c/examples/zig/eof/03_eof_rule.re",
            "/usr/share/doc/re2c/examples/zig/eof/03_eof_rule.zig",
            "/usr/share/doc/re2c/examples/zig/eof/04_fake_sentinel.re",
            "/usr/share/doc/re2c/examples/zig/eof/04_fake_sentinel.zig",
            "/usr/share/doc/re2c/examples/zig/fill/01_fill.re",
            "/usr/share/doc/re2c/examples/zig/fill/01_fill.zig",
            "/usr/share/doc/re2c/examples/zig/fill/02_fill.re",
            "/usr/share/doc/re2c/examples/zig/fill/02_fill.zig",
            "/usr/share/doc/re2c/examples/zig/headers/header.re",
            "/usr/share/doc/re2c/examples/zig/headers/header.zig",
            "/usr/share/doc/re2c/examples/zig/headers/lexer/state.zig",
            "/usr/share/doc/re2c/examples/zig/includes/definitions.zig",
            "/usr/share/doc/re2c/examples/zig/includes/extra_rules.re.inc",
            "/usr/share/doc/re2c/examples/zig/includes/include.re",
            "/usr/share/doc/re2c/examples/zig/includes/include.zig",
            "/usr/share/doc/re2c/examples/zig/reuse/reuse.re",
            "/usr/share/doc/re2c/examples/zig/reuse/reuse.zig",
            "/usr/share/doc/re2c/examples/zig/reuse/usedir.re",
            "/usr/share/doc/re2c/examples/zig/reuse/usedir.zig",
            "/usr/share/doc/re2c/examples/zig/state/push.re",
            "/usr/share/doc/re2c/examples/zig/state/push.zig",
            "/usr/share/doc/re2c/examples/zig/submatch/01_stags.re",
            "/usr/share/doc/re2c/examples/zig/submatch/01_stags.zig",
            "/usr/share/doc/re2c/examples/zig/submatch/01_stags_fill.re",
            "/usr/share/doc/re2c/examples/zig/submatch/01_stags_fill.zig",
            "/usr/share/doc/re2c/examples/zig/submatch/02_mtags.re",
            "/usr/share/doc/re2c/examples/zig/submatch/02_mtags.zig",
            "/usr/share/doc/re2c/examples/zig/submatch/03_captures.re",
            "/usr/share/doc/re2c/examples/zig/submatch/03_captures.zig",
            "/usr/share/doc/re2c/examples/zig/submatch/04_posix_captures.re",
            "/usr/share/doc/re2c/examples/zig/submatch/04_posix_captures.zig",
            "/usr/share/man/man1/re2c.1.gz",
            "/usr/share/man/man1/re2d.1.gz",
            "/usr/share/man/man1/re2go.1.gz",
            "/usr/share/man/man1/re2hs.1.gz",
            "/usr/share/man/man1/re2js.1.gz",
            "/usr/share/man/man1/re2ocaml.1.gz",
            "/usr/share/man/man1/re2py.1.gz",
            "/usr/share/man/man1/re2rust.1.gz",
            "/usr/share/man/man1/re2v.1.gz",
            "/usr/share/man/man1/re2zig.1.gz",
            "/usr/share/re2c/stdlib/c",
            "/usr/share/re2c/stdlib/d",
            "/usr/share/re2c/stdlib/go",
            "/usr/share/re2c/stdlib/haskell",
            "/usr/share/re2c/stdlib/java",
            "/usr/share/re2c/stdlib/js",
            "/usr/share/re2c/stdlib/ocaml",
            "/usr/share/re2c/stdlib/python",
            "/usr/share/re2c/stdlib/rust",
            "/usr/share/re2c/stdlib/unicode_categories.re",
            "/usr/share/re2c/stdlib/v",
            "/usr/share/re2c/stdlib/zig"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "readline-common@8.2-6",
          "Name": "readline-common",
          "Identifier": {
            "PURL": "pkg:deb/debian/readline-common@8.2-6?arch=all\u0026distro=debian-13.7",
            "UID": "c4beab42d2a9a634"
          },
          "Version": "8.2",
          "Release": "6",
          "Arch": "all",
          "SrcName": "readline",
          "SrcVersion": "8.2",
          "SrcRelease": "6",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GFDL-1.3-no-invariants-or-later",
            "GFDL-1.3-or-later",
            "ISC-no-attribution"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:83cc9b31906fa96474ec2d6137375a26b1fc9f1050e092277613b0f193686e96"
          },
          "InstalledFiles": [
            "/usr/share/doc/readline-common/changelog.Debian.gz",
            "/usr/share/doc/readline-common/changelog.gz",
            "/usr/share/doc/readline-common/copyright",
            "/usr/share/doc/readline-common/inputrc.arrows",
            "/usr/share/info/rluserman.info.gz",
            "/usr/share/lintian/overrides/readline-common",
            "/usr/share/man/man3/history.3readline.gz",
            "/usr/share/man/man3/readline.3readline.gz",
            "/usr/share/readline/inputrc"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "rpcsvc-proto@1.4.3-1",
          "Name": "rpcsvc-proto",
          "Identifier": {
            "PURL": "pkg:deb/debian/rpcsvc-proto@1.4.3-1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1d49da3ba11ea817"
          },
          "Version": "1.4.3",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "rpcsvc-proto",
          "SrcVersion": "1.4.3",
          "SrcRelease": "1",
          "Licenses": [
            "BSD-3-Clause",
            "permissive-fsf",
            "permissive-makefile-in",
            "permissive-autoconf-m4-no-warranty",
            "GPL-3+-autoconf-exception",
            "permissive-configure",
            "GPL-2+-autoconf-exception",
            "MIT",
            "permissive-autoconf-m4",
            "GPL-2.0-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/rpcgen",
            "/usr/include/rpcsvc/bootparam_prot.h",
            "/usr/include/rpcsvc/bootparam_prot.x",
            "/usr/include/rpcsvc/key_prot.h",
            "/usr/include/rpcsvc/key_prot.x",
            "/usr/include/rpcsvc/klm_prot.h",
            "/usr/include/rpcsvc/klm_prot.x",
            "/usr/include/rpcsvc/mount.h",
            "/usr/include/rpcsvc/mount.x",
            "/usr/include/rpcsvc/nfs_prot.h",
            "/usr/include/rpcsvc/nfs_prot.x",
            "/usr/include/rpcsvc/nlm_prot.h",
            "/usr/include/rpcsvc/nlm_prot.x",
            "/usr/include/rpcsvc/rex.h",
            "/usr/include/rpcsvc/rex.x",
            "/usr/include/rpcsvc/rquota.h",
            "/usr/include/rpcsvc/rquota.x",
            "/usr/include/rpcsvc/rstat.h",
            "/usr/include/rpcsvc/rstat.x",
            "/usr/include/rpcsvc/rusers.h",
            "/usr/include/rpcsvc/rusers.x",
            "/usr/include/rpcsvc/sm_inter.h",
            "/usr/include/rpcsvc/sm_inter.x",
            "/usr/include/rpcsvc/spray.h",
            "/usr/include/rpcsvc/spray.x",
            "/usr/share/doc/rpcsvc-proto/changelog.Debian.gz",
            "/usr/share/doc/rpcsvc-proto/changelog.gz",
            "/usr/share/doc/rpcsvc-proto/copyright",
            "/usr/share/man/man1/rpcgen.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "rsync@3.5.0+ds1-0+deb13u1",
          "Name": "rsync",
          "Identifier": {
            "PURL": "pkg:deb/debian/rsync@3.5.0%2Bds1-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "38d7e00f8d886b77"
          },
          "Version": "3.5.0+ds1",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "rsync",
          "SrcVersion": "3.5.0+ds1",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-3.0-or-later",
            "public-domain",
            "GPL-3+ with OpenSSL-xxhash exception",
            "GPL-3.0-only",
            "GPL-3 with OpenSSL-xxhash exception",
            "GPL-3 with Autoconf-data exception",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "PostgreSQL",
            "ISC",
            "snprintf",
            "FSF-unlimited",
            "FSFULLR"
          ],
          "Maintainer": "Samuel Henrique \u003csamueloph@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libacl1@2.3.2-2+b1",
            "libc6@2.41-12+deb13u4",
            "liblz4-1@1.10.0-4",
            "libpopt0@1.19+dfsg-2",
            "libssl3t64@3.5.7-1~deb13u3",
            "libxxhash0@0.8.3-2",
            "libzstd1@1.5.7+dfsg-1",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "InstalledFiles": [
            "/usr/bin/rrsync",
            "/usr/bin/rsync",
            "/usr/bin/rsync-ssl",
            "/usr/lib/systemd/system/rsync.service",
            "/usr/share/doc/rsync/NEWS.Debian.gz",
            "/usr/share/doc/rsync/NEWS.md.gz",
            "/usr/share/doc/rsync/README.Debian",
            "/usr/share/doc/rsync/changelog.Debian.gz",
            "/usr/share/doc/rsync/copyright",
            "/usr/share/doc/rsync/examples/logrotate.conf.rsync",
            "/usr/share/doc/rsync/examples/rsyncd.conf",
            "/usr/share/lintian/overrides/rsync",
            "/usr/share/man/man1/rrsync.1.gz",
            "/usr/share/man/man1/rsync-ssl.1.gz",
            "/usr/share/man/man1/rsync.1.gz",
            "/usr/share/man/man5/rsyncd.conf.5.gz",
            "/usr/share/rsync/scripts/atomic-rsync",
            "/usr/share/rsync/scripts/cull-options",
            "/usr/share/rsync/scripts/cvs2includes",
            "/usr/share/rsync/scripts/file-attr-restore",
            "/usr/share/rsync/scripts/files-to-excludes",
            "/usr/share/rsync/scripts/git-set-file-times",
            "/usr/share/rsync/scripts/logfilter",
            "/usr/share/rsync/scripts/lsh",
            "/usr/share/rsync/scripts/mnt-excl",
            "/usr/share/rsync/scripts/munge-symlinks",
            "/usr/share/rsync/scripts/rsync-no-vanished",
            "/usr/share/rsync/scripts/rsyncstats"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "sed@4.9-2+deb13u1",
          "Name": "sed",
          "Identifier": {
            "PURL": "pkg:deb/debian/sed@4.9-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "a041ea16982bb927"
          },
          "Version": "4.9",
          "Release": "2+deb13u1",
          "Arch": "amd64",
          "SrcName": "sed",
          "SrcVersion": "4.9",
          "SrcRelease": "2+deb13u1",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "X11",
            "GFDL-1.3-no-invariants-or-later",
            "GFDL-1.3-only",
            "ISC",
            "BSD-4-Clause-UC",
            "BSL-1",
            "pcre"
          ],
          "Maintainer": "Clint Adams \u003cclint@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/sed",
            "/usr/share/doc/sed/AUTHORS",
            "/usr/share/doc/sed/BUGS.gz",
            "/usr/share/doc/sed/NEWS.gz",
            "/usr/share/doc/sed/README",
            "/usr/share/doc/sed/THANKS.gz",
            "/usr/share/doc/sed/changelog.Debian.gz",
            "/usr/share/doc/sed/changelog.gz",
            "/usr/share/doc/sed/copyright",
            "/usr/share/doc/sed/examples/dc.sed",
            "/usr/share/doc/sed/sedfaq.txt.gz",
            "/usr/share/info/sed.info.gz",
            "/usr/share/locale/af/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ast/LC_MESSAGES/sed.mo",
            "/usr/share/locale/bg/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ca/LC_MESSAGES/sed.mo",
            "/usr/share/locale/cs/LC_MESSAGES/sed.mo",
            "/usr/share/locale/da/LC_MESSAGES/sed.mo",
            "/usr/share/locale/de/LC_MESSAGES/sed.mo",
            "/usr/share/locale/el/LC_MESSAGES/sed.mo",
            "/usr/share/locale/eo/LC_MESSAGES/sed.mo",
            "/usr/share/locale/es/LC_MESSAGES/sed.mo",
            "/usr/share/locale/et/LC_MESSAGES/sed.mo",
            "/usr/share/locale/eu/LC_MESSAGES/sed.mo",
            "/usr/share/locale/fi/LC_MESSAGES/sed.mo",
            "/usr/share/locale/fr/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ga/LC_MESSAGES/sed.mo",
            "/usr/share/locale/gl/LC_MESSAGES/sed.mo",
            "/usr/share/locale/he/LC_MESSAGES/sed.mo",
            "/usr/share/locale/hr/LC_MESSAGES/sed.mo",
            "/usr/share/locale/hu/LC_MESSAGES/sed.mo",
            "/usr/share/locale/id/LC_MESSAGES/sed.mo",
            "/usr/share/locale/it/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ja/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ka/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ko/LC_MESSAGES/sed.mo",
            "/usr/share/locale/nb/LC_MESSAGES/sed.mo",
            "/usr/share/locale/nl/LC_MESSAGES/sed.mo",
            "/usr/share/locale/pl/LC_MESSAGES/sed.mo",
            "/usr/share/locale/pt/LC_MESSAGES/sed.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ro/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ru/LC_MESSAGES/sed.mo",
            "/usr/share/locale/sk/LC_MESSAGES/sed.mo",
            "/usr/share/locale/sl/LC_MESSAGES/sed.mo",
            "/usr/share/locale/sr/LC_MESSAGES/sed.mo",
            "/usr/share/locale/sv/LC_MESSAGES/sed.mo",
            "/usr/share/locale/tr/LC_MESSAGES/sed.mo",
            "/usr/share/locale/uk/LC_MESSAGES/sed.mo",
            "/usr/share/locale/vi/LC_MESSAGES/sed.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/sed.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo",
            "/usr/share/man/man1/sed.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "sqv@1.3.0-3+b2",
          "Name": "sqv",
          "Identifier": {
            "PURL": "pkg:deb/debian/sqv@1.3.0-3%2Bb2?arch=amd64\u0026distro=debian-13.7",
            "UID": "71acebf687a567ad"
          },
          "Version": "1.3.0",
          "Release": "3+b2",
          "Arch": "amd64",
          "SrcName": "rust-sequoia-sqv",
          "SrcVersion": "1.3.0",
          "SrcRelease": "3",
          "Licenses": [
            "LGPL-2.0-or-later",
            "LGPL-2.0-only"
          ],
          "Maintainer": "Debian Rust Maintainers \u003cpkg-rust-maintainers@alioth-lists.debian.net\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "libgcc-s1@14.2.0-19",
            "libgmp10@2:6.3.0+dfsg-3",
            "libhogweed6t64@3.10.1-1",
            "libnettle8t64@3.10.1-1"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/sqv",
            "/usr/share/bash-completion/completions/sqv.bash",
            "/usr/share/doc/sqv/NEWS.gz",
            "/usr/share/doc/sqv/changelog.Debian.amd64.gz",
            "/usr/share/doc/sqv/changelog.Debian.gz",
            "/usr/share/doc/sqv/copyright",
            "/usr/share/fish/completions/sqv.fish",
            "/usr/share/man/man1/sqv.1.gz",
            "/usr/share/zsh/vendor-completions/_sqv"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "sysvinit-utils@3.14-4",
          "Name": "sysvinit-utils",
          "Identifier": {
            "PURL": "pkg:deb/debian/sysvinit-utils@3.14-4?arch=amd64\u0026distro=debian-13.7",
            "UID": "19ecbcb3d5bf6b26"
          },
          "Version": "3.14",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "sysvinit",
          "SrcVersion": "3.14",
          "SrcRelease": "4",
          "Licenses": [
            "GPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "GPL-3.0-only",
            "GPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian sysvinit maintainers \u003cdebian-init-diversity@chiark.greenend.org.uk\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/init/init-d-script",
            "/usr/lib/init/vars.sh",
            "/usr/lib/lsb/init-functions",
            "/usr/lib/lsb/init-functions.d/00-verbose",
            "/usr/sbin/fstab-decode",
            "/usr/sbin/killall5",
            "/usr/share/doc/sysvinit-utils/changelog.Debian.gz",
            "/usr/share/doc/sysvinit-utils/copyright",
            "/usr/share/man/man5/init-d-script.5.gz",
            "/usr/share/man/man8/fstab-decode.8.gz",
            "/usr/share/man/man8/killall5.8.gz",
            "/usr/share/man/man8/pidof.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "tar@1.35+dfsg-3.1",
          "Name": "tar",
          "Identifier": {
            "PURL": "pkg:deb/debian/tar@1.35%2Bdfsg-3.1?arch=amd64\u0026distro=debian-13.7",
            "UID": "4f69996c49afbaca"
          },
          "Version": "1.35+dfsg",
          "Release": "3.1",
          "Arch": "amd64",
          "SrcName": "tar",
          "SrcVersion": "1.35+dfsg",
          "SrcRelease": "3.1",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "LGPL-3.0-or-later",
            "LGPL-3.0-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Janos Lenart \u003cocsi@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/tar",
            "/usr/lib/mime/packages/tar",
            "/usr/sbin/rmt-tar",
            "/usr/sbin/tarcat",
            "/usr/share/doc/tar/AUTHORS",
            "/usr/share/doc/tar/NEWS.gz",
            "/usr/share/doc/tar/README.Debian",
            "/usr/share/doc/tar/THANKS.gz",
            "/usr/share/doc/tar/changelog.1.gz",
            "/usr/share/doc/tar/changelog.Debian.gz",
            "/usr/share/doc/tar/changelog.gz",
            "/usr/share/doc/tar/copyright",
            "/usr/share/locale/bg/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ca/LC_MESSAGES/tar.mo",
            "/usr/share/locale/cs/LC_MESSAGES/tar.mo",
            "/usr/share/locale/da/LC_MESSAGES/tar.mo",
            "/usr/share/locale/de/LC_MESSAGES/tar.mo",
            "/usr/share/locale/el/LC_MESSAGES/tar.mo",
            "/usr/share/locale/eo/LC_MESSAGES/tar.mo",
            "/usr/share/locale/es/LC_MESSAGES/tar.mo",
            "/usr/share/locale/et/LC_MESSAGES/tar.mo",
            "/usr/share/locale/eu/LC_MESSAGES/tar.mo",
            "/usr/share/locale/fi/LC_MESSAGES/tar.mo",
            "/usr/share/locale/fr/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ga/LC_MESSAGES/tar.mo",
            "/usr/share/locale/gl/LC_MESSAGES/tar.mo",
            "/usr/share/locale/hr/LC_MESSAGES/tar.mo",
            "/usr/share/locale/hu/LC_MESSAGES/tar.mo",
            "/usr/share/locale/id/LC_MESSAGES/tar.mo",
            "/usr/share/locale/it/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ja/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ka/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ko/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ky/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ms/LC_MESSAGES/tar.mo",
            "/usr/share/locale/nb/LC_MESSAGES/tar.mo",
            "/usr/share/locale/nl/LC_MESSAGES/tar.mo",
            "/usr/share/locale/pl/LC_MESSAGES/tar.mo",
            "/usr/share/locale/pt/LC_MESSAGES/tar.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ro/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ru/LC_MESSAGES/tar.mo",
            "/usr/share/locale/sk/LC_MESSAGES/tar.mo",
            "/usr/share/locale/sl/LC_MESSAGES/tar.mo",
            "/usr/share/locale/sr/LC_MESSAGES/tar.mo",
            "/usr/share/locale/sv/LC_MESSAGES/tar.mo",
            "/usr/share/locale/tr/LC_MESSAGES/tar.mo",
            "/usr/share/locale/uk/LC_MESSAGES/tar.mo",
            "/usr/share/locale/vi/LC_MESSAGES/tar.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/tar.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/tar.mo",
            "/usr/share/man/man1/tar.1.gz",
            "/usr/share/man/man1/tarcat.1.gz",
            "/usr/share/man/man8/rmt-tar.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "tzdata@2026c-0+deb13u1",
          "Name": "tzdata",
          "Identifier": {
            "PURL": "pkg:deb/debian/tzdata@2026c-0%2Bdeb13u1?arch=all\u0026distro=debian-13.7",
            "UID": "b3cbbf4ffe72ee34"
          },
          "Version": "2026c",
          "Release": "0+deb13u1",
          "Arch": "all",
          "SrcName": "tzdata",
          "SrcVersion": "2026c",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "public-domain"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.91"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/tzdata/NEWS.Debian.gz",
            "/usr/share/doc/tzdata/README.Debian",
            "/usr/share/doc/tzdata/changelog.Debian.gz",
            "/usr/share/doc/tzdata/changelog.gz",
            "/usr/share/doc/tzdata/copyright",
            "/usr/share/lintian/overrides/tzdata",
            "/usr/share/zoneinfo/Africa/Abidjan",
            "/usr/share/zoneinfo/Africa/Accra",
            "/usr/share/zoneinfo/Africa/Addis_Ababa",
            "/usr/share/zoneinfo/Africa/Algiers",
            "/usr/share/zoneinfo/Africa/Asmara",
            "/usr/share/zoneinfo/Africa/Bamako",
            "/usr/share/zoneinfo/Africa/Bangui",
            "/usr/share/zoneinfo/Africa/Banjul",
            "/usr/share/zoneinfo/Africa/Bissau",
            "/usr/share/zoneinfo/Africa/Blantyre",
            "/usr/share/zoneinfo/Africa/Brazzaville",
            "/usr/share/zoneinfo/Africa/Bujumbura",
            "/usr/share/zoneinfo/Africa/Cairo",
            "/usr/share/zoneinfo/Africa/Casablanca",
            "/usr/share/zoneinfo/Africa/Ceuta",
            "/usr/share/zoneinfo/Africa/Conakry",
            "/usr/share/zoneinfo/Africa/Dakar",
            "/usr/share/zoneinfo/Africa/Dar_es_Salaam",
            "/usr/share/zoneinfo/Africa/Djibouti",
            "/usr/share/zoneinfo/Africa/Douala",
            "/usr/share/zoneinfo/Africa/El_Aaiun",
            "/usr/share/zoneinfo/Africa/Freetown",
            "/usr/share/zoneinfo/Africa/Gaborone",
            "/usr/share/zoneinfo/Africa/Harare",
            "/usr/share/zoneinfo/Africa/Johannesburg",
            "/usr/share/zoneinfo/Africa/Juba",
            "/usr/share/zoneinfo/Africa/Kampala",
            "/usr/share/zoneinfo/Africa/Khartoum",
            "/usr/share/zoneinfo/Africa/Kigali",
            "/usr/share/zoneinfo/Africa/Kinshasa",
            "/usr/share/zoneinfo/Africa/Lagos",
            "/usr/share/zoneinfo/Africa/Libreville",
            "/usr/share/zoneinfo/Africa/Lome",
            "/usr/share/zoneinfo/Africa/Luanda",
            "/usr/share/zoneinfo/Africa/Lubumbashi",
            "/usr/share/zoneinfo/Africa/Lusaka",
            "/usr/share/zoneinfo/Africa/Malabo",
            "/usr/share/zoneinfo/Africa/Maputo",
            "/usr/share/zoneinfo/Africa/Maseru",
            "/usr/share/zoneinfo/Africa/Mbabane",
            "/usr/share/zoneinfo/Africa/Mogadishu",
            "/usr/share/zoneinfo/Africa/Monrovia",
            "/usr/share/zoneinfo/Africa/Nairobi",
            "/usr/share/zoneinfo/Africa/Ndjamena",
            "/usr/share/zoneinfo/Africa/Niamey",
            "/usr/share/zoneinfo/Africa/Nouakchott",
            "/usr/share/zoneinfo/Africa/Ouagadougou",
            "/usr/share/zoneinfo/Africa/Porto-Novo",
            "/usr/share/zoneinfo/Africa/Sao_Tome",
            "/usr/share/zoneinfo/Africa/Tripoli",
            "/usr/share/zoneinfo/Africa/Tunis",
            "/usr/share/zoneinfo/Africa/Windhoek",
            "/usr/share/zoneinfo/America/Adak",
            "/usr/share/zoneinfo/America/Anchorage",
            "/usr/share/zoneinfo/America/Anguilla",
            "/usr/share/zoneinfo/America/Antigua",
            "/usr/share/zoneinfo/America/Araguaina",
            "/usr/share/zoneinfo/America/Argentina/Buenos_Aires",
            "/usr/share/zoneinfo/America/Argentina/Catamarca",
            "/usr/share/zoneinfo/America/Argentina/Cordoba",
            "/usr/share/zoneinfo/America/Argentina/Jujuy",
            "/usr/share/zoneinfo/America/Argentina/La_Rioja",
            "/usr/share/zoneinfo/America/Argentina/Mendoza",
            "/usr/share/zoneinfo/America/Argentina/Rio_Gallegos",
            "/usr/share/zoneinfo/America/Argentina/Salta",
            "/usr/share/zoneinfo/America/Argentina/San_Juan",
            "/usr/share/zoneinfo/America/Argentina/San_Luis",
            "/usr/share/zoneinfo/America/Argentina/Tucuman",
            "/usr/share/zoneinfo/America/Argentina/Ushuaia",
            "/usr/share/zoneinfo/America/Aruba",
            "/usr/share/zoneinfo/America/Asuncion",
            "/usr/share/zoneinfo/America/Atikokan",
            "/usr/share/zoneinfo/America/Bahia",
            "/usr/share/zoneinfo/America/Bahia_Banderas",
            "/usr/share/zoneinfo/America/Barbados",
            "/usr/share/zoneinfo/America/Belem",
            "/usr/share/zoneinfo/America/Belize",
            "/usr/share/zoneinfo/America/Blanc-Sablon",
            "/usr/share/zoneinfo/America/Boa_Vista",
            "/usr/share/zoneinfo/America/Bogota",
            "/usr/share/zoneinfo/America/Boise",
            "/usr/share/zoneinfo/America/Cambridge_Bay",
            "/usr/share/zoneinfo/America/Campo_Grande",
            "/usr/share/zoneinfo/America/Cancun",
            "/usr/share/zoneinfo/America/Caracas",
            "/usr/share/zoneinfo/America/Cayenne",
            "/usr/share/zoneinfo/America/Cayman",
            "/usr/share/zoneinfo/America/Chicago",
            "/usr/share/zoneinfo/America/Chihuahua",
            "/usr/share/zoneinfo/America/Ciudad_Juarez",
            "/usr/share/zoneinfo/America/Costa_Rica",
            "/usr/share/zoneinfo/America/Coyhaique",
            "/usr/share/zoneinfo/America/Creston",
            "/usr/share/zoneinfo/America/Cuiaba",
            "/usr/share/zoneinfo/America/Curacao",
            "/usr/share/zoneinfo/America/Danmarkshavn",
            "/usr/share/zoneinfo/America/Dawson",
            "/usr/share/zoneinfo/America/Dawson_Creek",
            "/usr/share/zoneinfo/America/Denver",
            "/usr/share/zoneinfo/America/Detroit",
            "/usr/share/zoneinfo/America/Dominica",
            "/usr/share/zoneinfo/America/Edmonton",
            "/usr/share/zoneinfo/America/Eirunepe",
            "/usr/share/zoneinfo/America/El_Salvador",
            "/usr/share/zoneinfo/America/Fort_Nelson",
            "/usr/share/zoneinfo/America/Fortaleza",
            "/usr/share/zoneinfo/America/Glace_Bay",
            "/usr/share/zoneinfo/America/Goose_Bay",
            "/usr/share/zoneinfo/America/Grand_Turk",
            "/usr/share/zoneinfo/America/Grenada",
            "/usr/share/zoneinfo/America/Guadeloupe",
            "/usr/share/zoneinfo/America/Guatemala",
            "/usr/share/zoneinfo/America/Guayaquil",
            "/usr/share/zoneinfo/America/Guyana",
            "/usr/share/zoneinfo/America/Halifax",
            "/usr/share/zoneinfo/America/Havana",
            "/usr/share/zoneinfo/America/Hermosillo",
            "/usr/share/zoneinfo/America/Indiana/Indianapolis",
            "/usr/share/zoneinfo/America/Indiana/Knox",
            "/usr/share/zoneinfo/America/Indiana/Marengo",
            "/usr/share/zoneinfo/America/Indiana/Petersburg",
            "/usr/share/zoneinfo/America/Indiana/Tell_City",
            "/usr/share/zoneinfo/America/Indiana/Vevay",
            "/usr/share/zoneinfo/America/Indiana/Vincennes",
            "/usr/share/zoneinfo/America/Indiana/Winamac",
            "/usr/share/zoneinfo/America/Inuvik",
            "/usr/share/zoneinfo/America/Iqaluit",
            "/usr/share/zoneinfo/America/Jamaica",
            "/usr/share/zoneinfo/America/Juneau",
            "/usr/share/zoneinfo/America/Kentucky/Louisville",
            "/usr/share/zoneinfo/America/Kentucky/Monticello",
            "/usr/share/zoneinfo/America/La_Paz",
            "/usr/share/zoneinfo/America/Lima",
            "/usr/share/zoneinfo/America/Los_Angeles",
            "/usr/share/zoneinfo/America/Maceio",
            "/usr/share/zoneinfo/America/Managua",
            "/usr/share/zoneinfo/America/Manaus",
            "/usr/share/zoneinfo/America/Martinique",
            "/usr/share/zoneinfo/America/Matamoros",
            "/usr/share/zoneinfo/America/Mazatlan",
            "/usr/share/zoneinfo/America/Menominee",
            "/usr/share/zoneinfo/America/Merida",
            "/usr/share/zoneinfo/America/Metlakatla",
            "/usr/share/zoneinfo/America/Mexico_City",
            "/usr/share/zoneinfo/America/Miquelon",
            "/usr/share/zoneinfo/America/Moncton",
            "/usr/share/zoneinfo/America/Monterrey",
            "/usr/share/zoneinfo/America/Montevideo",
            "/usr/share/zoneinfo/America/Montserrat",
            "/usr/share/zoneinfo/America/Nassau",
            "/usr/share/zoneinfo/America/New_York",
            "/usr/share/zoneinfo/America/Nome",
            "/usr/share/zoneinfo/America/Noronha",
            "/usr/share/zoneinfo/America/North_Dakota/Beulah",
            "/usr/share/zoneinfo/America/North_Dakota/Center",
            "/usr/share/zoneinfo/America/North_Dakota/New_Salem",
            "/usr/share/zoneinfo/America/Nuuk",
            "/usr/share/zoneinfo/America/Ojinaga",
            "/usr/share/zoneinfo/America/Panama",
            "/usr/share/zoneinfo/America/Paramaribo",
            "/usr/share/zoneinfo/America/Phoenix",
            "/usr/share/zoneinfo/America/Port-au-Prince",
            "/usr/share/zoneinfo/America/Port_of_Spain",
            "/usr/share/zoneinfo/America/Porto_Velho",
            "/usr/share/zoneinfo/America/Puerto_Rico",
            "/usr/share/zoneinfo/America/Punta_Arenas",
            "/usr/share/zoneinfo/America/Rankin_Inlet",
            "/usr/share/zoneinfo/America/Recife",
            "/usr/share/zoneinfo/America/Regina",
            "/usr/share/zoneinfo/America/Resolute",
            "/usr/share/zoneinfo/America/Rio_Branco",
            "/usr/share/zoneinfo/America/Santarem",
            "/usr/share/zoneinfo/America/Santiago",
            "/usr/share/zoneinfo/America/Santo_Domingo",
            "/usr/share/zoneinfo/America/Sao_Paulo",
            "/usr/share/zoneinfo/America/Scoresbysund",
            "/usr/share/zoneinfo/America/Sitka",
            "/usr/share/zoneinfo/America/St_Johns",
            "/usr/share/zoneinfo/America/St_Kitts",
            "/usr/share/zoneinfo/America/St_Lucia",
            "/usr/share/zoneinfo/America/St_Thomas",
            "/usr/share/zoneinfo/America/St_Vincent",
            "/usr/share/zoneinfo/America/Swift_Current",
            "/usr/share/zoneinfo/America/Tegucigalpa",
            "/usr/share/zoneinfo/America/Thule",
            "/usr/share/zoneinfo/America/Tijuana",
            "/usr/share/zoneinfo/America/Toronto",
            "/usr/share/zoneinfo/America/Tortola",
            "/usr/share/zoneinfo/America/Vancouver",
            "/usr/share/zoneinfo/America/Whitehorse",
            "/usr/share/zoneinfo/America/Winnipeg",
            "/usr/share/zoneinfo/America/Yakutat",
            "/usr/share/zoneinfo/Antarctica/Casey",
            "/usr/share/zoneinfo/Antarctica/Davis",
            "/usr/share/zoneinfo/Antarctica/DumontDUrville",
            "/usr/share/zoneinfo/Antarctica/Macquarie",
            "/usr/share/zoneinfo/Antarctica/Mawson",
            "/usr/share/zoneinfo/Antarctica/McMurdo",
            "/usr/share/zoneinfo/Antarctica/Palmer",
            "/usr/share/zoneinfo/Antarctica/Rothera",
            "/usr/share/zoneinfo/Antarctica/Syowa",
            "/usr/share/zoneinfo/Antarctica/Troll",
            "/usr/share/zoneinfo/Antarctica/Vostok",
            "/usr/share/zoneinfo/Asia/Aden",
            "/usr/share/zoneinfo/Asia/Almaty",
            "/usr/share/zoneinfo/Asia/Amman",
            "/usr/share/zoneinfo/Asia/Anadyr",
            "/usr/share/zoneinfo/Asia/Aqtau",
            "/usr/share/zoneinfo/Asia/Aqtobe",
            "/usr/share/zoneinfo/Asia/Ashgabat",
            "/usr/share/zoneinfo/Asia/Atyrau",
            "/usr/share/zoneinfo/Asia/Baghdad",
            "/usr/share/zoneinfo/Asia/Bahrain",
            "/usr/share/zoneinfo/Asia/Baku",
            "/usr/share/zoneinfo/Asia/Bangkok",
            "/usr/share/zoneinfo/Asia/Barnaul",
            "/usr/share/zoneinfo/Asia/Beirut",
            "/usr/share/zoneinfo/Asia/Bishkek",
            "/usr/share/zoneinfo/Asia/Brunei",
            "/usr/share/zoneinfo/Asia/Chita",
            "/usr/share/zoneinfo/Asia/Colombo",
            "/usr/share/zoneinfo/Asia/Damascus",
            "/usr/share/zoneinfo/Asia/Dhaka",
            "/usr/share/zoneinfo/Asia/Dili",
            "/usr/share/zoneinfo/Asia/Dubai",
            "/usr/share/zoneinfo/Asia/Dushanbe",
            "/usr/share/zoneinfo/Asia/Famagusta",
            "/usr/share/zoneinfo/Asia/Gaza",
            "/usr/share/zoneinfo/Asia/Hebron",
            "/usr/share/zoneinfo/Asia/Ho_Chi_Minh",
            "/usr/share/zoneinfo/Asia/Hong_Kong",
            "/usr/share/zoneinfo/Asia/Hovd",
            "/usr/share/zoneinfo/Asia/Irkutsk",
            "/usr/share/zoneinfo/Asia/Jakarta",
            "/usr/share/zoneinfo/Asia/Jayapura",
            "/usr/share/zoneinfo/Asia/Jerusalem",
            "/usr/share/zoneinfo/Asia/Kabul",
            "/usr/share/zoneinfo/Asia/Kamchatka",
            "/usr/share/zoneinfo/Asia/Karachi",
            "/usr/share/zoneinfo/Asia/Kathmandu",
            "/usr/share/zoneinfo/Asia/Khandyga",
            "/usr/share/zoneinfo/Asia/Kolkata",
            "/usr/share/zoneinfo/Asia/Krasnoyarsk",
            "/usr/share/zoneinfo/Asia/Kuala_Lumpur",
            "/usr/share/zoneinfo/Asia/Kuching",
            "/usr/share/zoneinfo/Asia/Kuwait",
            "/usr/share/zoneinfo/Asia/Macau",
            "/usr/share/zoneinfo/Asia/Magadan",
            "/usr/share/zoneinfo/Asia/Makassar",
            "/usr/share/zoneinfo/Asia/Manila",
            "/usr/share/zoneinfo/Asia/Muscat",
            "/usr/share/zoneinfo/Asia/Nicosia",
            "/usr/share/zoneinfo/Asia/Novokuznetsk",
            "/usr/share/zoneinfo/Asia/Novosibirsk",
            "/usr/share/zoneinfo/Asia/Omsk",
            "/usr/share/zoneinfo/Asia/Oral",
            "/usr/share/zoneinfo/Asia/Phnom_Penh",
            "/usr/share/zoneinfo/Asia/Pontianak",
            "/usr/share/zoneinfo/Asia/Pyongyang",
            "/usr/share/zoneinfo/Asia/Qatar",
            "/usr/share/zoneinfo/Asia/Qostanay",
            "/usr/share/zoneinfo/Asia/Qyzylorda",
            "/usr/share/zoneinfo/Asia/Riyadh",
            "/usr/share/zoneinfo/Asia/Sakhalin",
            "/usr/share/zoneinfo/Asia/Samarkand",
            "/usr/share/zoneinfo/Asia/Seoul",
            "/usr/share/zoneinfo/Asia/Shanghai",
            "/usr/share/zoneinfo/Asia/Singapore",
            "/usr/share/zoneinfo/Asia/Srednekolymsk",
            "/usr/share/zoneinfo/Asia/Taipei",
            "/usr/share/zoneinfo/Asia/Tashkent",
            "/usr/share/zoneinfo/Asia/Tbilisi",
            "/usr/share/zoneinfo/Asia/Tehran",
            "/usr/share/zoneinfo/Asia/Thimphu",
            "/usr/share/zoneinfo/Asia/Tokyo",
            "/usr/share/zoneinfo/Asia/Tomsk",
            "/usr/share/zoneinfo/Asia/Ulaanbaatar",
            "/usr/share/zoneinfo/Asia/Urumqi",
            "/usr/share/zoneinfo/Asia/Ust-Nera",
            "/usr/share/zoneinfo/Asia/Vientiane",
            "/usr/share/zoneinfo/Asia/Vladivostok",
            "/usr/share/zoneinfo/Asia/Yakutsk",
            "/usr/share/zoneinfo/Asia/Yangon",
            "/usr/share/zoneinfo/Asia/Yekaterinburg",
            "/usr/share/zoneinfo/Asia/Yerevan",
            "/usr/share/zoneinfo/Atlantic/Azores",
            "/usr/share/zoneinfo/Atlantic/Bermuda",
            "/usr/share/zoneinfo/Atlantic/Canary",
            "/usr/share/zoneinfo/Atlantic/Cape_Verde",
            "/usr/share/zoneinfo/Atlantic/Faroe",
            "/usr/share/zoneinfo/Atlantic/Madeira",
            "/usr/share/zoneinfo/Atlantic/Reykjavik",
            "/usr/share/zoneinfo/Atlantic/South_Georgia",
            "/usr/share/zoneinfo/Atlantic/St_Helena",
            "/usr/share/zoneinfo/Atlantic/Stanley",
            "/usr/share/zoneinfo/Australia/Adelaide",
            "/usr/share/zoneinfo/Australia/Brisbane",
            "/usr/share/zoneinfo/Australia/Broken_Hill",
            "/usr/share/zoneinfo/Australia/Darwin",
            "/usr/share/zoneinfo/Australia/Eucla",
            "/usr/share/zoneinfo/Australia/Hobart",
            "/usr/share/zoneinfo/Australia/Lindeman",
            "/usr/share/zoneinfo/Australia/Lord_Howe",
            "/usr/share/zoneinfo/Australia/Melbourne",
            "/usr/share/zoneinfo/Australia/Perth",
            "/usr/share/zoneinfo/Australia/Sydney",
            "/usr/share/zoneinfo/Etc/GMT",
            "/usr/share/zoneinfo/Etc/GMT+1",
            "/usr/share/zoneinfo/Etc/GMT+10",
            "/usr/share/zoneinfo/Etc/GMT+11",
            "/usr/share/zoneinfo/Etc/GMT+12",
            "/usr/share/zoneinfo/Etc/GMT+2",
            "/usr/share/zoneinfo/Etc/GMT+3",
            "/usr/share/zoneinfo/Etc/GMT+4",
            "/usr/share/zoneinfo/Etc/GMT+5",
            "/usr/share/zoneinfo/Etc/GMT+6",
            "/usr/share/zoneinfo/Etc/GMT+7",
            "/usr/share/zoneinfo/Etc/GMT+8",
            "/usr/share/zoneinfo/Etc/GMT+9",
            "/usr/share/zoneinfo/Etc/GMT-1",
            "/usr/share/zoneinfo/Etc/GMT-10",
            "/usr/share/zoneinfo/Etc/GMT-11",
            "/usr/share/zoneinfo/Etc/GMT-12",
            "/usr/share/zoneinfo/Etc/GMT-13",
            "/usr/share/zoneinfo/Etc/GMT-14",
            "/usr/share/zoneinfo/Etc/GMT-2",
            "/usr/share/zoneinfo/Etc/GMT-3",
            "/usr/share/zoneinfo/Etc/GMT-4",
            "/usr/share/zoneinfo/Etc/GMT-5",
            "/usr/share/zoneinfo/Etc/GMT-6",
            "/usr/share/zoneinfo/Etc/GMT-7",
            "/usr/share/zoneinfo/Etc/GMT-8",
            "/usr/share/zoneinfo/Etc/GMT-9",
            "/usr/share/zoneinfo/Etc/UTC",
            "/usr/share/zoneinfo/Europe/Amsterdam",
            "/usr/share/zoneinfo/Europe/Andorra",
            "/usr/share/zoneinfo/Europe/Astrakhan",
            "/usr/share/zoneinfo/Europe/Athens",
            "/usr/share/zoneinfo/Europe/Belgrade",
            "/usr/share/zoneinfo/Europe/Berlin",
            "/usr/share/zoneinfo/Europe/Brussels",
            "/usr/share/zoneinfo/Europe/Bucharest",
            "/usr/share/zoneinfo/Europe/Budapest",
            "/usr/share/zoneinfo/Europe/Chisinau",
            "/usr/share/zoneinfo/Europe/Copenhagen",
            "/usr/share/zoneinfo/Europe/Dublin",
            "/usr/share/zoneinfo/Europe/Gibraltar",
            "/usr/share/zoneinfo/Europe/Guernsey",
            "/usr/share/zoneinfo/Europe/Helsinki",
            "/usr/share/zoneinfo/Europe/Isle_of_Man",
            "/usr/share/zoneinfo/Europe/Istanbul",
            "/usr/share/zoneinfo/Europe/Jersey",
            "/usr/share/zoneinfo/Europe/Kaliningrad",
            "/usr/share/zoneinfo/Europe/Kirov",
            "/usr/share/zoneinfo/Europe/Kyiv",
            "/usr/share/zoneinfo/Europe/Lisbon",
            "/usr/share/zoneinfo/Europe/Ljubljana",
            "/usr/share/zoneinfo/Europe/London",
            "/usr/share/zoneinfo/Europe/Luxembourg",
            "/usr/share/zoneinfo/Europe/Madrid",
            "/usr/share/zoneinfo/Europe/Malta",
            "/usr/share/zoneinfo/Europe/Minsk",
            "/usr/share/zoneinfo/Europe/Monaco",
            "/usr/share/zoneinfo/Europe/Moscow",
            "/usr/share/zoneinfo/Europe/Oslo",
            "/usr/share/zoneinfo/Europe/Paris",
            "/usr/share/zoneinfo/Europe/Prague",
            "/usr/share/zoneinfo/Europe/Riga",
            "/usr/share/zoneinfo/Europe/Rome",
            "/usr/share/zoneinfo/Europe/Samara",
            "/usr/share/zoneinfo/Europe/Sarajevo",
            "/usr/share/zoneinfo/Europe/Saratov",
            "/usr/share/zoneinfo/Europe/Simferopol",
            "/usr/share/zoneinfo/Europe/Skopje",
            "/usr/share/zoneinfo/Europe/Sofia",
            "/usr/share/zoneinfo/Europe/Stockholm",
            "/usr/share/zoneinfo/Europe/Tallinn",
            "/usr/share/zoneinfo/Europe/Tirane",
            "/usr/share/zoneinfo/Europe/Ulyanovsk",
            "/usr/share/zoneinfo/Europe/Vaduz",
            "/usr/share/zoneinfo/Europe/Vienna",
            "/usr/share/zoneinfo/Europe/Vilnius",
            "/usr/share/zoneinfo/Europe/Volgograd",
            "/usr/share/zoneinfo/Europe/Warsaw",
            "/usr/share/zoneinfo/Europe/Zagreb",
            "/usr/share/zoneinfo/Europe/Zurich",
            "/usr/share/zoneinfo/Factory",
            "/usr/share/zoneinfo/Indian/Antananarivo",
            "/usr/share/zoneinfo/Indian/Chagos",
            "/usr/share/zoneinfo/Indian/Christmas",
            "/usr/share/zoneinfo/Indian/Cocos",
            "/usr/share/zoneinfo/Indian/Comoro",
            "/usr/share/zoneinfo/Indian/Kerguelen",
            "/usr/share/zoneinfo/Indian/Mahe",
            "/usr/share/zoneinfo/Indian/Maldives",
            "/usr/share/zoneinfo/Indian/Mauritius",
            "/usr/share/zoneinfo/Indian/Mayotte",
            "/usr/share/zoneinfo/Indian/Reunion",
            "/usr/share/zoneinfo/Pacific/Apia",
            "/usr/share/zoneinfo/Pacific/Auckland",
            "/usr/share/zoneinfo/Pacific/Bougainville",
            "/usr/share/zoneinfo/Pacific/Chatham",
            "/usr/share/zoneinfo/Pacific/Chuuk",
            "/usr/share/zoneinfo/Pacific/Easter",
            "/usr/share/zoneinfo/Pacific/Efate",
            "/usr/share/zoneinfo/Pacific/Fakaofo",
            "/usr/share/zoneinfo/Pacific/Fiji",
            "/usr/share/zoneinfo/Pacific/Funafuti",
            "/usr/share/zoneinfo/Pacific/Galapagos",
            "/usr/share/zoneinfo/Pacific/Gambier",
            "/usr/share/zoneinfo/Pacific/Guadalcanal",
            "/usr/share/zoneinfo/Pacific/Guam",
            "/usr/share/zoneinfo/Pacific/Honolulu",
            "/usr/share/zoneinfo/Pacific/Kanton",
            "/usr/share/zoneinfo/Pacific/Kiritimati",
            "/usr/share/zoneinfo/Pacific/Kosrae",
            "/usr/share/zoneinfo/Pacific/Kwajalein",
            "/usr/share/zoneinfo/Pacific/Majuro",
            "/usr/share/zoneinfo/Pacific/Marquesas",
            "/usr/share/zoneinfo/Pacific/Midway",
            "/usr/share/zoneinfo/Pacific/Nauru",
            "/usr/share/zoneinfo/Pacific/Niue",
            "/usr/share/zoneinfo/Pacific/Norfolk",
            "/usr/share/zoneinfo/Pacific/Noumea",
            "/usr/share/zoneinfo/Pacific/Pago_Pago",
            "/usr/share/zoneinfo/Pacific/Palau",
            "/usr/share/zoneinfo/Pacific/Pitcairn",
            "/usr/share/zoneinfo/Pacific/Pohnpei",
            "/usr/share/zoneinfo/Pacific/Port_Moresby",
            "/usr/share/zoneinfo/Pacific/Rarotonga",
            "/usr/share/zoneinfo/Pacific/Saipan",
            "/usr/share/zoneinfo/Pacific/Tahiti",
            "/usr/share/zoneinfo/Pacific/Tarawa",
            "/usr/share/zoneinfo/Pacific/Tongatapu",
            "/usr/share/zoneinfo/Pacific/Wake",
            "/usr/share/zoneinfo/Pacific/Wallis",
            "/usr/share/zoneinfo/iso3166.tab",
            "/usr/share/zoneinfo/leap-seconds.list",
            "/usr/share/zoneinfo/leapseconds",
            "/usr/share/zoneinfo/tzdata.zi",
            "/usr/share/zoneinfo/zone.tab",
            "/usr/share/zoneinfo/zone1970.tab",
            "/usr/share/zoneinfo/zonenow.tab"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "util-linux@2.41.5-0+deb13u1",
          "Name": "util-linux",
          "Identifier": {
            "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e4d9863928456765"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/bin/choom",
            "/usr/bin/chrt",
            "/usr/bin/dmesg",
            "/usr/bin/fallocate",
            "/usr/bin/findmnt",
            "/usr/bin/flock",
            "/usr/bin/getopt",
            "/usr/bin/hardlink",
            "/usr/bin/ionice",
            "/usr/bin/ipcmk",
            "/usr/bin/ipcrm",
            "/usr/bin/ipcs",
            "/usr/bin/lsblk",
            "/usr/bin/lscpu",
            "/usr/bin/lsipc",
            "/usr/bin/lslocks",
            "/usr/bin/lslogins",
            "/usr/bin/lsmem",
            "/usr/bin/lsns",
            "/usr/bin/mcookie",
            "/usr/bin/more",
            "/usr/bin/mountpoint",
            "/usr/bin/namei",
            "/usr/bin/nsenter",
            "/usr/bin/partx",
            "/usr/bin/prlimit",
            "/usr/bin/rename.ul",
            "/usr/bin/rev",
            "/usr/bin/setarch",
            "/usr/bin/setpriv",
            "/usr/bin/setsid",
            "/usr/bin/setterm",
            "/usr/bin/su",
            "/usr/bin/taskset",
            "/usr/bin/uclampset",
            "/usr/bin/unshare",
            "/usr/bin/wdctl",
            "/usr/bin/whereis",
            "/usr/lib/mime/packages/util-linux",
            "/usr/lib/systemd/system/fstrim.service",
            "/usr/lib/systemd/system/fstrim.timer",
            "/usr/sbin/agetty",
            "/usr/sbin/blkdiscard",
            "/usr/sbin/blkid",
            "/usr/sbin/blkzone",
            "/usr/sbin/blockdev",
            "/usr/sbin/chcpu",
            "/usr/sbin/chmem",
            "/usr/sbin/findfs",
            "/usr/sbin/fsck",
            "/usr/sbin/fsfreeze",
            "/usr/sbin/fstrim",
            "/usr/sbin/isosize",
            "/usr/sbin/ldattach",
            "/usr/sbin/mkfs",
            "/usr/sbin/mkswap",
            "/usr/sbin/pivot_root",
            "/usr/sbin/readprofile",
            "/usr/sbin/rtcwake",
            "/usr/sbin/runuser",
            "/usr/sbin/sulogin",
            "/usr/sbin/swaplabel",
            "/usr/sbin/switch_root",
            "/usr/sbin/wipefs",
            "/usr/sbin/zramctl",
            "/usr/share/bash-completion/completions/blkdiscard",
            "/usr/share/bash-completion/completions/blkid",
            "/usr/share/bash-completion/completions/blkzone",
            "/usr/share/bash-completion/completions/blockdev",
            "/usr/share/bash-completion/completions/chcpu",
            "/usr/share/bash-completion/completions/chmem",
            "/usr/share/bash-completion/completions/chrt",
            "/usr/share/bash-completion/completions/dmesg",
            "/usr/share/bash-completion/completions/fallocate",
            "/usr/share/bash-completion/completions/findfs",
            "/usr/share/bash-completion/completions/findmnt",
            "/usr/share/bash-completion/completions/flock",
            "/usr/share/bash-completion/completions/fsck",
            "/usr/share/bash-completion/completions/fsfreeze",
            "/usr/share/bash-completion/completions/fstrim",
            "/usr/share/bash-completion/completions/getopt",
            "/usr/share/bash-completion/completions/hardlink",
            "/usr/share/bash-completion/completions/ionice",
            "/usr/share/bash-completion/completions/ipcmk",
            "/usr/share/bash-completion/completions/ipcrm",
            "/usr/share/bash-completion/completions/ipcs",
            "/usr/share/bash-completion/completions/isosize",
            "/usr/share/bash-completion/completions/ldattach",
            "/usr/share/bash-completion/completions/lsblk",
            "/usr/share/bash-completion/completions/lscpu",
            "/usr/share/bash-completion/completions/lsipc",
            "/usr/share/bash-completion/completions/lslocks",
            "/usr/share/bash-completion/completions/lslogins",
            "/usr/share/bash-completion/completions/lsmem",
            "/usr/share/bash-completion/completions/lsns",
            "/usr/share/bash-completion/completions/mcookie",
            "/usr/share/bash-completion/completions/mkfs",
            "/usr/share/bash-completion/completions/mkswap",
            "/usr/share/bash-completion/completions/more",
            "/usr/share/bash-completion/completions/mountpoint",
            "/usr/share/bash-completion/completions/namei",
            "/usr/share/bash-completion/completions/nsenter",
            "/usr/share/bash-completion/completions/partx",
            "/usr/share/bash-completion/completions/pivot_root",
            "/usr/share/bash-completion/completions/prlimit",
            "/usr/share/bash-completion/completions/readprofile",
            "/usr/share/bash-completion/completions/rename.ul",
            "/usr/share/bash-completion/completions/rev",
            "/usr/share/bash-completion/completions/rtcwake",
            "/usr/share/bash-completion/completions/setarch",
            "/usr/share/bash-completion/completions/setpriv",
            "/usr/share/bash-completion/completions/setsid",
            "/usr/share/bash-completion/completions/setterm",
            "/usr/share/bash-completion/completions/su",
            "/usr/share/bash-completion/completions/swaplabel",
            "/usr/share/bash-completion/completions/taskset",
            "/usr/share/bash-completion/completions/uclampset",
            "/usr/share/bash-completion/completions/unshare",
            "/usr/share/bash-completion/completions/wdctl",
            "/usr/share/bash-completion/completions/whereis",
            "/usr/share/bash-completion/completions/wipefs",
            "/usr/share/bash-completion/completions/zramctl",
            "/usr/share/doc/util-linux/00-about-docs.txt",
            "/usr/share/doc/util-linux/AUTHORS.gz",
            "/usr/share/doc/util-linux/NEWS.Debian.gz",
            "/usr/share/doc/util-linux/PAM-configuration.txt",
            "/usr/share/doc/util-linux/README.Debian",
            "/usr/share/doc/util-linux/blkid.txt",
            "/usr/share/doc/util-linux/cal.txt",
            "/usr/share/doc/util-linux/changelog.Debian.gz",
            "/usr/share/doc/util-linux/changelog.gz",
            "/usr/share/doc/util-linux/col.txt",
            "/usr/share/doc/util-linux/copyright",
            "/usr/share/doc/util-linux/deprecated.txt",
            "/usr/share/doc/util-linux/examples/getopt-example.bash",
            "/usr/share/doc/util-linux/getopt.txt",
            "/usr/share/doc/util-linux/getopt_changelog.txt",
            "/usr/share/doc/util-linux/howto-build-sys.txt",
            "/usr/share/doc/util-linux/howto-compilation.txt",
            "/usr/share/doc/util-linux/howto-contribute.txt.gz",
            "/usr/share/doc/util-linux/howto-debug.txt",
            "/usr/share/doc/util-linux/howto-man-page.txt",
            "/usr/share/doc/util-linux/howto-pull-request.txt.gz",
            "/usr/share/doc/util-linux/howto-tests.txt",
            "/usr/share/doc/util-linux/howto-usage-function.txt.gz",
            "/usr/share/doc/util-linux/hwclock.txt",
            "/usr/share/doc/util-linux/modems-with-agetty.txt",
            "/usr/share/doc/util-linux/mount.txt",
            "/usr/share/doc/util-linux/parse-date.txt.gz",
            "/usr/share/doc/util-linux/pg.txt",
            "/usr/share/doc/util-linux/poeigl.txt.gz",
            "/usr/share/doc/util-linux/release-schedule.txt",
            "/usr/share/doc/util-linux/releases/v2.13-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.14-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.15-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.16-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.17-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.18-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.19-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.20-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.21-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.22-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.23-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.24-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.25-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.26-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.27-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.28-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.29-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.30-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.31-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.32-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.33-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.34-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.35-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.36-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.37-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.38-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.39-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.40-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.41-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.41.1-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.41.2-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.41.3-ReleaseNotes",
            "/usr/share/doc/util-linux/releases/v2.41.4-ReleaseNotes",
            "/usr/share/doc/util-linux/releases/v2.41.5-ReleaseNotes",
            "/usr/share/lintian/overrides/util-linux",
            "/usr/share/man/man1/choom.1.gz",
            "/usr/share/man/man1/chrt.1.gz",
            "/usr/share/man/man1/dmesg.1.gz",
            "/usr/share/man/man1/fallocate.1.gz",
            "/usr/share/man/man1/flock.1.gz",
            "/usr/share/man/man1/getopt.1.gz",
            "/usr/share/man/man1/hardlink.1.gz",
            "/usr/share/man/man1/ionice.1.gz",
            "/usr/share/man/man1/ipcmk.1.gz",
            "/usr/share/man/man1/ipcrm.1.gz",
            "/usr/share/man/man1/ipcs.1.gz",
            "/usr/share/man/man1/lscpu.1.gz",
            "/usr/share/man/man1/lsipc.1.gz",
            "/usr/share/man/man1/lslogins.1.gz",
            "/usr/share/man/man1/lsmem.1.gz",
            "/usr/share/man/man1/mcookie.1.gz",
            "/usr/share/man/man1/more.1.gz",
            "/usr/share/man/man1/mountpoint.1.gz",
            "/usr/share/man/man1/namei.1.gz",
            "/usr/share/man/man1/nsenter.1.gz",
            "/usr/share/man/man1/prlimit.1.gz",
            "/usr/share/man/man1/rename.ul.1.gz",
            "/usr/share/man/man1/rev.1.gz",
            "/usr/share/man/man1/runuser.1.gz",
            "/usr/share/man/man1/setpriv.1.gz",
            "/usr/share/man/man1/setsid.1.gz",
            "/usr/share/man/man1/setterm.1.gz",
            "/usr/share/man/man1/su.1.gz",
            "/usr/share/man/man1/taskset.1.gz",
            "/usr/share/man/man1/uclampset.1.gz",
            "/usr/share/man/man1/unshare.1.gz",
            "/usr/share/man/man1/whereis.1.gz",
            "/usr/share/man/man5/adjtime_config.5.gz",
            "/usr/share/man/man5/scols-filter.5.gz",
            "/usr/share/man/man5/terminal-colors.d.5.gz",
            "/usr/share/man/man8/agetty.8.gz",
            "/usr/share/man/man8/blkdiscard.8.gz",
            "/usr/share/man/man8/blkid.8.gz",
            "/usr/share/man/man8/blkzone.8.gz",
            "/usr/share/man/man8/blockdev.8.gz",
            "/usr/share/man/man8/chcpu.8.gz",
            "/usr/share/man/man8/chmem.8.gz",
            "/usr/share/man/man8/findfs.8.gz",
            "/usr/share/man/man8/findmnt.8.gz",
            "/usr/share/man/man8/fsck.8.gz",
            "/usr/share/man/man8/fsfreeze.8.gz",
            "/usr/share/man/man8/fstrim.8.gz",
            "/usr/share/man/man8/isosize.8.gz",
            "/usr/share/man/man8/ldattach.8.gz",
            "/usr/share/man/man8/lsblk.8.gz",
            "/usr/share/man/man8/lslocks.8.gz",
            "/usr/share/man/man8/lsns.8.gz",
            "/usr/share/man/man8/mkfs.8.gz",
            "/usr/share/man/man8/mkswap.8.gz",
            "/usr/share/man/man8/partx.8.gz",
            "/usr/share/man/man8/pivot_root.8.gz",
            "/usr/share/man/man8/readprofile.8.gz",
            "/usr/share/man/man8/rtcwake.8.gz",
            "/usr/share/man/man8/setarch.8.gz",
            "/usr/share/man/man8/sulogin.8.gz",
            "/usr/share/man/man8/swaplabel.8.gz",
            "/usr/share/man/man8/switch_root.8.gz",
            "/usr/share/man/man8/wdctl.8.gz",
            "/usr/share/man/man8/wipefs.8.gz",
            "/usr/share/man/man8/zramctl.8.gz",
            "/usr/share/util-linux/logcheck/ignore.d.server/util-linux"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "uuid-dev@2.41.5-0+deb13u1",
          "Name": "uuid-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/uuid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "88cf012bdcc17d43"
          },
          "Version": "2.41.5",
          "Release": "0+deb13u1",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.41.5",
          "SrcRelease": "0+deb13u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "ISC",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "BSD-2-Clause",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6-dev@2.41-12+deb13u4",
            "libuuid1@2.41.5-0+deb13u1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/uuid/uuid.h",
            "/usr/lib/x86_64-linux-gnu/libuuid.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/uuid.pc",
            "/usr/share/doc/uuid-dev/NEWS.Debian.gz",
            "/usr/share/doc/uuid-dev/changelog.Debian.gz",
            "/usr/share/doc/uuid-dev/changelog.gz",
            "/usr/share/doc/uuid-dev/copyright",
            "/usr/share/man/man3/uuid.3.gz",
            "/usr/share/man/man3/uuid_clear.3.gz",
            "/usr/share/man/man3/uuid_compare.3.gz",
            "/usr/share/man/man3/uuid_copy.3.gz",
            "/usr/share/man/man3/uuid_generate.3.gz",
            "/usr/share/man/man3/uuid_is_null.3.gz",
            "/usr/share/man/man3/uuid_parse.3.gz",
            "/usr/share/man/man3/uuid_time.3.gz",
            "/usr/share/man/man3/uuid_unparse.3.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "xz-utils@5.8.1-1+deb13u2",
          "Name": "xz-utils",
          "Identifier": {
            "PURL": "pkg:deb/debian/xz-utils@5.8.1-1%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "fad326c186c48163"
          },
          "Version": "5.8.1",
          "Release": "1+deb13u2",
          "Arch": "amd64",
          "SrcName": "xz-utils",
          "SrcVersion": "5.8.1",
          "SrcRelease": "1+deb13u2",
          "Licenses": [
            "0BSD",
            "GPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "FSFULLR",
            "GPL-3.0-or-later-WITH-Autoconf-exception-macro",
            "none",
            "PD",
            "permissive-nowarranty",
            "FSFUL",
            "noderivs",
            "PD-debian",
            "LGPL-2.1-only",
            "GPL-2.0-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "Sebastian Andrzej Siewior \u003csebastian@breakpoint.cc\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4",
            "liblzma5@5.8.1-1+deb13u2"
          ],
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "InstalledFiles": [
            "/usr/bin/lzmainfo",
            "/usr/bin/xz",
            "/usr/bin/xzdiff",
            "/usr/bin/xzgrep",
            "/usr/bin/xzless",
            "/usr/bin/xzmore",
            "/usr/share/doc/xz-utils/AUTHORS",
            "/usr/share/doc/xz-utils/NEWS.gz",
            "/usr/share/doc/xz-utils/README.Debian",
            "/usr/share/doc/xz-utils/README.gz",
            "/usr/share/doc/xz-utils/THANKS.gz",
            "/usr/share/doc/xz-utils/changelog.Debian.gz",
            "/usr/share/doc/xz-utils/changelog.gz",
            "/usr/share/doc/xz-utils/copyright",
            "/usr/share/doc/xz-utils/faq.txt.gz",
            "/usr/share/doc/xz-utils/history.txt.gz",
            "/usr/share/locale/ca/LC_MESSAGES/xz.mo",
            "/usr/share/locale/cs/LC_MESSAGES/xz.mo",
            "/usr/share/locale/da/LC_MESSAGES/xz.mo",
            "/usr/share/locale/de/LC_MESSAGES/xz.mo",
            "/usr/share/locale/eo/LC_MESSAGES/xz.mo",
            "/usr/share/locale/es/LC_MESSAGES/xz.mo",
            "/usr/share/locale/fi/LC_MESSAGES/xz.mo",
            "/usr/share/locale/fr/LC_MESSAGES/xz.mo",
            "/usr/share/locale/hr/LC_MESSAGES/xz.mo",
            "/usr/share/locale/hu/LC_MESSAGES/xz.mo",
            "/usr/share/locale/it/LC_MESSAGES/xz.mo",
            "/usr/share/locale/ka/LC_MESSAGES/xz.mo",
            "/usr/share/locale/ko/LC_MESSAGES/xz.mo",
            "/usr/share/locale/nl/LC_MESSAGES/xz.mo",
            "/usr/share/locale/pl/LC_MESSAGES/xz.mo",
            "/usr/share/locale/pt/LC_MESSAGES/xz.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/xz.mo",
            "/usr/share/locale/ro/LC_MESSAGES/xz.mo",
            "/usr/share/locale/sr/LC_MESSAGES/xz.mo",
            "/usr/share/locale/sv/LC_MESSAGES/xz.mo",
            "/usr/share/locale/tr/LC_MESSAGES/xz.mo",
            "/usr/share/locale/uk/LC_MESSAGES/xz.mo",
            "/usr/share/locale/vi/LC_MESSAGES/xz.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/xz.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/xz.mo",
            "/usr/share/man/de/man1/lzmainfo.1.gz",
            "/usr/share/man/de/man1/xz.1.gz",
            "/usr/share/man/de/man1/xzless.1.gz",
            "/usr/share/man/fr/man1/lzmainfo.1.gz",
            "/usr/share/man/fr/man1/xz.1.gz",
            "/usr/share/man/fr/man1/xzless.1.gz",
            "/usr/share/man/it/man1/lzmainfo.1.gz",
            "/usr/share/man/it/man1/xz.1.gz",
            "/usr/share/man/it/man1/xzless.1.gz",
            "/usr/share/man/ko/man1/lzmainfo.1.gz",
            "/usr/share/man/ko/man1/xz.1.gz",
            "/usr/share/man/ko/man1/xzless.1.gz",
            "/usr/share/man/man1/lzmainfo.1.gz",
            "/usr/share/man/man1/xz.1.gz",
            "/usr/share/man/man1/xzdiff.1.gz",
            "/usr/share/man/man1/xzgrep.1.gz",
            "/usr/share/man/man1/xzless.1.gz",
            "/usr/share/man/man1/xzmore.1.gz",
            "/usr/share/man/pt_BR/man1/lzmainfo.1.gz",
            "/usr/share/man/pt_BR/man1/xz.1.gz",
            "/usr/share/man/pt_BR/man1/xzless.1.gz",
            "/usr/share/man/ro/man1/lzmainfo.1.gz",
            "/usr/share/man/ro/man1/xz.1.gz",
            "/usr/share/man/ro/man1/xzless.1.gz",
            "/usr/share/man/sr/man1/lzmainfo.1.gz",
            "/usr/share/man/sr/man1/xz.1.gz",
            "/usr/share/man/sr/man1/xzless.1.gz",
            "/usr/share/man/uk/man1/lzmainfo.1.gz",
            "/usr/share/man/uk/man1/xz.1.gz",
            "/usr/share/man/uk/man1/xzless.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1",
          "Name": "zlib1g",
          "Identifier": {
            "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "ec1c0574f56f96a0"
          },
          "Version": "1.3.dfsg+really1.3.1",
          "Release": "1+b1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "zlib",
          "SrcVersion": "1.3.dfsg+really1.3.1",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Licenses": [
            "Zlib"
          ],
          "Maintainer": "Mark Brown \u003cbroonie@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.41-12+deb13u4"
          ],
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libz.so.1.3.1",
            "/usr/share/doc/zlib1g/changelog.Debian.amd64.gz",
            "/usr/share/doc/zlib1g/changelog.Debian.gz",
            "/usr/share/doc/zlib1g/changelog.gz",
            "/usr/share/doc/zlib1g/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "zlib1g-dev@1:1.3.dfsg+really1.3.1-1+b1",
          "Name": "zlib1g-dev",
          "Identifier": {
            "PURL": "pkg:deb/debian/zlib1g-dev@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "ed8c6cef2a443168"
          },
          "Version": "1.3.dfsg+really1.3.1",
          "Release": "1+b1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "zlib",
          "SrcVersion": "1.3.dfsg+really1.3.1",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Licenses": [
            "Zlib"
          ],
          "Maintainer": "Mark Brown \u003cbroonie@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6-dev@2.41-12+deb13u4",
            "zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
          ],
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "InstalledFiles": [
            "/usr/include/zconf.h",
            "/usr/include/zlib.h",
            "/usr/lib/x86_64-linux-gnu/libz.a",
            "/usr/lib/x86_64-linux-gnu/pkgconfig/zlib.pc",
            "/usr/share/doc/zlib1g-dev/FAQ.gz",
            "/usr/share/doc/zlib1g-dev/README.gz",
            "/usr/share/doc/zlib1g-dev/algorithm.txt.gz",
            "/usr/share/doc/zlib1g-dev/changelog.Debian.amd64.gz",
            "/usr/share/doc/zlib1g-dev/changelog.Debian.gz",
            "/usr/share/doc/zlib1g-dev/changelog.gz",
            "/usr/share/doc/zlib1g-dev/copyright",
            "/usr/share/doc/zlib1g-dev/crc-doc.1.0.pdf.gz",
            "/usr/share/doc/zlib1g-dev/examples/README.examples",
            "/usr/share/doc/zlib1g-dev/examples/enough.c",
            "/usr/share/doc/zlib1g-dev/examples/example.c",
            "/usr/share/doc/zlib1g-dev/examples/fitblk.c",
            "/usr/share/doc/zlib1g-dev/examples/gun.c",
            "/usr/share/doc/zlib1g-dev/examples/gzappend.c",
            "/usr/share/doc/zlib1g-dev/examples/gzjoin.c",
            "/usr/share/doc/zlib1g-dev/examples/gzlog.c",
            "/usr/share/doc/zlib1g-dev/examples/gzlog.h",
            "/usr/share/doc/zlib1g-dev/examples/gznorm.c",
            "/usr/share/doc/zlib1g-dev/examples/infcover.c",
            "/usr/share/doc/zlib1g-dev/examples/minigzip.c",
            "/usr/share/doc/zlib1g-dev/examples/zlib_how.html",
            "/usr/share/doc/zlib1g-dev/examples/zpipe.c",
            "/usr/share/doc/zlib1g-dev/examples/zran.c",
            "/usr/share/doc/zlib1g-dev/examples/zran.h",
            "/usr/share/doc/zlib1g-dev/txtvsbin.txt.gz",
            "/usr/share/man/man3/zlib.3.gz"
          ],
          "AnalyzedBy": "dpkg"
        }
      ],
      "Vulnerabilities": [
        {
          "VulnerabilityID": "CVE-2026-109518",
          "VendorIDs": [
            "DSA-6607-1"
          ],
          "PkgID": "apt@3.0.3",
          "PkgName": "apt",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/apt@3.0.3?arch=amd64\u0026distro=debian-13.7",
            "UID": "18dd1ec95ee04059"
          },
          "InstalledVersion": "3.0.3",
          "FixedVersion": "3.0.4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a993db8b84f249148b793a441b7fa0e3c47de745e8d68083112d42657f5c1947",
          "Title": "apt: apt: Remote code execution via hard link reuse during package download retries",
          "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-62",
            "CWE-367"
          ],
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/11/04/12",
            "https://access.redhat.com/security/cve/CVE-2026-109518",
            "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html",
            "https://lists.debian.org/debian-security-announce/2026/msg00526.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109518",
            "https://ubuntu.com/blog/apt-vulnerability-fixes-available",
            "https://ubuntu.com/security/notices/USN-8996-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-109518"
          ],
          "PublishedDate": "2026-11-04T16:17:33.01Z",
          "LastModifiedDate": "2026-11-05T05:18:19.033Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "bsdutils@1:2.41.5-0+deb13u1",
          "PkgName": "bsdutils",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "a4b47561565a3535"
          },
          "InstalledVersion": "1:2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b8196776b77761874a8b2f3ebeb5ef5595afcb7e992359970d0c8f281d4285ab",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "bsdutils@1:2.41.5-0+deb13u1",
          "PkgName": "bsdutils",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "a4b47561565a3535"
          },
          "InstalledVersion": "1:2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ef2d6fd8e286ae3bcbc47bfd54fe0b55d85062e6b3a58c793b07e9b091f44181",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "bsdutils@1:2.41.5-0+deb13u1",
          "PkgName": "bsdutils",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "a4b47561565a3535"
          },
          "InstalledVersion": "1:2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e8834f6590f6d3012527bb793d2191681eaa41336068a661c57d30612d7846cf",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "bsdutils@1:2.41.5-0+deb13u1",
          "PkgName": "bsdutils",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "a4b47561565a3535"
          },
          "InstalledVersion": "1:2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e0a3561873acd252410cb8ce1c5b956e826a3ffe0929ce0f3b11d6639ff648a0",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2023-39810",
          "PkgID": "busybox-static@1:1.37.0-6+b9",
          "PkgName": "busybox-static",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "InstalledVersion": "1:1.37.0-6+b9",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-39810",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7c52fdf4cb3c81b981558336109bc2d215890fd31bfc89b5032d8e958a8728b5",
          "Title": "busybox: CPIO command of Busybox allows attackers to execute a directory traversal",
          "Description": "An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-22"
          ],
          "VendorSeverity": {
            "azure": 2,
            "cbl-mariner": 3,
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H",
              "V3Score": 7.3
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2025/04/23/1",
            "http://www.openwall.com/lists/oss-security/2025/04/23/2",
            "http://www.openwall.com/lists/oss-security/2025/04/23/3",
            "http://www.openwall.com/lists/oss-security/2025/04/24/2",
            "https://access.redhat.com/security/cve/CVE-2023-39810",
            "https://nvd.nist.gov/vuln/detail/CVE-2023-39810",
            "https://www.cve.org/CVERecord?id=CVE-2023-39810",
            "https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability/"
          ],
          "PublishedDate": "2023-08-28T19:15:07.893Z",
          "LastModifiedDate": "2026-07-09T01:18:36.67Z"
        },
        {
          "VulnerabilityID": "CVE-2026-26157",
          "PkgID": "busybox-static@1:1.37.0-6+b9",
          "PkgName": "busybox-static",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "InstalledVersion": "1:1.37.0-6+b9",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26157",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:281465ef48c72c95c17aa4f75d1ba1284ad1fe94f4a60fbaee8c3daa7e3632fa",
          "Title": "busybox: BusyBox: Arbitrary file overwrite and potential code execution via incomplete path sanitization",
          "Description": "A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-73"
          ],
          "VendorSeverity": {
            "azure": 3,
            "cbl-mariner": 3,
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:13831",
            "https://access.redhat.com/security/cve/CVE-2026-26157",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2439039",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://git.busybox.net/busybox/commit/archival?id=3fb6b31c716669e12f75a2accd31bb7685b1a1cb",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-26157",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26157.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-26157"
          ],
          "PublishedDate": "2026-02-11T21:16:21.4Z",
          "LastModifiedDate": "2026-11-04T23:17:25.93Z"
        },
        {
          "VulnerabilityID": "CVE-2026-26158",
          "PkgID": "busybox-static@1:1.37.0-6+b9",
          "PkgName": "busybox-static",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "InstalledVersion": "1:1.37.0-6+b9",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26158",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:27456860636f08c0c9fca6f91adbca9d51121c2d5ee0e2e8df4c5e95e2451bea",
          "Title": "busybox: BusyBox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries",
          "Description": "A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive containing unvalidated hardlink or symlink entries. If the tar archive is extracted with elevated privileges, this flaw can lead to privilege escalation, enabling an attacker to gain unauthorized access to critical system files.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-73"
          ],
          "VendorSeverity": {
            "azure": 3,
            "cbl-mariner": 3,
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:13831",
            "https://access.redhat.com/security/cve/CVE-2026-26158",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2439040",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://git.busybox.net/busybox/commit/archival?id=3fb6b31c716669e12f75a2accd31bb7685b1a1cb",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-26158",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26158.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-26158"
          ],
          "PublishedDate": "2026-02-11T21:16:21.607Z",
          "LastModifiedDate": "2026-11-04T23:17:26.2Z"
        },
        {
          "VulnerabilityID": "CVE-2026-29004",
          "PkgID": "busybox-static@1:1.37.0-6+b9",
          "PkgName": "busybox-static",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "InstalledVersion": "1:1.37.0-6+b9",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-29004",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6c3f0f8588c44edf47a30a8d0684cc08b32a2234c8338a06e9559e035fc76218",
          "Title": "BusyBox: BusyBox: Arbitrary Code Execution via DHCPv6 Client Heap Buffer Overflow",
          "Description": "BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122",
            "CWE-131"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:30652",
            "https://access.redhat.com/security/cve/CVE-2026-29004",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2466526",
            "https://busybox.net/",
            "https://github.com/vda-linux/busybox_mirror/commit/42202bfb1e6ac51fa995beda8be4d7b654aeee2a",
            "https://github.com/vda-linux/busybox_mirror/commit/d368f3f7836d1c2484c8f839316e5c93e76d4409",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-29004",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29004.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-29004",
            "https://www.vulncheck.com/advisories/busybox-dhcpv6-client-heap-buffer-overflow-via-dns-servers",
            "https://y637f9qq2x.com/posts/busybox-dhcpv6-heap-overflow/"
          ],
          "PublishedDate": "2026-05-04T18:16:26.523Z",
          "LastModifiedDate": "2026-10-26T19:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2026-38754",
          "PkgID": "busybox-static@1:1.37.0-6+b9",
          "PkgName": "busybox-static",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "InstalledVersion": "1:1.37.0-6+b9",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-38754",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7292fb0bc94aea96fbe6efa684d26a2a4c5848234be107136c9a758c3836602a",
          "Title": "busybox: Busybox: Denial of Service via heap overflow in ifsbreakup() function",
          "Description": "A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125",
            "CWE-122"
          ],
          "VendorSeverity": {
            "azure": 3,
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-38754",
            "https://busybox.net",
            "https://lists.busybox.net/pipermail/busybox/2026-June/092353.html",
            "https://lists.busybox.net/pipermail/busybox/2026-June/092360.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-38754",
            "https://www.cve.org/CVERecord?id=CVE-2026-38754"
          ],
          "PublishedDate": "2026-07-15T22:16:47.233Z",
          "LastModifiedDate": "2026-07-22T15:16:54.52Z"
        },
        {
          "VulnerabilityID": "CVE-2026-88830",
          "PkgID": "busybox-static@1:1.37.0-6+b9",
          "PkgName": "busybox-static",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "InstalledVersion": "1:1.37.0-6+b9",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88830",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:93d3a47afae592dec9725d87b56aa93eff8f93656fe53c3542ce6896dac1fabc",
          "Title": "busybox: busybox: TLS Montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow",
          "Description": "A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-131"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-88830",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2531344",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-88830",
            "https://www.cve.org/CVERecord?id=CVE-2026-88830"
          ],
          "PublishedDate": "2026-09-23T17:17:18.427Z",
          "LastModifiedDate": "2026-09-23T20:17:20.75Z"
        },
        {
          "VulnerabilityID": "CVE-2026-88832",
          "PkgID": "busybox-static@1:1.37.0-6+b9",
          "PkgName": "busybox-static",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "InstalledVersion": "1:1.37.0-6+b9",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88832",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6def649267af82cf01c15521613e740f1281ddeeb85c235c5e9965630466f682",
          "Title": "busybox: busybox: romfs volume ID parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow",
          "Description": "BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.3
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:72111",
            "https://access.redhat.com/security/cve/CVE-2026-88832",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2531345",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-88832",
            "https://www.cve.org/CVERecord?id=CVE-2026-88832"
          ],
          "PublishedDate": "2026-09-23T17:17:18.573Z",
          "LastModifiedDate": "2026-09-25T23:16:54.57Z"
        },
        {
          "VulnerabilityID": "CVE-2026-90954",
          "PkgID": "busybox-static@1:1.37.0-6+b9",
          "PkgName": "busybox-static",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/busybox-static@1.37.0-6%2Bb9?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "8ad9a89b0f9e8014"
          },
          "InstalledVersion": "1:1.37.0-6+b9",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90954",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f4d9de51234ae8f3cb37690078ca3f3dcba8749b705252c29c0ef580dc3847a5",
          "Title": "busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush",
          "Description": "A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers which flush once after the last member. A specially crafted .deb archive with two data.tar members can exploit this ordering: the first member declares a symlink pointing to an absolute path (e.g., '/'), which is deferred as unsafe but flushed after the first member. The second member declares a regular file whose path traverses the now-live symlink, resulting in a file being written outside the intended extraction directory. This could allow an attacker to write arbitrary files to arbitrary locations when a user extracts a crafted .deb package.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-90954",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2533007",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-90954",
            "https://www.cve.org/CVERecord?id=CVE-2026-90954"
          ],
          "PublishedDate": "2026-10-14T10:17:57.297Z",
          "LastModifiedDate": "2026-10-19T20:21:10.97Z"
        },
        {
          "VulnerabilityID": "CVE-2026-12064",
          "PkgID": "curl@8.14.1-2+deb13u7",
          "PkgName": "curl",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/curl@8.14.1-2%2Bdeb13u7?arch=amd64\u0026distro=debian-13.7",
            "UID": "8878109a15b2afb0"
          },
          "InstalledVersion": "8.14.1-2+deb13u7",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12064",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:43a7d5cb56713c6fe0f058ac74bee76889f2f6ac8017ec05417f2f53c1ca434c",
          "Title": "curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP",
          "Description": "When a user invokes curl using a schemeless URL combined with\n`--proto-default` sftp (or scp), a disconnect occurs between the tool layer\nand libcurl. The tool layer incorrectly infers the URL scheme, which\nerroneously bypasses the initialization of critical SSH security options like\nCURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 and CURLOPT_SSH_KNOWNHOSTS. Conversely, the\nlibcurl runtime successfully honors CURLOPT_DEFAULT_PROTOCOL and establishes\nthe connection via SFTP/SCP as specified. Because the tool layer skipped the\nsecurity configuration, these SSH host verification options are silently\nomitted, causing curl to connect to an unverified SSH remote host without\nthrowing an error.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-297",
            "CWE-295"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "azure": 3,
            "julia": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-12064",
            "https://curl.se/L7HzKXisfJ/CVE-2026-12064.md",
            "https://curl.se/docs/CVE-2026-12064.html",
            "https://curl.se/docs/CVE-2026-12064.json",
            "https://github.com/advisories/GHSA-jm94-9f7h-36pr",
            "https://hackerone.com/reports/3797526",
            "https://linux.oracle.com/cve/CVE-2026-12064.html",
            "https://linux.oracle.com/errata/ELSA-2026-55450.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-12064",
            "https://ubuntu.com/security/notices/USN-8525-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-12064"
          ],
          "PublishedDate": "2026-07-03T07:16:24.217Z",
          "LastModifiedDate": "2026-09-15T07:16:26.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-8458",
          "PkgID": "curl@8.14.1-2+deb13u7",
          "PkgName": "curl",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/curl@8.14.1-2%2Bdeb13u7?arch=amd64\u0026distro=debian-13.7",
            "UID": "8878109a15b2afb0"
          },
          "InstalledVersion": "8.14.1-2+deb13u7",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8458",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7546dce1b11a60ca5843f888667522ec8d490654c69202f02f4c661b5cc1e7fd",
          "Title": "curl: libcurl: Unauthorized connection reuse due to a logical error",
          "Description": "libcurl might in some circumstances reuse the wrong connection when asked to\ndo Negotiate-authenticated ones, even when they are set to use different\n\"services\".\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different services.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-488"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "azure": 2,
            "julia": 2,
            "oracle-oval": 3,
            "photon": 2,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
              "V3Score": 6.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:69126",
            "https://access.redhat.com/security/cve/CVE-2026-8458",
            "https://bugzilla.redhat.com/2496764",
            "https://bugzilla.redhat.com/2496769",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2496764",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2496769",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://curl.se/L7HzKXisfJ/CVE-2026-8458.md",
            "https://curl.se/docs/CVE-2026-8458.html",
            "https://curl.se/docs/CVE-2026-8458.json",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8458",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8927",
            "https://errata.almalinux.org/9/ALSA-2026-69126.html",
            "https://errata.rockylinux.org/RLSA-2026:69126",
            "https://github.com/advisories/GHSA-88c6-6jfq-mm4q",
            "https://hackerone.com/reports/3721183",
            "https://linux.oracle.com/cve/CVE-2026-8458.html",
            "https://linux.oracle.com/errata/ELSA-2026-92368.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-8458",
            "https://ubuntu.com/security/notices/USN-8487-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-8458"
          ],
          "PublishedDate": "2026-07-03T07:16:24.63Z",
          "LastModifiedDate": "2026-09-15T07:16:32.327Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106565",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106565",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5313247d3d38565808f3421631ec83307e1c625f7367cc7da0de11856d87fbca",
          "Title": "ImageMagick: ImageMagick: Denial of Service via missing end-of-file check in bzip2 images",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-835"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106565",
            "https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h",
            "https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106565",
            "https://www.cve.org/CVERecord?id=CVE-2026-106565"
          ],
          "PublishedDate": "2026-10-07T16:17:40.627Z",
          "LastModifiedDate": "2026-10-22T18:06:17.54Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106567",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106567",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0e0a46672df090b7a9472a2552f0b71ece68b93ff2b4618b92b9961bae3b922e",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted PSD file",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-196",
            "CWE-835"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106567",
            "https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j",
            "https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106567",
            "https://www.cve.org/CVERecord?id=CVE-2026-106567"
          ],
          "PublishedDate": "2026-10-07T16:17:40.973Z",
          "LastModifiedDate": "2026-10-22T17:59:16.593Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106573",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106573",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:40232045cc11bac8ca3279cda7a5ea8659c980a75d4071776ca7e2a0aa2b660b",
          "Title": "ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-770"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106573",
            "https://github.com/ImageMagick/ImageMagick/commit/c311471c4e4978494834c707b417bc033d95cc48",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62",
            "https://github.com/ImageMagick/ImageMagick6/commit/49560a1641f72a127e413b9861eca0997fde2b96",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106573",
            "https://www.cve.org/CVERecord?id=CVE-2026-106573"
          ],
          "PublishedDate": "2026-10-07T16:17:43.263Z",
          "LastModifiedDate": "2026-10-21T18:24:55.71Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106576",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106576",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:21eef904cb8bf0b2ff031c1667a85c21f0a349cd6dd3731a75dc6a6d78da7e31",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted XMP profile",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fixed in version 7.1.2-31.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-834"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106576",
            "https://github.com/ImageMagick/ImageMagick/commit/f491576297141ff685dc4460d811986f5b6b6cec",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106576",
            "https://www.cve.org/CVERecord?id=CVE-2026-106576"
          ],
          "PublishedDate": "2026-10-07T16:17:43.833Z",
          "LastModifiedDate": "2026-10-21T16:04:22.387Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106578",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106578",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c8ef6fded8c7584d174e78b170dc90af925258868f77d70e5193e9b3bdb83f53",
          "Title": "ImageMagick: ImageMagick: Denial of Service via invalid memory free in MVG decoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-590"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106578",
            "https://github.com/ImageMagick/ImageMagick/commit/5d29c094020612dc8fb471b10fc1d1cc6e9e4378",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39",
            "https://github.com/ImageMagick/ImageMagick6/commit/bfe0117fd9742b3970383e000978d64e5e04372d",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106578",
            "https://www.cve.org/CVERecord?id=CVE-2026-106578"
          ],
          "PublishedDate": "2026-10-07T16:17:44.217Z",
          "LastModifiedDate": "2026-10-21T15:59:27.767Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106579",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106579",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0b08ce599527c46c404ef9b954265b6c825a5b1e08b495baf10d121a4bbc3cee",
          "Title": "ImageMagick: ImageMagick: Information disclosure via security policy bypass",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-551"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 6.2
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106579",
            "https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac",
            "https://github.com/ImageMagick/ImageMagick/commit/dcdbbf4278fab20a32a4ad80e64cb95c368ca8dd",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5",
            "https://github.com/ImageMagick/ImageMagick6/commit/ac85c8e0a319b1eaf4c3d05d326605f5bae723d6",
            "https://github.com/ImageMagick/ImageMagick6/commit/c54667bfe605ebdc17c23cb70a26dbe00b338222",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106579",
            "https://www.cve.org/CVERecord?id=CVE-2026-106579"
          ],
          "PublishedDate": "2026-10-07T16:17:44.38Z",
          "LastModifiedDate": "2026-10-21T15:58:51.333Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106580",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106580",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b4ba0b4bf084e53c1eeaae3bb6c337755f889de3dd62f21b960adc0469aabfe4",
          "Title": "ImageMagick: ImageMagick: Information disclosure via missing security policy check in CUT encoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-284",
            "CWE-400"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
              "V3Score": 8.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
              "V3Score": 4
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106580",
            "https://github.com/ImageMagick/ImageMagick/commit/768bdd0dbb9a9ad743b6a6e557126b788b325970",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c",
            "https://github.com/ImageMagick/ImageMagick6/commit/ad178e41fce2afa6be2b91fb4e7f41c4c5448117",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106580",
            "https://www.cve.org/CVERecord?id=CVE-2026-106580"
          ],
          "PublishedDate": "2026-10-07T16:17:44.56Z",
          "LastModifiedDate": "2026-10-21T15:51:35.81Z"
        },
        {
          "VulnerabilityID": "CVE-2026-107209",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-107209",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6e9bef58f3151948c30fc321e31c5e7f7cbf6893ba7024ab88ea5bc5dbdf814e",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted RSVG image",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice and then use freed memory, crashing the process. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-415",
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-107209",
            "https://github.com/ImageMagick/ImageMagick/commit/326451aae51ac2dabc99fe66e063de6ec14cf8c8",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-30",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x",
            "https://github.com/ImageMagick/ImageMagick6/commit/04a4c5b89c034cf2c93bb0a10044332d941b4fa5",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-55",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-107209",
            "https://www.cve.org/CVERecord?id=CVE-2026-107209"
          ],
          "PublishedDate": "2026-10-07T16:17:45.94Z",
          "LastModifiedDate": "2026-10-21T15:41:22.87Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109258",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109258",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:161c951635d79653162487c4fda685d77286e7e68a904ead74c6b3f533849c39",
          "Title": "ImageMagick: ImageMagick: Denial of Service via invalid memory free in fx operation",
          "Description": "ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-476"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 2.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109258",
            "https://github.com/ImageMagick/ImageMagick/commit/8caa6a0c62a3ac1f81b19a2ee929fbfe46ee0323",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109258",
            "https://www.cve.org/CVERecord?id=CVE-2026-109258",
            "https://www.vulncheck.com/advisories/imagemagick-7.1.0-20-before-7.1.2-32-invalid-memory-free-in-fx-operation"
          ],
          "PublishedDate": "2026-10-12T17:17:17.427Z",
          "LastModifiedDate": "2026-11-03T16:36:35.56Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109260",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109260",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0062ec6c95f31a8729f56f0cd04ce114f24e4616e721bcd6d1db6608eb375a64",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in PNG encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109260",
            "https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3",
            "https://github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109260",
            "https://www.cve.org/CVERecord?id=CVE-2026-109260",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-png-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:17.73Z",
          "LastModifiedDate": "2026-11-03T16:26:42.293Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109261",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109261",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a005de92f052f26f47663b25e25bc5e27aada36cce9124a7c2e2d2b84dd37f62",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in GIF encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109261",
            "https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4",
            "https://github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31b",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109261",
            "https://www.cve.org/CVERecord?id=CVE-2026-109261",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-gif-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:17.883Z",
          "LastModifiedDate": "2026-11-03T16:14:37.893Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109262",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109262",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f93a65b073fa260fa479fd609e658603cf6481b0fdb2f5f17b54bf66ab823db2",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in SVG encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109262",
            "https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp",
            "https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1df",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109262",
            "https://www.cve.org/CVERecord?id=CVE-2026-109262",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-svg-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:18.033Z",
          "LastModifiedDate": "2026-11-03T17:36:31.613Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109263",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109263",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6fa4ea1f54708fbc88513ea0fa9426e7a184f4a619691187e26f8ec0eb8f93ea",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in YUV encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109263",
            "https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4",
            "https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109263",
            "https://www.cve.org/CVERecord?id=CVE-2026-109263",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-yuv-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:18.183Z",
          "LastModifiedDate": "2026-11-03T17:29:54.723Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109268",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109268",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f32b10673bdd9e766f60f87c95a3c3cec547dad8485fc08d11f511b43e089c4a",
          "Title": "ImageMagick: ImageMagick: Denial of Service via use-after-free in PDF writer",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109268",
            "https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv",
            "https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109268",
            "https://www.cve.org/CVERecord?id=CVE-2026-109268",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-use-after-free-in-pdf-writer-via-jpeg2000"
          ],
          "PublishedDate": "2026-10-12T17:17:18.93Z",
          "LastModifiedDate": "2026-11-03T17:07:24.04Z"
        },
        {
          "VulnerabilityID": "CVE-2026-116149",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-116149",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:81bd05dcb3cfa7fefdb894251539868cf4a14e982247cb76599e498b44dcbdc3",
          "Title": "ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images",
          "Description": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-116149",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-116149",
            "https://www.cve.org/CVERecord?id=CVE-2026-116149",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-58-and-7-x-before-7.1.2-33-stack-buffer-overflow-via-bzip2-compressed-images"
          ],
          "PublishedDate": "2026-10-25T14:16:53.123Z",
          "LastModifiedDate": "2026-11-03T18:27:24.23Z"
        },
        {
          "VulnerabilityID": "CVE-2026-119123",
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119123",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:88dca183178a769304eec3617d245a3ffef398529eb42c2f946c695bb629435d",
          "Title": "ImageMagick: ImageMagick: Denial of Service via stack overflow in TIFF decoder",
          "Description": "ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-674"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-119123",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5j8-ff59-wp88",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-119123",
            "https://www.cve.org/CVERecord?id=CVE-2026-119123",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-34-stack-overflow-in-tiff-decoder"
          ],
          "PublishedDate": "2026-10-29T16:18:04.847Z",
          "LastModifiedDate": "2026-11-04T02:17:16.817Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86420",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86420",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5ba5ec3f4d5d4fc78b9af8dd05e677ac7dc777cc59d0fd6b5f26a9698d31c914",
          "Title": "ImageMagick: ImageMagick: Denial of Service due to memory budget exhaustion",
          "Description": "ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "nvd": 3,
            "photon": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86420",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86420",
            "https://www.cve.org/CVERecord?id=CVE-2026-86420",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-denial-of-service-memory-budget"
          ],
          "PublishedDate": "2026-09-07T13:20:40.827Z",
          "LastModifiedDate": "2026-10-29T21:17:34.883Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86421",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86421",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6448188b5a1c820e364c9dffc838cfb52f3c7992ea100a24851023c2cb1859e2",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in MSL decoder",
          "Description": "ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "nvd": 3,
            "photon": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86421",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86421",
            "https://www.cve.org/CVERecord?id=CVE-2026-86421",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-memory-leak-via-msl-decoder"
          ],
          "PublishedDate": "2026-09-07T13:20:40.963Z",
          "LastModifiedDate": "2026-10-29T21:17:35.023Z"
        },
        {
          "VulnerabilityID": "CVE-2026-93589",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93589",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:173a5bae7d76913b854be4752bd168b399c2e0652f7257a3d7417b7bd46c9b8f",
          "Title": "ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder",
          "Description": "ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-by-zero and crashes the encoder, resulting in a denial of service. The issue is fixed in 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-369"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-93589",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-93589",
            "https://ubuntu.com/security/notices/USN-8859-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-93589",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-division-by-zero-in-flif-encoder"
          ],
          "PublishedDate": "2026-09-18T14:19:09.76Z",
          "LastModifiedDate": "2026-10-29T21:17:36.71Z"
        },
        {
          "VulnerabilityID": "CVE-2026-93590",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "imagemagick-7-common@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "imagemagick-7-common",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/imagemagick-7-common@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=all\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "24dd62145b9a460a"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93590",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d5447dc639ab34a4322149fb9566e46cae6eb0198a2d9b93ef240db47d3741a7",
          "Title": "ImageMagick: ImageMagick: Denial of Service via UHDR encoder policy bypass",
          "Description": "ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-93590",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-93590",
            "https://ubuntu.com/security/notices/USN-8859-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-93590",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-policy-bypass-in-uhdr-encoder"
          ],
          "PublishedDate": "2026-09-18T14:19:09.943Z",
          "LastModifiedDate": "2026-10-16T20:31:00.683Z"
        },
        {
          "VulnerabilityID": "CVE-2026-54369",
          "PkgID": "libacl1@2.3.2-2+b1",
          "PkgName": "libacl1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libacl1@2.3.2-2%2Bb1?arch=amd64\u0026distro=debian-13.7",
            "UID": "cc40ccea052c10a8"
          },
          "InstalledVersion": "2.3.2-2+b1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54369",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:75304baa423a41c02784a0984cc87410f4d66e893677f793096032c54e350155",
          "Title": "acl: Symlink traversal privilege escalation via libacl functions",
          "Description": "acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:34351",
            "https://access.redhat.com/errata/RHSA-2026:42736",
            "https://access.redhat.com/errata/RHSA-2026:42739",
            "https://access.redhat.com/errata/RHSA-2026:43420",
            "https://access.redhat.com/errata/RHSA-2026:44481",
            "https://access.redhat.com/errata/RHSA-2026:46836",
            "https://access.redhat.com/errata/RHSA-2026:50205",
            "https://access.redhat.com/errata/RHSA-2026:53371",
            "https://access.redhat.com/errata/RHSA-2026:54769",
            "https://access.redhat.com/errata/RHSA-2026:58981",
            "https://access.redhat.com/errata/RHSA-2026:64805",
            "https://access.redhat.com/errata/RHSA-2026:67140",
            "https://access.redhat.com/errata/RHSA-2026:67142",
            "https://access.redhat.com/errata/RHSA-2026:67144",
            "https://access.redhat.com/security/cve/CVE-2026-54369",
            "https://bugzilla.redhat.com/2490277",
            "https://bugzilla.redhat.com/2490279",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2490279",
            "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
            "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370",
            "https://errata.almalinux.org/9/ALSA-2026-42736.html",
            "https://errata.rockylinux.org/RLSA-2026:42736",
            "https://linux.oracle.com/cve/CVE-2026-54369.html",
            "https://linux.oracle.com/errata/ELSA-2026-43420.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-54369",
            "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions"
          ],
          "PublishedDate": "2026-06-29T14:16:57.487Z",
          "LastModifiedDate": "2026-10-25T21:10:00.77Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109518",
          "VendorIDs": [
            "DSA-6607-1"
          ],
          "PkgID": "libapt-pkg7.0@3.0.3",
          "PkgName": "libapt-pkg7.0",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libapt-pkg7.0@3.0.3?arch=amd64\u0026distro=debian-13.7",
            "UID": "158032a20d7e3dfd"
          },
          "InstalledVersion": "3.0.3",
          "FixedVersion": "3.0.4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b05145200a6e0ba45182a0139bde09bff838f1ea9de9b44546bd638ba2bbb224",
          "Title": "apt: apt: Remote code execution via hard link reuse during package download retries",
          "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-62",
            "CWE-367"
          ],
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/11/04/12",
            "https://access.redhat.com/security/cve/CVE-2026-109518",
            "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html",
            "https://lists.debian.org/debian-security-announce/2026/msg00526.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109518",
            "https://ubuntu.com/blog/apt-vulnerability-fixes-available",
            "https://ubuntu.com/security/notices/USN-8996-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-109518"
          ],
          "PublishedDate": "2026-11-04T16:17:33.01Z",
          "LastModifiedDate": "2026-11-05T05:18:19.033Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "libblkid-dev@2.41.5-0+deb13u1",
          "PkgName": "libblkid-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1a3007c8f0bb9de0"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:8a88801711a69b4dbe5173e2bd77fc30544179efcdd033ceb0fe7a849850d68d",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "libblkid-dev@2.41.5-0+deb13u1",
          "PkgName": "libblkid-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1a3007c8f0bb9de0"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ad782517c4c6d842ae5e72ba84de4a72feb19343a9cb95fa7a59532b4e99eaf4",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "libblkid-dev@2.41.5-0+deb13u1",
          "PkgName": "libblkid-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1a3007c8f0bb9de0"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:205a9f6db14be9a5c64d57ff743926315fe782523ce34412107449242d5928d4",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libblkid-dev@2.41.5-0+deb13u1",
          "PkgName": "libblkid-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1a3007c8f0bb9de0"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:69982ebaca4c5e205dc1487de46809250e3ba233b5c7892d5f21d7bde323703e",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "libblkid1@2.41.5-0+deb13u1",
          "PkgName": "libblkid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e20c3ed37f6020d7"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:2d31ff83e4ed83329cef5bf2230f73107c204938c1778f29a8342d5dc4a54d7d",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "libblkid1@2.41.5-0+deb13u1",
          "PkgName": "libblkid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e20c3ed37f6020d7"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:915e806b89865a45addfd7159310102749e604aa76bc850845cbc603f10c65b7",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "libblkid1@2.41.5-0+deb13u1",
          "PkgName": "libblkid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e20c3ed37f6020d7"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:22320161175c748896058d6f802b0578f6db521064362071cba654c10729239a",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libblkid1@2.41.5-0+deb13u1",
          "PkgName": "libblkid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e20c3ed37f6020d7"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:46ccfd98396097fe2e9105a7a69144550e29bd01e8ce2f4e24f3b3ec60065100",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-111497",
          "VendorIDs": [
            "DSA-6582-1"
          ],
          "PkgID": "libbrotli1@1.1.0-2+b7",
          "PkgName": "libbrotli1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libbrotli1@1.1.0-2%2Bb7?arch=amd64\u0026distro=debian-13.7",
            "UID": "a4f4e37cbdd6d674"
          },
          "InstalledVersion": "1.1.0-2+b7",
          "FixedVersion": "1.1.0-2+deb13u1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111497",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e02d59e57c5aa404d231ab283148dbc5ea01bb3fa87e6612ff24f10dcc80c6e6",
          "Title": "brotli: Out-of-Bounds Write in Google Brotli Decoder",
          "Description": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-252",
            "CWE-787"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 4,
            "bitnami": 4,
            "ghsa": 4,
            "nvd": 4,
            "oracle-oval": 3,
            "photon": 4,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 9.2
            },
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V3Score": 9.8,
              "V40Score": 9.2
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 9.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/10/23/25",
            "http://www.openwall.com/lists/oss-security/2026/10/24/6",
            "http://www.openwall.com/lists/oss-security/2026/10/26/12",
            "http://www.openwall.com/lists/oss-security/2026/10/26/13",
            "http://www.openwall.com/lists/oss-security/2026/10/26/16",
            "http://www.openwall.com/lists/oss-security/2026/11/03/2",
            "https://access.redhat.com/errata/RHSA-2026:90495",
            "https://access.redhat.com/errata/RHSA-2026:92492",
            "https://access.redhat.com/security/cve/CVE-2026-111497",
            "https://advisory.echohq.com/cve/CVE-2026-111497",
            "https://broccoli2shell.com",
            "https://bugzilla.redhat.com/2558973",
            "https://bugzilla.redhat.com/2562054",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2558973",
            "https://cert-portal.siemens.com/productcert/html/ssa-045512.html",
            "https://cert-portal.siemens.com/productcert/html/ssa-443410.html",
            "https://cert-portal.siemens.com/productcert/html/ssa-898633.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497",
            "https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates",
            "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds",
            "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/",
            "https://errata.almalinux.org/9/ALSA-2026-92492.html",
            "https://errata.rockylinux.org/RLSA-2026:90495",
            "https://github.com/advisories/GHSA-9v8h-qqgm-4m35",
            "https://github.com/andybalholm/brotli/releases/tag/v1.2.7",
            "https://github.com/dotnet/announcements/issues/494",
            "https://github.com/google/brotli",
            "https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b",
            "https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0",
            "https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6",
            "https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12",
            "https://github.com/google/brotli/releases/tag/v1.0.10",
            "https://github.com/google/brotli/releases/tag/v1.1.1",
            "https://github.com/google/brotli/releases/tag/v1.2.1",
            "https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml",
            "https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml",
            "https://linux.oracle.com/cve/CVE-2026-111497.html",
            "https://linux.oracle.com/errata/ELSA-2026-92492.html",
            "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html",
            "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148",
            "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases",
            "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-111497",
            "https://opensourcemalware.com/blog/node2shell-affects-python",
            "https://patchtheplanet.org/brotli",
            "https://pypi.org/project/Brotli",
            "https://pypi.org/project/brotlicffi",
            "https://ubuntu.com/security/notices/USN-8956-1",
            "https://ubuntu.com/security/notices/USN-8956-2",
            "https://ubuntu.com/security/notices/USN-8958-1",
            "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497",
            "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497",
            "https://www.cve.org/CVERecord?id=CVE-2026-111497"
          ],
          "PublishedDate": "2026-10-22T14:17:37.19Z",
          "LastModifiedDate": "2026-11-06T16:17:37.393Z"
        },
        {
          "VulnerabilityID": "CVE-2026-12064",
          "PkgID": "libcurl4t64@8.14.1-2+deb13u7",
          "PkgName": "libcurl4t64",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libcurl4t64@8.14.1-2%2Bdeb13u7?arch=amd64\u0026distro=debian-13.7",
            "UID": "d222e2259fcdcdf0"
          },
          "InstalledVersion": "8.14.1-2+deb13u7",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12064",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f7e466fe8af5e4d68864d4f7bc3ade338311161995da9eb9cb5acbb4af389ec4",
          "Title": "curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP",
          "Description": "When a user invokes curl using a schemeless URL combined with\n`--proto-default` sftp (or scp), a disconnect occurs between the tool layer\nand libcurl. The tool layer incorrectly infers the URL scheme, which\nerroneously bypasses the initialization of critical SSH security options like\nCURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 and CURLOPT_SSH_KNOWNHOSTS. Conversely, the\nlibcurl runtime successfully honors CURLOPT_DEFAULT_PROTOCOL and establishes\nthe connection via SFTP/SCP as specified. Because the tool layer skipped the\nsecurity configuration, these SSH host verification options are silently\nomitted, causing curl to connect to an unverified SSH remote host without\nthrowing an error.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-297",
            "CWE-295"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "azure": 3,
            "julia": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-12064",
            "https://curl.se/L7HzKXisfJ/CVE-2026-12064.md",
            "https://curl.se/docs/CVE-2026-12064.html",
            "https://curl.se/docs/CVE-2026-12064.json",
            "https://github.com/advisories/GHSA-jm94-9f7h-36pr",
            "https://hackerone.com/reports/3797526",
            "https://linux.oracle.com/cve/CVE-2026-12064.html",
            "https://linux.oracle.com/errata/ELSA-2026-55450.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-12064",
            "https://ubuntu.com/security/notices/USN-8525-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-12064"
          ],
          "PublishedDate": "2026-07-03T07:16:24.217Z",
          "LastModifiedDate": "2026-09-15T07:16:26.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-8458",
          "PkgID": "libcurl4t64@8.14.1-2+deb13u7",
          "PkgName": "libcurl4t64",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libcurl4t64@8.14.1-2%2Bdeb13u7?arch=amd64\u0026distro=debian-13.7",
            "UID": "d222e2259fcdcdf0"
          },
          "InstalledVersion": "8.14.1-2+deb13u7",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8458",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1c6b4769ed658a2ecb6d71441c37afdaafffe3571c950caa704ebf46136fb1e9",
          "Title": "curl: libcurl: Unauthorized connection reuse due to a logical error",
          "Description": "libcurl might in some circumstances reuse the wrong connection when asked to\ndo Negotiate-authenticated ones, even when they are set to use different\n\"services\".\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different services.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-488"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "azure": 2,
            "julia": 2,
            "oracle-oval": 3,
            "photon": 2,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
              "V3Score": 6.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:69126",
            "https://access.redhat.com/security/cve/CVE-2026-8458",
            "https://bugzilla.redhat.com/2496764",
            "https://bugzilla.redhat.com/2496769",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2496764",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2496769",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://curl.se/L7HzKXisfJ/CVE-2026-8458.md",
            "https://curl.se/docs/CVE-2026-8458.html",
            "https://curl.se/docs/CVE-2026-8458.json",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8458",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8927",
            "https://errata.almalinux.org/9/ALSA-2026-69126.html",
            "https://errata.rockylinux.org/RLSA-2026:69126",
            "https://github.com/advisories/GHSA-88c6-6jfq-mm4q",
            "https://hackerone.com/reports/3721183",
            "https://linux.oracle.com/cve/CVE-2026-8458.html",
            "https://linux.oracle.com/errata/ELSA-2026-92368.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-8458",
            "https://ubuntu.com/security/notices/USN-8487-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-8458"
          ],
          "PublishedDate": "2026-07-03T07:16:24.63Z",
          "LastModifiedDate": "2026-09-15T07:16:32.327Z"
        },
        {
          "VulnerabilityID": "CVE-2026-113351",
          "PkgID": "libexpat1@2.9.0-1~deb13u1",
          "PkgName": "libexpat1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1b1647a103482843"
          },
          "InstalledVersion": "2.9.0-1~deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113351",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0624cdd5bee4810a3977822f4a27ed5bb82f82c2308a796db0443e915ed2e874",
          "Title": "expat: expat: Denial of Service via improper memory tracking in XML_ParserReset",
          "Description": "libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-909"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-113351",
            "https://github.com/libexpat/libexpat",
            "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560",
            "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884",
            "https://github.com/libexpat/libexpat/pull/1431",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-113351",
            "https://www.cve.org/CVERecord?id=CVE-2026-113351",
            "https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset"
          ],
          "PublishedDate": "2026-10-20T11:17:19.363Z",
          "LastModifiedDate": "2026-11-03T21:26:47.25Z"
        },
        {
          "VulnerabilityID": "CVE-2026-115506",
          "PkgID": "libexpat1@2.9.0-1~deb13u1",
          "PkgName": "libexpat1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1b1647a103482843"
          },
          "InstalledVersion": "2.9.0-1~deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115506",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6cdf1cb9e7b554dfe95942bb671df5015b15c574f9e328497343ce5c1e7291a0",
          "Title": "expat: expat: Denial of Service via delayed entity amplification detection",
          "Description": "libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-776"
          ],
          "VendorSeverity": {
            "photon": 3,
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-115506",
            "https://github.com/hannob/lololol",
            "https://github.com/libexpat/libexpat",
            "https://github.com/libexpat/libexpat/issues/1160",
            "https://github.com/libexpat/libexpat/pull/1433",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-115506",
            "https://www.cve.org/CVERecord?id=CVE-2026-115506",
            "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay"
          ],
          "PublishedDate": "2026-10-22T20:17:06.62Z",
          "LastModifiedDate": "2026-11-02T18:27:06.127Z"
        },
        {
          "VulnerabilityID": "CVE-2026-117610",
          "PkgID": "libexpat1@2.9.0-1~deb13u1",
          "PkgName": "libexpat1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1b1647a103482843"
          },
          "InstalledVersion": "2.9.0-1~deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-117610",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d3fd1667c8029086b33379992e937dd2223fbcf11fbbcae69a339b473f8e0666",
          "Title": "expat: expat: Denial of Service via NULL pointer dereference in external entity parsing",
          "Description": "libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-476"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-117610",
            "https://github.com/libexpat/libexpat",
            "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510",
            "https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d",
            "https://github.com/libexpat/libexpat/pull/1444",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-117610",
            "https://www.cve.org/CVERecord?id=CVE-2026-117610",
            "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser"
          ],
          "PublishedDate": "2026-10-28T03:17:12.777Z",
          "LastModifiedDate": "2026-11-05T16:17:35.787Z"
        },
        {
          "VulnerabilityID": "CVE-2026-118370",
          "PkgID": "libexpat1@2.9.0-1~deb13u1",
          "PkgName": "libexpat1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "1b1647a103482843"
          },
          "InstalledVersion": "2.9.0-1~deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-118370",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:241a1f1431d6b16aa61c58205e9e2b464f4d047bf14d33a8a13464925333a458",
          "Title": "expat: expat: Denial of Service via integer overflow during XML attribute parsing",
          "Description": "libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and nPrefixes, crashing applications or corrupting heap memory.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
              "V3Score": 8.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-118370",
            "https://github.com/libexpat/libexpat",
            "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140",
            "https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae",
            "https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c",
            "https://github.com/libexpat/libexpat/pull/1450",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-118370",
            "https://www.cve.org/CVERecord?id=CVE-2026-118370",
            "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes"
          ],
          "PublishedDate": "2026-10-28T03:17:13.293Z",
          "LastModifiedDate": "2026-11-02T20:17:37.377Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "liblastlog2-2@2.41.5-0+deb13u1",
          "PkgName": "liblastlog2-2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "481f2fda004b182b"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3940f0b64914e32c574a4dc4627070a139efc076dd8c32ed26a6dd707b946354",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "liblastlog2-2@2.41.5-0+deb13u1",
          "PkgName": "liblastlog2-2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "481f2fda004b182b"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:678eafbcf097241a04ba653c22e64b00a74d402f122530aa7ab85762dc06a7a2",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "liblastlog2-2@2.41.5-0+deb13u1",
          "PkgName": "liblastlog2-2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "481f2fda004b182b"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:69286108c9e89fdc505fb0b95177e44f1588bf5919cf548958b97b3e3ee0f597",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "liblastlog2-2@2.41.5-0+deb13u1",
          "PkgName": "liblastlog2-2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "481f2fda004b182b"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a825df658df5d3b9d5e2d629e35b9e0678314b29965876d6c85472e3133e6fa4",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106565",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106565",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6586553ffa35dbb39aa5f0b50ce5c14cba0c75932eef7dcb68cdc70d5113c93e",
          "Title": "ImageMagick: ImageMagick: Denial of Service via missing end-of-file check in bzip2 images",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-835"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106565",
            "https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h",
            "https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106565",
            "https://www.cve.org/CVERecord?id=CVE-2026-106565"
          ],
          "PublishedDate": "2026-10-07T16:17:40.627Z",
          "LastModifiedDate": "2026-10-22T18:06:17.54Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106567",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106567",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:91f0dd3fbfdb775f95b6c18f5bb033f2c5ab8d5b6f396115daa5c61d9232929a",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted PSD file",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-196",
            "CWE-835"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106567",
            "https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j",
            "https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106567",
            "https://www.cve.org/CVERecord?id=CVE-2026-106567"
          ],
          "PublishedDate": "2026-10-07T16:17:40.973Z",
          "LastModifiedDate": "2026-10-22T17:59:16.593Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106573",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106573",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:664cb1eb2b49517ccd30881bed82f60645c999db8909010af3ac9821a9a5d7bd",
          "Title": "ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-770"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106573",
            "https://github.com/ImageMagick/ImageMagick/commit/c311471c4e4978494834c707b417bc033d95cc48",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62",
            "https://github.com/ImageMagick/ImageMagick6/commit/49560a1641f72a127e413b9861eca0997fde2b96",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106573",
            "https://www.cve.org/CVERecord?id=CVE-2026-106573"
          ],
          "PublishedDate": "2026-10-07T16:17:43.263Z",
          "LastModifiedDate": "2026-10-21T18:24:55.71Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106576",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106576",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:793ddccc1f0ca60259f7bb42919403396d402165a342371f51443e529bc50d97",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted XMP profile",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fixed in version 7.1.2-31.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-834"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106576",
            "https://github.com/ImageMagick/ImageMagick/commit/f491576297141ff685dc4460d811986f5b6b6cec",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106576",
            "https://www.cve.org/CVERecord?id=CVE-2026-106576"
          ],
          "PublishedDate": "2026-10-07T16:17:43.833Z",
          "LastModifiedDate": "2026-10-21T16:04:22.387Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106578",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106578",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:313b5b3d08929e8c6d94adde39ed161f384808e207b6dee02b6c2a1a7ac6a2c5",
          "Title": "ImageMagick: ImageMagick: Denial of Service via invalid memory free in MVG decoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-590"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106578",
            "https://github.com/ImageMagick/ImageMagick/commit/5d29c094020612dc8fb471b10fc1d1cc6e9e4378",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39",
            "https://github.com/ImageMagick/ImageMagick6/commit/bfe0117fd9742b3970383e000978d64e5e04372d",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106578",
            "https://www.cve.org/CVERecord?id=CVE-2026-106578"
          ],
          "PublishedDate": "2026-10-07T16:17:44.217Z",
          "LastModifiedDate": "2026-10-21T15:59:27.767Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106579",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106579",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9fae59aea90c45723796e39c193ae86a75378232ed1cc8b14d22ef1bd6b5c24a",
          "Title": "ImageMagick: ImageMagick: Information disclosure via security policy bypass",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-551"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 6.2
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106579",
            "https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac",
            "https://github.com/ImageMagick/ImageMagick/commit/dcdbbf4278fab20a32a4ad80e64cb95c368ca8dd",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5",
            "https://github.com/ImageMagick/ImageMagick6/commit/ac85c8e0a319b1eaf4c3d05d326605f5bae723d6",
            "https://github.com/ImageMagick/ImageMagick6/commit/c54667bfe605ebdc17c23cb70a26dbe00b338222",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106579",
            "https://www.cve.org/CVERecord?id=CVE-2026-106579"
          ],
          "PublishedDate": "2026-10-07T16:17:44.38Z",
          "LastModifiedDate": "2026-10-21T15:58:51.333Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106580",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106580",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3c1f262923a64812851bc907b14913889f0c24213d4bfad4814f016395be48b7",
          "Title": "ImageMagick: ImageMagick: Information disclosure via missing security policy check in CUT encoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-284",
            "CWE-400"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
              "V3Score": 8.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
              "V3Score": 4
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106580",
            "https://github.com/ImageMagick/ImageMagick/commit/768bdd0dbb9a9ad743b6a6e557126b788b325970",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c",
            "https://github.com/ImageMagick/ImageMagick6/commit/ad178e41fce2afa6be2b91fb4e7f41c4c5448117",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106580",
            "https://www.cve.org/CVERecord?id=CVE-2026-106580"
          ],
          "PublishedDate": "2026-10-07T16:17:44.56Z",
          "LastModifiedDate": "2026-10-21T15:51:35.81Z"
        },
        {
          "VulnerabilityID": "CVE-2026-107209",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-107209",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:cc2a654a2c681d4edced256a524c10b4c008987ae17dc9bfe2824d8f61878e0b",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted RSVG image",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice and then use freed memory, crashing the process. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-415",
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-107209",
            "https://github.com/ImageMagick/ImageMagick/commit/326451aae51ac2dabc99fe66e063de6ec14cf8c8",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-30",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x",
            "https://github.com/ImageMagick/ImageMagick6/commit/04a4c5b89c034cf2c93bb0a10044332d941b4fa5",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-55",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-107209",
            "https://www.cve.org/CVERecord?id=CVE-2026-107209"
          ],
          "PublishedDate": "2026-10-07T16:17:45.94Z",
          "LastModifiedDate": "2026-10-21T15:41:22.87Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109258",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109258",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f29deedb71e25f27ab3537d13678c9f648aa03e90a1efa9079f0a2621bf9435b",
          "Title": "ImageMagick: ImageMagick: Denial of Service via invalid memory free in fx operation",
          "Description": "ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-476"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 2.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109258",
            "https://github.com/ImageMagick/ImageMagick/commit/8caa6a0c62a3ac1f81b19a2ee929fbfe46ee0323",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109258",
            "https://www.cve.org/CVERecord?id=CVE-2026-109258",
            "https://www.vulncheck.com/advisories/imagemagick-7.1.0-20-before-7.1.2-32-invalid-memory-free-in-fx-operation"
          ],
          "PublishedDate": "2026-10-12T17:17:17.427Z",
          "LastModifiedDate": "2026-11-03T16:36:35.56Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109260",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109260",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d4276a65a840d9d7f8e491946785df79fe194fa2fbb2212e91daad5bb9b5d53e",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in PNG encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109260",
            "https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3",
            "https://github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109260",
            "https://www.cve.org/CVERecord?id=CVE-2026-109260",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-png-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:17.73Z",
          "LastModifiedDate": "2026-11-03T16:26:42.293Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109261",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109261",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a6f13d529210403d2409e99b0a5a2b54142926ad122c9f63e9a28ccf35b3a6c9",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in GIF encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109261",
            "https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4",
            "https://github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31b",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109261",
            "https://www.cve.org/CVERecord?id=CVE-2026-109261",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-gif-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:17.883Z",
          "LastModifiedDate": "2026-11-03T16:14:37.893Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109262",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109262",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:74fda064609ddb209ebc0ac88458842cb50cc939ff2d217e6251b8f43a613141",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in SVG encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109262",
            "https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp",
            "https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1df",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109262",
            "https://www.cve.org/CVERecord?id=CVE-2026-109262",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-svg-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:18.033Z",
          "LastModifiedDate": "2026-11-03T17:36:31.613Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109263",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109263",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ebedb4d503c58656659c65102906dcb3f2baa5d4a63dd5e186a3568e72874362",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in YUV encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109263",
            "https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4",
            "https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109263",
            "https://www.cve.org/CVERecord?id=CVE-2026-109263",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-yuv-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:18.183Z",
          "LastModifiedDate": "2026-11-03T17:29:54.723Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109268",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109268",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:96553a49042b39e5d56653117df3b809d4a06c966c99d647dd4c349944df9e1f",
          "Title": "ImageMagick: ImageMagick: Denial of Service via use-after-free in PDF writer",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109268",
            "https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv",
            "https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109268",
            "https://www.cve.org/CVERecord?id=CVE-2026-109268",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-use-after-free-in-pdf-writer-via-jpeg2000"
          ],
          "PublishedDate": "2026-10-12T17:17:18.93Z",
          "LastModifiedDate": "2026-11-03T17:07:24.04Z"
        },
        {
          "VulnerabilityID": "CVE-2026-116149",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-116149",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b6ef831dbe87a48d784d8d026dd6c032980b749057fbb562bdde14a042c84126",
          "Title": "ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images",
          "Description": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-116149",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-116149",
            "https://www.cve.org/CVERecord?id=CVE-2026-116149",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-58-and-7-x-before-7.1.2-33-stack-buffer-overflow-via-bzip2-compressed-images"
          ],
          "PublishedDate": "2026-10-25T14:16:53.123Z",
          "LastModifiedDate": "2026-11-03T18:27:24.23Z"
        },
        {
          "VulnerabilityID": "CVE-2026-119123",
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119123",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:271a512c16cc5d3e05a4b136081e8f48e3066a886f4c4936d14a245a5a82d88e",
          "Title": "ImageMagick: ImageMagick: Denial of Service via stack overflow in TIFF decoder",
          "Description": "ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-674"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-119123",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5j8-ff59-wp88",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-119123",
            "https://www.cve.org/CVERecord?id=CVE-2026-119123",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-34-stack-overflow-in-tiff-decoder"
          ],
          "PublishedDate": "2026-10-29T16:18:04.847Z",
          "LastModifiedDate": "2026-11-04T02:17:16.817Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86420",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86420",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1d4d54c820f1cdeae33c49ab40823a21e6ff245cdb833489a072211c99202c20",
          "Title": "ImageMagick: ImageMagick: Denial of Service due to memory budget exhaustion",
          "Description": "ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "nvd": 3,
            "photon": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86420",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86420",
            "https://www.cve.org/CVERecord?id=CVE-2026-86420",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-denial-of-service-memory-budget"
          ],
          "PublishedDate": "2026-09-07T13:20:40.827Z",
          "LastModifiedDate": "2026-10-29T21:17:34.883Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86421",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86421",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ba49501c4a5ad1a39a6167e980aad2c7aca19b1b75455041c0f9b4179a0335f3",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in MSL decoder",
          "Description": "ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "nvd": 3,
            "photon": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86421",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86421",
            "https://www.cve.org/CVERecord?id=CVE-2026-86421",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-memory-leak-via-msl-decoder"
          ],
          "PublishedDate": "2026-09-07T13:20:40.963Z",
          "LastModifiedDate": "2026-10-29T21:17:35.023Z"
        },
        {
          "VulnerabilityID": "CVE-2026-93589",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93589",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6839251824ca5d45fad71448b1c9f180955ee916097e92de64e930584034073e",
          "Title": "ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder",
          "Description": "ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-by-zero and crashes the encoder, resulting in a denial of service. The issue is fixed in 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-369"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-93589",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-93589",
            "https://ubuntu.com/security/notices/USN-8859-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-93589",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-division-by-zero-in-flif-encoder"
          ],
          "PublishedDate": "2026-09-18T14:19:09.76Z",
          "LastModifiedDate": "2026-10-29T21:17:36.71Z"
        },
        {
          "VulnerabilityID": "CVE-2026-93590",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "a36cf08a1303e7d5"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93590",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ea4e978f0c4bd9ad534e1dcc3694fc6322e2c65ec660073bd9571b5e3df12436",
          "Title": "ImageMagick: ImageMagick: Denial of Service via UHDR encoder policy bypass",
          "Description": "ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-93590",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-93590",
            "https://ubuntu.com/security/notices/USN-8859-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-93590",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-policy-bypass-in-uhdr-encoder"
          ],
          "PublishedDate": "2026-09-18T14:19:09.943Z",
          "LastModifiedDate": "2026-10-16T20:31:00.683Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106565",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106565",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6367b99e3aee419c30334ea896e8c94930cdbf700cc3abe1620ff3739bed9de9",
          "Title": "ImageMagick: ImageMagick: Denial of Service via missing end-of-file check in bzip2 images",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-835"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106565",
            "https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h",
            "https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106565",
            "https://www.cve.org/CVERecord?id=CVE-2026-106565"
          ],
          "PublishedDate": "2026-10-07T16:17:40.627Z",
          "LastModifiedDate": "2026-10-22T18:06:17.54Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106567",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106567",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c05bb58785333370c3f01ffb43af176f427bbdb93cb976522b8b401032584b3c",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted PSD file",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-196",
            "CWE-835"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106567",
            "https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j",
            "https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106567",
            "https://www.cve.org/CVERecord?id=CVE-2026-106567"
          ],
          "PublishedDate": "2026-10-07T16:17:40.973Z",
          "LastModifiedDate": "2026-10-22T17:59:16.593Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106573",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106573",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ecf5333d15d28338dee0c4c0169ad03a35562f7a272d51f572fdc032df7cbd43",
          "Title": "ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-770"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106573",
            "https://github.com/ImageMagick/ImageMagick/commit/c311471c4e4978494834c707b417bc033d95cc48",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62",
            "https://github.com/ImageMagick/ImageMagick6/commit/49560a1641f72a127e413b9861eca0997fde2b96",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106573",
            "https://www.cve.org/CVERecord?id=CVE-2026-106573"
          ],
          "PublishedDate": "2026-10-07T16:17:43.263Z",
          "LastModifiedDate": "2026-10-21T18:24:55.71Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106576",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106576",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0a38b1e42285d96310937ced37f3bc6eb1b572487d5db4966c170d29b32dd513",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted XMP profile",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fixed in version 7.1.2-31.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-834"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106576",
            "https://github.com/ImageMagick/ImageMagick/commit/f491576297141ff685dc4460d811986f5b6b6cec",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106576",
            "https://www.cve.org/CVERecord?id=CVE-2026-106576"
          ],
          "PublishedDate": "2026-10-07T16:17:43.833Z",
          "LastModifiedDate": "2026-10-21T16:04:22.387Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106578",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106578",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e63e8f307409dcefd3ca4ed757c879e8ce84ced5ae07eca2f6198d56c0bec18e",
          "Title": "ImageMagick: ImageMagick: Denial of Service via invalid memory free in MVG decoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-590"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106578",
            "https://github.com/ImageMagick/ImageMagick/commit/5d29c094020612dc8fb471b10fc1d1cc6e9e4378",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39",
            "https://github.com/ImageMagick/ImageMagick6/commit/bfe0117fd9742b3970383e000978d64e5e04372d",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106578",
            "https://www.cve.org/CVERecord?id=CVE-2026-106578"
          ],
          "PublishedDate": "2026-10-07T16:17:44.217Z",
          "LastModifiedDate": "2026-10-21T15:59:27.767Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106579",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106579",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:578e70f4cbcfe812d94f372888692a265a20cb93f52acd5a87ce246172470401",
          "Title": "ImageMagick: ImageMagick: Information disclosure via security policy bypass",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-551"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 6.2
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106579",
            "https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac",
            "https://github.com/ImageMagick/ImageMagick/commit/dcdbbf4278fab20a32a4ad80e64cb95c368ca8dd",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5",
            "https://github.com/ImageMagick/ImageMagick6/commit/ac85c8e0a319b1eaf4c3d05d326605f5bae723d6",
            "https://github.com/ImageMagick/ImageMagick6/commit/c54667bfe605ebdc17c23cb70a26dbe00b338222",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106579",
            "https://www.cve.org/CVERecord?id=CVE-2026-106579"
          ],
          "PublishedDate": "2026-10-07T16:17:44.38Z",
          "LastModifiedDate": "2026-10-21T15:58:51.333Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106580",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106580",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b1f3b3d9d00acfdca5b78d48618d5211b4e1b6b1ec56e778648bac0044bcfcd6",
          "Title": "ImageMagick: ImageMagick: Information disclosure via missing security policy check in CUT encoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-284",
            "CWE-400"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
              "V3Score": 8.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
              "V3Score": 4
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106580",
            "https://github.com/ImageMagick/ImageMagick/commit/768bdd0dbb9a9ad743b6a6e557126b788b325970",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c",
            "https://github.com/ImageMagick/ImageMagick6/commit/ad178e41fce2afa6be2b91fb4e7f41c4c5448117",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106580",
            "https://www.cve.org/CVERecord?id=CVE-2026-106580"
          ],
          "PublishedDate": "2026-10-07T16:17:44.56Z",
          "LastModifiedDate": "2026-10-21T15:51:35.81Z"
        },
        {
          "VulnerabilityID": "CVE-2026-107209",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-107209",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5c1abb5d22175fee6b71ddf0ab5f06c115b9ab2052d99326b50161339ff7b31a",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted RSVG image",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice and then use freed memory, crashing the process. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-415",
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-107209",
            "https://github.com/ImageMagick/ImageMagick/commit/326451aae51ac2dabc99fe66e063de6ec14cf8c8",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-30",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x",
            "https://github.com/ImageMagick/ImageMagick6/commit/04a4c5b89c034cf2c93bb0a10044332d941b4fa5",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-55",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-107209",
            "https://www.cve.org/CVERecord?id=CVE-2026-107209"
          ],
          "PublishedDate": "2026-10-07T16:17:45.94Z",
          "LastModifiedDate": "2026-10-21T15:41:22.87Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109258",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109258",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c5b1f3ca06a34f4f941a3c6926abd7241380e5c0e5eecf535ed948291bc34a0e",
          "Title": "ImageMagick: ImageMagick: Denial of Service via invalid memory free in fx operation",
          "Description": "ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-476"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 2.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109258",
            "https://github.com/ImageMagick/ImageMagick/commit/8caa6a0c62a3ac1f81b19a2ee929fbfe46ee0323",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109258",
            "https://www.cve.org/CVERecord?id=CVE-2026-109258",
            "https://www.vulncheck.com/advisories/imagemagick-7.1.0-20-before-7.1.2-32-invalid-memory-free-in-fx-operation"
          ],
          "PublishedDate": "2026-10-12T17:17:17.427Z",
          "LastModifiedDate": "2026-11-03T16:36:35.56Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109260",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109260",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:48675c716da6b118a72c337595734081387bf0be05d5bcad2cbcbbfc7b26fae2",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in PNG encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109260",
            "https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3",
            "https://github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109260",
            "https://www.cve.org/CVERecord?id=CVE-2026-109260",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-png-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:17.73Z",
          "LastModifiedDate": "2026-11-03T16:26:42.293Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109261",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109261",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:fb969b9529356050b4c03128844de6d0ae515c01919c2c65e2ec575eb85e9b10",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in GIF encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109261",
            "https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4",
            "https://github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31b",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109261",
            "https://www.cve.org/CVERecord?id=CVE-2026-109261",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-gif-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:17.883Z",
          "LastModifiedDate": "2026-11-03T16:14:37.893Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109262",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109262",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:16275c4ad42357082db941fc920a97dec9d2bbeff83a32446afdb8cbb60eb137",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in SVG encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109262",
            "https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp",
            "https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1df",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109262",
            "https://www.cve.org/CVERecord?id=CVE-2026-109262",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-svg-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:18.033Z",
          "LastModifiedDate": "2026-11-03T17:36:31.613Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109263",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109263",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:31bc413a98aa5e6368f94f7860de4983a720b85055725b8cce686ed0705ad201",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in YUV encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109263",
            "https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4",
            "https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109263",
            "https://www.cve.org/CVERecord?id=CVE-2026-109263",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-yuv-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:18.183Z",
          "LastModifiedDate": "2026-11-03T17:29:54.723Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109268",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109268",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1d8c194faa7b1b679ddf0a05413235c84db7a3e15927f3751f8d940807c836dd",
          "Title": "ImageMagick: ImageMagick: Denial of Service via use-after-free in PDF writer",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109268",
            "https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv",
            "https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109268",
            "https://www.cve.org/CVERecord?id=CVE-2026-109268",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-use-after-free-in-pdf-writer-via-jpeg2000"
          ],
          "PublishedDate": "2026-10-12T17:17:18.93Z",
          "LastModifiedDate": "2026-11-03T17:07:24.04Z"
        },
        {
          "VulnerabilityID": "CVE-2026-116149",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-116149",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ec5c86be2809b94a25596b02caae2c69227508f5b9a829cb6ab153c563b60de4",
          "Title": "ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images",
          "Description": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-116149",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-116149",
            "https://www.cve.org/CVERecord?id=CVE-2026-116149",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-58-and-7-x-before-7.1.2-33-stack-buffer-overflow-via-bzip2-compressed-images"
          ],
          "PublishedDate": "2026-10-25T14:16:53.123Z",
          "LastModifiedDate": "2026-11-03T18:27:24.23Z"
        },
        {
          "VulnerabilityID": "CVE-2026-119123",
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119123",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:386307b48615ae23f7fbc70efc66beeb08e8ea88cd0e32ae75e45474612a6522",
          "Title": "ImageMagick: ImageMagick: Denial of Service via stack overflow in TIFF decoder",
          "Description": "ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-674"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-119123",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5j8-ff59-wp88",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-119123",
            "https://www.cve.org/CVERecord?id=CVE-2026-119123",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-34-stack-overflow-in-tiff-decoder"
          ],
          "PublishedDate": "2026-10-29T16:18:04.847Z",
          "LastModifiedDate": "2026-11-04T02:17:16.817Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86420",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86420",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:048c03c991576bfcdccac7efa6b948a380a10702706e632fcfa9439d8f7db849",
          "Title": "ImageMagick: ImageMagick: Denial of Service due to memory budget exhaustion",
          "Description": "ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "nvd": 3,
            "photon": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86420",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86420",
            "https://www.cve.org/CVERecord?id=CVE-2026-86420",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-denial-of-service-memory-budget"
          ],
          "PublishedDate": "2026-09-07T13:20:40.827Z",
          "LastModifiedDate": "2026-10-29T21:17:34.883Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86421",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86421",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:609d7e840e4bb428a7ca45dadbdc53528ed4cb0939f13201c7e3a57af5915223",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in MSL decoder",
          "Description": "ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "nvd": 3,
            "photon": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86421",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86421",
            "https://www.cve.org/CVERecord?id=CVE-2026-86421",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-memory-leak-via-msl-decoder"
          ],
          "PublishedDate": "2026-09-07T13:20:40.963Z",
          "LastModifiedDate": "2026-10-29T21:17:35.023Z"
        },
        {
          "VulnerabilityID": "CVE-2026-93589",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93589",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:49d1ec35d7c7b445bd473c1839a35514a37831667afdb3ca8a1ee51cce741974",
          "Title": "ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder",
          "Description": "ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-by-zero and crashes the encoder, resulting in a denial of service. The issue is fixed in 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-369"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-93589",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-93589",
            "https://ubuntu.com/security/notices/USN-8859-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-93589",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-division-by-zero-in-flif-encoder"
          ],
          "PublishedDate": "2026-09-18T14:19:09.76Z",
          "LastModifiedDate": "2026-10-29T21:17:36.71Z"
        },
        {
          "VulnerabilityID": "CVE-2026-93590",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickcore-7.q16-10-extra@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickcore-7.q16-10-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickcore-7.q16-10-extra@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "aa2ab0d5582096e7"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93590",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1271005ad603310921ee8ae797716455812786bab8b0492eaa0d60d228c11ab9",
          "Title": "ImageMagick: ImageMagick: Denial of Service via UHDR encoder policy bypass",
          "Description": "ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-93590",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-93590",
            "https://ubuntu.com/security/notices/USN-8859-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-93590",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-policy-bypass-in-uhdr-encoder"
          ],
          "PublishedDate": "2026-09-18T14:19:09.943Z",
          "LastModifiedDate": "2026-10-16T20:31:00.683Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106565",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106565",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:db06c16ba202e7d44cc80e24620c0d8209c8cbd63ea261062fc6345d464feba4",
          "Title": "ImageMagick: ImageMagick: Denial of Service via missing end-of-file check in bzip2 images",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-835"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106565",
            "https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h",
            "https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106565",
            "https://www.cve.org/CVERecord?id=CVE-2026-106565"
          ],
          "PublishedDate": "2026-10-07T16:17:40.627Z",
          "LastModifiedDate": "2026-10-22T18:06:17.54Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106567",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106567",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a1f2504e6dc0aec83ac6078b7ce1bb848f04c2515921911731024f29930d4840",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted PSD file",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-196",
            "CWE-835"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106567",
            "https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j",
            "https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106567",
            "https://www.cve.org/CVERecord?id=CVE-2026-106567"
          ],
          "PublishedDate": "2026-10-07T16:17:40.973Z",
          "LastModifiedDate": "2026-10-22T17:59:16.593Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106573",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106573",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a2bbf31a0c91c106085a6e451b4dc00b2b63fde43e742c0db3bb49bac846eff9",
          "Title": "ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-770"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106573",
            "https://github.com/ImageMagick/ImageMagick/commit/c311471c4e4978494834c707b417bc033d95cc48",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62",
            "https://github.com/ImageMagick/ImageMagick6/commit/49560a1641f72a127e413b9861eca0997fde2b96",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106573",
            "https://www.cve.org/CVERecord?id=CVE-2026-106573"
          ],
          "PublishedDate": "2026-10-07T16:17:43.263Z",
          "LastModifiedDate": "2026-10-21T18:24:55.71Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106576",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106576",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ace77f60257d2085b3c815b828c79b7a12a5d7ed8698a848f6e1b03707ebaee8",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted XMP profile",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fixed in version 7.1.2-31.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-834"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106576",
            "https://github.com/ImageMagick/ImageMagick/commit/f491576297141ff685dc4460d811986f5b6b6cec",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106576",
            "https://www.cve.org/CVERecord?id=CVE-2026-106576"
          ],
          "PublishedDate": "2026-10-07T16:17:43.833Z",
          "LastModifiedDate": "2026-10-21T16:04:22.387Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106578",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106578",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6b4a27afcd2325fa6fce482af1841ddb16e076120cd97a0aee9f0454b0096d4b",
          "Title": "ImageMagick: ImageMagick: Denial of Service via invalid memory free in MVG decoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-590"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106578",
            "https://github.com/ImageMagick/ImageMagick/commit/5d29c094020612dc8fb471b10fc1d1cc6e9e4378",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39",
            "https://github.com/ImageMagick/ImageMagick6/commit/bfe0117fd9742b3970383e000978d64e5e04372d",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106578",
            "https://www.cve.org/CVERecord?id=CVE-2026-106578"
          ],
          "PublishedDate": "2026-10-07T16:17:44.217Z",
          "LastModifiedDate": "2026-10-21T15:59:27.767Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106579",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106579",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:abc2db3f4767814c229477fa4a8040737e3a032b4206c83ea714e3963a36afdf",
          "Title": "ImageMagick: ImageMagick: Information disclosure via security policy bypass",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-551"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 6.2
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106579",
            "https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac",
            "https://github.com/ImageMagick/ImageMagick/commit/dcdbbf4278fab20a32a4ad80e64cb95c368ca8dd",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5",
            "https://github.com/ImageMagick/ImageMagick6/commit/ac85c8e0a319b1eaf4c3d05d326605f5bae723d6",
            "https://github.com/ImageMagick/ImageMagick6/commit/c54667bfe605ebdc17c23cb70a26dbe00b338222",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106579",
            "https://www.cve.org/CVERecord?id=CVE-2026-106579"
          ],
          "PublishedDate": "2026-10-07T16:17:44.38Z",
          "LastModifiedDate": "2026-10-21T15:58:51.333Z"
        },
        {
          "VulnerabilityID": "CVE-2026-106580",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-106580",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:269ec14c2ad4987675c7a4eca263ea5185582c96aed3635c9910db0bc42997f1",
          "Title": "ImageMagick: ImageMagick: Information disclosure via missing security policy check in CUT encoder",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-284",
            "CWE-400"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
              "V3Score": 8.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
              "V3Score": 4
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-106580",
            "https://github.com/ImageMagick/ImageMagick/commit/768bdd0dbb9a9ad743b6a6e557126b788b325970",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c",
            "https://github.com/ImageMagick/ImageMagick6/commit/ad178e41fce2afa6be2b91fb4e7f41c4c5448117",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-106580",
            "https://www.cve.org/CVERecord?id=CVE-2026-106580"
          ],
          "PublishedDate": "2026-10-07T16:17:44.56Z",
          "LastModifiedDate": "2026-10-21T15:51:35.81Z"
        },
        {
          "VulnerabilityID": "CVE-2026-107209",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-107209",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5019bcc491778fae35f362cb305d307f6c09d0661722c42db3cb8bd55ca871d2",
          "Title": "ImageMagick: ImageMagick: Denial of Service via crafted RSVG image",
          "Description": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice and then use freed memory, crashing the process. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-415",
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-107209",
            "https://github.com/ImageMagick/ImageMagick/commit/326451aae51ac2dabc99fe66e063de6ec14cf8c8",
            "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-30",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x",
            "https://github.com/ImageMagick/ImageMagick6/commit/04a4c5b89c034cf2c93bb0a10044332d941b4fa5",
            "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-55",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-107209",
            "https://www.cve.org/CVERecord?id=CVE-2026-107209"
          ],
          "PublishedDate": "2026-10-07T16:17:45.94Z",
          "LastModifiedDate": "2026-10-21T15:41:22.87Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109258",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109258",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f1319e6329e509c4285f62e79779a249f4c28468f6f949d79d33fbf170e93d8a",
          "Title": "ImageMagick: ImageMagick: Denial of Service via invalid memory free in fx operation",
          "Description": "ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-476"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 2.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109258",
            "https://github.com/ImageMagick/ImageMagick/commit/8caa6a0c62a3ac1f81b19a2ee929fbfe46ee0323",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109258",
            "https://www.cve.org/CVERecord?id=CVE-2026-109258",
            "https://www.vulncheck.com/advisories/imagemagick-7.1.0-20-before-7.1.2-32-invalid-memory-free-in-fx-operation"
          ],
          "PublishedDate": "2026-10-12T17:17:17.427Z",
          "LastModifiedDate": "2026-11-03T16:36:35.56Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109260",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109260",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:cbb522c8a624344791904995b2d42e64c581711a58df51879bd851c80a0cf768",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in PNG encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109260",
            "https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3",
            "https://github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109260",
            "https://www.cve.org/CVERecord?id=CVE-2026-109260",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-png-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:17.73Z",
          "LastModifiedDate": "2026-11-03T16:26:42.293Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109261",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109261",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:cc8fe096a798847fea7936505dd6411383b5cd30df38385f4c16e451f9b784a6",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in GIF encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109261",
            "https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4",
            "https://github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31b",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109261",
            "https://www.cve.org/CVERecord?id=CVE-2026-109261",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-gif-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:17.883Z",
          "LastModifiedDate": "2026-11-03T16:14:37.893Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109262",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109262",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:367205ad56a710ba88395eafab82cf6fed80038c729045e4309f082a47c67762",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in SVG encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109262",
            "https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp",
            "https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1df",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109262",
            "https://www.cve.org/CVERecord?id=CVE-2026-109262",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-svg-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:18.033Z",
          "LastModifiedDate": "2026-11-03T17:36:31.613Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109263",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109263",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:617252d17abf722078ff781b2553c67bd8199813ef0a6a0d7fbc3dc51b7559ae",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in YUV encoder",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-401"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109263",
            "https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4",
            "https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109263",
            "https://www.cve.org/CVERecord?id=CVE-2026-109263",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-yuv-encoder"
          ],
          "PublishedDate": "2026-10-12T17:17:18.183Z",
          "LastModifiedDate": "2026-11-03T17:29:54.723Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109268",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109268",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:cc12bbcf006ae5f2e3a6f9332a123eb8ee90daa526a09b522204ebe55bf612fe",
          "Title": "ImageMagick: ImageMagick: Denial of Service via use-after-free in PDF writer",
          "Description": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109268",
            "https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv",
            "https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109268",
            "https://www.cve.org/CVERecord?id=CVE-2026-109268",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-use-after-free-in-pdf-writer-via-jpeg2000"
          ],
          "PublishedDate": "2026-10-12T17:17:18.93Z",
          "LastModifiedDate": "2026-11-03T17:07:24.04Z"
        },
        {
          "VulnerabilityID": "CVE-2026-116149",
          "VendorIDs": [
            "DSA-6611-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u14",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-116149",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:99cc98940c8ba7aade9ee4d213bb609662282e94e91b55e7b96dc82cb53d0ab4",
          "Title": "ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images",
          "Description": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-116149",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-116149",
            "https://www.cve.org/CVERecord?id=CVE-2026-116149",
            "https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-58-and-7-x-before-7.1.2-33-stack-buffer-overflow-via-bzip2-compressed-images"
          ],
          "PublishedDate": "2026-10-25T14:16:53.123Z",
          "LastModifiedDate": "2026-11-03T18:27:24.23Z"
        },
        {
          "VulnerabilityID": "CVE-2026-119123",
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119123",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f00004b436501d8f43213ef8e2693e7e99d335758691e582bfc387bf5ab35774",
          "Title": "ImageMagick: ImageMagick: Denial of Service via stack overflow in TIFF decoder",
          "Description": "ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-674"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-119123",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5j8-ff59-wp88",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-119123",
            "https://www.cve.org/CVERecord?id=CVE-2026-119123",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-34-stack-overflow-in-tiff-decoder"
          ],
          "PublishedDate": "2026-10-29T16:18:04.847Z",
          "LastModifiedDate": "2026-11-04T02:17:16.817Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86420",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86420",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:80fb59c0d2677739ec0bb72619b28eeb3803695cd83b1b92af04000bef1eb8cc",
          "Title": "ImageMagick: ImageMagick: Denial of Service due to memory budget exhaustion",
          "Description": "ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "nvd": 3,
            "photon": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86420",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86420",
            "https://www.cve.org/CVERecord?id=CVE-2026-86420",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-denial-of-service-memory-budget"
          ],
          "PublishedDate": "2026-09-07T13:20:40.827Z",
          "LastModifiedDate": "2026-10-29T21:17:34.883Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86421",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86421",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c2110cc2365bc9dfdf731217bbff6c24ad7b8726237b9f9ba47be5f58219f8db",
          "Title": "ImageMagick: ImageMagick: Denial of Service via memory leak in MSL decoder",
          "Description": "ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "nvd": 3,
            "photon": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86421",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86421",
            "https://www.cve.org/CVERecord?id=CVE-2026-86421",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-memory-leak-via-msl-decoder"
          ],
          "PublishedDate": "2026-09-07T13:20:40.963Z",
          "LastModifiedDate": "2026-10-29T21:17:35.023Z"
        },
        {
          "VulnerabilityID": "CVE-2026-93589",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93589",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c5053d9609407dc9967f6ed9071a080fbea3fac7d78dece2a0673250b8bdd72f",
          "Title": "ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder",
          "Description": "ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-by-zero and crashes the encoder, resulting in a denial of service. The issue is fixed in 7.1.2-31 and 6.9.13-56.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-369"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-93589",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-93589",
            "https://ubuntu.com/security/notices/USN-8859-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-93589",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-division-by-zero-in-flif-encoder"
          ],
          "PublishedDate": "2026-09-18T14:19:09.76Z",
          "LastModifiedDate": "2026-10-29T21:17:36.71Z"
        },
        {
          "VulnerabilityID": "CVE-2026-93590",
          "VendorIDs": [
            "DSA-6593-1"
          ],
          "PkgID": "libmagickwand-7.q16-10@8:7.1.1.43+dfsg1-1+deb13u12",
          "PkgName": "libmagickwand-7.q16-10",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmagickwand-7.q16-10@7.1.1.43%2Bdfsg1-1%2Bdeb13u12?arch=amd64\u0026distro=debian-13.7\u0026epoch=8",
            "UID": "cec99f1495bb5b45"
          },
          "InstalledVersion": "8:7.1.1.43+dfsg1-1+deb13u12",
          "FixedVersion": "8:7.1.1.43+dfsg1-1+deb13u13",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93590",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c4093fdf631e4f4e1c641386a54318ce9313597f35022abd6b2d599af1e3fd19",
          "Title": "ImageMagick: ImageMagick: Denial of Service via UHDR encoder policy bypass",
          "Description": "ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-93590",
            "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-93590",
            "https://ubuntu.com/security/notices/USN-8859-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-93590",
            "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-policy-bypass-in-uhdr-encoder"
          ],
          "PublishedDate": "2026-09-18T14:19:09.943Z",
          "LastModifiedDate": "2026-10-16T20:31:00.683Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "libmount-dev@2.41.5-0+deb13u1",
          "PkgName": "libmount-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "8b48e6cfede54432"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d1aa2bd07c3560666569d30a7dc842d8764471584462ffa3f356cc59d72cd2f0",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "libmount-dev@2.41.5-0+deb13u1",
          "PkgName": "libmount-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "8b48e6cfede54432"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ab519ea340236d70ea5ff08ac8efcc36c1c4a9a6dbaf1c434eda3d1e6c3f7629",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "libmount-dev@2.41.5-0+deb13u1",
          "PkgName": "libmount-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "8b48e6cfede54432"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:8b22d65e9e272cbd2476b51372e1df95e800903fb1194b59e5e1567946304222",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libmount-dev@2.41.5-0+deb13u1",
          "PkgName": "libmount-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "8b48e6cfede54432"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a6c5f86464aa6e4787f2c8e404dcea6bf64aef5082391022e8c70b3a6fd05642",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "libmount1@2.41.5-0+deb13u1",
          "PkgName": "libmount1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d0bfdcf72ddff375"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6f401d40a78ab45600c5c88355ab6eac5e2d93def8f3dd5ac1e9a5cc0c6488bc",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "libmount1@2.41.5-0+deb13u1",
          "PkgName": "libmount1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d0bfdcf72ddff375"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:724b3c834f8469e3d718eb54001d07e722853154ea2a0e84c4cb22ce919f8e0b",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "libmount1@2.41.5-0+deb13u1",
          "PkgName": "libmount1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d0bfdcf72ddff375"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d24d09698e5d2754056b9e538fb92a5a308b4b0e69f2348b2a8ac589b1359616",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libmount1@2.41.5-0+deb13u1",
          "PkgName": "libmount1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d0bfdcf72ddff375"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:2606cfb99a5764c8c0c9481ba82a125d49277b7f6ee258ea6525189e11280d32",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2025-69720",
          "PkgID": "libncursesw6@6.5+20250216-2",
          "PkgName": "libncursesw6",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libncursesw6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "7121209a6392dd9e"
          },
          "InstalledVersion": "6.5+20250216-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ceae66e9bd905306af1dcf669e8415bbf679acebfd439b1d47cd6dd07e2afe87",
          "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
          "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121",
            "CWE-120"
          ],
          "VendorSeverity": {
            "alma": 2,
            "azure": 4,
            "cbl-mariner": 4,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:5913",
            "https://access.redhat.com/security/cve/CVE-2025-69720",
            "https://bugzilla.redhat.com/2449037",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
            "https://errata.almalinux.org/10/ALSA-2026-5913.html",
            "https://errata.rockylinux.org/RLSA-2026:5913",
            "https://github.com/Cao-Wuhui/CVE-2025-69720",
            "https://github.com/advisories/GHSA-9952-mrqj-h4jh",
            "https://invisible-island.net/archives/ncurses/6.5",
            "https://invisible-island.net/archives/ncurses/6.5/",
            "https://invisible-island.net/ncurses",
            "https://invisible-island.net/ncurses/",
            "https://linux.oracle.com/cve/CVE-2025-69720.html",
            "https://linux.oracle.com/errata/ELSA-2026-5913.html",
            "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
            "https://ubuntu.com/security/notices/USN-8503-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-69720"
          ],
          "PublishedDate": "2026-03-19T15:16:21.293Z",
          "LastModifiedDate": "2026-06-17T10:00:50.423Z"
        },
        {
          "VulnerabilityID": "CVE-2026-42216",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42216",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b01675ec5d6eca636f955b20179d4d37705c714560a8fab50428f99d8260c143",
          "Title": "OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, IDManifest::init() reconstructs strings from a prefix-compressed representation. If the previous string is longer than 255 bytes, the next string is expected to begin with a 2-byte prefix length. The code reads stringList[i][0] and stringList[i][1] without checking that the current string has at least two bytes. This issue has been patched in versions 3.2.9, 3.3.11, and 3.4.11.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-125",
            "CWE-130"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "julia": 3,
            "nvd": 4,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N",
              "V3Score": 9.1,
              "V40Score": 8.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 9.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:38498",
            "https://access.redhat.com/errata/RHSA-2026:38499",
            "https://access.redhat.com/errata/RHSA-2026:39024",
            "https://access.redhat.com/errata/RHSA-2026:39025",
            "https://access.redhat.com/errata/RHSA-2026:39026",
            "https://access.redhat.com/errata/RHSA-2026:39027",
            "https://access.redhat.com/security/cve/CVE-2026-42216",
            "https://bugzilla.redhat.com/2467623",
            "https://bugzilla.redhat.com/2467633",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467623",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467633",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41142",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42216",
            "https://errata.almalinux.org/9/ALSA-2026-38498.html",
            "https://errata.rockylinux.org/RLSA-2026:38498",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-65j8-95g9-jgj4",
            "https://linux.oracle.com/cve/CVE-2026-42216.html",
            "https://linux.oracle.com/errata/ELSA-2026-38499.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-42216",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42216.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-42216"
          ],
          "PublishedDate": "2026-05-07T04:16:34.22Z",
          "LastModifiedDate": "2026-10-26T19:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2026-42217",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42217",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d2303a55927f1335ce10c92ce9fb87fb82134c052c46470dec8a891df8607d26",
          "Title": "OpenEXR: OpenEXR: Information disclosure via malformed EXR image file processing",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, readVariableLengthInteger() decodes a variable-length integer from untrusted EXR input without bounding the shift count. After enough continuation bytes, the code executes a left shift by 70 on a 64-bit value, which is undefined behavior. This issue has been patched in versions 3.2.9, 3.3.11, and 3.4.11.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "julia": 2,
            "nvd": 4,
            "redhat": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
              "V3Score": 9.8,
              "V40Score": 6.3
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 9.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "V3Score": 4.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-42217",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/21eaa33bcbbb0c83a5fc42f6b6d65b70a996e63c",
            "https://github.com/AcademySoftwareFoundation/openexr/pull/2378",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-3c67-4wwp-w52m",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-42217",
            "https://www.cve.org/CVERecord?id=CVE-2026-42217"
          ],
          "PublishedDate": "2026-05-07T04:16:34.387Z",
          "LastModifiedDate": "2026-10-26T19:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2025-12495",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-12495",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:61078f77fa7ac2fe920f28e0fba9cfed5a18e41368e82371cb537ce5ded0fe5b",
          "Title": "OpenEXR: OpenEXR: Remote Code Execution via malicious EXR file parsing",
          "Description": "Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of EXR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27946.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "julia": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-12495",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-12495",
            "https://www.cve.org/CVERecord?id=CVE-2025-12495",
            "https://www.zerodayinitiative.com/advisories/ZDI-25-989/"
          ],
          "PublishedDate": "2025-12-23T22:15:44.147Z",
          "LastModifiedDate": "2026-10-19T22:10:00.13Z"
        },
        {
          "VulnerabilityID": "CVE-2025-12839",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-12839",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5cc73239cdffa7abfb53186050421aec1d230564e9bff57979661d73c7624cea",
          "Title": "OpenEXR: OpenEXR: Remote Code Execution via Heap-based Buffer Overflow in EXR File Parsing",
          "Description": "Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of EXR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27947.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "julia": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-12839",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-12839",
            "https://www.cve.org/CVERecord?id=CVE-2025-12839",
            "https://www.zerodayinitiative.com/advisories/ZDI-25-990/"
          ],
          "PublishedDate": "2025-12-23T22:15:44.407Z",
          "LastModifiedDate": "2026-10-19T22:10:00.13Z"
        },
        {
          "VulnerabilityID": "CVE-2025-12840",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-12840",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:00e7114314937efbead6114b492d764679edfec0254974726cf105e88c14e383",
          "Title": "OpenEXR: OpenEXR: Remote Code Execution via EXR file parsing heap-based buffer overflow",
          "Description": "Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of EXR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27948.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122"
          ],
          "VendorSeverity": {
            "julia": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-12840",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-12840",
            "https://www.cve.org/CVERecord?id=CVE-2025-12840",
            "https://www.zerodayinitiative.com/advisories/ZDI-25-991/"
          ],
          "PublishedDate": "2025-12-23T22:15:44.533Z",
          "LastModifiedDate": "2026-10-19T22:10:00.13Z"
        },
        {
          "VulnerabilityID": "CVE-2025-64181",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-64181",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:8a6c977077d26d305f16bb05ea72d13a118308e39d26674aa80eb5d413f3a69b",
          "Title": "openexr: Use of Uninitialized Memory inside generic_unpack",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing `openexr_exrcheck_fuzzer`, Valgrind reports a conditional branch depending on uninitialized data inside `generic_unpack`. This indicates a use of uninitialized memory. The issue can result in undefined behavior and/or a potential crash/denial of service. Versions 3.3.6 and 3.4.3 fix the issue.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-457"
          ],
          "VendorSeverity": {
            "ghsa": 1,
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
              "V3Score": 7.5,
              "V40Score": 2
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 4
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-64181",
            "https://github.com/AcademySoftwareFoundation/openexr",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-3h9h-qfvw-98hq",
            "https://github.com/user-attachments/files/23024726/archive0.zip",
            "https://github.com/user-attachments/files/23024736/archive1.zip",
            "https://github.com/user-attachments/files/23024740/archive2.zip",
            "https://github.com/user-attachments/files/23024744/archive3.zip",
            "https://github.com/user-attachments/files/23024746/archive4.zip",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-64181",
            "https://www.cve.org/CVERecord?id=CVE-2025-64181"
          ],
          "PublishedDate": "2025-11-10T22:15:36.933Z",
          "LastModifiedDate": "2026-06-17T09:53:58.16Z"
        },
        {
          "VulnerabilityID": "CVE-2026-27622",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27622",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7bd812a7680d3f0d37a1eee3aa4bcba080b88421ebfb83a04397783f8597c6c1",
          "Title": "openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated in vector\u003cunsigned int\u003e total_sizes for attacker-controlled large counts across many parts, total_sizes[ptr] wraps modulo 2^32.  overall_sample_count is then derived from wrapped totals and used in samples[channel].resize(overall_sample_count). Decode pointer setup/consumption proceeds with true sample counts, and write operations in core unpack (generic_unpack_deep_pointers) overrun the undersized composite sample buffer. This vulnerability is fixed in v3.2.6, v3.3.8, and v3.4.6.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787",
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.4
            },
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V3Score": 7.8,
              "V40Score": 8.4
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.4
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:12338",
            "https://access.redhat.com/errata/RHSA-2026:12339",
            "https://access.redhat.com/errata/RHSA-2026:12340",
            "https://access.redhat.com/errata/RHSA-2026:12341",
            "https://access.redhat.com/errata/RHSA-2026:16008",
            "https://access.redhat.com/errata/RHSA-2026:16009",
            "https://access.redhat.com/errata/RHSA-2026:16030",
            "https://access.redhat.com/errata/RHSA-2026:16174",
            "https://access.redhat.com/errata/RHSA-2026:7678",
            "https://access.redhat.com/errata/RHSA-2026:7682",
            "https://access.redhat.com/errata/RHSA-2026:8863",
            "https://access.redhat.com/errata/RHSA-2026:8869",
            "https://access.redhat.com/errata/RHSA-2026:8870",
            "https://access.redhat.com/errata/RHSA-2026:8871",
            "https://access.redhat.com/errata/RHSA-2026:8872",
            "https://access.redhat.com/errata/RHSA-2026:8888",
            "https://access.redhat.com/security/cve/CVE-2026-27622",
            "https://bugzilla.redhat.com/2444251",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2444251",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27622",
            "https://errata.almalinux.org/9/ALSA-2026-8888.html",
            "https://errata.rockylinux.org/RLSA-2026:8888",
            "https://github.com/AcademySoftwareFoundation/openexr",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-cr4v-6jm6-4963",
            "https://linux.oracle.com/cve/CVE-2026-27622.html",
            "https://linux.oracle.com/errata/ELSA-2026-8888.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-27622",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27622.json",
            "https://ubuntu.com/security/notices/USN-8259-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-27622"
          ],
          "PublishedDate": "2026-03-03T23:15:55.737Z",
          "LastModifiedDate": "2026-07-15T02:19:08.643Z"
        },
        {
          "VulnerabilityID": "CVE-2026-34379",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-34379",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:88550d1ebb6cbfc9694124f035acab98dbed3c648989912935e3126f5a776a81",
          "Title": "OpenEXR: OpenEXR: Denial of Service due to misaligned memory write during EXR file decoding",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, a misaligned memory write vulnerability exists in LossyDctDecoder_execute() in src/lib/OpenEXRCore/internal_dwa_decoder.h:749. When decoding a DWA or DWAB-compressed EXR file containing a FLOAT-type channel, the decoder performs an in-place HALF→FLOAT conversion by casting an unaligned uint8_t * row pointer to float * and writing through it. Because the row buffer may not be 4-byte aligned, this constitutes undefined behavior under the C standard and crashes immediately on architectures that enforce alignment (ARM, RISC-V, etc.). On x86 it is silently tolerated at runtime but remains exploitable via compiler optimizations that assume aligned access. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-704",
            "CWE-787",
            "CWE-843",
            "CWE-475"
          ],
          "VendorSeverity": {
            "julia": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-34379",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2455402",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/3ad9b29430f9c2599dad113e1efe619a6ec7ba67%20%28main%29",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/76af7d7508819a477f2cbce808ee975da8053ce3%20%28v3.2.7-rc%29",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/d32ffe9d3727c0474b63e91556baf61ced3d89e0%20%28v3.4.9-rc%29",
            "https://github.com/AcademySoftwareFoundation/openexr/pull/2324",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.2.7",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.9",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.9",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-w88v-vqhq-5p24",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-34379",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34379.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-34379"
          ],
          "PublishedDate": "2026-04-06T16:16:35.233Z",
          "LastModifiedDate": "2026-10-26T22:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2026-34543",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-34543",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6d190a00c337bfd8f6ea29710f5d24cee41219020cbf6ffe457972fd0777cd69",
          "Title": "OpenEXR: OpenEXR: Information disclosure via malicious EXR file",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data (information disclosure). This occurs under default settings; simply reading a malicious EXR file is sufficient to trigger the issue, without any user interaction. This issue has been patched in version 3.4.8.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-908"
          ],
          "VendorSeverity": {
            "ghsa": 3,
            "julia": 3,
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 8.7
            },
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
              "V3Score": 7.5,
              "V40Score": 8.7
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "V3Score": 6.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-34543",
            "https://github.com/AcademySoftwareFoundation/openexr",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/5f6d0aaa9e43802917af7db90f181e88e083d3b8",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.8",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-vc68-257w-m432",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-34543",
            "https://www.cve.org/CVERecord?id=CVE-2026-34543"
          ],
          "PublishedDate": "2026-04-01T21:17:01.32Z",
          "LastModifiedDate": "2026-10-26T21:10:00.17Z"
        },
        {
          "VulnerabilityID": "CVE-2026-34544",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-34544",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:66410d96385d09296a3a08d7fd986514d8542c0e0a78164e1188230d25e6fa36",
          "Title": "OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that decodes it via exr_decoding_run(). Consequences range from immediate crash (most likely) to corruption of adjacent heap allocations (layout-dependent). This issue has been patched in version 3.4.8.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190",
            "CWE-787"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "ghsa": 3,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "redhat": 2,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.4
            },
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V3Score": 7.3,
              "V40Score": 8.4
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.3
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
              "V3Score": 6.6
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:86983",
            "https://access.redhat.com/security/cve/CVE-2026-34544",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523654",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523671",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523708",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523752",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34544",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59184",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59189",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59981",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59982",
            "https://errata.almalinux.org/9/ALSA-2026-86983.html",
            "https://errata.rockylinux.org/RLSA-2026:86983",
            "https://github.com/AcademySoftwareFoundation/openexr",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/35e7aa35e22c1975606be86e859f31cc1fc598ee",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.8",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-h762-rhv3-h25v",
            "https://linux.oracle.com/cve/CVE-2026-34544.html",
            "https://linux.oracle.com/errata/ELSA-2026-86983.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-34544",
            "https://www.cve.org/CVERecord?id=CVE-2026-34544"
          ],
          "PublishedDate": "2026-04-01T21:17:01.48Z",
          "LastModifiedDate": "2026-10-26T00:10:00.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-34588",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-34588",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a62440da8a85178932caa4140089f9a8d2dce5ad1db9ce7eeb2032995c430ecc",
          "Title": "OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internal_exr_undo_piz() advances the working wavelet pointer with signed 32-bit arithmetic. Because nx, ny, and wcount are int, a crafted EXR file can make this product overflow and wrap. The next channel then decodes from an incorrect address. The wavelet decode path operates in place, so this yields both out-of-bounds reads and out-of-bounds writes. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125",
            "CWE-190",
            "CWE-787"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V3Score": 7.8,
              "V40Score": 8.6
            },
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V3Score": 7.8,
              "V40Score": 8.6
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 8.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:15887",
            "https://access.redhat.com/errata/RHSA-2026:15888",
            "https://access.redhat.com/errata/RHSA-2026:17656",
            "https://access.redhat.com/errata/RHSA-2026:17658",
            "https://access.redhat.com/errata/RHSA-2026:17659",
            "https://access.redhat.com/errata/RHSA-2026:17660",
            "https://access.redhat.com/errata/RHSA-2026:19146",
            "https://access.redhat.com/errata/RHSA-2026:19359",
            "https://access.redhat.com/errata/RHSA-2026:19587",
            "https://access.redhat.com/errata/RHSA-2026:30078",
            "https://access.redhat.com/errata/RHSA-2026:30087",
            "https://access.redhat.com/errata/RHSA-2026:30088",
            "https://access.redhat.com/errata/RHSA-2026:30089",
            "https://access.redhat.com/security/cve/CVE-2026-34588",
            "https://bugzilla.redhat.com/2455408",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2455408",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34588",
            "https://errata.almalinux.org/9/ALSA-2026-19359.html",
            "https://errata.rockylinux.org/RLSA-2026:19359",
            "https://github.com/AcademySoftwareFoundation/openexr",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/ca0139287918775e1fddc0ed0033d694bec033ff%20%28v3.2.7-rc%29",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/e464a33cc5bcd9f7dad2364bf76c08a52a5b0fbf%20%28main%29",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/ea588c8f075f5915e34931861e15b6c2d3b62561%20%28v3.4.9-rc%29",
            "https://github.com/AcademySoftwareFoundation/openexr/pull/2328",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.2.7",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.9",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.9",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf",
            "https://linux.oracle.com/cve/CVE-2026-34588.html",
            "https://linux.oracle.com/errata/ELSA-2026-19359.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-34588",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34588.json",
            "https://ubuntu.com/security/notices/USN-8259-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-34588"
          ],
          "PublishedDate": "2026-04-06T16:16:35.893Z",
          "LastModifiedDate": "2026-10-26T22:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2026-40244",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40244",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ac510c08ed7bab853a0d8c106026ce4291b915d75a5fe2266edec2b256a2030d",
          "Title": "OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in EXR image processing",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, `internal_dwa_compressor.h:1722` performs `curc-\u003ewidth * curc-\u003eheight` in `int32` arithmetic without a `(size_t)` cast. This is the same overflow pattern fixed in other locations by the recent CVE-2026-34589 batch, but this line was missed. Versions 3.4.10, 3.3.10, and 3.2.8 contain a fix that addresses `internal_dwa_compressor.h:1722`.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "julia": 3,
            "nvd": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V3Score": 7.1,
              "V40Score": 8.4
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
              "V3Score": 8.2
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-40244",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2459955",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.2.8",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.10",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.10",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-j526-66f6-fxhx",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-40244",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40244.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-40244"
          ],
          "PublishedDate": "2026-04-21T02:16:08.06Z",
          "LastModifiedDate": "2026-10-26T21:10:00.17Z"
        },
        {
          "VulnerabilityID": "CVE-2026-40250",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40250",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:896bac36fb527d7b28240a76ba00785210dd2767050ab08489ea698d6fa57142",
          "Title": "OpenEXR: OpenEXR: Integer overflow leads to memory corruption and denial of service",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, `internal_dwa_compressor.h:1040` performs `chan-\u003ewidth * chan-\u003ebytes_per_element` in `int32` arithmetic without a `(size_t)` cast. This is the same overflow pattern fixed in other decoders by CVE-2026-34589/34588/34544, but this line was missed. Versions 3.4.10, 3.3.10, and 3.2.8 contain a fix that addresses `internal_dwa_compressor.h:1040`.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "julia": 3,
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V3Score": 7.1,
              "V40Score": 8.4
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H",
              "V3Score": 6.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-40250",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.2.8",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.10",
            "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.10",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-m5qw-23x2-6phj",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-40250",
            "https://www.cve.org/CVERecord?id=CVE-2026-40250"
          ],
          "PublishedDate": "2026-04-21T02:16:08.213Z",
          "LastModifiedDate": "2026-10-26T21:10:00.17Z"
        },
        {
          "VulnerabilityID": "CVE-2026-41142",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41142",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:85c6e1c752d53ebffa77add7f22e9b8a78cd330330dd4188fc2b69b8a5f64151",
          "Title": "OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing",
          "Description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, there is an integer overflow in ImageChannel::resize that leads to heap OOB write via OpenEXRUtil public API. This issue has been patched in versions 3.2.9, 3.3.11, and 3.4.11.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "julia": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 8.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 8.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:38498",
            "https://access.redhat.com/errata/RHSA-2026:38499",
            "https://access.redhat.com/errata/RHSA-2026:39024",
            "https://access.redhat.com/errata/RHSA-2026:39025",
            "https://access.redhat.com/errata/RHSA-2026:39026",
            "https://access.redhat.com/errata/RHSA-2026:39027",
            "https://access.redhat.com/security/cve/CVE-2026-41142",
            "https://bugzilla.redhat.com/2467623",
            "https://bugzilla.redhat.com/2467633",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467623",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467633",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41142",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42216",
            "https://errata.almalinux.org/9/ALSA-2026-38498.html",
            "https://errata.rockylinux.org/RLSA-2026:38498",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/0592ee539f33c122c90f09238579b902d838afb4",
            "https://github.com/AcademySoftwareFoundation/openexr/pull/2367",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-m25w-72cj-q6mg",
            "https://linux.oracle.com/cve/CVE-2026-41142.html",
            "https://linux.oracle.com/errata/ELSA-2026-38499.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-41142",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41142.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-41142"
          ],
          "PublishedDate": "2026-05-07T04:16:26.02Z",
          "LastModifiedDate": "2026-10-26T19:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2026-59184",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59184",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:2579c542c9a8bcb2e8f9a0f5de572f2a9e40708a7f8a4d3c0c0a440561b8bc45",
          "Title": "OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files",
          "Description": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416",
            "CWE-787"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:86983",
            "https://access.redhat.com/security/cve/CVE-2026-59184",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523654",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523671",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523708",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523752",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34544",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59184",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59189",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59981",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59982",
            "https://errata.almalinux.org/9/ALSA-2026-86983.html",
            "https://errata.rockylinux.org/RLSA-2026:86983",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-pqp9-558c-453q",
            "https://linux.oracle.com/cve/CVE-2026-59184.html",
            "https://linux.oracle.com/errata/ELSA-2026-86983.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-59184",
            "https://www.cve.org/CVERecord?id=CVE-2026-59184"
          ],
          "PublishedDate": "2026-08-25T17:17:36.603Z",
          "LastModifiedDate": "2026-09-09T21:07:31.353Z"
        },
        {
          "VulnerabilityID": "CVE-2026-59186",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59186",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a081232dfede5487f1f5633a4a7c8f88fb6a46bc50b3d3b14538bf44add34373",
          "Title": "OpenEXR: OpenEXR: Heap out-of-bounds write via crafted tiled EXR file",
          "Description": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read through the public TiledRgbaInputFile RGBA API. The file uses a small 40x40 dataWindow but a 65537x65537 tile size. On ILP32, the Array2D\u003cRgba\u003e tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122",
            "CWE-190",
            "CWE-787"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:82345",
            "https://access.redhat.com/security/cve/CVE-2026-59186",
            "https://bugzilla.redhat.com/2523654",
            "https://bugzilla.redhat.com/2523655",
            "https://bugzilla.redhat.com/2523671",
            "https://bugzilla.redhat.com/2523747",
            "https://bugzilla.redhat.com/2523752",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523654",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523655",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523671",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523747",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523752",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59184",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59186",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59189",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59981",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68515",
            "https://errata.almalinux.org/8/ALSA-2026-82345.html",
            "https://errata.rockylinux.org/RLSA-2026:82345",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/71907b44ce9a1b05bf3934b8a7821752750731ab",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/904141d3a1f86327ad1e2b93fc92ce2dd5881d34",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/b1a5887372772d79328f4eb42b7f86352a38170b",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-f667-c4wm-c8gq",
            "https://linux.oracle.com/cve/CVE-2026-59186.html",
            "https://linux.oracle.com/errata/ELSA-2026-82345.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-59186",
            "https://www.cve.org/CVERecord?id=CVE-2026-59186"
          ],
          "PublishedDate": "2026-08-25T17:17:36.787Z",
          "LastModifiedDate": "2026-09-09T21:07:31.353Z"
        },
        {
          "VulnerabilityID": "CVE-2026-59189",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59189",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c1983cc1962f8c7a335e267d4469440ee6a61c5698a16b0551377787f67d17e4",
          "Title": "OpenEXR: OpenEXR: Information disclosure and denial of service due to out-of-bounds read",
          "Description": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.12, the documented TypedDeepImageChannel\u003cT\u003e::row() API can return an out-of-bounds pointer when a deep image has a non-zero dataWindow origin, resulting in a heap out-of-bounds read and crash, with potential information disclosure under a controlled heap layout. The flaw arises because ImfDeepImageChannel uses two conflicting coordinate models: at(x, y) uses absolute coordinates (with _base offset by dataWindow.min), while row(r) is documented as 0-based logical access. For a non-zero dataWindow.min, row(0) therefore points outside the _sampleListPointers allocation instead of at the first logical row. This issue is fixed in versions 3.3.13 and 3.4.13.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:86983",
            "https://access.redhat.com/security/cve/CVE-2026-59189",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523654",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523671",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523708",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523752",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34544",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59184",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59189",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59981",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59982",
            "https://errata.almalinux.org/9/ALSA-2026-86983.html",
            "https://errata.rockylinux.org/RLSA-2026:86983",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-hwmv-39v6-739m",
            "https://linux.oracle.com/cve/CVE-2026-59189.html",
            "https://linux.oracle.com/errata/ELSA-2026-86983.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-59189",
            "https://www.cve.org/CVERecord?id=CVE-2026-59189"
          ],
          "PublishedDate": "2026-08-25T17:17:37.16Z",
          "LastModifiedDate": "2026-09-09T21:07:31.353Z"
        },
        {
          "VulnerabilityID": "CVE-2026-59981",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59981",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9a0084dea693d950857807c526e9dfb31c469f2bdfa95e8963ca8367e951c83f",
          "Title": "OpenEXR: OpenEXR: Information disclosure and denial of service via out-of-bounds read",
          "Description": "OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, the OpenEXRUtil library returns an out-of-bounds pointer from the SampleCountChannel::row() API when a deep image has a non-zero dataWindow origin. The row() accessor is documented as 0-based and computes its address from an internal base that is offset for absolute pixel coordinates, so the two coordinate models conflict whenever dataWindow.min is non-zero. For a deep image whose data window has a large negative vertical origin, row(0) points far outside the allocated sample-count buffer. An application that opens an attacker-controlled deep EXR file and accesses sample counts through row() performs an out-of-bounds read, which can crash the process or, under a controlled heap layout, return adjacent heap memory as sample-count values. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:86983",
            "https://access.redhat.com/security/cve/CVE-2026-59981",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523654",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523671",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523708",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523752",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34544",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59184",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59189",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59981",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59982",
            "https://errata.almalinux.org/9/ALSA-2026-86983.html",
            "https://errata.rockylinux.org/RLSA-2026:86983",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-m799-ffc3-8pxc",
            "https://linux.oracle.com/cve/CVE-2026-59981.html",
            "https://linux.oracle.com/errata/ELSA-2026-86983.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-59981",
            "https://www.cve.org/CVERecord?id=CVE-2026-59981"
          ],
          "PublishedDate": "2026-08-25T20:16:58.907Z",
          "LastModifiedDate": "2026-09-09T21:07:31.353Z"
        },
        {
          "VulnerabilityID": "CVE-2026-59982",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59982",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ca1597f33260502595e0b503a31489a81ba760ef98b6f62c28399aea949b80c6",
          "Title": "OpenEXR: OpenEXR: Denial of Service or Information Disclosure via crafted EXR image file",
          "Description": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row() when a crafted deep EXR has a nonzero dataWindow origin. This vulnerability occurs because the API combines zero-based row access with an absolute-coordinate-adjusted base pointer, allowing a crash or limited information disclosure. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190",
            "CWE-787"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:86983",
            "https://access.redhat.com/security/cve/CVE-2026-59982",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523654",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523671",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523708",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523752",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34544",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59184",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59189",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59981",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59982",
            "https://errata.almalinux.org/9/ALSA-2026-86983.html",
            "https://errata.rockylinux.org/RLSA-2026:86983",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-6662-fq6f-93mp",
            "https://linux.oracle.com/cve/CVE-2026-59982.html",
            "https://linux.oracle.com/errata/ELSA-2026-86983.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-59982",
            "https://www.cve.org/CVERecord?id=CVE-2026-59982"
          ],
          "PublishedDate": "2026-08-25T18:17:56.747Z",
          "LastModifiedDate": "2026-09-09T21:07:31.353Z"
        },
        {
          "VulnerabilityID": "CVE-2026-68515",
          "PkgID": "libopenexr-3-1-30@3.1.13-2",
          "PkgName": "libopenexr-3-1-30",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libopenexr-3-1-30@3.1.13-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "2bbdb0f11df24a4c"
          },
          "InstalledVersion": "3.1.13-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68515",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:bebfb78433eef629126db254296754662ef5c797417691c0a1d3ad1cf5dd57d5",
          "Title": "OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files",
          "Description": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it combines two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view's channel subsampling. The utility allocates sampled channel storage using a truncated union_width / xSampling, then reads the sampled input through a Slice based on the misaligned union window, producing a heap out-of-bounds write. The trigger is normal public-tool processing, such as exrmultiview left A.exr right B.exr out.exr with crafted but valid inputs, so this is not solely an API or caller-precondition issue. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122",
            "CWE-787"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:69608",
            "https://access.redhat.com/security/cve/CVE-2026-68515",
            "https://bugzilla.redhat.com/2523747",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523747",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68515",
            "https://errata.almalinux.org/9/ALSA-2026-69608.html",
            "https://errata.rockylinux.org/RLSA-2026:69608",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/77ee19c021398b1c56f32c3af8347e365dbd4f33",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/c644ac2dfeac82939c81a8551d6f4b7859f63add",
            "https://github.com/AcademySoftwareFoundation/openexr/commit/e2300a3d54a93d20a36a86b82f3a506c4c91476f",
            "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-gjf7-wjjw-xq56",
            "https://linux.oracle.com/cve/CVE-2026-68515.html",
            "https://linux.oracle.com/errata/ELSA-2026-82345.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-68515",
            "https://www.cve.org/CVERecord?id=CVE-2026-68515"
          ],
          "PublishedDate": "2026-08-25T20:17:02.78Z",
          "LastModifiedDate": "2026-09-09T21:07:31.353Z"
        },
        {
          "VulnerabilityID": "CVE-2026-9538",
          "PkgID": "libperl5.40@5.40.1-6+deb13u1",
          "PkgName": "libperl5.40",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "25a808bf789392f4"
          },
          "InstalledVersion": "5.40.1-6+deb13u1",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9282cbb6f552a768d416c8ecd24390a523943f88b3ee3eb5c7374acb823251e0",
          "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size",
          "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-789"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/26/4",
            "https://access.redhat.com/errata/RHSA-2026:49525",
            "https://access.redhat.com/security/cve/CVE-2026-9538",
            "https://bugzilla.redhat.com/2481315",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481315",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538",
            "https://errata.almalinux.org/9/ALSA-2026-49525.html",
            "https://errata.rockylinux.org/RLSA-2026:49525",
            "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch",
            "https://linux.oracle.com/cve/CVE-2026-9538.html",
            "https://linux.oracle.com/errata/ELSA-2026-49525.html",
            "https://lists.security.metacpan.org/cve-announce/msg/40396448/",
            "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-9538",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-9538"
          ],
          "PublishedDate": "2026-05-26T02:16:41.15Z",
          "LastModifiedDate": "2026-07-23T11:10:00.12Z"
        },
        {
          "VulnerabilityID": "CVE-2026-15308",
          "PkgID": "libpython3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "2b46bbe036589b95"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15308",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:25fe206ac05aa43eccff4ebbf85127430478d44c7ddb67fa28160bda1744cb4a",
          "Title": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations",
          "Description": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "bitnami": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.7
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/07/09/4",
            "https://access.redhat.com/errata/RHSA-2026:39798",
            "https://access.redhat.com/errata/RHSA-2026:41949",
            "https://access.redhat.com/security/cve/CVE-2026-15308",
            "https://bugzilla.redhat.com/2498608",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2498608",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15308",
            "https://errata.almalinux.org/9/ALSA-2026-41949.html",
            "https://errata.rockylinux.org/RLSA-2026:39798",
            "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9",
            "https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7",
            "https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14",
            "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced",
            "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606",
            "https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00",
            "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd",
            "https://github.com/python/cpython/issues/153030",
            "https://github.com/python/cpython/pull/153031",
            "https://linux.oracle.com/cve/CVE-2026-15308.html",
            "https://linux.oracle.com/errata/ELSA-2026-41949.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-15308",
            "https://ubuntu.com/security/notices/USN-8744-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-15308"
          ],
          "PublishedDate": "2026-07-09T17:16:58.26Z",
          "LastModifiedDate": "2026-10-25T17:10:00.197Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19445",
          "PkgID": "libpython3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "2b46bbe036589b95"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19445",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6f1468c4d714b51f4a674d078f56d77983b9ed3224dff89cd324fa138a6e19b0",
          "Title": "python: Use-after-free of a server-side SSLContext when sni_callback switches contexts",
          "Description": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 4,
            "bitnami": 4,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
              "V40Score": 9.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/30/17",
            "https://access.redhat.com/errata/RHSA-2026:89742",
            "https://access.redhat.com/security/cve/CVE-2026-19445",
            "https://bugzilla.redhat.com/2543492",
            "https://bugzilla.redhat.com/2544127",
            "https://bugzilla.redhat.com/2544138",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2543492",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544138",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12345",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19445",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19553",
            "https://errata.almalinux.org/9/ALSA-2026-89742.html",
            "https://errata.rockylinux.org/RLSA-2026:89742",
            "https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d",
            "https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b",
            "https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7",
            "https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8",
            "https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698",
            "https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c",
            "https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b",
            "https://github.com/python/cpython/issues/156293",
            "https://github.com/python/cpython/pull/158504",
            "https://linux.oracle.com/cve/CVE-2026-19445.html",
            "https://linux.oracle.com/errata/ELSA-2026-89742.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19445",
            "https://www.cve.org/CVERecord?id=CVE-2026-19445"
          ],
          "PublishedDate": "2026-09-30T17:16:45.72Z",
          "LastModifiedDate": "2026-10-03T01:17:24.93Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19553",
          "PkgID": "libpython3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "2b46bbe036589b95"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19553",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:22990ef86add5305dd7ae8e79abf098e82a1bb3bb14383db23136c0f9993809a",
          "Title": "python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()",
          "Description": "ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-297"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "bitnami": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 7.6
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 7.4
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/30/16",
            "https://access.redhat.com/errata/RHSA-2026:89742",
            "https://access.redhat.com/security/cve/CVE-2026-19553",
            "https://bugzilla.redhat.com/2543492",
            "https://bugzilla.redhat.com/2544127",
            "https://bugzilla.redhat.com/2544138",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2543492",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544138",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12345",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19445",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19553",
            "https://errata.almalinux.org/9/ALSA-2026-89742.html",
            "https://errata.rockylinux.org/RLSA-2026:89742",
            "https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96",
            "https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf",
            "https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082",
            "https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed",
            "https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced",
            "https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80",
            "https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062",
            "https://github.com/python/cpython/issues/156793",
            "https://github.com/python/cpython/pull/158503",
            "https://linux.oracle.com/cve/CVE-2026-19553.html",
            "https://linux.oracle.com/errata/ELSA-2026-89742.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19553",
            "https://www.cve.org/CVERecord?id=CVE-2026-19553"
          ],
          "PublishedDate": "2026-09-30T17:16:45.88Z",
          "LastModifiedDate": "2026-10-16T19:17:06.673Z"
        },
        {
          "VulnerabilityID": "CVE-2026-7210",
          "PkgID": "libpython3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "2b46bbe036589b95"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-7210",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f0b414a3f73aef365f382e949f937162c64189d9c92d99378201d6875d3758ab",
          "Title": "python: Python/Expat: Denial of Service via crafted XML document",
          "Description": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-331"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "bitnami": 3,
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "bitnami": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/11/13",
            "http://www.openwall.com/lists/oss-security/2026/05/11/8",
            "https://access.redhat.com/security/cve/CVE-2026-7210",
            "https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4",
            "https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566",
            "https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56",
            "https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b",
            "https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286",
            "https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a",
            "https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f",
            "https://github.com/python/cpython/issues/149018",
            "https://github.com/python/cpython/pull/149023",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-7210",
            "https://www.cve.org/CVERecord?id=CVE-2026-7210"
          ],
          "PublishedDate": "2026-05-11T18:16:42.413Z",
          "LastModifiedDate": "2026-10-26T18:10:00.173Z"
        },
        {
          "VulnerabilityID": "CVE-2026-82049",
          "PkgID": "libpython3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "2b46bbe036589b95"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82049",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:db35d99a434c40b8f80c8b2351b60aeac6133394094dbe702f33a35731962569",
          "Title": "python: Python tarfile module: File modification and content disclosure via crafted archives",
          "Description": "In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "bitnami": 3,
            "redhat": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 8.4
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "V3Score": 7.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/14/27",
            "https://access.redhat.com/security/cve/CVE-2026-82049",
            "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913",
            "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771",
            "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca",
            "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3",
            "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d",
            "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8",
            "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e",
            "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c",
            "https://github.com/python/cpython/issues/157190",
            "https://github.com/python/cpython/pull/157191",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-82049",
            "https://www.cve.org/CVERecord?id=CVE-2026-82049"
          ],
          "PublishedDate": "2026-09-14T19:17:50.927Z",
          "LastModifiedDate": "2026-10-11T01:16:25.82Z"
        },
        {
          "VulnerabilityID": "CVE-2026-15308",
          "PkgID": "libpython3.13-stdlib@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-stdlib",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-stdlib@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "d927ada341a0fb1e"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15308",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6b12a20cbf3c312d0c2f3693a07758a94c2c82fa67d2f8f532a188fc1a0c32cd",
          "Title": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations",
          "Description": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "bitnami": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.7
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/07/09/4",
            "https://access.redhat.com/errata/RHSA-2026:39798",
            "https://access.redhat.com/errata/RHSA-2026:41949",
            "https://access.redhat.com/security/cve/CVE-2026-15308",
            "https://bugzilla.redhat.com/2498608",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2498608",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15308",
            "https://errata.almalinux.org/9/ALSA-2026-41949.html",
            "https://errata.rockylinux.org/RLSA-2026:39798",
            "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9",
            "https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7",
            "https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14",
            "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced",
            "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606",
            "https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00",
            "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd",
            "https://github.com/python/cpython/issues/153030",
            "https://github.com/python/cpython/pull/153031",
            "https://linux.oracle.com/cve/CVE-2026-15308.html",
            "https://linux.oracle.com/errata/ELSA-2026-41949.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-15308",
            "https://ubuntu.com/security/notices/USN-8744-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-15308"
          ],
          "PublishedDate": "2026-07-09T17:16:58.26Z",
          "LastModifiedDate": "2026-10-25T17:10:00.197Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19445",
          "PkgID": "libpython3.13-stdlib@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-stdlib",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-stdlib@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "d927ada341a0fb1e"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19445",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3d924e4fc8370504f3de7fd0ac61e7d8f58fc0df18b097817476585787902028",
          "Title": "python: Use-after-free of a server-side SSLContext when sni_callback switches contexts",
          "Description": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 4,
            "bitnami": 4,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
              "V40Score": 9.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/30/17",
            "https://access.redhat.com/errata/RHSA-2026:89742",
            "https://access.redhat.com/security/cve/CVE-2026-19445",
            "https://bugzilla.redhat.com/2543492",
            "https://bugzilla.redhat.com/2544127",
            "https://bugzilla.redhat.com/2544138",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2543492",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544138",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12345",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19445",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19553",
            "https://errata.almalinux.org/9/ALSA-2026-89742.html",
            "https://errata.rockylinux.org/RLSA-2026:89742",
            "https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d",
            "https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b",
            "https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7",
            "https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8",
            "https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698",
            "https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c",
            "https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b",
            "https://github.com/python/cpython/issues/156293",
            "https://github.com/python/cpython/pull/158504",
            "https://linux.oracle.com/cve/CVE-2026-19445.html",
            "https://linux.oracle.com/errata/ELSA-2026-89742.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19445",
            "https://www.cve.org/CVERecord?id=CVE-2026-19445"
          ],
          "PublishedDate": "2026-09-30T17:16:45.72Z",
          "LastModifiedDate": "2026-10-03T01:17:24.93Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19553",
          "PkgID": "libpython3.13-stdlib@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-stdlib",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-stdlib@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "d927ada341a0fb1e"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19553",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e4925179e701a5efa925a281b925982af1c8c151b786e2fff1f9d145fd3300f6",
          "Title": "python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()",
          "Description": "ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-297"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "bitnami": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 7.6
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 7.4
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/30/16",
            "https://access.redhat.com/errata/RHSA-2026:89742",
            "https://access.redhat.com/security/cve/CVE-2026-19553",
            "https://bugzilla.redhat.com/2543492",
            "https://bugzilla.redhat.com/2544127",
            "https://bugzilla.redhat.com/2544138",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2543492",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544138",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12345",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19445",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19553",
            "https://errata.almalinux.org/9/ALSA-2026-89742.html",
            "https://errata.rockylinux.org/RLSA-2026:89742",
            "https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96",
            "https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf",
            "https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082",
            "https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed",
            "https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced",
            "https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80",
            "https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062",
            "https://github.com/python/cpython/issues/156793",
            "https://github.com/python/cpython/pull/158503",
            "https://linux.oracle.com/cve/CVE-2026-19553.html",
            "https://linux.oracle.com/errata/ELSA-2026-89742.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19553",
            "https://www.cve.org/CVERecord?id=CVE-2026-19553"
          ],
          "PublishedDate": "2026-09-30T17:16:45.88Z",
          "LastModifiedDate": "2026-10-16T19:17:06.673Z"
        },
        {
          "VulnerabilityID": "CVE-2026-7210",
          "PkgID": "libpython3.13-stdlib@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-stdlib",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-stdlib@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "d927ada341a0fb1e"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-7210",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:db8348c9970065b38eed9b732e21d2dfab34755bc087e4d89096fb35d4e6e20d",
          "Title": "python: Python/Expat: Denial of Service via crafted XML document",
          "Description": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-331"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "bitnami": 3,
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "bitnami": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/11/13",
            "http://www.openwall.com/lists/oss-security/2026/05/11/8",
            "https://access.redhat.com/security/cve/CVE-2026-7210",
            "https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4",
            "https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566",
            "https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56",
            "https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b",
            "https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286",
            "https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a",
            "https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f",
            "https://github.com/python/cpython/issues/149018",
            "https://github.com/python/cpython/pull/149023",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-7210",
            "https://www.cve.org/CVERecord?id=CVE-2026-7210"
          ],
          "PublishedDate": "2026-05-11T18:16:42.413Z",
          "LastModifiedDate": "2026-10-26T18:10:00.173Z"
        },
        {
          "VulnerabilityID": "CVE-2026-82049",
          "PkgID": "libpython3.13-stdlib@3.13.5-2+deb13u5",
          "PkgName": "libpython3.13-stdlib",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libpython3.13-stdlib@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "d927ada341a0fb1e"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82049",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:254acd4934cfddf8e8fa7e23c6177fcfce25d8aabce11acef6af24e13a3fce1a",
          "Title": "python: Python tarfile module: File modification and content disclosure via crafted archives",
          "Description": "In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "bitnami": 3,
            "redhat": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 8.4
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "V3Score": 7.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/14/27",
            "https://access.redhat.com/security/cve/CVE-2026-82049",
            "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913",
            "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771",
            "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca",
            "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3",
            "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d",
            "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8",
            "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e",
            "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c",
            "https://github.com/python/cpython/issues/157190",
            "https://github.com/python/cpython/pull/157191",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-82049",
            "https://www.cve.org/CVERecord?id=CVE-2026-82049"
          ],
          "PublishedDate": "2026-09-14T19:17:50.927Z",
          "LastModifiedDate": "2026-10-11T01:16:25.82Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "libsmartcols1@2.41.5-0+deb13u1",
          "PkgName": "libsmartcols1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "94502fa5e10395c7"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d323651101dde5b99b3f0040c5a8b7f2e799e727d8cd6b4d044d1c30c6380fc3",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "libsmartcols1@2.41.5-0+deb13u1",
          "PkgName": "libsmartcols1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "94502fa5e10395c7"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6cc058df10fae221f76e58e633f143439cd32a6bbe7d75d91fcece35315b5807",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "libsmartcols1@2.41.5-0+deb13u1",
          "PkgName": "libsmartcols1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "94502fa5e10395c7"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:229deced4f5d991fdce7e5b2dee9bfeb2232637406fcfe407f2b87729ff2510d",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libsmartcols1@2.41.5-0+deb13u1",
          "PkgName": "libsmartcols1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "94502fa5e10395c7"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:24de9a2b4d53c24578e770be717518db262ba2b66930515d908af93c0f3ca922",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-119373",
          "PkgID": "libsqlite3-0@3.46.1-7+deb13u2",
          "PkgName": "libsqlite3-0",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "283f5d44571e2d3e"
          },
          "InstalledVersion": "3.46.1-7+deb13u2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119373",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f0ea854917237f6138a9324ac55b2ba9f17b09ba4ba31ea8e089bd09b2894f49",
          "Title": "sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5",
          "Description": "SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge",
            "https://access.redhat.com/security/cve/CVE-2026-119373",
            "https://github.com/sqlite/sqlite",
            "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107",
            "https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-119373",
            "https://sqlite.org/bugs/info/2026-08-04T08:49:27Z",
            "https://sqlite.org/releaselog/3_54_0.html",
            "https://sqlite.org/src/info/a7f8c92f62",
            "https://www.cve.org/CVERecord?id=CVE-2026-119373",
            "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists"
          ],
          "PublishedDate": "2026-10-30T12:16:36.027Z",
          "LastModifiedDate": "2026-11-05T21:18:41.047Z"
        },
        {
          "VulnerabilityID": "CVE-2026-119374",
          "PkgID": "libsqlite3-0@3.46.1-7+deb13u2",
          "PkgName": "libsqlite3-0",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "283f5d44571e2d3e"
          },
          "InstalledVersion": "3.46.1-7+deb13u2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119374",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:68d2ce69df6697de31939d2a5dedb40a8552db854f21c78aa5f5cf1ca699632d",
          "Title": "sqlite: sqlite: Arbitrary code execution via corrupted FTS5 index",
          "Description": "SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://abraxaslabs.tech/research/sqlite-fts5-securedel",
            "https://access.redhat.com/security/cve/CVE-2026-119374",
            "https://github.com/sqlite/sqlite",
            "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525",
            "https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-119374",
            "https://sqlite.org/releaselog/3_54_0.html",
            "https://sqlite.org/src/info/9cd4f9e920",
            "https://www.cve.org/CVERecord?id=CVE-2026-119374",
            "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete"
          ],
          "PublishedDate": "2026-10-30T12:16:36.187Z",
          "LastModifiedDate": "2026-11-03T16:09:06.143Z"
        },
        {
          "VulnerabilityID": "CVE-2026-119379",
          "PkgID": "libsqlite3-0@3.46.1-7+deb13u2",
          "PkgName": "libsqlite3-0",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7",
            "UID": "283f5d44571e2d3e"
          },
          "InstalledVersion": "3.46.1-7+deb13u2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119379",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f4dc1f3227525f0f7f1e624d7754e5b00ff2040064f04a09eb280dd6f5ef84e6",
          "Title": "sqlite: sqlite: Arbitrary code execution via crafted session changesets",
          "Description": "SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://abraxaslabs.tech/research/sqlite-session-ncol",
            "https://access.redhat.com/security/cve/CVE-2026-119379",
            "https://github.com/sqlite/sqlite",
            "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619",
            "https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-119379",
            "https://sqlite.org/bugs/info/2026-08-16T10:15:25Z",
            "https://sqlite.org/releaselog/3_54_0.html",
            "https://sqlite.org/src/info/3f57024aecea0f3b",
            "https://www.cve.org/CVERecord?id=CVE-2026-119379",
            "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind"
          ],
          "PublishedDate": "2026-10-30T12:16:36.967Z",
          "LastModifiedDate": "2026-11-03T15:38:24.827Z"
        },
        {
          "VulnerabilityID": "CVE-2026-16742",
          "PkgID": "libsystemd0@257.13-1~deb13u1",
          "PkgName": "libsystemd0",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsystemd0@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "b0cd86eb50280666"
          },
          "InstalledVersion": "257.13-1~deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:4bf0dd85da1c33ad381773ab9ca48f785484a4e6b951a8ebe8bc42de11524101",
          "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification",
          "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-269",
            "CWE-347"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 8.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-16742",
            "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-16742",
            "https://ubuntu.com/security/notices/USN-8626-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-16742"
          ],
          "PublishedDate": "2026-08-10T14:17:21.277Z",
          "LastModifiedDate": "2026-10-23T20:10:00.16Z"
        },
        {
          "VulnerabilityID": "CVE-2026-36849",
          "PkgID": "libtiff6@4.7.0-3+deb13u3",
          "PkgName": "libtiff6",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libtiff6@4.7.0-3%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "fce4530ba34e0f3b"
          },
          "InstalledVersion": "4.7.0-3+deb13u3",
          "Status": "will_not_fix",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-36849",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:11a0499adf6cdf97e23a522a2177e1693646b83915fab86e57957dda43f79d99",
          "Title": "[Denial of Service via large SamplesPerPixel tag]",
          "Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-36849:\n\tDenial of Service via large SamplesPerPixel tag\n\nCVE-2026-12912:\n\tA flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).\n",
          "Severity": "HIGH",
          "VendorSeverity": {
            "amazon": 3
          }
        },
        {
          "VulnerabilityID": "CVE-2026-52490",
          "PkgID": "libtiff6@4.7.0-3+deb13u3",
          "PkgName": "libtiff6",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libtiff6@4.7.0-3%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "fce4530ba34e0f3b"
          },
          "InstalledVersion": "4.7.0-3+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-52490",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:77cf9e45b4b6ef2ff4a8135492be2f5d25067f24256301fb431feafd21996c80",
          "Title": "libtiff: libtiff: Arbitrary code execution via process_command_opts() function",
          "Description": "An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-94"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.3
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:69095",
            "https://access.redhat.com/security/cve/CVE-2026-52490",
            "https://bugzilla.redhat.com/2523148",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2523148",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52490",
            "https://errata.almalinux.org/8/ALSA-2026-69095.html",
            "https://errata.rockylinux.org/RLSA-2026:69095",
            "https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671",
            "https://gitlab.com/libtiff/libtiff/-/work_items/846",
            "https://linux.oracle.com/cve/CVE-2026-52490.html",
            "https://linux.oracle.com/errata/ELSA-2026-69095.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-52490",
            "https://www.cve.org/CVERecord?id=CVE-2026-52490"
          ],
          "PublishedDate": "2026-08-24T21:17:19.803Z",
          "LastModifiedDate": "2026-10-12T21:10:00.227Z"
        },
        {
          "VulnerabilityID": "CVE-2025-69720",
          "PkgID": "libtinfo6@6.5+20250216-2",
          "PkgName": "libtinfo6",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "c19e4ba0186ba329"
          },
          "InstalledVersion": "6.5+20250216-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:60ac18097b97fc9988430b3724e9abf1fd4d75e40e476be57af8ba959f68b61f",
          "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
          "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121",
            "CWE-120"
          ],
          "VendorSeverity": {
            "alma": 2,
            "azure": 4,
            "cbl-mariner": 4,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:5913",
            "https://access.redhat.com/security/cve/CVE-2025-69720",
            "https://bugzilla.redhat.com/2449037",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
            "https://errata.almalinux.org/10/ALSA-2026-5913.html",
            "https://errata.rockylinux.org/RLSA-2026:5913",
            "https://github.com/Cao-Wuhui/CVE-2025-69720",
            "https://github.com/advisories/GHSA-9952-mrqj-h4jh",
            "https://invisible-island.net/archives/ncurses/6.5",
            "https://invisible-island.net/archives/ncurses/6.5/",
            "https://invisible-island.net/ncurses",
            "https://invisible-island.net/ncurses/",
            "https://linux.oracle.com/cve/CVE-2025-69720.html",
            "https://linux.oracle.com/errata/ELSA-2026-5913.html",
            "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
            "https://ubuntu.com/security/notices/USN-8503-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-69720"
          ],
          "PublishedDate": "2026-03-19T15:16:21.293Z",
          "LastModifiedDate": "2026-06-17T10:00:50.423Z"
        },
        {
          "VulnerabilityID": "CVE-2026-16742",
          "PkgID": "libudev1@257.13-1~deb13u1",
          "PkgName": "libudev1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libudev1@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "9d7053ae266a0055"
          },
          "InstalledVersion": "257.13-1~deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:62f8f9ce769c25b2d9f1a01b9cbc6d2022c3e11ca455f0a72dc6ef15e5ea5760",
          "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification",
          "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-269",
            "CWE-347"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 8.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-16742",
            "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-16742",
            "https://ubuntu.com/security/notices/USN-8626-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-16742"
          ],
          "PublishedDate": "2026-08-10T14:17:21.277Z",
          "LastModifiedDate": "2026-10-23T20:10:00.16Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "libuuid1@2.41.5-0+deb13u1",
          "PkgName": "libuuid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "3a03f1816c93c994"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c11f7244f2044d626159fd628800058420f4f036343a231b4c17a3812ab9caea",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "libuuid1@2.41.5-0+deb13u1",
          "PkgName": "libuuid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "3a03f1816c93c994"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:13363889b099a4b1f78424a5b240346f2ee0fd3d5598c1597188a3a6eb99c8fe",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "libuuid1@2.41.5-0+deb13u1",
          "PkgName": "libuuid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "3a03f1816c93c994"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a3aa4e0c05bb1e16d2b47a33b447565fc7431c38b8f53532a1b1d988948cc09e",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libuuid1@2.41.5-0+deb13u1",
          "PkgName": "libuuid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "3a03f1816c93c994"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:4f7a70a4a6f7308c7a3c551c2cef42b168e0608407b77d19b170c4bbbaa59fea",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-88806",
          "PkgID": "libx11-6@2:1.8.12-1",
          "PkgName": "libx11-6",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libx11-6@1.8.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2",
            "UID": "93086fe1330bae05"
          },
          "InstalledVersion": "2:1.8.12-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88806",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:abcf94ec6e0ae21736f59ca80be3d034b898bd19f2a82e9f23ae28c4c72a9d6b",
          "Title": "libX11: libX11: Heap-based buffer overflow via malicious X server",
          "Description": "A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:91365",
            "https://access.redhat.com/security/cve/CVE-2026-88806",
            "https://bugzilla.redhat.com/2538514",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2538514",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806",
            "https://errata.almalinux.org/9/ALSA-2026-91365.html",
            "https://errata.rockylinux.org/RLSA-2026:91365",
            "https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309",
            "https://linux.oracle.com/cve/CVE-2026-88806.html",
            "https://linux.oracle.com/errata/ELSA-2026-91366.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-88806",
            "https://ubuntu.com/security/notices/USN-8913-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-88806"
          ],
          "PublishedDate": "2026-09-21T14:17:22.273Z",
          "LastModifiedDate": "2026-09-22T19:40:05.87Z"
        },
        {
          "VulnerabilityID": "CVE-2026-88806",
          "PkgID": "libx11-data@2:1.8.12-1",
          "PkgName": "libx11-data",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libx11-data@1.8.12-1?arch=all\u0026distro=debian-13.7\u0026epoch=2",
            "UID": "c47635e95e857889"
          },
          "InstalledVersion": "2:1.8.12-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88806",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:4abf0dd47a09e5294990186acd2a4d1e38811654d1f6197c43c3bb564fb19492",
          "Title": "libX11: libX11: Heap-based buffer overflow via malicious X server",
          "Description": "A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:91365",
            "https://access.redhat.com/security/cve/CVE-2026-88806",
            "https://bugzilla.redhat.com/2538514",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2538514",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806",
            "https://errata.almalinux.org/9/ALSA-2026-91365.html",
            "https://errata.rockylinux.org/RLSA-2026:91365",
            "https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309",
            "https://linux.oracle.com/cve/CVE-2026-88806.html",
            "https://linux.oracle.com/errata/ELSA-2026-91366.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-88806",
            "https://ubuntu.com/security/notices/USN-8913-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-88806"
          ],
          "PublishedDate": "2026-09-21T14:17:22.273Z",
          "LastModifiedDate": "2026-09-22T19:40:05.87Z"
        },
        {
          "VulnerabilityID": "CVE-2026-6653",
          "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "PkgName": "libxml2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6653",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:bcaa933d664d2cf7de1dd92e1250da64a1b390f5d23251ad10a4fa1b05c2428e",
          "Title": "libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free",
          "Description": "Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-416",
            "CWE-611"
          ],
          "VendorSeverity": {
            "alma": 2,
            "amazon": 2,
            "julia": 3,
            "nvd": 4,
            "oracle-oval": 2,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
              "V3Score": 9.8,
              "V40Score": 7
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 9.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.9
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:61247",
            "https://access.redhat.com/security/cve/CVE-2026-6653",
            "https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260",
            "https://bugzilla.redhat.com/2491354",
            "https://bugzilla.redhat.com/2494191",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2491354",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494191",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11979",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6653",
            "https://errata.almalinux.org/9/ALSA-2026-61247.html",
            "https://errata.rockylinux.org/RLSA-2026:61247",
            "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058",
            "https://linux.oracle.com/cve/CVE-2026-6653.html",
            "https://linux.oracle.com/errata/ELSA-2026-69655.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-6653",
            "https://ubuntu.com/security/notices/USN-8456-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-6653"
          ],
          "PublishedDate": "2026-06-22T14:17:51.113Z",
          "LastModifiedDate": "2026-10-25T23:10:00.167Z"
        },
        {
          "VulnerabilityID": "CVE-2026-74860",
          "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "PkgName": "libxml2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74860",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7f221cc4612f776a3d9cdf4063eee92e8fcc8592382f7ef2b406e040de46efb6",
          "Title": "libxml2: double-free/UAF in libxml2 Python bindings",
          "Description": "A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-763"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 8.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:64463",
            "https://access.redhat.com/errata/RHSA-2026:71585",
            "https://access.redhat.com/errata/RHSA-2026:71586",
            "https://access.redhat.com/errata/RHSA-2026:71641",
            "https://access.redhat.com/errata/RHSA-2026:72470",
            "https://access.redhat.com/errata/RHSA-2026:72475",
            "https://access.redhat.com/errata/RHSA-2026:72476",
            "https://access.redhat.com/errata/RHSA-2026:79357",
            "https://access.redhat.com/errata/RHSA-2026:82939",
            "https://access.redhat.com/errata/RHSA-2026:89750",
            "https://access.redhat.com/errata/RHSA-2026:89759",
            "https://access.redhat.com/errata/RHSA-2026:90309",
            "https://access.redhat.com/errata/RHSA-2026:91202",
            "https://access.redhat.com/errata/RHSA-2026:91204",
            "https://access.redhat.com/errata/RHSA-2026:91206",
            "https://access.redhat.com/errata/RHSA-2026:91207",
            "https://access.redhat.com/errata/RHSA-2026:91217",
            "https://access.redhat.com/errata/RHSA-2026:91218",
            "https://access.redhat.com/errata/RHSA-2026:91219",
            "https://access.redhat.com/errata/RHSA-2026:91224",
            "https://access.redhat.com/errata/RHSA-2026:91232",
            "https://access.redhat.com/errata/RHSA-2026:91233",
            "https://access.redhat.com/errata/RHSA-2026:91234",
            "https://access.redhat.com/errata/RHSA-2026:91235",
            "https://access.redhat.com/errata/RHSA-2026:91236",
            "https://access.redhat.com/errata/RHSA-2026:91237",
            "https://access.redhat.com/errata/RHSA-2026:91238",
            "https://access.redhat.com/errata/RHSA-2026:91241",
            "https://access.redhat.com/errata/RHSA-2026:91242",
            "https://access.redhat.com/errata/RHSA-2026:91243",
            "https://access.redhat.com/errata/RHSA-2026:91244",
            "https://access.redhat.com/errata/RHSA-2026:91245",
            "https://access.redhat.com/errata/RHSA-2026:91246",
            "https://access.redhat.com/errata/RHSA-2026:91248",
            "https://access.redhat.com/errata/RHSA-2026:91249",
            "https://access.redhat.com/errata/RHSA-2026:92352",
            "https://access.redhat.com/errata/RHSA-2026:92589",
            "https://access.redhat.com/errata/RHSA-2026:93463",
            "https://access.redhat.com/errata/RHSA-2026:93473",
            "https://access.redhat.com/errata/RHSA-2026:93791",
            "https://access.redhat.com/errata/RHSA-2026:94459",
            "https://access.redhat.com/errata/RHSA-2026:94468",
            "https://access.redhat.com/errata/RHSA-2026:94474",
            "https://access.redhat.com/errata/RHSA-2026:94476",
            "https://access.redhat.com/security/cve/CVE-2026-74860",
            "https://bugzilla.redhat.com/2528986",
            "https://bugzilla.redhat.com/2528987",
            "https://bugzilla.redhat.com/2528989",
            "https://bugzilla.redhat.com/2528990",
            "https://bugzilla.redhat.com/2528992",
            "https://bugzilla.redhat.com/2529697",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528986",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528987",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528989",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528990",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528992",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2529697",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144",
            "https://errata.almalinux.org/9/ALSA-2026-71585.html",
            "https://errata.rockylinux.org/RLSA-2026:71585",
            "https://linux.oracle.com/cve/CVE-2026-74860.html",
            "https://linux.oracle.com/errata/ELSA-2026-71641.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-74860",
            "https://ubuntu.com/security/notices/USN-8787-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-74860"
          ],
          "PublishedDate": "2026-09-08T12:16:58.083Z",
          "LastModifiedDate": "2026-11-06T07:17:46.083Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86138",
          "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "PkgName": "libxml2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86138",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b861c4be6b60283744cb359f68bb232f8445ba1b548d9350f9262e54768af812",
          "Title": "libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow",
          "Description": "In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "azure": 2,
            "nvd": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 2,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
              "V3Score": 6.9
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:71585",
            "https://access.redhat.com/security/cve/CVE-2026-86138",
            "https://bugzilla.redhat.com/2528986",
            "https://bugzilla.redhat.com/2528987",
            "https://bugzilla.redhat.com/2528989",
            "https://bugzilla.redhat.com/2528990",
            "https://bugzilla.redhat.com/2528992",
            "https://bugzilla.redhat.com/2529697",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528986",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528987",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528989",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528990",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528992",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2529697",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144",
            "https://errata.almalinux.org/9/ALSA-2026-71585.html",
            "https://errata.rockylinux.org/RLSA-2026:71585",
            "https://github.com/GNOME/libxml2/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4",
            "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
            "https://linux.oracle.com/cve/CVE-2026-86138.html",
            "https://linux.oracle.com/errata/ELSA-2026-71641.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86138",
            "https://ubuntu.com/security/notices/USN-8910-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-86138"
          ],
          "PublishedDate": "2026-09-05T05:17:12.6Z",
          "LastModifiedDate": "2026-09-15T19:40:47.56Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86139",
          "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "PkgName": "libxml2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86139",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:60ad56aae66e46ed0bbfe368ebb6a984cd8db23214be47b77f25ca67e0278126",
          "Title": "libxml2: libxml2: Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution",
          "Description": "In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
              "V3Score": 6.9
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-86139",
            "https://github.com/GNOME/libxml2/commit/8edbbdb09f24d26a2f900141fddc2b9d014f53b0",
            "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86139",
            "https://ubuntu.com/security/notices/USN-8910-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-86139"
          ],
          "PublishedDate": "2026-09-05T05:17:12.73Z",
          "LastModifiedDate": "2026-09-15T19:39:45.267Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86140",
          "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "PkgName": "libxml2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86140",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f4ab3f6a4600a95149a13a91811b11bf0639ee986f334796d351a6741339a190",
          "Title": "libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements",
          "Description": "In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "azure": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.4
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:71585",
            "https://access.redhat.com/security/cve/CVE-2026-86140",
            "https://bugzilla.redhat.com/2528986",
            "https://bugzilla.redhat.com/2528987",
            "https://bugzilla.redhat.com/2528989",
            "https://bugzilla.redhat.com/2528990",
            "https://bugzilla.redhat.com/2528992",
            "https://bugzilla.redhat.com/2529697",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528986",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528987",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528989",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528990",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528992",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2529697",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144",
            "https://errata.almalinux.org/9/ALSA-2026-71585.html",
            "https://errata.rockylinux.org/RLSA-2026:71585",
            "https://github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340",
            "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
            "https://linux.oracle.com/cve/CVE-2026-86140.html",
            "https://linux.oracle.com/errata/ELSA-2026-71641.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86140",
            "https://ubuntu.com/security/notices/USN-8787-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-86140"
          ],
          "PublishedDate": "2026-09-05T05:17:12.877Z",
          "LastModifiedDate": "2026-09-15T19:39:17.01Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86142",
          "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "PkgName": "libxml2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86142",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:69f1514c41ea578e0ccb3bf56b793b3615b9febd4384fcd4fecbc7e074bc9f7a",
          "Title": "libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation",
          "Description": "In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "azure": 2,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 2,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
              "V3Score": 6.9
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:71585",
            "https://access.redhat.com/security/cve/CVE-2026-86142",
            "https://bugzilla.redhat.com/2528986",
            "https://bugzilla.redhat.com/2528987",
            "https://bugzilla.redhat.com/2528989",
            "https://bugzilla.redhat.com/2528990",
            "https://bugzilla.redhat.com/2528992",
            "https://bugzilla.redhat.com/2529697",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528986",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528987",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528989",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528990",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528992",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2529697",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144",
            "https://errata.almalinux.org/9/ALSA-2026-71585.html",
            "https://errata.rockylinux.org/RLSA-2026:71585",
            "https://github.com/GNOME/libxml2/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58",
            "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
            "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1113",
            "https://linux.oracle.com/cve/CVE-2026-86142.html",
            "https://linux.oracle.com/errata/ELSA-2026-80675.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86142",
            "https://ubuntu.com/security/notices/USN-8910-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-86142"
          ],
          "PublishedDate": "2026-09-05T05:17:13.133Z",
          "LastModifiedDate": "2026-09-15T19:35:48.663Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86143",
          "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "PkgName": "libxml2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86143",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:394180ef1c99d8c4d89cf7df36ab28eeb144aa4817dbeb2404ae4bff10a720ab",
          "Title": "libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks",
          "Description": "In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-192"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "azure": 2,
            "nvd": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 2,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
              "V3Score": 7.3
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
              "V3Score": 6.9
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:71585",
            "https://access.redhat.com/security/cve/CVE-2026-86143",
            "https://bugzilla.redhat.com/2528986",
            "https://bugzilla.redhat.com/2528987",
            "https://bugzilla.redhat.com/2528989",
            "https://bugzilla.redhat.com/2528990",
            "https://bugzilla.redhat.com/2528992",
            "https://bugzilla.redhat.com/2529697",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528986",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528987",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528989",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528990",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528992",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2529697",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144",
            "https://errata.almalinux.org/9/ALSA-2026-71585.html",
            "https://errata.rockylinux.org/RLSA-2026:71585",
            "https://github.com/GNOME/libxml2/commit/90f293ba74d28b1d570920382e707586f68ebf35",
            "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
            "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1111",
            "https://linux.oracle.com/cve/CVE-2026-86143.html",
            "https://linux.oracle.com/errata/ELSA-2026-71641.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86143",
            "https://ubuntu.com/security/notices/USN-8910-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-86143"
          ],
          "PublishedDate": "2026-09-05T05:17:13.27Z",
          "LastModifiedDate": "2026-09-15T19:31:15.857Z"
        },
        {
          "VulnerabilityID": "CVE-2026-86144",
          "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "PkgName": "libxml2",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7",
            "UID": "ee8425543f2d9bf"
          },
          "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:d1f90e4619bf00721019714d2fad73d286509e735594674b1930f6b914cc3c64"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86144",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1a6413412bf8dd4d2e3444406784179ca793439bb063bc4613ed146b6c22128e",
          "Title": "libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation.",
          "Description": "In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow).",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-669"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 2,
            "azure": 2,
            "nvd": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 2,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
              "V3Score": 5.6
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:71585",
            "https://access.redhat.com/security/cve/CVE-2026-86144",
            "https://bugzilla.redhat.com/2528986",
            "https://bugzilla.redhat.com/2528987",
            "https://bugzilla.redhat.com/2528989",
            "https://bugzilla.redhat.com/2528990",
            "https://bugzilla.redhat.com/2528992",
            "https://bugzilla.redhat.com/2529697",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528986",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528987",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528989",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528990",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528992",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2529697",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144",
            "https://errata.almalinux.org/9/ALSA-2026-71585.html",
            "https://errata.rockylinux.org/RLSA-2026:71585",
            "https://github.com/GNOME/libxml2/commit/b63cd517afecb76582dd9488c55e54ceaf50de61",
            "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
            "https://linux.oracle.com/cve/CVE-2026-86144.html",
            "https://linux.oracle.com/errata/ELSA-2026-71641.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-86144",
            "https://ubuntu.com/security/notices/USN-8910-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-86144"
          ],
          "PublishedDate": "2026-09-05T05:17:13.407Z",
          "LastModifiedDate": "2026-09-15T19:20:15.06Z"
        },
        {
          "VulnerabilityID": "CVE-2026-88807",
          "PkgID": "libxrender1@1:0.9.12-1",
          "PkgName": "libxrender1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libxrender1@0.9.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "722920b43ac156d2"
          },
          "InstalledVersion": "1:0.9.12-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88807",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3d23da1dfbefa5946bdc1a7775aa32b99dbb7a44ab18b820f682f04dc50cb344",
          "Title": "libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats",
          "Description": "A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-122"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 2,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "V3Score": 8.3
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:91057",
            "https://access.redhat.com/security/cve/CVE-2026-88807",
            "https://bugzilla.redhat.com/2537924",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2537924",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88807",
            "https://errata.almalinux.org/9/ALSA-2026-91057.html",
            "https://errata.rockylinux.org/RLSA-2026:91057",
            "https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19",
            "https://linux.oracle.com/cve/CVE-2026-88807.html",
            "https://linux.oracle.com/errata/ELSA-2026-91267.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-88807",
            "https://www.cve.org/CVERecord?id=CVE-2026-88807"
          ],
          "PublishedDate": "2026-09-21T14:17:22.41Z",
          "LastModifiedDate": "2026-09-22T19:40:05.87Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99083",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99083",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e491518cabf50339ac0c411439fa644f6d302d46d3bf25c00ecd764360ce2046",
          "Title": "kernel: ksmbd: fix heap out-of-bounds write in krb5_authenticate()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix heap out-of-bounds write in krb5_authenticate()\n\nIn krb5_authenticate(), out_len is calculated to determine available\nheadroom in response_buf for the incoming Kerberos AP-REP token. However,\nwhen SMB2_SESSION_SETUP is processed as a non-first element of a compounded\nSMB2 request, the calculation omits work-\u003enext_smb2_rsp_hdr_off.\n\nThis causes out_len to overstate remaining buffer headroom by\nthe cumulative size of prior responses in the compound chain. Consequently,\nthe length check in ksmbd_krb5_authenticate()\n(*out_len \u003c= resp-\u003espnego_blob_len) passes erroneously, allowing memcpy()\nto write the AP-REP blob past the end of response_buf into adjacent kernel\nheap memory.\n\nFix this by subtracting work-\u003enext_smb2_rsp_hdr_off when computing out_len,\nensuring it accurately reflects physical remaining buffer space.",
          "Severity": "CRITICAL",
          "VendorSeverity": {
            "photon": 3,
            "redhat": 4,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 9.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99083",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99083.mbox",
            "https://git.kernel.org/stable/c/1f73a6d40f4d1bae4f3491c0ec1ea8ee6ce035ff",
            "https://git.kernel.org/stable/c/23a0be6a84a38ac169eeab49017934e8e27c65f0",
            "https://git.kernel.org/stable/c/4722d06b2907585074252061b1024a696c1cfc23",
            "https://git.kernel.org/stable/c/517404e157395d0f8da125ca956c566895dfcd06",
            "https://git.kernel.org/stable/c/59c6dcc5dd9dafe764ca0d40525933b2be69b059",
            "https://git.kernel.org/stable/c/80af1bde97d5a85ad6f2c40ca894ccc8fa75a27a",
            "https://git.kernel.org/stable/c/a07dfb33112a42437f9d2d0bfd35c68575257381",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99083",
            "https://www.cve.org/CVERecord?id=CVE-2026-99083"
          ],
          "PublishedDate": "2026-10-23T13:17:32.577Z",
          "LastModifiedDate": "2026-10-30T13:21:44.38Z"
        },
        {
          "VulnerabilityID": "CVE-2013-7445",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2013-7445",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5084c71187218824e763ced3cf13706b587b3cd89f56c4cb232da430d65a431a",
          "Title": "kernel: memory exhaustion via crafted Graphics Execution Manager (GEM) objects",
          "Description": "The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-399"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
              "V2Score": 7.8
            },
            "redhat": {
              "V2Vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
              "V2Score": 4.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2013-7445",
            "https://bugzilla.kernel.org/show_bug.cgi?id=60533",
            "https://lists.freedesktop.org/archives/dri-devel/2015-September/089778.html%20%28potential%20start%20towards%20fixing%29",
            "https://nvd.nist.gov/vuln/detail/CVE-2013-7445",
            "https://www.cve.org/CVERecord?id=CVE-2013-7445"
          ],
          "PublishedDate": "2015-10-16T01:59:00.12Z",
          "LastModifiedDate": "2026-05-06T22:30:45.22Z"
        },
        {
          "VulnerabilityID": "CVE-2019-19449",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-19449",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ef6a3cb2bb09f4889dd62d62a1a2d7fbd3e256419f541f233976d5bbda33122a",
          "Title": "kernel: mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c",
          "Description": "In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V2Score": 6.8,
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H",
              "V3Score": 7.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2019-19449",
            "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449",
            "https://nvd.nist.gov/vuln/detail/CVE-2019-19449",
            "https://security.netapp.com/advisory/ntap-20200103-0001/",
            "https://ubuntu.com/security/notices/USN-5120-1",
            "https://ubuntu.com/security/notices/USN-5136-1",
            "https://ubuntu.com/security/notices/USN-5137-1",
            "https://ubuntu.com/security/notices/USN-5137-2",
            "https://ubuntu.com/security/notices/USN-5343-1",
            "https://www.cve.org/CVERecord?id=CVE-2019-19449"
          ],
          "PublishedDate": "2019-12-08T02:15:09.97Z",
          "LastModifiedDate": "2026-06-17T02:26:40.43Z"
        },
        {
          "VulnerabilityID": "CVE-2019-19814",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-19814",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3ef59397602f74e76bf75223951007006f23728efb6522fd2ce8f0da16d68137",
          "Title": "kernel: out-of-bounds write in __remove_dirty_segment in fs/f2fs/segment.c",
          "Description": "In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V2Vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V2Score": 9.3,
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H",
              "V3Score": 7.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2019-19814",
            "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19814",
            "https://nvd.nist.gov/vuln/detail/CVE-2019-19814",
            "https://security.netapp.com/advisory/ntap-20200103-0001/",
            "https://www.cve.org/CVERecord?id=CVE-2019-19814"
          ],
          "PublishedDate": "2019-12-17T06:15:12.843Z",
          "LastModifiedDate": "2026-06-17T02:27:17.097Z"
        },
        {
          "VulnerabilityID": "CVE-2021-3847",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2021-3847",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:34b3492606336f59266f194019b5680a775b92a6f1f6f2a2310adae696b846ba",
          "Title": "kernel: low-privileged user privileges escalation",
          "Description": "An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-281"
          ],
          "VendorSeverity": {
            "cbl-mariner": 3,
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V2Vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V2Score": 7.2,
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 6.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2021-3847",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2009704",
            "https://nvd.nist.gov/vuln/detail/CVE-2021-3847",
            "https://www.cve.org/CVERecord?id=CVE-2021-3847",
            "https://www.openwall.com/lists/oss-security/2021/10/14/3"
          ],
          "PublishedDate": "2022-04-01T23:15:10.597Z",
          "LastModifiedDate": "2026-06-17T04:05:53.22Z"
        },
        {
          "VulnerabilityID": "CVE-2021-3864",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2021-3864",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:bdff949d9cbc2fa1f921d679d173f88ba2f353c568f4f7fb27358d93ac79eaaa",
          "Title": "kernel: descendant's dumpable setting with certain SUID binaries",
          "Description": "A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a result, if the descendant process crashes and core_pattern is set to a relative value, its core dump is stored in the current directory with uid:gid permissions. An unprivileged local user with eligible root SUID binary could use this flaw to place core dumps into root-owned directories, potentially resulting in escalation of privileges.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-284"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2021-3864",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2015046",
            "https://lore.kernel.org/all/20211221021744.864115-1-longman@redhat.com",
            "https://lore.kernel.org/all/20211221021744.864115-1-longman@redhat.com/",
            "https://lore.kernel.org/all/20211226150310.GA992@1wt.eu/",
            "https://lore.kernel.org/lkml/20211228170910.623156-1-wander@redhat.com",
            "https://lore.kernel.org/lkml/20211228170910.623156-1-wander@redhat.com/",
            "https://nvd.nist.gov/vuln/detail/CVE-2021-3864",
            "https://security-tracker.debian.org/tracker/CVE-2021-3864",
            "https://www.cve.org/CVERecord?id=CVE-2021-3864",
            "https://www.openwall.com/lists/oss-security/2021/10/20/2"
          ],
          "PublishedDate": "2022-08-26T16:15:09.68Z",
          "LastModifiedDate": "2026-06-17T04:05:55.15Z"
        },
        {
          "VulnerabilityID": "CVE-2024-21803",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-21803",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:32f62c4d7d250a8941997c76d0e682a2491cffa410d2c656828f919192f4bd2e",
          "Title": "kernel: bluetooth: use-after-free vulnerability in af_bluetooth.c",
          "Description": "Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C.\n\nThis issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.\n\n",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "azure": 3,
            "cbl-mariner": 3,
            "nvd": 3,
            "redhat": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2024-21803",
            "https://bugzilla.openanolis.cn/show_bug.cgi?id=8081",
            "https://nvd.nist.gov/vuln/detail/CVE-2024-21803",
            "https://www.cve.org/CVERecord?id=CVE-2024-21803"
          ],
          "PublishedDate": "2024-01-30T08:15:41.373Z",
          "LastModifiedDate": "2026-06-17T07:10:11.723Z"
        },
        {
          "VulnerabilityID": "CVE-2024-58015",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-58015",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:534e714339a2ce4416f01a99caa7e7862f2c290bccdfd11626afcbbb5965ed13",
          "Title": "kernel: wifi: ath12k: Fix for out-of bound access error",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Fix for out-of bound access error\n\nSelfgen stats are placed in a buffer using print_array_to_buf_index() function.\nArray length parameter passed to the function is too big, resulting in possible\nout-of bound memory error.\nDecreasing buffer size by one fixes faulty upper bound of passed array.\n\nDiscovered in coverity scan, CID 1600742 and CID 1600758",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "alma": 2,
            "nvd": 3,
            "oracle-oval": 2,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 6
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2025:20518",
            "https://access.redhat.com/security/cve/CVE-2024-58015",
            "https://bugzilla.redhat.com/2298169",
            "https://bugzilla.redhat.com/2312077",
            "https://bugzilla.redhat.com/2313092",
            "https://bugzilla.redhat.com/2320172",
            "https://bugzilla.redhat.com/2320259",
            "https://bugzilla.redhat.com/2320455",
            "https://bugzilla.redhat.com/2320616",
            "https://bugzilla.redhat.com/2320722",
            "https://bugzilla.redhat.com/2324549",
            "https://bugzilla.redhat.com/2327203",
            "https://bugzilla.redhat.com/2327374",
            "https://bugzilla.redhat.com/2327887",
            "https://bugzilla.redhat.com/2329918",
            "https://bugzilla.redhat.com/2330341",
            "https://bugzilla.redhat.com/2331326",
            "https://bugzilla.redhat.com/2334357",
            "https://bugzilla.redhat.com/2334396",
            "https://bugzilla.redhat.com/2334415",
            "https://bugzilla.redhat.com/2334439",
            "https://bugzilla.redhat.com/2334537",
            "https://bugzilla.redhat.com/2334547",
            "https://bugzilla.redhat.com/2334548",
            "https://bugzilla.redhat.com/2334560",
            "https://bugzilla.redhat.com/2334676",
            "https://bugzilla.redhat.com/2334795",
            "https://bugzilla.redhat.com/2334829",
            "https://bugzilla.redhat.com/2336541",
            "https://bugzilla.redhat.com/2337121",
            "https://bugzilla.redhat.com/2337124",
            "https://bugzilla.redhat.com/2338814",
            "https://bugzilla.redhat.com/2338828",
            "https://bugzilla.redhat.com/2338832",
            "https://bugzilla.redhat.com/2343172",
            "https://bugzilla.redhat.com/2343175",
            "https://bugzilla.redhat.com/2344684",
            "https://bugzilla.redhat.com/2344687",
            "https://bugzilla.redhat.com/2345240",
            "https://bugzilla.redhat.com/2346272",
            "https://bugzilla.redhat.com/2347707",
            "https://bugzilla.redhat.com/2347753",
            "https://bugzilla.redhat.com/2347759",
            "https://bugzilla.redhat.com/2347781",
            "https://bugzilla.redhat.com/2347807",
            "https://bugzilla.redhat.com/2347859",
            "https://bugzilla.redhat.com/2347919",
            "https://bugzilla.redhat.com/2347968",
            "https://bugzilla.redhat.com/2348022",
            "https://bugzilla.redhat.com/2348071",
            "https://bugzilla.redhat.com/2348238",
            "https://bugzilla.redhat.com/2348240",
            "https://bugzilla.redhat.com/2348279",
            "https://bugzilla.redhat.com/2348515",
            "https://bugzilla.redhat.com/2348523",
            "https://bugzilla.redhat.com/2348528",
            "https://bugzilla.redhat.com/2348541",
            "https://bugzilla.redhat.com/2348543",
            "https://bugzilla.redhat.com/2348547",
            "https://bugzilla.redhat.com/2348550",
            "https://bugzilla.redhat.com/2348554",
            "https://bugzilla.redhat.com/2348556",
            "https://bugzilla.redhat.com/2348566",
            "https://bugzilla.redhat.com/2348573",
            "https://bugzilla.redhat.com/2348574",
            "https://bugzilla.redhat.com/2348577",
            "https://bugzilla.redhat.com/2348578",
            "https://bugzilla.redhat.com/2348581",
            "https://bugzilla.redhat.com/2348584",
            "https://bugzilla.redhat.com/2348585",
            "https://bugzilla.redhat.com/2348587",
            "https://bugzilla.redhat.com/2348595",
            "https://bugzilla.redhat.com/2348597",
            "https://bugzilla.redhat.com/2348600",
            "https://bugzilla.redhat.com/2348601",
            "https://bugzilla.redhat.com/2348615",
            "https://bugzilla.redhat.com/2348620",
            "https://bugzilla.redhat.com/2348625",
            "https://bugzilla.redhat.com/2348634",
            "https://bugzilla.redhat.com/2348645",
            "https://bugzilla.redhat.com/2348650",
            "https://bugzilla.redhat.com/2348654",
            "https://bugzilla.redhat.com/2348901",
            "https://bugzilla.redhat.com/2350363",
            "https://bugzilla.redhat.com/2350367",
            "https://bugzilla.redhat.com/2350374",
            "https://bugzilla.redhat.com/2350375",
            "https://bugzilla.redhat.com/2350386",
            "https://bugzilla.redhat.com/2350388",
            "https://bugzilla.redhat.com/2350392",
            "https://bugzilla.redhat.com/2350396",
            "https://bugzilla.redhat.com/2350397",
            "https://bugzilla.redhat.com/2350400",
            "https://bugzilla.redhat.com/2350585",
            "https://bugzilla.redhat.com/2350589",
            "https://bugzilla.redhat.com/2350725",
            "https://bugzilla.redhat.com/2350726",
            "https://bugzilla.redhat.com/2351606",
            "https://bugzilla.redhat.com/2351608",
            "https://bugzilla.redhat.com/2351612",
            "https://bugzilla.redhat.com/2351613",
            "https://bugzilla.redhat.com/2351616",
            "https://bugzilla.redhat.com/2351618",
            "https://bugzilla.redhat.com/2351620",
            "https://bugzilla.redhat.com/2351624",
            "https://bugzilla.redhat.com/2351625",
            "https://bugzilla.redhat.com/2351629",
            "https://bugzilla.redhat.com/2351633",
            "https://bugzilla.redhat.com/2360215",
            "https://bugzilla.redhat.com/2363380",
            "https://bugzilla.redhat.com/2369184",
            "https://bugzilla.redhat.com/2376076",
            "https://bugzilla.redhat.com/2383441",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2298169",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2312077",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2313092",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2320172",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2320259",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2320455",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2320616",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2320722",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2324549",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2327203",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2327374",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2327887",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2329918",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2330341",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2331326",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334357",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334396",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334415",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334439",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334537",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334547",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334548",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334560",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334676",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334795",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334829",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2336541",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2337121",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2337124",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2338814",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2338828",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2338832",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2343172",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2343175",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2344684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2344687",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2345240",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2346272",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2347707",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2347753",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2347759",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2347781",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2347807",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2347859",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2347919",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2347968",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348022",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348071",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348238",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348240",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348279",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348515",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348523",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348528",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348541",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348543",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348547",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348550",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348554",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348556",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348566",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348573",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348574",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348577",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348578",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348581",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348584",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348585",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348587",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348595",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348597",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348600",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348601",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348615",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348620",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348625",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348634",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348645",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348650",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348654",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2348901",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350363",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350367",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350374",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350375",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350386",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350388",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350392",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350396",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350397",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350400",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350585",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350589",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350725",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2350726",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351606",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351608",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351612",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351613",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351616",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351618",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351620",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351624",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351625",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351629",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2351633",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2356647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2360215",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2360223",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2363380",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2369184",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2376076",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2383441",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48830",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49024",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49269",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49353",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49357",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49432",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49437",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49443",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49623",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49627",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49643",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49648",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49657",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49670",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49672",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49845",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36350",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36357",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46689",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46744",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47679",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47727",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49570",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49864",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50060",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50195",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50294",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52332",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53052",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53090",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53119",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53135",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53170",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53216",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53229",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53241",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53680",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56603",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56645",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56662",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56672",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56675",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56690",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56709",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56739",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56786",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57981",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57986",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57987",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57988",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57989",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57990",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57993",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57995",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57998",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58012",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58014",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58015",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58057",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58062",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58068",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58075",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58077",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58083",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58088",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21631",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21647",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21648",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21671",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21672",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21691",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21693",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21696",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21702",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21714",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21726",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21728",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21729",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21738",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21739",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21745",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21746",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21765",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21786",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21787",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21790",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21791",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21795",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21796",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21806",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21826",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21828",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21829",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21837",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21839",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21844",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21846",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21847",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21848",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21851",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21853",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21855",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21861",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21863",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21864",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21902",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22056",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22097",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37994",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38116",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38396",
            "https://errata.almalinux.org/9/ALSA-2025-20518.html",
            "https://errata.rockylinux.org/RLSA-2025:20518",
            "https://git.kernel.org/linus/eb8c0534713865d190856f10bfc97cf0b88475b1%20%286.14-rc1%29",
            "https://git.kernel.org/stable/c/8700c4bf8b7ed98037d2acf1eaf770ad6dd431d4",
            "https://git.kernel.org/stable/c/eb8c0534713865d190856f10bfc97cf0b88475b1",
            "https://linux.oracle.com/cve/CVE-2024-58015.html",
            "https://linux.oracle.com/errata/ELSA-2025-20518-0.html",
            "https://lore.kernel.org/linux-cve-announce/2025022657-CVE-2024-58015-f72e@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2024-58015",
            "https://www.cve.org/CVERecord?id=CVE-2024-58015"
          ],
          "PublishedDate": "2025-02-27T03:15:12.493Z",
          "LastModifiedDate": "2026-06-17T08:14:28.097Z"
        },
        {
          "VulnerabilityID": "CVE-2025-38137",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38137",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:742075ceb3b5aa7575b430b080f509aab1a80c69381498f60b7180bfe09257f0",
          "Title": "kernel: PCI/pwrctrl: Cancel outstanding rescan work when unregistering",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/pwrctrl: Cancel outstanding rescan work when unregistering\n\nIt's possible to trigger use-after-free here by:\n\n  (a) forcing rescan_work_func() to take a long time and\n  (b) utilizing a pwrctrl driver that may be unloaded for some reason\n\nCancel outstanding work to ensure it is finished before we allow our data\nstructures to be cleaned up.\n\n[bhelgaas: tidy commit log]",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "oracle-oval": 2,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 7.3
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2025:13598",
            "https://access.redhat.com/security/cve/CVE-2025-38137",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2334820",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2373383",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2375303",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2375304",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2376064",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2376078",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2379219",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56721",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38079",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38084",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38085",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38137",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38159",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38292",
            "https://errata.rockylinux.org/RLSA-2025:13598",
            "https://git.kernel.org/linus/8b926f237743f020518162c62b93cb7107a2b5eb%20%286.16-rc1%29",
            "https://git.kernel.org/stable/c/8b926f237743f020518162c62b93cb7107a2b5eb",
            "https://git.kernel.org/stable/c/a63ed775f476ba81558bba24d7538836e1ffb823",
            "https://git.kernel.org/stable/c/b3ad6d23fec23fbef382ce9ea640c37446593cf5",
            "https://linux.oracle.com/cve/CVE-2025-38137.html",
            "https://linux.oracle.com/errata/ELSA-2025-13598.html",
            "https://lore.kernel.org/linux-cve-announce/2025070332-CVE-2025-38137-d4bf@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-38137",
            "https://ubuntu.com/security/notices/USN-7769-1",
            "https://ubuntu.com/security/notices/USN-7769-2",
            "https://ubuntu.com/security/notices/USN-7769-3",
            "https://ubuntu.com/security/notices/USN-7770-1",
            "https://ubuntu.com/security/notices/USN-7771-1",
            "https://ubuntu.com/security/notices/USN-7789-1",
            "https://ubuntu.com/security/notices/USN-7789-2",
            "https://www.cve.org/CVERecord?id=CVE-2025-38137"
          ],
          "PublishedDate": "2025-07-03T09:15:28.24Z",
          "LastModifiedDate": "2026-10-21T13:18:09Z"
        },
        {
          "VulnerabilityID": "CVE-2025-38187",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38187",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:2b62512bdb6cefb6871d8ecc487232b069630990682f576f06a60f779263a1d6",
          "Title": "kernel: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: fix a use-after-free in r535_gsp_rpc_push()\n\nThe RPC container is released after being passed to r535_gsp_rpc_send().\n\nWhen sending the initial fragment of a large RPC and passing the\ncaller's RPC container, the container will be freed prematurely. Subsequent\nattempts to send remaining fragments will therefore result in a\nuse-after-free.\n\nAllocate a temporary RPC container for holding the initial fragment of a\nlarge RPC when sending. Free the caller's container when all fragments\nare successfully sent.\n\n[ Rebase onto Blackwell changes. - Danilo ]",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "photon": 3,
            "redhat": 1,
            "ubuntu": 3
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-38187",
            "https://git.kernel.org/linus/9802f0a63b641f4cddb2139c814c2e95cb825099%20%286.16-rc3%29",
            "https://git.kernel.org/stable/c/69270d24af7694494ac4116bcad30a812ca49ca7",
            "https://git.kernel.org/stable/c/9802f0a63b641f4cddb2139c814c2e95cb825099",
            "https://git.kernel.org/stable/c/cd4677407c0ee250fc21e36439c8a442ddd62cc1",
            "https://lore.kernel.org/linux-cve-announce/2025070413-CVE-2025-38187-dafd@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-38187",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://ubuntu.com/security/notices/USN-8917-1",
            "https://ubuntu.com/security/notices/USN-8918-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-38187"
          ],
          "PublishedDate": "2025-07-04T14:15:25.64Z",
          "LastModifiedDate": "2026-10-21T13:18:09.247Z"
        },
        {
          "VulnerabilityID": "CVE-2025-38421",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38421",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:2124b78b640f36cd15273cd8201a42d20f93539ec1b9eb3be9acf7d64a7431ec",
          "Title": "kernel: platform/x86/amd: pmf: Use device managed allocations",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd: pmf: Use device managed allocations\n\nIf setting up smart PC fails for any reason then this can lead to\na double free when unloading amd-pmf.  This is because dev-\u003ebuf was\nfreed but never set to NULL and is again freed in amd_pmf_remove().\n\nTo avoid subtle allocation bugs in failures leading to a double free\nchange all allocations into device managed allocations.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-415"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-38421",
            "https://git.kernel.org/linus/d9db3a941270d92bbd1a6a6b54a10324484f2f2d%20%286.16-rc3%29",
            "https://git.kernel.org/stable/c/0d10b532f861253c283863522d59d099fcb0796d",
            "https://git.kernel.org/stable/c/d6a38e1a82d2f9abd0bae84a354654bccb8389f6",
            "https://git.kernel.org/stable/c/d9db3a941270d92bbd1a6a6b54a10324484f2f2d",
            "https://lore.kernel.org/linux-cve-announce/2025072554-CVE-2025-38421-8601@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-38421",
            "https://ubuntu.com/security/notices/USN-7833-1",
            "https://ubuntu.com/security/notices/USN-7833-2",
            "https://ubuntu.com/security/notices/USN-7833-3",
            "https://ubuntu.com/security/notices/USN-7833-4",
            "https://ubuntu.com/security/notices/USN-7834-1",
            "https://ubuntu.com/security/notices/USN-7856-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-38421"
          ],
          "PublishedDate": "2025-07-25T15:15:26.927Z",
          "LastModifiedDate": "2026-10-21T13:18:11.537Z"
        },
        {
          "VulnerabilityID": "CVE-2025-38636",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38636",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:dc8c714eb312c90b53246844c04a79db7a13725c070e3c023bc0dac7a4aee39a",
          "Title": "kernel: rv: Use strings in da monitors tracepoints",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nrv: Use strings in da monitors tracepoints\n\nUsing DA monitors tracepoints with KASAN enabled triggers the following\nwarning:\n\n BUG: KASAN: global-out-of-bounds in do_trace_event_raw_event_event_da_monitor+0xd6/0x1a0\n Read of size 32 at addr ffffffffaada8980 by task ...\n Call Trace:\n  \u003cTASK\u003e\n [...]\n  do_trace_event_raw_event_event_da_monitor+0xd6/0x1a0\n  ? __pfx_do_trace_event_raw_event_event_da_monitor+0x10/0x10\n  ? trace_event_sncid+0x83/0x200\n  trace_event_sncid+0x163/0x200\n [...]\n The buggy address belongs to the variable:\n  automaton_snep+0x4e0/0x5e0\n\nThis is caused by the tracepoints reading 32 bytes __array instead of\n__string from the automata definition. Such strings are literals and\nreading 32 bytes ends up in out of bound memory accesses (e.g. the next\nautomaton's data in this case).\nThe error is harmless as, while printing the string, we stop at the null\nterminator, but it should still be fixed.\n\nUse the __string facilities while defining the tracepoints to avoid\nreading out of bound memory.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 4.4
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-38636",
            "https://git.kernel.org/linus/7f904ff6e58d398c4336f3c19c42b338324451f7%20%286.17-rc1%29",
            "https://git.kernel.org/stable/c/0ebc70d973ce7a81826b5c4f55f743e07f5864d9",
            "https://git.kernel.org/stable/c/665ca03e93cee01baadc7b5eaee21b9d892e0dab",
            "https://git.kernel.org/stable/c/7f904ff6e58d398c4336f3c19c42b338324451f7",
            "https://git.kernel.org/stable/c/cb8de6f5ed5c43f7387615bbe601d2a4a31b7b35",
            "https://git.kernel.org/stable/c/dcae71222c8b9e5b5dd88a2d67347dedf10e68c6",
            "https://lore.kernel.org/linux-cve-announce/2025082233-CVE-2025-38636-0ce2@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-38636",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-38636"
          ],
          "PublishedDate": "2025-08-22T16:15:37.587Z",
          "LastModifiedDate": "2026-11-05T22:17:21.737Z"
        },
        {
          "VulnerabilityID": "CVE-2025-38656",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38656",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9570e948df8c44705e2bb7158a12605cf528b676b9586920add130393527c1e5",
          "Title": "kernel: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()\n\nPreserve the error code if iwl_setup_deferred_work() fails.  The current\ncode returns ERR_PTR(0) (which is NULL) on this path.  I believe the\nmissing error code potentially leads to a use after free involving\ndebugfs.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-38656",
            "https://git.kernel.org/stable/c/1d068272c21d886d06526454b68368100ba0a720",
            "https://git.kernel.org/stable/c/5c432da1ee191e9f7830dd516456706063d7bec3",
            "https://git.kernel.org/stable/c/991e2066f6009d3cb898413058c62dbcc92bd6d2",
            "https://git.kernel.org/stable/c/cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6",
            "https://git.kernel.org/stable/c/f95598a133a905fd937354ad902773d05593b8b9",
            "https://lore.kernel.org/linux-cve-announce/2025082238-CVE-2025-38656-32f1@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-38656",
            "https://www.cve.org/CVERecord?id=CVE-2025-38656"
          ],
          "PublishedDate": "2025-08-22T16:15:40.633Z",
          "LastModifiedDate": "2026-10-21T13:18:12.74Z"
        },
        {
          "VulnerabilityID": "CVE-2025-39859",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-39859",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7d7de8bded6c4e0de45b628e4555970933cd0445c2705df5441f609c2aa14a51",
          "Title": "kernel: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog\n\nThe ptp_ocp_detach() only shuts down the watchdog timer if it is\npending. However, if the timer handler is already running, the\ntimer_delete_sync() is not called. This leads to race conditions\nwhere the devlink that contains the ptp_ocp is deallocated while\nthe timer handler is still accessing it, resulting in use-after-free\nbugs. The following details one of the race scenarios.\n\n(thread 1)                           | (thread 2)\nptp_ocp_remove()                     |\n  ptp_ocp_detach()                   | ptp_ocp_watchdog()\n    if (timer_pending(\u0026bp-\u003ewatchdog))|   bp = timer_container_of()\n      timer_delete_sync()            |\n                                     |\n  devlink_free(devlink) //free       |\n                                     |   bp-\u003e //use\n\nResolve this by unconditionally calling timer_delete_sync() to ensure\nthe timer is reliably deactivated, preventing any access after free.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-39859",
            "https://git.kernel.org/linus/8bf935cf789872350b04c1a6468b0a509f67afb2%20%286.17-rc5%29",
            "https://git.kernel.org/stable/c/8bf935cf789872350b04c1a6468b0a509f67afb2",
            "https://git.kernel.org/stable/c/a59822a762039b6e0252f21b091245d6ad7f324b",
            "https://git.kernel.org/stable/c/aad70bdfc8244616e48c434310cab241a3f17781",
            "https://git.kernel.org/stable/c/e2a6eabe5304a789b7d40ce2576cd80154255e51",
            "https://git.kernel.org/stable/c/f10d3c7267ac7387a5129d5506c3c5f2460cfd9b",
            "https://lore.kernel.org/linux-cve-announce/2025091905-CVE-2025-39859-52d5@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-39859",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-39859"
          ],
          "PublishedDate": "2025-09-19T16:15:44.867Z",
          "LastModifiedDate": "2026-10-30T13:18:10.767Z"
        },
        {
          "VulnerabilityID": "CVE-2025-39862",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-39862",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:bfd3720d081c533ac255890d8245f6a67e7ddd975bd79a4083a933bcab4e9b73",
          "Title": "kernel: wifi: mt76: mt7915: fix list corruption after hardware restart",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7915: fix list corruption after hardware restart\n\nSince stations are recreated from scratch, all lists that wcids are added\nto must be cleared before calling ieee80211_restart_hw.\nSet wcid-\u003esta = 0 for each wcid entry in order to ensure that they are\nnot added again before they are ready.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-39862",
            "https://git.kernel.org/linus/065c79df595af21d6d1b27d642860faa1d938774%20%286.17-rc5%29",
            "https://git.kernel.org/stable/c/065c79df595af21d6d1b27d642860faa1d938774",
            "https://git.kernel.org/stable/c/6826728f9fd7e7db57cd9647932eea47cbc645c6",
            "https://git.kernel.org/stable/c/6d40c15d70c2dba2f68dd50e452255bfa1b016f0",
            "https://git.kernel.org/stable/c/8fa8eb52bc2eb08d93202863b5fc478e0bebc00c",
            "https://lore.kernel.org/linux-cve-announce/2025091906-CVE-2025-39862-5acb@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-39862",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-39862"
          ],
          "PublishedDate": "2025-09-19T16:15:45.203Z",
          "LastModifiedDate": "2026-10-21T13:18:15.807Z"
        },
        {
          "VulnerabilityID": "CVE-2025-39958",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-39958",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:4fb26b62dcfd90a38cd7ad221899940931809e33f1243fb8acc9b2c784bf342b",
          "Title": "kernel: iommu/s390: Make attach succeed when the device was surprise removed",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/s390: Make attach succeed when the device was surprise removed\n\nWhen a PCI device is removed with surprise hotplug, there may still be\nattempts to attach the device to the default domain as part of tear down\nvia (__iommu_release_dma_ownership()), or because the removal happens\nduring probe (__iommu_probe_device()). In both cases zpci_register_ioat()\nfails with a cc value indicating that the device handle is invalid. This\nis because the device is no longer part of the instance as far as the\nhypervisor is concerned.\n\nCurrently this leads to an error return and s390_iommu_attach_device()\nfails. This triggers the WARN_ON() in __iommu_group_set_domain_nofail()\nbecause attaching to the default domain must never fail.\n\nWith the device fenced by the hypervisor no DMAs to or from memory are\npossible and the IOMMU translations have no effect. Proceed as if the\nregistration was successful and let the hotplug event handling clean up\nthe device.\n\nThis is similar to how devices in the error state are handled since\ncommit 59bbf596791b (\"iommu/s390: Make attach succeed even if the device\nis in error state\") except that for removal the domain will not be\nregistered later. This approach was also previously discussed at the\nlink.\n\nHandle both cases, error state and removal, in a helper which checks if\nthe error needs to be propagated or ignored. Avoid magic number\ncondition codes by using the pre-existing, but never used, defines for\nPCI load/store condition codes and rename them to reflect that they\napply to all PCI instructions.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 1,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-39958",
            "https://git.kernel.org/stable/c/359613f2fa009587154511e4842e8ab9532edd15",
            "https://git.kernel.org/stable/c/3b32cf6e279597d1b6477fb89d46abf65263c139",
            "https://git.kernel.org/stable/c/79fa3a19aa6114189b33e2ba1f393b0f635d7544",
            "https://git.kernel.org/stable/c/9ffaf5229055fcfbb3b3d6f1c7e58d63715c3f73",
            "https://lore.kernel.org/linux-cve-announce/2025100943-CVE-2025-39958-6e96@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-39958",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-39958"
          ],
          "PublishedDate": "2025-10-09T10:15:37.867Z",
          "LastModifiedDate": "2026-11-05T22:17:35.643Z"
        },
        {
          "VulnerabilityID": "CVE-2025-68174",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68174",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0cc139f9819147c679ed978069d008d5e3d1d7951d4ddbf1ae1542cc67cb3355",
          "Title": "kernel: Linux kernel AMD KFD: Race condition causes system crash",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\namd/amdkfd: enhance kfd process check in switch partition\n\ncurrent switch partition only check if kfd_processes_table is empty.\nkfd_prcesses_table entry is deleted in kfd_process_notifier_release, but\nkfd_process tear down is in kfd_process_wq_release.\n\nconsider two processes:\n\nProcess A (workqueue) -\u003e kfd_process_wq_release -\u003e Access kfd_node member\nProcess B switch partition -\u003e amdgpu_xcp_pre_partition_switch -\u003e amdgpu_amdkfd_device_fini_sw\n-\u003e kfd_node tear down.\n\nProcess A and B may trigger a race as shown in dmesg log.\n\nThis patch is to resolve the race by adding an atomic kfd_process counter\nkfd_processes_count, it increment as create kfd process, decrement as\nfinish kfd_process_wq_release.\n\nv2: Put kfd_processes_count per kfd_dev, move decrement to kfd_process_destroy_pdds\nand bug fix. (Philip Yang)\n\n[3966658.307702] divide error: 0000 [#1] SMP NOPTI\n[3966658.350818]  i10nm_edac\n[3966658.356318] CPU: 124 PID: 38435 Comm: kworker/124:0 Kdump: loaded Tainted\n[3966658.356890] Workqueue: kfd_process_wq kfd_process_wq_release [amdgpu]\n[3966658.362839]  nfit\n[3966658.366457] RIP: 0010:kfd_get_num_sdma_engines+0x17/0x40 [amdgpu]\n[3966658.366460] Code: 00 00 e9 ac 81 02 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 0f 1f 44 00 00 48 8b 4f 08 48 8b b7 00 01 00 00 8b 81 58 26 03 00 99 \u003cf7\u003e be b8 01 00 00 80 b9 70 2e 00 00 00 74 0b 83 f8 02 ba 02 00 00\n[3966658.380967]  x86_pkg_temp_thermal\n[3966658.391529] RSP: 0018:ffffc900a0edfdd8 EFLAGS: 00010246\n[3966658.391531] RAX: 0000000000000008 RBX: ffff8974e593b800 RCX: ffff888645900000\n[3966658.391531] RDX: 0000000000000000 RSI: ffff888129154400 RDI: ffff888129151c00\n[3966658.391532] RBP: ffff8883ad79d400 R08: 0000000000000000 R09: ffff8890d2750af4\n[3966658.391532] R10: 0000000000000018 R11: 0000000000000018 R12: 0000000000000000\n[3966658.391533] R13: ffff8883ad79d400 R14: ffffe87ff662ba00 R15: ffff8974e593b800\n[3966658.391533] FS:  0000000000000000(0000) GS:ffff88fe7f600000(0000) knlGS:0000000000000000\n[3966658.391534] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[3966658.391534] CR2: 0000000000d71000 CR3: 000000dd0e970004 CR4: 0000000002770ee0\n[3966658.391535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[3966658.391535] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\n[3966658.391536] PKRU: 55555554\n[3966658.391536] Call Trace:\n[3966658.391674]  deallocate_sdma_queue+0x38/0xa0 [amdgpu]\n[3966658.391762]  process_termination_cpsch+0x1ed/0x480 [amdgpu]\n[3966658.399754]  intel_powerclamp\n[3966658.402831]  kfd_process_dequeue_from_all_devices+0x5b/0xc0 [amdgpu]\n[3966658.402908]  kfd_process_wq_release+0x1a/0x1a0 [amdgpu]\n[3966658.410516]  coretemp\n[3966658.434016]  process_one_work+0x1ad/0x380\n[3966658.434021]  worker_thread+0x49/0x310\n[3966658.438963]  kvm_intel\n[3966658.446041]  ? process_one_work+0x380/0x380\n[3966658.446045]  kthread+0x118/0x140\n[3966658.446047]  ? __kthread_bind_mask+0x60/0x60\n[3966658.446050]  ret_from_fork+0x1f/0x30\n[3966658.446053] Modules linked in: kpatch_20765354(OEK)\n[3966658.455310]  kvm\n[3966658.464534]  mptcp_diag xsk_diag raw_diag unix_diag af_packet_diag netlink_diag udp_diag act_pedit act_mirred act_vlan cls_flower kpatch_21951273(OEK) kpatch_18424469(OEK) kpatch_19749756(OEK)\n[3966658.473462]  idxd_mdev\n[3966658.482306]  kpatch_17971294(OEK) sch_ingress xt_conntrack amdgpu(OE) amdxcp(OE) amddrm_buddy(OE) amd_sched(OE) amdttm(OE) amdkcl(OE) intel_ifs iptable_mangle tcm_loop target_core_pscsi tcp_diag target_core_file inet_diag target_core_iblock target_core_user target_core_mod coldpgs kpatch_18383292(OEK) ip6table_nat ip6table_filter ip6_tables ip_set_hash_ipportip ip_set_hash_ipportnet ip_set_hash_ipport ip_set_bitmap_port xt_comment iptable_nat nf_nat iptable_filter ip_tables ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 sn_core_odd(OE) i40e overlay binfmt_misc tun bonding(OE) aisqos(OE) aisqo\n---truncated---",
          "Severity": "HIGH",
          "VendorSeverity": {
            "photon": 3,
            "redhat": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-68174",
            "https://git.kernel.org/linus/45da20e00d5da842e17dfc633072b127504f0d0e%20%286.18-rc1%29",
            "https://git.kernel.org/stable/c/3385a1def2df45ac04a70532dfcd20d9eeac9fbb",
            "https://git.kernel.org/stable/c/45da20e00d5da842e17dfc633072b127504f0d0e",
            "https://git.kernel.org/stable/c/536d80f660ec12058e461f4db387ea42bee9250d",
            "https://lore.kernel.org/linux-cve-announce/2025121629-CVE-2025-68174-84da@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-68174",
            "https://ubuntu.com/security/notices/USN-8029-1",
            "https://ubuntu.com/security/notices/USN-8029-2",
            "https://ubuntu.com/security/notices/USN-8029-3",
            "https://ubuntu.com/security/notices/USN-8030-1",
            "https://ubuntu.com/security/notices/USN-8048-1",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-68174"
          ],
          "PublishedDate": "2025-12-16T14:15:49.323Z",
          "LastModifiedDate": "2026-10-21T13:18:20.557Z"
        },
        {
          "VulnerabilityID": "CVE-2025-68735",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68735",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:2adb2fa8fee5a0b9fe5fdf5ca5d6363acc1897bfd687e3bfc0f99c5c313e4f0c",
          "Title": "kernel: Kernel: Privilege escalation via use-after-free in drm/panthor",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panthor: Prevent potential UAF in group creation\n\nThis commit prevents the possibility of a use after free issue in the\nGROUP_CREATE ioctl function, which arose as pointer to the group is\naccessed in that ioctl function after storing it in the Xarray.\nA malicious userspace can second guess the handle of a group and try\nto call GROUP_DESTROY ioctl from another thread around the same time\nas GROUP_CREATE ioctl.\n\nTo prevent the use after free exploit, this commit uses a mark on an\nentry of group pool Xarray which is added just before returning from\nthe GROUP_CREATE ioctl function. The mark is checked for all ioctls\nthat specify the group handle and so userspace won't be abe to delete\na group that isn't marked yet.\n\nv2: Add R-bs and fixes tags",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2025-68735",
            "https://git.kernel.org/stable/c/c646ebff3fa571e7ea974235286fb9ed3edc260c",
            "https://git.kernel.org/stable/c/c6bbec068a9accd6f1df05f3df9a5254c99292ee",
            "https://git.kernel.org/stable/c/deb8b2491f6b9882ae02d7dc2651c7bf4f3b7e05",
            "https://git.kernel.org/stable/c/eec7e23d848d2194dd8791fcd0f4a54d4378eecd",
            "https://lore.kernel.org/linux-cve-announce/2025122410-CVE-2025-68735-dce5@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-68735",
            "https://ubuntu.com/security/notices/USN-8094-1",
            "https://ubuntu.com/security/notices/USN-8094-2",
            "https://ubuntu.com/security/notices/USN-8094-3",
            "https://ubuntu.com/security/notices/USN-8094-4",
            "https://ubuntu.com/security/notices/USN-8094-5",
            "https://ubuntu.com/security/notices/USN-8152-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-68735"
          ],
          "PublishedDate": "2025-12-24T13:16:28.44Z",
          "LastModifiedDate": "2026-10-21T13:18:24.103Z"
        },
        {
          "VulnerabilityID": "CVE-2026-100072",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-100072",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:8b7b1290d6ffa3368194e0b4472168c5ddb62973caaf8c1edfe5fef933dde8b7",
          "Title": "kernel: ACPI: platform: Use acpi_bus_get_primary_device()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: platform: Use acpi_bus_get_primary_device()\n\nThe acpi_get_first_physical_node() usage in acpi_platform_fill_resource()\nand acpi_create_platform_device() is generally unsafe because in theory\nthe device returned by it may be freed at any time [1].\n\nIt is also inefficient because acpi_get_first_physical_node() is called\nmultiple times for the same argument which can be avoided.\n\nAddress these issues by using acpi_bus_get_primary_device() instead of\nacpi_get_first_physical_node() and adjusting the code to call it just\nonce at the beginning of and acpi_create_platform_device() and drop\nthe device reference acquired by it upon the return from that function.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-100072",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-100072.mbox",
            "https://git.kernel.org/stable/c/527a497fb2ef77a95170eefe2007e2c4c957bd2c",
            "https://git.kernel.org/stable/c/a75e5de593ef158feb17989bff7730c5a3d82503",
            "https://git.kernel.org/stable/c/a9ba4dd2f18bf3f439d9ef0d8f375f90360ba1bd",
            "https://git.kernel.org/stable/c/c9d202d3b6c28e8c779cd2f2b10d2f7ab665ca71",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-100072",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-100072"
          ],
          "PublishedDate": "2026-09-25T14:17:13.7Z",
          "LastModifiedDate": "2026-10-21T18:49:49.167Z"
        },
        {
          "VulnerabilityID": "CVE-2026-23102",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23102",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:196e5bd6994de53954bff3498d3820d0084051076a318ba5cbb1e525077e3544",
          "Title": "kernel: Linux kernel: Denial of Service due to incorrect SVE context restoration",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/fpsimd: signal: Fix restoration of SVE context\n\nWhen SME is supported, Restoring SVE signal context can go wrong in a\nfew ways, including placing the task into an invalid state where the\nkernel may read from out-of-bounds memory (and may potentially take a\nfatal fault) and/or may kill the task with a SIGKILL.\n\n(1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into\n    an invalid state where SVCR.SM is set (and sve_state is non-NULL)\n    but TIF_SME is clear, consequently resuting in out-of-bounds memory\n    reads and/or killing the task with SIGKILL.\n\n    This can only occur in unusual (but legitimate) cases where the SVE\n    signal context has either been modified by userspace or was saved in\n    the context of another task (e.g. as with CRIU), as otherwise the\n    presence of an SVE signal context with SVE_SIG_FLAG_SM implies that\n    TIF_SME is already set.\n\n    While in this state, task_fpsimd_load() will NOT configure SMCR_ELx\n    (leaving some arbitrary value configured in hardware) before\n    restoring SVCR and attempting to restore the streaming mode SVE\n    registers from memory via sve_load_state(). As the value of\n    SMCR_ELx.LEN may be larger than the task's streaming SVE vector\n    length, this may read memory outside of the task's allocated\n    sve_state, reading unrelated data and/or triggering a fault.\n\n    While this can result in secrets being loaded into streaming SVE\n    registers, these values are never exposed. As TIF_SME is clear,\n    fpsimd_bind_task_to_cpu() will configure CPACR_ELx.SMEN to trap EL0\n    accesses to streaming mode SVE registers, so these cannot be\n    accessed directly at EL0. As fpsimd_save_user_state() verifies the\n    live vector length before saving (S)SVE state to memory, no secret\n    values can be saved back to memory (and hence cannot be observed via\n    ptrace, signals, etc).\n\n    When the live vector length doesn't match the expected vector length\n    for the task, fpsimd_save_user_state() will send a fatal SIGKILL\n    signal to the task. Hence the task may be killed after executing\n    userspace for some period of time.\n\n(2) Restoring a context with SVE_SIG_FLAG_SM clear does not clear the\n    task's SVCR.SM. If SVCR.SM was set prior to restoring the context,\n    then the task will be left in streaming mode unexpectedly, and some\n    register state will be combined inconsistently, though the task will\n    be left in legitimate state from the kernel's PoV.\n\n    This can only occur in unusual (but legitimate) cases where ptrace\n    has been used to set SVCR.SM after entry to the sigreturn syscall,\n    as syscall entry clears SVCR.SM.\n\n    In these cases, the the provided SVE register data will be loaded\n    into the task's sve_state using the non-streaming SVE vector length\n    and the FPSIMD registers will be merged into this using the\n    streaming SVE vector length.\n\nFix (1) by setting TIF_SME when setting SVCR.SM. This also requires\nensuring that the task's sme_state has been allocated, but as this could\ncontain live ZA state, it should not be zeroed. Fix (2) by clearing\nSVCR.SM when restoring a SVE signal context with SVE_SIG_FLAG_SM clear.\n\nFor consistency, I've pulled the manipulation of SVCR, TIF_SVE, TIF_SME,\nand fp_type earlier, immediately after the allocation of\nsve_state/sme_state, before the restore of the actual register state.\nThis makes it easier to ensure that these are always modified\nconsistently, even if a fault is taken while reading the register data\nfrom the signal context. I do not expect any software to depend on the\nexact state restored when a fault is taken while reading the context.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "bottlerocket": 3,
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23102",
            "https://access.redhat.com/security/cve/CVE-2026-23102",
            "https://git.kernel.org/linus/d2907cbe9ea0a54cbe078076f9d089240ee1e2d9%20%286.19-rc7%29",
            "https://git.kernel.org/stable/c/7b5a52cf252a0d2e89787b645290ad288878f332",
            "https://git.kernel.org/stable/c/9bc3adba8c35119be80ab20217027720446742f2",
            "https://git.kernel.org/stable/c/ce820dd4e6e2d711242dc4331713b9bb4fe06d09",
            "https://git.kernel.org/stable/c/d2907cbe9ea0a54cbe078076f9d089240ee1e2d9",
            "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/5.4.2/BRSA-gihwsmze5rgw.toml",
            "https://lore.kernel.org/linux-cve-announce/2026020429-CVE-2026-23102-bafe@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-23102",
            "https://ubuntu.com/security/notices/USN-8278-1",
            "https://ubuntu.com/security/notices/USN-8278-2",
            "https://ubuntu.com/security/notices/USN-8289-1",
            "https://ubuntu.com/security/notices/USN-8289-2",
            "https://ubuntu.com/security/notices/USN-8296-1",
            "https://ubuntu.com/security/notices/USN-8296-2",
            "https://ubuntu.com/security/notices/USN-8393-1",
            "https://ubuntu.com/security/notices/USN-8440-1",
            "https://ubuntu.com/security/notices/USN-8499-1",
            "https://ubuntu.com/security/notices/USN-8570-1",
            "https://ubuntu.com/security/notices/USN-8570-2",
            "https://ubuntu.com/security/notices/USN-8594-1",
            "https://ubuntu.com/security/notices/USN-8604-1",
            "https://ubuntu.com/security/notices/USN-8605-1",
            "https://ubuntu.com/security/notices/USN-8669-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-23102"
          ],
          "PublishedDate": "2026-02-04T17:16:21.077Z",
          "LastModifiedDate": "2026-11-05T22:18:01.957Z"
        },
        {
          "VulnerabilityID": "CVE-2026-23208",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23208",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3e711a45ed97bae0ce803ea386c861c6a2e21207e71a86b341a18b178f1532cc",
          "Title": "kernel: ALSA: usb-audio: Prevent excessive number of frames",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Prevent excessive number of frames\n\nIn this case, the user constructed the parameters with maxpacksize 40\nfor rate 22050 / pps 1000, and packsize[0] 22 packsize[1] 23. The buffer\nsize for each data URB is maxpacksize * packets, which in this example\nis 40 * 6 = 240; When the user performs a write operation to send audio\ndata into the ALSA PCM playback stream, the calculated number of frames\nis packsize[0] * packets = 264, which exceeds the allocated URB buffer\nsize, triggering the out-of-bounds (OOB) issue reported by syzbot [1].\n\nAdded a check for the number of single data URB frames when calculating\nthe number of frames to prevent [1].\n\n[1]\nBUG: KASAN: slab-out-of-bounds in copy_to_urb+0x261/0x460 sound/usb/pcm.c:1487\nWrite of size 264 at addr ffff88804337e800 by task syz.0.17/5506\nCall Trace:\n copy_to_urb+0x261/0x460 sound/usb/pcm.c:1487\n prepare_playback_urb+0x953/0x13d0 sound/usb/pcm.c:1611\n prepare_outbound_urb+0x377/0xc50 sound/usb/endpoint.c:333",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 3
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H",
              "V3Score": 6.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-23208",
            "https://git.kernel.org/linus/ef5749ef8b307bf8717945701b1b79d036af0a15%20%286.19-rc6%29",
            "https://git.kernel.org/stable/c/152fc4f7b4a8af1c0418d2722f3b2729799cc837",
            "https://git.kernel.org/stable/c/282aba56713bbc58155716b55ca7222b2d9cf3c8",
            "https://git.kernel.org/stable/c/480a1490c595a242f27493a4544b3efb21b29f6a",
            "https://git.kernel.org/stable/c/581821f4b2ecbf411027b0af82b561ee208f4ba4",
            "https://git.kernel.org/stable/c/62932d9ed639a9fa71b4ac1a56766a4b43abb7e4",
            "https://git.kernel.org/stable/c/81e4b0009f2acc841d77a24fd796528b0bf62c4e",
            "https://git.kernel.org/stable/c/ab0b5e92fc36ee82c1bd01fe896d0f775ed5de41",
            "https://git.kernel.org/stable/c/c4dc012b027c9eb101583011089dea14d744e314",
            "https://git.kernel.org/stable/c/d67dde02049e632ba58d3c44a164a74b6a737154",
            "https://git.kernel.org/stable/c/e0ed5a36fb3ab9e7b9ee45cd17f09f6d5f594360",
            "https://git.kernel.org/stable/c/ef5749ef8b307bf8717945701b1b79d036af0a15",
            "https://lore.kernel.org/linux-cve-announce/2026021439-CVE-2026-23208-cc9e@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-23208",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-23208"
          ],
          "PublishedDate": "2026-02-14T17:15:58.703Z",
          "LastModifiedDate": "2026-11-05T22:18:07.25Z"
        },
        {
          "VulnerabilityID": "CVE-2026-23327",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23327",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:572e04698ce9356e18a1d19b9cd4fae7da196e71610c30236732028f82040df3",
          "Title": "kernel: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()\n\ncxl_payload_from_user_allowed() casts and dereferences the input\npayload without first verifying its size. When a raw mailbox command\nis sent with an undersized payload (ie: 1 byte for CXL_MBOX_OP_CLEAR_LOG,\nwhich expects a 16-byte UUID), uuid_equal() reads past the allocated buffer,\ntriggering a KASAN splat:\n\nBUG: KASAN: slab-out-of-bounds in memcmp+0x176/0x1d0 lib/string.c:683\nRead of size 8 at addr ffff88810130f5c0 by task syz.1.62/2258\n\nCPU: 2 UID: 0 PID: 2258 Comm: syz.1.62 Not tainted 6.19.0-dirty #3 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xab/0xe0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xce/0x650 mm/kasan/report.c:482\n kasan_report+0xce/0x100 mm/kasan/report.c:595\n memcmp+0x176/0x1d0 lib/string.c:683\n uuid_equal include/linux/uuid.h:73 [inline]\n cxl_payload_from_user_allowed drivers/cxl/core/mbox.c:345 [inline]\n cxl_mbox_cmd_ctor drivers/cxl/core/mbox.c:368 [inline]\n cxl_validate_cmd_from_user drivers/cxl/core/mbox.c:522 [inline]\n cxl_send_cmd+0x9c0/0xb50 drivers/cxl/core/mbox.c:643\n __cxl_memdev_ioctl drivers/cxl/core/memdev.c:698 [inline]\n cxl_memdev_ioctl+0x14f/0x190 drivers/cxl/core/memdev.c:713\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xa8/0x330 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fdaf331ba79\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fdaf1d77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007fdaf3585fa0 RCX: 00007fdaf331ba79\nRDX: 00002000000001c0 RSI: 00000000c030ce02 RDI: 0000000000000003\nRBP: 00007fdaf33749df R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007fdaf3586038 R14: 00007fdaf3585fa0 R15: 00007ffced2af768\n \u003c/TASK\u003e\n\nAdd 'in_size' parameter to cxl_payload_from_user_allowed() and validate\nthe payload is large enough.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-23327",
            "https://git.kernel.org/linus/60b5d1f68338aff2c5af0113f04aefa7169c50c2%20%287.0-rc2%29",
            "https://git.kernel.org/stable/c/3555e41737c0f8b5b53a511573661477e3942dee",
            "https://git.kernel.org/stable/c/483b7eb4b1b2a03235afe1b274732dcf8231d4ec",
            "https://git.kernel.org/stable/c/60b5d1f68338aff2c5af0113f04aefa7169c50c2",
            "https://git.kernel.org/stable/c/7c8a7b7f063b7e7ae9bba4cbaa14a5d2fe3a55e1",
            "https://git.kernel.org/stable/c/c0874ca9282ccf5aeae559c697dd1feb577aad0e",
            "https://git.kernel.org/stable/c/dc184ac2f0ba77ae19725ee06ad3ab36bb9d1f61",
            "https://lore.kernel.org/linux-cve-announce/2026032532-CVE-2026-23327-c497@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-23327",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-23327"
          ],
          "PublishedDate": "2026-03-25T11:16:29.837Z",
          "LastModifiedDate": "2026-11-05T22:18:15.06Z"
        },
        {
          "VulnerabilityID": "CVE-2026-31493",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31493",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:49781ebcf612e44dbac5643f2caec51b331aa6b9ac2d006ebed332bf7a858680",
          "Title": "kernel: RDMA/efa: Fix use of completion ctx after free",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/efa: Fix use of completion ctx after free\n\nOn admin queue completion handling, if the admin command completed with\nerror we print data from the completion context. The issue is that we\nalready freed the completion context in polling/interrupts handler which\nmeans we print data from context in an unknown state (it might be\nalready used again).\nChange the admin submission flow so alloc/dealloc of the context will be\nsymmetric and dealloc will be called after any potential use of the\ncontext.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
              "V3Score": 5.3
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-31493",
            "https://git.kernel.org/linus/ef3b06742c8a201d0e83edc9a33a89a4fe3009f8%20%287.0-rc6%29",
            "https://git.kernel.org/stable/c/0dd98aea1c0c45987fa2dd92f988b0eb1a72c125",
            "https://git.kernel.org/stable/c/1cf95fe5dc5471efea947b4c6f8913da6bc7976e",
            "https://git.kernel.org/stable/c/7ba09d85f177e9f5f64b881f33dbcb57b2cf23d5",
            "https://git.kernel.org/stable/c/8c24b5179af260a5f36571c992d29aab1f448544",
            "https://git.kernel.org/stable/c/ef3b06742c8a201d0e83edc9a33a89a4fe3009f8",
            "https://lore.kernel.org/linux-cve-announce/2026042202-CVE-2026-31493-4d67@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-31493",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-31493"
          ],
          "PublishedDate": "2026-04-22T14:16:47.17Z",
          "LastModifiedDate": "2026-11-05T22:18:34.817Z"
        },
        {
          "VulnerabilityID": "CVE-2026-31568",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31568",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f23a433601c45a8594bcea11a3a3a5c238c4ccf7d0f5556994c105630fa27890",
          "Title": "kernel: s390/mm: Add missing secure storage access fixups for donated memory",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/mm: Add missing secure storage access fixups for donated memory\n\nThere are special cases where secure storage access exceptions happen\nin a kernel context for pages that don't have the PG_arch_1 bit\nset. That bit is set for non-exported guest secure storage (memory)\nbut is absent on storage donated to the Ultravisor since the kernel\nisn't allowed to export donated pages.\n\nPrior to this patch we would try to export the page by calling\narch_make_folio_accessible() which would instantly return since the\narch bit is absent signifying that the page was already exported and\nno further action is necessary. This leads to secure storage access\nexception loops which can never be resolved.\n\nWith this patch we unconditionally try to export and if that fails we\nfixup.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-31568",
            "https://git.kernel.org/linus/b00be77302d7ec4ad0367bb236494fce7172b730%20%287.0-rc6%29",
            "https://git.kernel.org/stable/c/1eb35c54cd81cf874ce7d69e3dbfb162f211b8bd",
            "https://git.kernel.org/stable/c/43ac2d18db1131df0a89993f709131ebfc29f3bd",
            "https://git.kernel.org/stable/c/48eda93e50f8361dee8e261fe55d0b31714e1e56",
            "https://git.kernel.org/stable/c/b00be77302d7ec4ad0367bb236494fce7172b730",
            "https://git.kernel.org/stable/c/b36b0e804aee5f20c6798dbeaeaa7cfdb7c6cf88",
            "https://lore.kernel.org/linux-cve-announce/2026042401-CVE-2026-31568-cefd@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-31568",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-31568"
          ],
          "PublishedDate": "2026-04-24T15:16:31.313Z",
          "LastModifiedDate": "2026-11-05T22:18:40.66Z"
        },
        {
          "VulnerabilityID": "CVE-2026-43185",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-43185",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e35a2962ea6cb23e998b0ceed3d16d85e0e2931d973a44554b2d78b185418b16",
          "Title": "kernel: ksmbd: fix signededness bug in smb_direct_prepare_negotiation()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix signededness bug in smb_direct_prepare_negotiation()\n\nsmb_direct_prepare_negotiation() casts an unsigned __u32 value\nfrom sp-\u003emax_recv_size and req-\u003epreferred_send_size to a signed\nint before computing min_t(int, ...). A maliciously provided\npreferred_send_size of 0x80000000 will return as smaller than\nmax_recv_size, and then be used to set the maximum allowed\nalowed receive size for the next message.\n\nBy sending a second message with a large value (\u003e1420 bytes)\nthe attacker can then achieve a heap buffer overflow.\n\nThis fix replaces min_t(int, ...) with min_t(u32)",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-674"
          ],
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 4
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-43185",
            "https://git.kernel.org/linus/6b4f875aac344cdd52a1f34cc70ed2f874a65757%20%287.0-rc2%29",
            "https://git.kernel.org/stable/c/1c268fd2f59dc9ccb2c2a7d1f439b232dbe1c06c",
            "https://git.kernel.org/stable/c/55abc475d096da4a5356b6efb0cfdc6156bc1550",
            "https://git.kernel.org/stable/c/56eab82fa6fb5ca024b0514e249d40d9b23ee5a7",
            "https://git.kernel.org/stable/c/6b4f875aac344cdd52a1f34cc70ed2f874a65757",
            "https://git.kernel.org/stable/c/a110dbe928561d440e9e117d17331139a0bedace",
            "https://git.kernel.org/stable/c/ceae058eb707ddd0d68f0872f9d9f23b7c30c37b",
            "https://lore.kernel.org/linux-cve-announce/2026050640-CVE-2026-43185-55a5@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-43185",
            "https://ubuntu.com/security/notices/USN-8545-1",
            "https://ubuntu.com/security/notices/USN-8546-1",
            "https://ubuntu.com/security/notices/USN-8547-1",
            "https://ubuntu.com/security/notices/USN-8547-2",
            "https://ubuntu.com/security/notices/USN-8604-1",
            "https://ubuntu.com/security/notices/USN-8605-1",
            "https://ubuntu.com/security/notices/USN-8606-1",
            "https://ubuntu.com/security/notices/USN-8607-1",
            "https://ubuntu.com/security/notices/USN-8609-1",
            "https://ubuntu.com/security/notices/USN-8619-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-43185"
          ],
          "PublishedDate": "2026-05-06T12:16:37.187Z",
          "LastModifiedDate": "2026-10-30T13:18:47.55Z"
        },
        {
          "VulnerabilityID": "CVE-2026-46130",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46130",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0f338ab8e7275b1761554a2b6981006079b40ac060cf9082a7d9fc42f8babedd",
          "Title": "kernel: dm-verity-fec: fix reading parity bytes split across blocks (take 3)",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity-fec: fix reading parity bytes split across blocks (take 3)\n\nfec_decode_bufs() assumes that the parity bytes of the first RS codeword\nit decodes are never split across parity blocks.\n\nThis assumption is false.  Consider v-\u003efec-\u003eblock_size == 4096 \u0026\u0026\nv-\u003efec-\u003eroots == 17 \u0026\u0026 fio-\u003enbufs == 1, for example.  In that case, each\ncall to fec_decode_bufs() consumes v-\u003efec-\u003eroots * (fio-\u003enbufs \u003c\u003c\nDM_VERITY_FEC_BUF_RS_BITS) = 272 parity bytes.\n\nConsidering that the parity data for each message block starts on a\nblock boundary, the byte alignment in the parity data will iterate\nthrough 272*i mod 4096 until the 3 parity blocks have been consumed.  On\nthe 16th call (i=15), the alignment will be 4080 bytes into the first\nblock.  Only 16 bytes remain in that block, but 17 parity bytes will be\nneeded.  The code reads out-of-bounds from the parity block buffer.\n\nFortunately this doesn't normally happen, since it can occur only for\ncertain non-default values of fec_roots *and* when the maximum number of\nbuffers couldn't be allocated due to low memory.  For example with\nblock_size=4096 only the following cases are affected:\n\n    fec_roots=17: nbufs in [1, 3, 5, 15]\n    fec_roots=19: nbufs in [1, 229]\n    fec_roots=21: nbufs in [1, 3, 5, 13, 15, 39, 65, 195]\n    fec_roots=23: nbufs in [1, 89]\n\nRegardless, fix it by refactoring how the parity blocks are read.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-46130",
            "https://git.kernel.org/linus/430a05cb926f6bdf53e81460a2c3a553257f3f61%20%287.1-rc1%29",
            "https://git.kernel.org/stable/c/03348b440f69417dc3a3c71d8271cff6b05f67fb",
            "https://git.kernel.org/stable/c/3d1b4e2d8ac0a1a1390a117f61ce0ca1c47e3bcb",
            "https://git.kernel.org/stable/c/430a05cb926f6bdf53e81460a2c3a553257f3f61",
            "https://git.kernel.org/stable/c/d47281b9a4472cfd73122393e79fbe76b651e46a",
            "https://git.kernel.org/stable/c/dac69d1b76049d7e5f565089a6a7f4502a85b9de",
            "https://kernelcve.org/list/?q=CVE-2026-46130",
            "https://lore.kernel.org/linux-cve-announce/2026052817-CVE-2026-46130-895e@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-46130",
            "https://ubuntu.com/security/notices/USN-8566-1",
            "https://ubuntu.com/security/notices/USN-8568-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-46130"
          ],
          "PublishedDate": "2026-05-28T10:16:28.57Z",
          "LastModifiedDate": "2026-11-06T17:17:39.003Z"
        },
        {
          "VulnerabilityID": "CVE-2026-46181",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46181",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:741d8a51c1372a0c9a1a132eb7e9ff8b01aa3915aadd027d714a27a5cd6416ec",
          "Title": "kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()\n\nSashiko points out the radix_tree itself is RCU safe, but nothing ever\nfrees the mlx4_srq struct with RCU, and it isn't even accessed within the\nRCU critical section. It also will crash if an event is delivered before\nthe srq object is finished initializing.\n\nUse the spinlock since it isn't easy to make RCU work, use\nrefcount_inc_not_zero() to protect against partially initialized objects,\nand order the refcount_set() to be after the srq is fully initialized.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-366"
          ],
          "VendorSeverity": {
            "alma": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:25120",
            "https://access.redhat.com/errata/RHSA-2026:25121",
            "https://access.redhat.com/errata/RHSA-2026:25217",
            "https://access.redhat.com/errata/RHSA-2026:33900",
            "https://access.redhat.com/errata/RHSA-2026:34094",
            "https://access.redhat.com/errata/RHSA-2026:34095",
            "https://access.redhat.com/errata/RHSA-2026:34443",
            "https://access.redhat.com/errata/RHSA-2026:35863",
            "https://access.redhat.com/errata/RHSA-2026:35894",
            "https://access.redhat.com/errata/RHSA-2026:35896",
            "https://access.redhat.com/errata/RHSA-2026:36216",
            "https://access.redhat.com/errata/RHSA-2026:41236",
            "https://access.redhat.com/security/cve/CVE-2026-46181",
            "https://bugzilla.redhat.com/2440630",
            "https://bugzilla.redhat.com/2457829",
            "https://bugzilla.redhat.com/2460641",
            "https://bugzilla.redhat.com/2461471",
            "https://bugzilla.redhat.com/2464351",
            "https://bugzilla.redhat.com/2464449",
            "https://bugzilla.redhat.com/2467005",
            "https://bugzilla.redhat.com/2467234",
            "https://bugzilla.redhat.com/2480457",
            "https://bugzilla.redhat.com/2482166",
            "https://bugzilla.redhat.com/2482532",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2440630",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2457829",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2460641",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2461471",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2464351",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2464449",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467005",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467234",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2480457",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482166",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482532",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23216",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31419",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31508",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31581",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43037",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43056",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43116",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43125",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43501",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45852",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46181",
            "https://errata.almalinux.org/9/ALSA-2026-25217.html",
            "https://errata.rockylinux.org/RLSA-2026:25217",
            "https://git.kernel.org/linus/c9341307ea16b9395c2e4c9c94d8499d91fe31d0%20%287.1-rc3%29",
            "https://git.kernel.org/stable/c/1e2a44875b6afb4add1115f7f3351dcbeb6f273d",
            "https://git.kernel.org/stable/c/2d8b30b496bc53e961ba7415fd629fc27813017c",
            "https://git.kernel.org/stable/c/654aeddbc6e0f6e56531985bb12328ab4230c6c1",
            "https://git.kernel.org/stable/c/8b7833f3bce35cb0d01c1503781523c099c675f0",
            "https://git.kernel.org/stable/c/c9341307ea16b9395c2e4c9c94d8499d91fe31d0",
            "https://git.kernel.org/stable/c/f0dbd9355ce1e93808541260c7ffab7956df9233",
            "https://linux.oracle.com/cve/CVE-2026-46181.html",
            "https://linux.oracle.com/errata/ELSA-2026-25217.html",
            "https://lore.kernel.org/linux-cve-announce/2026052829-CVE-2026-46181-ecff@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-46181",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46181.json",
            "https://ubuntu.com/security/notices/USN-8566-1",
            "https://ubuntu.com/security/notices/USN-8568-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-46181"
          ],
          "PublishedDate": "2026-05-28T10:16:33.743Z",
          "LastModifiedDate": "2026-10-30T13:18:57.297Z"
        },
        {
          "VulnerabilityID": "CVE-2026-46279",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46279",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1eda4bc9d70e75835f65f1b4196f6a92a18af6d745aefc4cb5616dc8c9723ae1",
          "Title": "kernel: mm/alloc_tag: clear codetag for pages allocated before page_ext initialization",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/alloc_tag: clear codetag for pages allocated before page_ext initialization\n\nDue to initialization ordering, page_ext is allocated and initialized\nrelatively late during boot.  Some pages have already been allocated and\nfreed before page_ext becomes available, leaving their codetag\nuninitialized.\n\nA clear example is in init_section_page_ext(): alloc_page_ext() calls\nkmemleak_alloc().  If the slab cache has no free objects, it falls back to\nthe buddy allocator to allocate memory.  However, at this point page_ext\nis not yet fully initialized, so these newly allocated pages have no\ncodetag set.  These pages may later be reclaimed by KASAN, which causes\nthe warning to trigger when they are freed because their codetag ref is\nstill empty.\n\nUse a global array to track pages allocated before page_ext is fully\ninitialized.  The array size is fixed at 8192 entries, and will emit a\nwarning if this limit is exceeded.  When page_ext initialization\ncompletes, set their codetag to empty to avoid warnings when they are\nfreed later.\n\nThis warning is only observed with CONFIG_MEM_ALLOC_PROFILING_DEBUG=Y and\nmem_profiling_compressed disabled:\n\n[    9.582133] ------------[ cut here ]------------\n[    9.582137] alloc_tag was not set\n[    9.582139] WARNING: ./include/linux/alloc_tag.h:164 at __pgalloc_tag_sub+0x40f/0x550, CPU#5: systemd/1\n[    9.582190] CPU: 5 UID: 0 PID: 1 Comm: systemd Not tainted 7.0.0-rc4 #1 PREEMPT(lazy)\n[    9.582192] Hardware name: Red Hat KVM, BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[    9.582194] RIP: 0010:__pgalloc_tag_sub+0x40f/0x550\n[    9.582196] Code: 00 00 4c 29 e5 48 8b 05 1f 88 56 05 48 8d 4c ad 00 48 8d 2c c8 e9 87 fd ff ff 0f 0b 0f 0b e9 f3 fe ff ff 48 8d 3d 61 2f ed 03 \u003c67\u003e 48 0f b9 3a e9 b3 fd ff ff 0f 0b eb e4 e8 5e cd 14 02 4c 89 c7\n[    9.582197] RSP: 0018:ffffc9000001f940 EFLAGS: 00010246\n[    9.582200] RAX: dffffc0000000000 RBX: 1ffff92000003f2b RCX: 1ffff110200d806c\n[    9.582201] RDX: ffff8881006c0360 RSI: 0000000000000004 RDI: ffffffff9bc7b460\n[    9.582202] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff3a62324\n[    9.582203] R10: ffffffff9d311923 R11: 0000000000000000 R12: ffffea0004001b00\n[    9.582204] R13: 0000000000002000 R14: ffffea0000000000 R15: ffff8881006c0360\n[    9.582206] FS:  00007ffbbcf2d940(0000) GS:ffff888450479000(0000) knlGS:0000000000000000\n[    9.582208] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[    9.582210] CR2: 000055ee3aa260d0 CR3: 0000000148b67005 CR4: 0000000000770ef0\n[    9.582211] PKRU: 55555554\n[    9.582212] Call Trace:\n[    9.582213]  \u003cTASK\u003e\n[    9.582214]  ? __pfx___pgalloc_tag_sub+0x10/0x10\n[    9.582216]  ? check_bytes_and_report+0x68/0x140\n[    9.582219]  __free_frozen_pages+0x2e4/0x1150\n[    9.582221]  ? __free_slab+0xc2/0x2b0\n[    9.582224]  qlist_free_all+0x4c/0xf0\n[    9.582227]  kasan_quarantine_reduce+0x15d/0x180\n[    9.582229]  __kasan_slab_alloc+0x69/0x90\n[    9.582232]  kmem_cache_alloc_noprof+0x14a/0x500\n[    9.582234]  do_getname+0x96/0x310\n[    9.582237]  do_readlinkat+0x91/0x2f0\n[    9.582239]  ? __pfx_do_readlinkat+0x10/0x10\n[    9.582240]  ? get_random_bytes_user+0x1df/0x2c0\n[    9.582244]  __x64_sys_readlinkat+0x96/0x100\n[    9.582246]  do_syscall_64+0xce/0x650\n[    9.582250]  ? __x64_sys_getrandom+0x13a/0x1e0\n[    9.582252]  ? __pfx___x64_sys_getrandom+0x10/0x10\n[    9.582254]  ? do_syscall_64+0x114/0x650\n[    9.582255]  ? ksys_read+0xfc/0x1d0\n[    9.582258]  ? __pfx_ksys_read+0x10/0x10\n[    9.582260]  ? do_syscall_64+0x114/0x650\n[    9.582262]  ? do_syscall_64+0x114/0x650\n[    9.582264]  ? __pfx_fput_close_sync+0x10/0x10\n[    9.582266]  ? file_close_fd_locked+0x178/0x2a0\n[    9.582268]  ? __x64_sys_faccessat2+0x96/0x100\n[    9.582269]  ? __x64_sys_close+0x7d/0xd0\n[    9.582271]  ? do_syscall_64+0x114/0x650\n[    9.582273]  ? do_syscall_64+0x114/0x650\n[    9.582275]  ? clear_bhb_loop+0x50/0xa0\n[    9.582277]  ? clear_bhb_l\n---truncated---",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-415"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "nvd": 3,
            "redhat": 1,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-46279",
            "https://git.kernel.org/linus/6b1842775a460245e97d36d3a67d0cfba7c4ff79%20%287.1-rc1%29",
            "https://git.kernel.org/stable/c/6b1842775a460245e97d36d3a67d0cfba7c4ff79",
            "https://git.kernel.org/stable/c/b49dfabc38cad5e50af24f63edd124a10de3ebb6",
            "https://git.kernel.org/stable/c/d5b495ba9de0423ef39f8bd86729a885870c7efe",
            "https://lore.kernel.org/linux-cve-announce/2026060841-CVE-2026-46279-dc4a@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-46279",
            "https://ubuntu.com/security/notices/USN-8488-1",
            "https://ubuntu.com/security/notices/USN-8488-2",
            "https://ubuntu.com/security/notices/USN-8489-1",
            "https://ubuntu.com/security/notices/USN-8507-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-46279"
          ],
          "PublishedDate": "2026-06-08T17:16:45.53Z",
          "LastModifiedDate": "2026-07-08T14:59:41.053Z"
        },
        {
          "VulnerabilityID": "CVE-2026-52991",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-52991",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0aab4a35e07a37d79c440e785e8ca6d3f5a031ac41e3ba1ba6ea9c2fd365a21c",
          "Title": "kernel: sched/psi: fix race between file release and pressure write",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/psi: fix race between file release and pressure write\n\nA potential race condition exists between pressure write and cgroup file\nrelease regarding the priv member of struct kernfs_open_file, which\ntriggers the uaf reported in [1].\n\nConsider the following scenario involving execution on two separate CPUs:\n\n   CPU0\t\t\t\t\tCPU1\n   ====\t\t\t\t\t====\n\t\t\t\t\tvfs_rmdir()\n\t\t\t\t\tkernfs_iop_rmdir()\n\t\t\t\t\tcgroup_rmdir()\n\t\t\t\t\tcgroup_kn_lock_live()\n\t\t\t\t\tcgroup_destroy_locked()\n\t\t\t\t\tcgroup_addrm_files()\n\t\t\t\t\tcgroup_rm_file()\n\t\t\t\t\tkernfs_remove_by_name()\n\t\t\t\t\tkernfs_remove_by_name_ns()\n vfs_write()\t\t\t\t__kernfs_remove()\n new_sync_write()\t\t\tkernfs_drain()\n kernfs_fop_write_iter()\t\tkernfs_drain_open_files()\n cgroup_file_write()\t\t\tkernfs_release_file()\n pressure_write()\t\t\tcgroup_file_release()\n ctx = of-\u003epriv;\n\t\t\t\t\tkfree(ctx);\n \t\t\t\t\tof-\u003epriv = NULL;\n\t\t\t\t\tcgroup_kn_unlock()\n cgroup_kn_lock_live()\n cgroup_get(cgrp)\n cgroup_kn_unlock()\n if (ctx-\u003epsi.trigger)  // here, trigger uaf for ctx, that is of-\u003epriv\n\nThe cgroup_rmdir() is protected by the cgroup_mutex, it also safeguards\nthe memory deallocation of of-\u003epriv performed within cgroup_file_release().\nHowever, the operations involving of-\u003epriv executed within pressure_write()\nare not entirely covered by the protection of cgroup_mutex. Consequently,\nif the code in pressure_write(), specifically the section handling the\nctx variable executes after cgroup_file_release() has completed, a uaf\nvulnerability involving of-\u003epriv is triggered.\n\nTherefore, the issue can be resolved by extending the scope of the\ncgroup_mutex lock within pressure_write() to encompass all code paths\ninvolving of-\u003epriv, thereby properly synchronizing the race condition\noccurring between cgroup_file_release() and pressure_write().\n\nAnd, if an live kn lock can be successfully acquired while executing\nthe pressure write operation, it indicates that the cgroup deletion\nprocess has not yet reached its final stage; consequently, the priv\npointer within open_file cannot be NULL. Therefore, the operation to\nretrieve the ctx value must be moved to a point *after* the live kn\nlock has been successfully acquired.\n\nIn another situation, specifically after entering cgroup_kn_lock_live()\nbut before acquiring cgroup_mutex, there exists a different class of\nrace condition:\n\nCPU0: write memory.pressure               CPU1: write cgroup.pressure=0\n===========================\t\t  =============================\n\nkernfs_fop_write_iter()\n kernfs_get_active_of(of)\n pressure_write()\n   cgroup_kn_lock_live(memory.pressure)\n     cgroup_tryget(cgrp)\n     kernfs_break_active_protection(kn)\n     ... blocks on cgroup_mutex\n\n                                     \t  cgroup_pressure_write()\n                                     \t  cgroup_kn_lock_live(cgroup.pressure)\n                                     \t  cgroup_file_show(memory.pressure, false)\n                                     \t    kernfs_show(false)\n                                     \t      kernfs_drain_open_files()\n                                     \t        cgroup_file_release(of)\n                                     \t          kfree(ctx)\n                                     \t            of-\u003epriv = NULL\n                                     \t  cgroup_kn_unlock()\n\n   ... acquires cgroup_mutex\n   ctx = of-\u003epriv;        // may now be NULL\n   if (ctx-\u003epsi.trigger)  // NULL dereference\n\nConsequently, there is a possibility that of-\u003epriv is NULL, the pressure\nwrite needs to check for this.\n\nNow that the scope of the cgroup_mutex has been expanded, the original\nexplicit cgroup_get/put operations are no longer necessary, this is\nbecause acquiring/releasing the live kn lock inherently executes a\ncgroup get/put operation.\n\n[1]\nBUG: KASAN: slab-use-after-free in pressure_write+0xa4/0x210 kernel/cgroup/cgroup.c:4011\nCall Trace:\n pressure_write+0xa4/0x210 kernel/cgroup/cgroup.c:4011\n cgroup_file_write+0x36f/0x790 kernel/cgroup/cgroup.c:43\n---truncated---",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-362",
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:57251",
            "https://access.redhat.com/errata/RHSA-2026:57252",
            "https://access.redhat.com/errata/RHSA-2026:57253",
            "https://access.redhat.com/errata/RHSA-2026:57254",
            "https://access.redhat.com/security/cve/CVE-2026-52991",
            "https://bugzilla.redhat.com/2467135",
            "https://bugzilla.redhat.com/2467156",
            "https://bugzilla.redhat.com/2467202",
            "https://bugzilla.redhat.com/2482113",
            "https://bugzilla.redhat.com/2482124",
            "https://bugzilla.redhat.com/2482614",
            "https://bugzilla.redhat.com/2492403",
            "https://bugzilla.redhat.com/2492719",
            "https://bugzilla.redhat.com/2492768",
            "https://bugzilla.redhat.com/2492788",
            "https://bugzilla.redhat.com/2495941",
            "https://bugzilla.redhat.com/2495950",
            "https://bugzilla.redhat.com/2502188",
            "https://bugzilla.redhat.com/2502321",
            "https://bugzilla.redhat.com/2502361",
            "https://bugzilla.redhat.com/2502422",
            "https://bugzilla.redhat.com/2502443",
            "https://bugzilla.redhat.com/2502463",
            "https://bugzilla.redhat.com/2502589",
            "https://bugzilla.redhat.com/2506790",
            "https://bugzilla.redhat.com/2507042",
            "https://bugzilla.redhat.com/2507135",
            "https://bugzilla.redhat.com/2507216",
            "https://bugzilla.redhat.com/2508504",
            "https://bugzilla.redhat.com/2513373",
            "https://bugzilla.redhat.com/2513470",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467135",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467156",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467202",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482113",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482124",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482614",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492403",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492719",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492768",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492788",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2495941",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2495950",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502188",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502321",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502361",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502422",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502443",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502463",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502589",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2506790",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507042",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507135",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507216",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2508504",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513373",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513470",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43206",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43233",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43237",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45878",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45991",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46120",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52991",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53136",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53143",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53189",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53329",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53356",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53374",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63879",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63884",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63888",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63952",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64007",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64048",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64219",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64379",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64382",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64386",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64560",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68343",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68388",
            "https://errata.almalinux.org/9/ALSA-2026-57252.html",
            "https://errata.rockylinux.org/RLSA-2026:57252",
            "https://git.kernel.org/linus/a5b98009f16d8a5fb4a8ff9a193f5735515c38fa%20%287.1-rc2%29",
            "https://git.kernel.org/stable/c/03dc070fa0fc3cb4068693f468ccd5f8a7e58282",
            "https://git.kernel.org/stable/c/58e6ca11e45c9d6e52255d1135e7dbff0a360334",
            "https://git.kernel.org/stable/c/a5b98009f16d8a5fb4a8ff9a193f5735515c38fa",
            "https://git.kernel.org/stable/c/af0638534bfae7980582c6482531a0872f8ee341",
            "https://git.kernel.org/stable/c/d4352c0709bfd38c752fccbde7fd72a82ac78f23",
            "https://git.kernel.org/stable/c/d8ddbc3330fa6851c56b046e630a8fc64830a0ce",
            "https://linux.oracle.com/cve/CVE-2026-52991.html",
            "https://linux.oracle.com/errata/ELSA-2026-57253.html",
            "https://lore.kernel.org/linux-cve-announce/2026062444-CVE-2026-52991-18fe@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-52991",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52991.json",
            "https://ubuntu.com/security/notices/USN-8566-1",
            "https://ubuntu.com/security/notices/USN-8568-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-52991"
          ],
          "PublishedDate": "2026-06-24T17:17:09.953Z",
          "LastModifiedDate": "2026-10-30T13:19:05.697Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53000",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53000",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9008f14e75734f31d74001d07743eab139bf518e41d505835f7718760aedf849",
          "Title": "kernel: netfilter: nat: use kfree_rcu to release ops",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nat: use kfree_rcu to release ops\n\nFlorian Westphal says:\n\n\"Historically this is not an issue, even for normal base hooks: the data\npath doesn't use the original nf_hook_ops that are used to register the\ncallbacks.\n\nHowever, in v5.14 I added the ability to dump the active netfilter\nhooks from userspace.\n\nThis code will peek back into the nf_hook_ops that are available\nat the tail of the pointer-array blob used by the datapath.\n\nThe nat hooks are special, because they are called indirectly from\nthe central nat dispatcher hook. They are currently invisible to\nthe nfnl hook dump subsystem though.\n\nBut once that changes the nat ops structures have to be deferred too.\"\n\nUpdate nf_nat_register_fn() to deal with partial exposition of the hooks\nfrom error path which can be also an issue for nfnetlink_hook.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-763"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:55445",
            "https://access.redhat.com/errata/RHSA-2026:64808",
            "https://access.redhat.com/errata/RHSA-2026:67720",
            "https://access.redhat.com/errata/RHSA-2026:68100",
            "https://access.redhat.com/security/cve/CVE-2026-53000",
            "https://bugzilla.redhat.com/2370992",
            "https://bugzilla.redhat.com/2492097",
            "https://bugzilla.redhat.com/2492273",
            "https://bugzilla.redhat.com/2502527",
            "https://bugzilla.redhat.com/2507061",
            "https://bugzilla.redhat.com/2507096",
            "https://bugzilla.redhat.com/2507129",
            "https://bugzilla.redhat.com/2507287",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2370992",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492097",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492273",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502527",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507061",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507096",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507129",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507287",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38004",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52933",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53000",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64136",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64287",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64319",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64320",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64384",
            "https://errata.almalinux.org/9/ALSA-2026-64808.html",
            "https://errata.rockylinux.org/RLSA-2026:64808",
            "https://git.kernel.org/linus/6eda0d771f94267f73f57c94630aa47e90957915%20%287.1-rc1%29",
            "https://git.kernel.org/stable/c/050f98e56782b14677c5bae50800e60775bbf6bb",
            "https://git.kernel.org/stable/c/32fdd2e38e7435a368d88f5977a7d6585ebc8b0e",
            "https://git.kernel.org/stable/c/3c7511f38ab511b791196b13ae48bf4973bf7dfd",
            "https://git.kernel.org/stable/c/6eda0d771f94267f73f57c94630aa47e90957915",
            "https://git.kernel.org/stable/c/bf17f1d3b307196d9282c4b1dd8be0d0e5f8e529",
            "https://git.kernel.org/stable/c/ede973d62d26d9c550269af05366ab9e30fc92ee",
            "https://linux.oracle.com/cve/CVE-2026-53000.html",
            "https://linux.oracle.com/errata/ELSA-2026-64808-0.html",
            "https://lore.kernel.org/linux-cve-announce/2026062447-CVE-2026-53000-2568@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53000",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53000.json",
            "https://ubuntu.com/security/notices/USN-8566-1",
            "https://ubuntu.com/security/notices/USN-8568-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53000"
          ],
          "PublishedDate": "2026-06-24T17:17:11.047Z",
          "LastModifiedDate": "2026-10-30T13:19:06.473Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53091",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53091",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1ef05408bb2c866f804bafcafbdd0ad7d51b6b4fda741d5dbfdb390337656aa0",
          "Title": "kernel: net: pull headers in qdisc_pkt_len_segs_init()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: pull headers in qdisc_pkt_len_segs_init()\n\nMost ndo_start_xmit() methods expects headers of gso packets\nto be already in skb-\u003ehead.\n\nnet/core/tso.c users are particularly at risk, because tso_build_hdr()\ndoes a memcpy(hdr, skb-\u003edata, hdr_len);\n\nqdisc_pkt_len_segs_init() already does a dissection of gso packets.\n\nUse pskb_may_pull() instead of skb_header_pointer() to make\nsure drivers do not have to reimplement this.\n\nSome malicious packets could be fed, detect them so that we can\ndrop them sooner with a new SKB_DROP_REASON_SKB_BAD_GSO drop_reason.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-131"
          ],
          "VendorSeverity": {
            "alma": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:65334",
            "https://access.redhat.com/errata/RHSA-2026:66324",
            "https://access.redhat.com/errata/RHSA-2026:66325",
            "https://access.redhat.com/errata/RHSA-2026:67150",
            "https://access.redhat.com/security/cve/CVE-2026-53091",
            "https://bugzilla.redhat.com/2425039",
            "https://bugzilla.redhat.com/2454867",
            "https://bugzilla.redhat.com/2460699",
            "https://bugzilla.redhat.com/2461451",
            "https://bugzilla.redhat.com/2461525",
            "https://bugzilla.redhat.com/2464093",
            "https://bugzilla.redhat.com/2468050",
            "https://bugzilla.redhat.com/2468192",
            "https://bugzilla.redhat.com/2468244",
            "https://bugzilla.redhat.com/2492092",
            "https://bugzilla.redhat.com/2492115",
            "https://bugzilla.redhat.com/2492270",
            "https://bugzilla.redhat.com/2492310",
            "https://bugzilla.redhat.com/2492408",
            "https://bugzilla.redhat.com/2492432",
            "https://bugzilla.redhat.com/2492717",
            "https://bugzilla.redhat.com/2492722",
            "https://bugzilla.redhat.com/2492762",
            "https://bugzilla.redhat.com/2492771",
            "https://bugzilla.redhat.com/2492795",
            "https://bugzilla.redhat.com/2502254",
            "https://bugzilla.redhat.com/2502320",
            "https://bugzilla.redhat.com/2502331",
            "https://bugzilla.redhat.com/2502346",
            "https://bugzilla.redhat.com/2502388",
            "https://bugzilla.redhat.com/2502413",
            "https://bugzilla.redhat.com/2502446",
            "https://bugzilla.redhat.com/2502473",
            "https://bugzilla.redhat.com/2502477",
            "https://bugzilla.redhat.com/2502518",
            "https://bugzilla.redhat.com/2502541",
            "https://bugzilla.redhat.com/2506782",
            "https://bugzilla.redhat.com/2507292",
            "https://bugzilla.redhat.com/2513141",
            "https://bugzilla.redhat.com/2513177",
            "https://bugzilla.redhat.com/2513253",
            "https://bugzilla.redhat.com/2513324",
            "https://bugzilla.redhat.com/2513397",
            "https://bugzilla.redhat.com/2513408",
            "https://bugzilla.redhat.com/2513452",
            "https://bugzilla.redhat.com/2513474",
            "https://bugzilla.redhat.com/2516501",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2425039",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454867",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2460699",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2461451",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2461525",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2464093",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2468050",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2468192",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2468244",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492092",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492115",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492270",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492310",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492408",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492432",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492717",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492722",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492762",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492771",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492795",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502254",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502320",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502331",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502346",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502388",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502413",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502446",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502473",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502477",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502518",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502541",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2506782",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507292",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513141",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513177",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513253",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513324",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513397",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513408",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513452",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513474",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516501",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68745",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23466",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31479",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31566",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31656",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31692",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43334",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43368",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43370",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52917",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52918",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52947",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53053",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53091",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53182",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53209",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53246",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53254",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53256",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63801",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63889",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63944",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63945",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63946",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63947",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63971",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63975",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64037",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64113",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64117",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64255",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64515",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68086",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68117",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68264",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68300",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68315",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68376",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68402",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68406",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72098",
            "https://errata.almalinux.org/9/ALSA-2026-67150.html",
            "https://errata.rockylinux.org/RLSA-2026:67150",
            "https://git.kernel.org/linus/7fb4c19670110f052c04e1ec1d2b953b9f4f57e4%20%287.1-rc1%29",
            "https://git.kernel.org/stable/c/5895cfc76924a629c6eaa5e5f049de642860045f",
            "https://git.kernel.org/stable/c/7564dc804d8289d2e5c6edb8173754051b71bff4",
            "https://git.kernel.org/stable/c/7fb4c19670110f052c04e1ec1d2b953b9f4f57e4",
            "https://git.kernel.org/stable/c/9d4f5c68f5ad4ab425f3ce1500c97c9f9743999a",
            "https://linux.oracle.com/cve/CVE-2026-53091.html",
            "https://linux.oracle.com/errata/ELSA-2026-67150-0.html",
            "https://lore.kernel.org/linux-cve-announce/2026062409-CVE-2026-53091-cb58@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53091",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53091.json",
            "https://ubuntu.com/security/notices/USN-8566-1",
            "https://ubuntu.com/security/notices/USN-8568-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53091"
          ],
          "PublishedDate": "2026-06-24T17:17:23.283Z",
          "LastModifiedDate": "2026-10-21T13:19:09.8Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53109",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53109",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:444d5c422ccb2de70e3f31f78a676e72b01c40a61aa27f3b7bac45fad70fac24",
          "Title": "kernel: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pgtable-frag: Fix bad page state in pte_frag_destroy\n\npowerpc uses pt_frag_refcount as a reference counter for tracking it's\npte and pmd page table fragments. For PTE table, in case of Hash with\n64K pagesize, we have 16 fragments of 4K size in one 64K page.\n\nPatch series [1] \"mm: free retracted page table by RCU\"\nadded pte_free_defer() to defer the freeing of PTE tables when\nretract_page_tables() is called for madvise MADV_COLLAPSE on shmem\nrange.\n[1]: https://lore.kernel.org/all/7cd843a9-aa80-14f-5eb2-33427363c20@google.com/\n\npte_free_defer() sets the active flag on the corresponding fragment's\nfolio \u0026 calls pte_fragment_free(), which reduces the pt_frag_refcount.\nWhen pt_frag_refcount reaches 0 (no active fragment using the folio), it\nchecks if the folio active flag is set, if set, it calls call_rcu to\nfree the folio, it the active flag is unset then it calls pte_free_now().\n\nNow, this can lead to following problem in a corner case...\n\n[  265.351553][  T183] BUG: Bad page state in process a.out  pfn:20d62\n[  265.353555][  T183] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20d62\n[  265.355457][  T183] flags: 0x3ffff800000100(active|node=0|zone=0|lastcpupid=0x7ffff)\n[  265.358719][  T183] raw: 003ffff800000100 0000000000000000 5deadbeef0000122 0000000000000000\n[  265.360177][  T183] raw: 0000000000000000 c0000000119caf58 00000000ffffffff 0000000000000000\n[  265.361438][  T183] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set\n[  265.362572][  T183] Modules linked in:\n[  265.364622][  T183] CPU: 0 UID: 0 PID: 183 Comm: a.out Not tainted 6.18.0-rc3-00141-g1ddeaaace7ff-dirty #53 VOLUNTARY\n[  265.364785][  T183] Hardware name: IBM pSeries (emulated by qemu) POWER10 (architected) 0x801200 0xf000006 of:SLOF,git-ee03ae pSeries\n[  265.364908][  T183] Call Trace:\n[  265.364955][  T183] [c000000011e6f7c0] [c000000001cfaa18] dump_stack_lvl+0x130/0x148 (unreliable)\n[  265.365202][  T183] [c000000011e6f7f0] [c000000000794758] bad_page+0xb4/0x1c8\n[  265.365384][  T183] [c000000011e6f890] [c00000000079c020] __free_frozen_pages+0x838/0xd08\n[  265.365554][  T183] [c000000011e6f980] [c0000000000a70ac] pte_frag_destroy+0x298/0x310\n[  265.365729][  T183] [c000000011e6fa30] [c0000000000aa764] arch_exit_mmap+0x34/0x218\n[  265.365912][  T183] [c000000011e6fa80] [c000000000751698] exit_mmap+0xb8/0x820\n[  265.366080][  T183] [c000000011e6fc30] [c0000000001b1258] __mmput+0x98/0x300\n[  265.366244][  T183] [c000000011e6fc80] [c0000000001c81f8] do_exit+0x470/0x1508\n[  265.366421][  T183] [c000000011e6fd70] [c0000000001c95e4] do_group_exit+0x88/0x148\n[  265.366602][  T183] [c000000011e6fdc0] [c0000000001c96ec] pid_child_should_wake+0x0/0x178\n[  265.366780][  T183] [c000000011e6fdf0] [c00000000003a270] system_call_exception+0x1b0/0x4e0\n[  265.366958][  T183] [c000000011e6fe50] [c00000000000d05c] system_call_vectored_common+0x15c/0x2ec\n\nThe bad page state error occurs when such a folio gets freed (with\nactive flag set), from do_exit() path in parallel.\n\n... this can happen when the pte fragment was allocated from this folio,\nbut when all the fragments get freed, the pte_frag_refcount still had some\nunused fragments. Now, if this process exits, with such folio as it's cached\npte_frag in mm-\u003econtext, then during pte_frag_destroy(), we simply call\npagetable_dtor() and pagetable_free(), meaning it doesn't clear the\nactive flag. This, can lead to the above bug. Since we are anyway in\ndo_exit() path, then if the refcount is 0, then I guess it should be\nok to simply clear the folio active flag before calling pagetable_dtor()\n\u0026 pagetable_free().",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-53109",
            "https://git.kernel.org/linus/fda4d71651f71c44b35829d13f3c8bf920032f77%20%287.1-rc1%29",
            "https://git.kernel.org/stable/c/a32db6fca3c74b4eb8bae5470f0680deb4cbac6f",
            "https://git.kernel.org/stable/c/c8b710655012a2993a9567873fb71a8a51f8459c",
            "https://git.kernel.org/stable/c/e9d197c248e70278645f206defa87f085826c4c1",
            "https://git.kernel.org/stable/c/f4bc93135bfe39e7052d31e4c71f5f838e0bf516",
            "https://git.kernel.org/stable/c/fda4d71651f71c44b35829d13f3c8bf920032f77",
            "https://kernelcve.org/list/?q=CVE-2026-53109",
            "https://lore.kernel.org/linux-cve-announce/2026062413-CVE-2026-53109-3860@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53109",
            "https://ubuntu.com/security/notices/USN-8566-1",
            "https://ubuntu.com/security/notices/USN-8568-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53109"
          ],
          "PublishedDate": "2026-06-24T17:17:25.23Z",
          "LastModifiedDate": "2026-11-06T17:18:07.143Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53118",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53118",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:cd6a6457b764a81d3f488f26ef2796689f18b71578901f0debb4a3b6c5d6efd7",
          "Title": "kernel: vdpa: use generic driver_override infrastructure",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa: use generic driver_override infrastructure\n\nWhen a driver is probed through __driver_attach(), the bus' match()\ncallback is called without the device lock held, thus accessing the\ndriver_override field without a lock, which can cause a UAF.\n\nFix this by using the driver-core driver_override infrastructure taking\ncare of proper locking internally.\n\nNote that calling match() from __driver_attach() without the device lock\nheld is intentional. [1]",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-53118",
            "https://git.kernel.org/linus/85bb534ff12aab6916058897b39c748940a7a4c6%20%287.1-rc1%29",
            "https://git.kernel.org/stable/c/4005cb89139f7c9af85046b241dcf3fa2e1b3559",
            "https://git.kernel.org/stable/c/4eab1a74a498f0bf19f102f9362e9deef9307aea",
            "https://git.kernel.org/stable/c/654ef9c33e138ede6734ac286282df9faf83cd11",
            "https://git.kernel.org/stable/c/85bb534ff12aab6916058897b39c748940a7a4c6",
            "https://git.kernel.org/stable/c/fb5cb4913ce333cc4647722e8c2b8378e12f2464",
            "https://kernelcve.org/list/?q=CVE-2026-53118",
            "https://lore.kernel.org/linux-cve-announce/2026062415-CVE-2026-53118-a02a@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53118",
            "https://ubuntu.com/security/notices/USN-8566-1",
            "https://ubuntu.com/security/notices/USN-8568-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53118"
          ],
          "PublishedDate": "2026-06-24T17:17:26.19Z",
          "LastModifiedDate": "2026-11-06T17:18:08.123Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53277",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53277",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1615138ad8db9daf0eba65ddaafd35a0e20a94c65e6f91dc08f29634870cde40",
          "Title": "kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation\n\nwalk_s1() and kvm_walk_nested_s2() expect to be called while holding\nkvm-\u003esrcu to guard against memslot changes. While this is generally\nthe case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the\nrespective walkers without taking kvm-\u003esrcu.\n\nFix by acquiring kvm-\u003esrcu prior to the table walk in both instances.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-662",
            "CWE-820"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:64775",
            "https://access.redhat.com/security/cve/CVE-2026-53277",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2370992",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454807",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2460736",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2468102",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481936",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2484456",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2486463",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492097",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492295",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492725",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492733",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492745",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492811",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492841",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492850",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502363",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502369",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507041",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507096",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507129",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510892",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2511932",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38004",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23442",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31503",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43339",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46015",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46266",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46306",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52933",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53075",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53223",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53235",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53259",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53275",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53277",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63993",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64002",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64265",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64287",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64319",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64563",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64597",
            "https://errata.rockylinux.org/RLSA-2026:64775",
            "https://git.kernel.org/linus/f2ca45b50d4216c9cc7ffabf50d9ad1932209251%20%287.1-rc7%29",
            "https://git.kernel.org/stable/c/0648b375aa951cc15d9e90f9ac4de71e0b51fa45",
            "https://git.kernel.org/stable/c/97706097f9b851cfe55c3b00b083dfc2bcf542bc",
            "https://git.kernel.org/stable/c/ec42b4ed1b072ea2d03f086061aa67bad6d8de39",
            "https://git.kernel.org/stable/c/f2ca45b50d4216c9cc7ffabf50d9ad1932209251",
            "https://linux.oracle.com/cve/CVE-2026-53277.html",
            "https://linux.oracle.com/errata/ELSA-2026-64775-0.html",
            "https://lore.kernel.org/linux-cve-announce/2026062520-CVE-2026-53277-4338@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53277",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53277.json",
            "https://ubuntu.com/security/notices/USN-8566-1",
            "https://ubuntu.com/security/notices/USN-8568-1",
            "https://ubuntu.com/security/notices/USN-8569-1",
            "https://ubuntu.com/security/notices/USN-8570-1",
            "https://ubuntu.com/security/notices/USN-8570-2",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8594-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8604-1",
            "https://ubuntu.com/security/notices/USN-8605-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8669-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://www.cve.org/CVERecord?id=CVE-2026-53277"
          ],
          "PublishedDate": "2026-06-25T09:16:45.897Z",
          "LastModifiedDate": "2026-10-21T13:19:13.393Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53330",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53330",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:be97e83411e8c2b785cf71713d03999ca6e9b6785a7d3252e8475ebb4eee733f",
          "Title": "kernel: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()\n\n[Why \u0026 How]\nThe aux_rd_interval array in struct dc_lttpr_caps is declared with\nMAX_REPEATER_CNT - 1 (7) elements, indexed 0..6. However, the offset\nparameter passed to dp_get_eq_aux_rd_interval() can be as large as\nMAX_REPEATER_CNT (8) when a sink reports 8 LTTPR repeaters via DPCD.\nThis leads to an out-of-bounds read of aux_rd_interval[7] when offset\nis 8.\n\nFix this by growing aux_rd_interval to MAX_REPEATER_CNT elements to\naccommodate the full range of valid repeater counts defined by the DP\nspec.\n\n(cherry picked from commit a55a458a8df37a65ffda5cf721d554a8f74f6b04)",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "photon": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-53330",
            "https://git.kernel.org/linus/e8b4d37eba05141ee01794fc6b7f2da808cee83b%20%287.1-rc7%29",
            "https://git.kernel.org/stable/c/454d3b3d499c18373f8960d31aea48338a3ca9e0",
            "https://git.kernel.org/stable/c/7b310c6d82d782282085c9728dfe69e07d185b6c",
            "https://git.kernel.org/stable/c/7c5f2d16a8f4464bf2a719ceb2316b8a6b87a3c0",
            "https://git.kernel.org/stable/c/a632474c793b7f2a9bbd3d8e3d0dd7d256989300",
            "https://git.kernel.org/stable/c/dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e",
            "https://git.kernel.org/stable/c/e8b4d37eba05141ee01794fc6b7f2da808cee83b",
            "https://lore.kernel.org/linux-cve-announce/2026070142-CVE-2026-53330-0e20@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53330",
            "https://ubuntu.com/security/notices/USN-8726-1",
            "https://ubuntu.com/security/notices/USN-8726-2",
            "https://ubuntu.com/security/notices/USN-8726-3",
            "https://ubuntu.com/security/notices/USN-8726-4",
            "https://ubuntu.com/security/notices/USN-8727-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8760-1",
            "https://ubuntu.com/security/notices/USN-8760-2",
            "https://ubuntu.com/security/notices/USN-8800-1",
            "https://ubuntu.com/security/notices/USN-8886-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53330"
          ],
          "PublishedDate": "2026-07-01T14:16:40.893Z",
          "LastModifiedDate": "2026-10-30T13:19:16.39Z"
        },
        {
          "VulnerabilityID": "CVE-2026-63879",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-63879",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:913c5a9b2a9847c1e408bafef4944dd29a61d0d37ce9d617a3ea45d7693efce7",
          "Title": "kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix amdgpu_hmm_range_get_pages\n\nThe notifier sequence must only be read once or otherwise we could work\nwith invalid pages.\n\nWhile at it also fix the coding style, e.g. drop the pre-initialized\nreturn value and use the common define for 2G range.\n\n(cherry picked from commit c08972f555945cda57b0adb72272a37910153390)",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-362"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:57252",
            "https://access.redhat.com/security/cve/CVE-2026-63879",
            "https://bugzilla.redhat.com/2467135",
            "https://bugzilla.redhat.com/2467156",
            "https://bugzilla.redhat.com/2467202",
            "https://bugzilla.redhat.com/2482113",
            "https://bugzilla.redhat.com/2482124",
            "https://bugzilla.redhat.com/2482614",
            "https://bugzilla.redhat.com/2492403",
            "https://bugzilla.redhat.com/2492719",
            "https://bugzilla.redhat.com/2492768",
            "https://bugzilla.redhat.com/2492788",
            "https://bugzilla.redhat.com/2495941",
            "https://bugzilla.redhat.com/2495950",
            "https://bugzilla.redhat.com/2502188",
            "https://bugzilla.redhat.com/2502321",
            "https://bugzilla.redhat.com/2502361",
            "https://bugzilla.redhat.com/2502422",
            "https://bugzilla.redhat.com/2502443",
            "https://bugzilla.redhat.com/2502463",
            "https://bugzilla.redhat.com/2502589",
            "https://bugzilla.redhat.com/2506790",
            "https://bugzilla.redhat.com/2507042",
            "https://bugzilla.redhat.com/2507135",
            "https://bugzilla.redhat.com/2507216",
            "https://bugzilla.redhat.com/2508504",
            "https://bugzilla.redhat.com/2513373",
            "https://bugzilla.redhat.com/2513470",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467135",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467156",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2467202",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482113",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482124",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482614",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492403",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492719",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492768",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492788",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2495941",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2495950",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502188",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502321",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502361",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502422",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502443",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502463",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502589",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2506790",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507042",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507135",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507216",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2508504",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513373",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513470",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43206",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43233",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43237",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45878",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45991",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46120",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52991",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53136",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53143",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53189",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53329",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53356",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53374",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63879",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63884",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63888",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63952",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64007",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64048",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64219",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64379",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64382",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64386",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64560",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68343",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68388",
            "https://errata.almalinux.org/9/ALSA-2026-57252.html",
            "https://errata.rockylinux.org/RLSA-2026:57252",
            "https://git.kernel.org/linus/962d684b5dc0741dcd93485d41b450de402d5592%20%287.1-rc6%29",
            "https://git.kernel.org/stable/c/2fd24407457a6b181ba827705678da70e528dcd0",
            "https://git.kernel.org/stable/c/93a9f121de6383f20290840d025ee28fda5f53b5",
            "https://git.kernel.org/stable/c/962d684b5dc0741dcd93485d41b450de402d5592",
            "https://git.kernel.org/stable/c/e35cf322897dd4921248d11311a89c865b534c14",
            "https://git.kernel.org/stable/c/fa34d3e14cb763b50702e8a0f7d4cfd877a73ab9",
            "https://linux.oracle.com/cve/CVE-2026-63879.html",
            "https://linux.oracle.com/errata/ELSA-2026-57252.html",
            "https://lore.kernel.org/linux-cve-announce/2026071938-CVE-2026-63879-3372@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-63879",
            "https://ubuntu.com/security/notices/USN-8593-1",
            "https://ubuntu.com/security/notices/USN-8603-1",
            "https://ubuntu.com/security/notices/USN-8618-1",
            "https://ubuntu.com/security/notices/USN-8663-1",
            "https://ubuntu.com/security/notices/USN-8664-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8886-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-63879"
          ],
          "PublishedDate": "2026-07-19T16:17:04.903Z",
          "LastModifiedDate": "2026-10-26T20:12:03.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-64283",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64283",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:fa906e52011c09aabf22b428338950c74d9b599acba4340545a8a5e8f2e05170",
          "Title": "kernel: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: guest_memfd: Treat memslot binding offset+size as unsigned values\n\nWhen binding a memslot to a guest_memfd file, treat the offset and size as\nunsigned values to fix a bug where the sum of the two can result in a false\nnegative when checking for overflow against the size of the file.  Passing\nunsigned values also avoids relying on somewhat obscure checks in other\nflows for safety, and tracks the offset and size as they are intended to be\ntracked, as unsigned values.\n\nOn 64-bit kernels, the number of pages a memslot contains and thus the size\n(and offset) of its guest_memfd binding are unsigned 64-bit values.  Taking\nthe offset+size as an loff_t instead of a uoff_t inadvertently converts\nthe unsigned value to a signed value if the offset and/or size is massive.\n\nLocally storing the offset and size as signed values is benign in and of\nitself (though even that is *extremely* difficult to discern), but\noperating on their sum is not.\n\nFor the offset, KVM explicitly checks against a negative value, which might\nseem like a bug as KVM could incorrectly reject a legitimate binding, but\nthat's not actually the case as KVM_CREATE_GUEST_MEMFD takes a signed value\nfor its size, i.e. a would-be-negative offset is also greater than the\nmaximum possible size of any guest_memfd file.\n\nRegarding the size, while KVM lacks an explicit check for a negative value,\ni.e. seemingly has a flawed overflow check, KVM restricts the number of\npages in a single memslot to the largest positive signed 32-bit value:\n\n        if (id \u003c KVM_USER_MEM_SLOTS \u0026\u0026\n            (mem-\u003ememory_size \u003e\u003e PAGE_SHIFT) \u003e KVM_MEM_MAX_NR_PAGES)\n                return -EINVAL;\n\nand so that maximum \"size\" will ever be is 0x7fffffff000.\n\nThe sum of the two is, however, problematic.  While the size is restricted\nby KVM's memslot logic, the offset is not, i.e. the offset is completely\nunchecked until the \"offset + size \u003e i_size_read(inode)\" check.  If the\noffset is the (nearly) largest possible _positive_ value, then adding size\nto the offset can result in a signed, negative 64-bit value.  When compared\nagainst the size of the file (guaranteed to be positive), the negative sum\nis always smaller, and KVM incorrectly allows the absurd offset.\n\nOpportunistically add missing includes in kvm_mm.h (instead of relying on\nits parents).",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-64283",
            "https://git.kernel.org/linus/eba85fee7fc6cf28fec38a5bf3c378bef9a79ca6%20%287.2-rc1%29",
            "https://git.kernel.org/stable/c/3f9c0fdefa0431ad7a5528d76b9cdad912500bdf",
            "https://git.kernel.org/stable/c/e4683654881f3303ab286e45df6f91c0675d867c",
            "https://git.kernel.org/stable/c/eba85fee7fc6cf28fec38a5bf3c378bef9a79ca6",
            "https://git.kernel.org/stable/c/f3a98d5881b9bd4807f49156143565f6aabcef1e",
            "https://lore.kernel.org/linux-cve-announce/2026072502-CVE-2026-64283-eed4@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-64283",
            "https://ubuntu.com/security/notices/USN-8726-1",
            "https://ubuntu.com/security/notices/USN-8726-2",
            "https://ubuntu.com/security/notices/USN-8726-3",
            "https://ubuntu.com/security/notices/USN-8726-4",
            "https://ubuntu.com/security/notices/USN-8727-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8760-1",
            "https://ubuntu.com/security/notices/USN-8760-2",
            "https://ubuntu.com/security/notices/USN-8800-1",
            "https://ubuntu.com/security/notices/USN-8886-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-64283"
          ],
          "PublishedDate": "2026-07-25T10:17:08.91Z",
          "LastModifiedDate": "2026-11-06T17:18:45.297Z"
        },
        {
          "VulnerabilityID": "CVE-2026-64389",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64389",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b151dd346bd49f3b73deadc721e7da7f39715bc5e72f5d09636ed7bed414f633",
          "Title": "kernel: ksmbd: validate NTLMv2 response before updating session key",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate NTLMv2 response before updating session key\n\nksmbd_auth_ntlmv2() derives the NTLMv2 session key into\nsess-\u003esess_key before it verifies the NTLMv2 response.\nksmbd_decode_ntlmssp_auth_blob() then continues into KEY_XCH even\nwhen ksmbd_auth_ntlmv2() failed.\n\nWith SMB3 multichannel binding, the failed authentication operates on\nan existing session and the session setup error path does not expire\nbinding sessions. A client can send a binding session setup with a\nbad NT proof and KEY_XCH and still modify sess-\u003esess_key before\nSTATUS_LOGON_FAILURE is returned.\n\nRelevant path:\n\n  smb2_sess_setup()\n    -\u003e conn-\u003ebinding = true\n    -\u003e ntlm_authenticate()\n       -\u003e session_user()\n       -\u003e ksmbd_decode_ntlmssp_auth_blob()\n          -\u003e ksmbd_auth_ntlmv2()\n             -\u003e calc_ntlmv2_hash()\n             -\u003e hmac_md5_usingrawkey(..., sess-\u003esess_key)\n             -\u003e crypto_memneq() returns mismatch\n          -\u003e KEY_XCH arc4_crypt(..., sess-\u003esess_key, ...)\n    -\u003e out_err without expiring the binding session\n\nDerive the base session key into a local buffer and copy it to\nsess-\u003esess_key only after the proof matches. Return immediately on\nauthentication failure so KEY_XCH is only processed after successful\nauthentication.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "photon": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-64389",
            "https://git.kernel.org/linus/954d196bebb2b50151cb96454c72dc113b2af1ac%20%287.2-rc1%29",
            "https://git.kernel.org/stable/c/89ca7756d5566ba636bb9092cdbe57dab095e136",
            "https://git.kernel.org/stable/c/954d196bebb2b50151cb96454c72dc113b2af1ac",
            "https://git.kernel.org/stable/c/a6a951416b55eaf51ea2742f7ba786f240e70137",
            "https://git.kernel.org/stable/c/b56400364aed5c34d6e1a0b493081290a5328a9c",
            "https://git.kernel.org/stable/c/e589e997bddde0a6f45672dd871cba7b3ff28e17",
            "https://git.kernel.org/stable/c/f5d74c186bab26a5d5a025305e67edd0888aa34d",
            "https://lore.kernel.org/linux-cve-announce/2026072527-CVE-2026-64389-de36@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-64389",
            "https://ubuntu.com/security/notices/USN-8726-1",
            "https://ubuntu.com/security/notices/USN-8726-2",
            "https://ubuntu.com/security/notices/USN-8726-3",
            "https://ubuntu.com/security/notices/USN-8726-4",
            "https://ubuntu.com/security/notices/USN-8727-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8760-1",
            "https://ubuntu.com/security/notices/USN-8760-2",
            "https://ubuntu.com/security/notices/USN-8800-1",
            "https://ubuntu.com/security/notices/USN-8886-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-64389"
          ],
          "PublishedDate": "2026-07-25T10:17:22.227Z",
          "LastModifiedDate": "2026-10-30T13:19:35.7Z"
        },
        {
          "VulnerabilityID": "CVE-2026-64400",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64400",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:26c37f00a52e536ba4bd5c98e8d9fc3f6a3b05a5357e1ef3ac27032afc99a4f7",
          "Title": "kernel: ksmbd: prevent path traversal bypass by restricting caseless retry",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: prevent path traversal bypass by restricting caseless retry\n\nksmbd_vfs_path_lookup() enforces LOOKUP_BENEATH to restrict path\nresolution within the share root. When a crafted path attempts to\nescape the share boundary using parent-directory components ('..'),\nvfs_path_parent_lookup() detects this and immediately fails,\nreturning -EXDEV.\n\nHowever, a bug exists in __ksmbd_vfs_kern_path() under caseless mode.\nThe function fails to intercept the -EXDEV error and erroneously\nfalls through to the caseless retry logic, which is intended only\nfor genuinely missing files. During this retry process, the path\nis reconstructed, leading to an unintended LOOKUP_BENEATH bypass\nthat allows write-capable users to create zero-length files or\ndirectories outside the exported share.\n\nFix this by ensuring that the execution only proceeds to the caseless\nlookup retry when the error is specifically -ENOENT. Any other errors,\nsuch as -EXDEV from a path traversal attempt, must be returned immediately.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 2
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-64400",
            "https://git.kernel.org/linus/54bab9ba5a9f156ffa9324fcbe5a356fd0242f95%20%287.2-rc1%29",
            "https://git.kernel.org/stable/c/21f050439db157f2afcc19885dec14549ca6ffc0",
            "https://git.kernel.org/stable/c/54bab9ba5a9f156ffa9324fcbe5a356fd0242f95",
            "https://git.kernel.org/stable/c/8c9a4f1327eb71efbf14842e7b8a6d965077eb67",
            "https://git.kernel.org/stable/c/a1c331d98313380c38f616c8b28b890ec8ef9c28",
            "https://git.kernel.org/stable/c/cfb5a56c218888f9d74165dff0c282cd0be97983",
            "https://git.kernel.org/stable/c/eec1dd2586c4016b7555a5d047db2b3756459fb2",
            "https://lore.kernel.org/linux-cve-announce/2026072529-CVE-2026-64400-d372@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-64400",
            "https://ubuntu.com/security/notices/USN-8726-1",
            "https://ubuntu.com/security/notices/USN-8726-2",
            "https://ubuntu.com/security/notices/USN-8726-3",
            "https://ubuntu.com/security/notices/USN-8726-4",
            "https://ubuntu.com/security/notices/USN-8727-1",
            "https://ubuntu.com/security/notices/USN-8728-1",
            "https://ubuntu.com/security/notices/USN-8728-2",
            "https://ubuntu.com/security/notices/USN-8728-3",
            "https://ubuntu.com/security/notices/USN-8760-1",
            "https://ubuntu.com/security/notices/USN-8760-2",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://ubuntu.com/security/notices/USN-8800-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-64400"
          ],
          "PublishedDate": "2026-07-25T10:17:23.51Z",
          "LastModifiedDate": "2026-10-30T13:19:36.18Z"
        },
        {
          "VulnerabilityID": "CVE-2026-68409",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0aa0211ea95f54962995d68af24fe75a372991f6138afb8c563f78af02be132b",
          "Title": "kernel: wifi: mac80211: defer link RX stats percpu free to RCU",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: defer link RX stats percpu free to RCU\n\nsta_remove_link() frees a removed MLO link's RX stats percpu buffer right\naway, but defers only the link container to RCU:\n\n\tsta_info_free_link(\u0026alloc-\u003einfo);\n\tkfree_rcu(alloc, rcu_head);\n\nThe RX fast path reads link_sta under rcu_read_lock and writes the percpu\nstats. A reader that resolved link_sta before the removal keeps the\npointer. The container stays alive from the kfree_rcu, so the read still\nworks. But the percpu block it points to is already freed. This needs\nuses_rss. That is when pcpu_rx_stats exists.\n\nThe full STA teardown frees the deflink stats only after\nsynchronize_net(). The link removal path had no such barrier. The race is\nhard to win in practice, but the free should still wait for RCU.\n\nFree the link together with its data from a single RCU callback, so the\npercpu block is reclaimed only after readers drain.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:83156",
            "https://access.redhat.com/security/cve/CVE-2026-68409",
            "https://bugzilla.redhat.com/2486979",
            "https://bugzilla.redhat.com/2492286",
            "https://bugzilla.redhat.com/2502460",
            "https://bugzilla.redhat.com/2513234",
            "https://bugzilla.redhat.com/2513277",
            "https://bugzilla.redhat.com/2513293",
            "https://bugzilla.redhat.com/2513299",
            "https://bugzilla.redhat.com/2516526",
            "https://bugzilla.redhat.com/2516575",
            "https://bugzilla.redhat.com/2516606",
            "https://bugzilla.redhat.com/2521436",
            "https://bugzilla.redhat.com/2521498",
            "https://bugzilla.redhat.com/2532279",
            "https://bugzilla.redhat.com/2532309",
            "https://bugzilla.redhat.com/2535158",
            "https://bugzilla.redhat.com/2540182",
            "https://bugzilla.redhat.com/2540230",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2486979",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492286",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502460",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513234",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513277",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513293",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513299",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516526",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516575",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516606",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521436",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521498",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532279",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532309",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532515",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2535158",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2540182",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2540230",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53011",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64030",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68140",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68377",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68404",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68409",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72262",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72288",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72320",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74641",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80985",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81003",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89526",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90036",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93207",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93228",
            "https://errata.almalinux.org/9/ALSA-2026-83156.html",
            "https://errata.rockylinux.org/RLSA-2026:83156",
            "https://git.kernel.org/stable/c/2aa1789880fa5e41049b0f6a74a4fc2fa1997610",
            "https://git.kernel.org/stable/c/a03fceae0c65b31ce31840dac5e26684ceecb65b",
            "https://git.kernel.org/stable/c/a5afc00280986063f1c355821544fabbb2a960f7",
            "https://git.kernel.org/stable/c/aa2eb62525188269cdd402a583b9a8ed94657ff0",
            "https://git.kernel.org/stable/c/acd5931d5adf12f0163f83dc00320e7011f4da92",
            "https://git.kernel.org/stable/c/b679c1cffb2f3d0854b8b05ea9e909ad6489046f",
            "https://linux.oracle.com/cve/CVE-2026-68409.html",
            "https://linux.oracle.com/errata/ELSA-2026-83156.html",
            "https://lore.kernel.org/linux-cve-announce/2026081050-CVE-2026-68409-4c77@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-68409",
            "https://ubuntu.com/security/notices/USN-8886-1",
            "https://ubuntu.com/security/notices/USN-8887-1",
            "https://ubuntu.com/security/notices/USN-8887-2",
            "https://ubuntu.com/security/notices/USN-8887-3",
            "https://ubuntu.com/security/notices/USN-8888-1",
            "https://ubuntu.com/security/notices/USN-8888-2",
            "https://ubuntu.com/security/notices/USN-8889-1",
            "https://ubuntu.com/security/notices/USN-9003-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-68409"
          ],
          "PublishedDate": "2026-08-10T13:20:34.537Z",
          "LastModifiedDate": "2026-10-30T13:19:44.847Z"
        },
        {
          "VulnerabilityID": "CVE-2026-68426",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68426",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3411c8dba568112baff75d7a1d8582526d7f8ca240eaacd11a49d97cdb84f513",
          "Title": "kernel: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment\n\nskb_gso_segment() leaves the segment list head with -\u003eprev pointing at\nthe last segment, an invariant validate_xmit_skb_list() relies on when\nit sets its tail pointer (tail = skb-\u003eprev).\n\nWhen validate_xmit_xfrm() walks a GSO list and some segments are stolen\nby async crypto (-\u003exmit() returns -EINPROGRESS), those segments are\nunlinked from the list but the head -\u003eprev is never updated.  If the\nlast segment is the one stolen, the returned head still has -\u003eprev\npointing at it, even though it is now owned by the crypto engine and may\nbe freed.  validate_xmit_skb_list() later does tail-\u003enext = skb, writing\nthrough that stale pointer -- a use-after-free.\n\nRepoint skb-\u003eprev at the last retained segment before returning.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 4,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 4
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
              "V3Score": 7.3
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:68570",
            "https://access.redhat.com/security/cve/CVE-2026-68426",
            "https://bugzilla.redhat.com/2439924",
            "https://bugzilla.redhat.com/2461462",
            "https://bugzilla.redhat.com/2482098",
            "https://bugzilla.redhat.com/2482127",
            "https://bugzilla.redhat.com/2482550",
            "https://bugzilla.redhat.com/2482618",
            "https://bugzilla.redhat.com/2492436",
            "https://bugzilla.redhat.com/2492741",
            "https://bugzilla.redhat.com/2492742",
            "https://bugzilla.redhat.com/2492750",
            "https://bugzilla.redhat.com/2492779",
            "https://bugzilla.redhat.com/2492792",
            "https://bugzilla.redhat.com/2502295",
            "https://bugzilla.redhat.com/2502347",
            "https://bugzilla.redhat.com/2502368",
            "https://bugzilla.redhat.com/2502412",
            "https://bugzilla.redhat.com/2502434",
            "https://bugzilla.redhat.com/2502438",
            "https://bugzilla.redhat.com/2502575",
            "https://bugzilla.redhat.com/2502580",
            "https://bugzilla.redhat.com/2502596",
            "https://bugzilla.redhat.com/2511448",
            "https://bugzilla.redhat.com/2513165",
            "https://bugzilla.redhat.com/2513171",
            "https://bugzilla.redhat.com/2513271",
            "https://bugzilla.redhat.com/2513286",
            "https://bugzilla.redhat.com/2513477",
            "https://bugzilla.redhat.com/2516490",
            "https://bugzilla.redhat.com/2516599",
            "https://bugzilla.redhat.com/2516679",
            "https://bugzilla.redhat.com/2516684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2439924",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2461462",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482098",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482550",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2482618",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492436",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492741",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492742",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492750",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492779",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492792",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502295",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502347",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502368",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502412",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502434",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502438",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502575",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502580",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502596",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2511448",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513165",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513171",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513271",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513286",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513477",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516490",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516599",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516679",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516684",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23172",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31663",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45910",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46043",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46114",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46133",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52971",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53176",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53192",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53193",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53196",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53239",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63869",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63913",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63917",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63919",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63921",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64029",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64174",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64175",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64176",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64582",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68128",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68159",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68200",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68363",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68426",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72003",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72102",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72243",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72298",
            "https://errata.almalinux.org/9/ALSA-2026-68570.html",
            "https://errata.rockylinux.org/RLSA-2026:68570",
            "https://git.kernel.org/stable/c/33e1b0d25ca0d2818c635ff80e6aa0d295e08a98",
            "https://git.kernel.org/stable/c/3f4c3919baf0944ad96580467c302bc6c7758b00",
            "https://git.kernel.org/stable/c/4927ab8a8acc8db4fad33e803d1d35e0b16cef83",
            "https://git.kernel.org/stable/c/4e695742396be18d5291c310a3d7c450959d647a",
            "https://git.kernel.org/stable/c/b58731e0570bfd3989999fc2baf9ee4fecd5bec6",
            "https://git.kernel.org/stable/c/bbca7cc3b2b4b10afbfee99b81d9ee78f5423046",
            "https://linux.oracle.com/cve/CVE-2026-68426.html",
            "https://linux.oracle.com/errata/ELSA-2026-68570.html",
            "https://lore.kernel.org/linux-cve-announce/2026081053-CVE-2026-68426-9cce@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-68426",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://ubuntu.com/security/notices/USN-8887-1",
            "https://ubuntu.com/security/notices/USN-8887-2",
            "https://ubuntu.com/security/notices/USN-8887-3",
            "https://ubuntu.com/security/notices/USN-8888-1",
            "https://ubuntu.com/security/notices/USN-8888-2",
            "https://ubuntu.com/security/notices/USN-8889-1",
            "https://ubuntu.com/security/notices/USN-9003-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-68426"
          ],
          "PublishedDate": "2026-08-10T13:20:36.54Z",
          "LastModifiedDate": "2026-10-30T13:19:45.277Z"
        },
        {
          "VulnerabilityID": "CVE-2026-68470",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68470",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5be8cfe082372d2a79ec23a7290405a4f5e64ae3551adcf40320cf64d7754c1f",
          "Title": "kernel: wifi: mac80211: validate extension-frame layout before RX",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: validate extension-frame layout before RX\n\nExtension frames only have the extension header at the regular 802.11\nheader offset. The generic RX path can still reach helpers and interface\ndispatch code that read regular header address fields before unsupported\nextension subtypes are dropped.\n\nmac80211 currently only handles S1G beacon extension frames. Drop other\nextension subtypes before they can reach regular-header RX processing.\nFor S1G beacons, linearize the SKB with the management-frame path and\nrequire the fixed S1G beacon header, including optional fixed fields\nindicated by frame control, before generic RX dispatch.\n\nRoute S1G beacons through the station/default-link RX path without\nregular-header station lookup. Avoid regular-header address reads in the\nmac80211 RX paths that process S1G extension beacons, including\naccept-frame, duplicate-detection, address-copy, and MLO\naddress-translation paths.\n\nAlso make ieee80211_get_bssid() length-safe before returning the S1G\nsource-address pointer.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-20"
          ],
          "VendorSeverity": {
            "photon": 3,
            "redhat": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
              "V3Score": 7.6
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-68470",
            "https://git.kernel.org/linus/57d503ce32eccfa7650065ca4c560f7e29a2e676%20%287.2-rc4%29",
            "https://git.kernel.org/stable/c/1c3d9c6bd5b795f3b952b40d574c8e424e14a39b",
            "https://git.kernel.org/stable/c/57d503ce32eccfa7650065ca4c560f7e29a2e676",
            "https://git.kernel.org/stable/c/625fc704b19cb48d7d269ad54ffffb4d3bf9c7ed",
            "https://git.kernel.org/stable/c/7aba69b611007e11b9b93118ff8fe88998c3107f",
            "https://lore.kernel.org/linux-cve-announce/2026081504-CVE-2026-68470-1fbf@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-68470",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://ubuntu.com/security/notices/USN-8887-1",
            "https://ubuntu.com/security/notices/USN-8887-2",
            "https://ubuntu.com/security/notices/USN-8887-3",
            "https://ubuntu.com/security/notices/USN-8888-1",
            "https://ubuntu.com/security/notices/USN-8888-2",
            "https://ubuntu.com/security/notices/USN-8889-1",
            "https://ubuntu.com/security/notices/USN-9003-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-68470"
          ],
          "PublishedDate": "2026-08-15T06:19:57.767Z",
          "LastModifiedDate": "2026-10-21T13:19:31.76Z"
        },
        {
          "VulnerabilityID": "CVE-2026-72042",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-72042",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9cec1005d2dad610bd2ae47bc0a0c35ce081ebeb033b0b02f13c217fbf7923ff",
          "Title": "kernel: ipmi: Fix user refcount underflow in event delivery",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: Fix user refcount underflow in event delivery\n\nipmi_alloc_recv_msg(user) takes the temporary user reference owned by the\nreceive message, and ipmi_free_recv_msg() drops it again. If event delivery\nfails after allocating receive messages for earlier users,\nhandle_read_event_rsp() rolls those messages back with\nipmi_free_recv_msg().\n\nThat rollback path still drops user-\u003erefcount explicitly after freeing each\nmessage. The extra put can free a user that remains linked on intf-\u003eusers,\nso later event delivery may dereference a freed user or trip refcount_t's\naddition-on-zero warning when ipmi_alloc_recv_msg() tries to acquire\nanother reference.\n\nRemove the stale explicit put and the now-dead user assignment. Keep the\nlist_del() and ipmi_free_recv_msg() calls; they are the required rollback\noperations.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "amazon": 3,
            "redhat": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-72042",
            "https://git.kernel.org/linus/6aa9e61c46465d231e9beddf56af7effd71be682%20%287.2-rc1%29",
            "https://git.kernel.org/stable/c/6aa9e61c46465d231e9beddf56af7effd71be682",
            "https://git.kernel.org/stable/c/7be349d4fcc5e065295b83418a22d27a68afbdb6",
            "https://git.kernel.org/stable/c/ddbb6e3dc9bb4743de686aa1598c31e745cee76b",
            "https://lore.kernel.org/linux-cve-announce/2026081513-CVE-2026-72042-3b9c@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-72042",
            "https://ubuntu.com/security/notices/USN-8887-1",
            "https://ubuntu.com/security/notices/USN-8887-2",
            "https://ubuntu.com/security/notices/USN-8887-3",
            "https://ubuntu.com/security/notices/USN-8888-1",
            "https://ubuntu.com/security/notices/USN-8888-2",
            "https://ubuntu.com/security/notices/USN-8889-1",
            "https://ubuntu.com/security/notices/USN-9003-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-72042"
          ],
          "PublishedDate": "2026-08-15T06:21:13.37Z",
          "LastModifiedDate": "2026-08-17T06:18:02.133Z"
        },
        {
          "VulnerabilityID": "CVE-2026-72098",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-72098",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:43ca548dff7841107df68da880a9987ec25c275a02f0bc8873bb6f6d66b36d22",
          "Title": "kernel: dm-verity: fix buffer overflow in FEC calculation",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: fix buffer overflow in FEC calculation\n\nThere's a buffer overflow in dm-verity-fec:\n\nif (neras \u0026\u0026 *neras \u003c= v-\u003efec-\u003eroots)\n\tfio-\u003eerasures[(*neras)++] = i;\n\nThis allows *neras to reach roots + 1 (the post-increment pushes it past\nroots). This value is then passed as no_eras to decode_rs8(). Inside the\nRS decoder (lib/reed_solomon/decode_rs.c:113-121), the erasure locator\npolynomial loop writes lambda[j] where j can reach nroots + 1 — one\nelement past the end of lambda[] (which is sized nroots + 1, valid\nindices 0..nroots). The out-of-bounds write lands on syn[0], corrupting\nthe syndrome buffer.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:67150",
            "https://access.redhat.com/security/cve/CVE-2026-72098",
            "https://bugzilla.redhat.com/2425039",
            "https://bugzilla.redhat.com/2454867",
            "https://bugzilla.redhat.com/2460699",
            "https://bugzilla.redhat.com/2461451",
            "https://bugzilla.redhat.com/2461525",
            "https://bugzilla.redhat.com/2464093",
            "https://bugzilla.redhat.com/2468050",
            "https://bugzilla.redhat.com/2468192",
            "https://bugzilla.redhat.com/2468244",
            "https://bugzilla.redhat.com/2492092",
            "https://bugzilla.redhat.com/2492115",
            "https://bugzilla.redhat.com/2492270",
            "https://bugzilla.redhat.com/2492310",
            "https://bugzilla.redhat.com/2492408",
            "https://bugzilla.redhat.com/2492432",
            "https://bugzilla.redhat.com/2492717",
            "https://bugzilla.redhat.com/2492722",
            "https://bugzilla.redhat.com/2492762",
            "https://bugzilla.redhat.com/2492771",
            "https://bugzilla.redhat.com/2492795",
            "https://bugzilla.redhat.com/2502254",
            "https://bugzilla.redhat.com/2502320",
            "https://bugzilla.redhat.com/2502331",
            "https://bugzilla.redhat.com/2502346",
            "https://bugzilla.redhat.com/2502388",
            "https://bugzilla.redhat.com/2502413",
            "https://bugzilla.redhat.com/2502446",
            "https://bugzilla.redhat.com/2502473",
            "https://bugzilla.redhat.com/2502477",
            "https://bugzilla.redhat.com/2502518",
            "https://bugzilla.redhat.com/2502541",
            "https://bugzilla.redhat.com/2506782",
            "https://bugzilla.redhat.com/2507292",
            "https://bugzilla.redhat.com/2513141",
            "https://bugzilla.redhat.com/2513177",
            "https://bugzilla.redhat.com/2513253",
            "https://bugzilla.redhat.com/2513324",
            "https://bugzilla.redhat.com/2513397",
            "https://bugzilla.redhat.com/2513408",
            "https://bugzilla.redhat.com/2513452",
            "https://bugzilla.redhat.com/2513474",
            "https://bugzilla.redhat.com/2516501",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2425039",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454867",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2460699",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2461451",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2461525",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2464093",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2468050",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2468192",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2468244",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492092",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492115",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492270",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492310",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492408",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492432",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492717",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492722",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492762",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492771",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492795",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502254",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502320",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502331",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502346",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502388",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502413",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502446",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502473",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502477",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502518",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502541",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2506782",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507292",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513141",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513177",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513253",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513324",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513397",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513408",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513452",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513474",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516501",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68745",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23466",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31479",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31566",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31656",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31692",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43334",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43368",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43370",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52917",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52918",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52947",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53053",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53091",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53182",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53209",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53246",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53254",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53256",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63801",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63889",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63944",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63945",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63946",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63947",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63971",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63975",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64037",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64113",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64117",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64255",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64515",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68086",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68117",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68264",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68300",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68315",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68376",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68402",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68406",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72098",
            "https://errata.almalinux.org/9/ALSA-2026-67150.html",
            "https://errata.rockylinux.org/RLSA-2026:67150",
            "https://git.kernel.org/linus/31d6e6c0ba8d5a7bd59660035a089307100c5e8e%20%287.2-rc3%29",
            "https://git.kernel.org/stable/c/31d6e6c0ba8d5a7bd59660035a089307100c5e8e",
            "https://git.kernel.org/stable/c/374775626c327aec2425c16b4d36706e5f8718b8",
            "https://git.kernel.org/stable/c/5488d3a69d205e28f74f18857b853aa12e778e66",
            "https://git.kernel.org/stable/c/84d4d2a6988c9a733f7821452cefb5b0d93de2d1",
            "https://git.kernel.org/stable/c/dc662eed1c432cc2fd4e9314f58d30b3a8cca7cc",
            "https://git.kernel.org/stable/c/f7990c2b0f08b8841fcd2652d1d7002f5994a7a7",
            "https://linux.oracle.com/cve/CVE-2026-72098.html",
            "https://linux.oracle.com/errata/ELSA-2026-67468-0.html",
            "https://lore.kernel.org/linux-cve-announce/2026081524-CVE-2026-72098-cbda@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-72098",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://ubuntu.com/security/notices/USN-8816-1",
            "https://ubuntu.com/security/notices/USN-8816-2",
            "https://ubuntu.com/security/notices/USN-8816-3",
            "https://ubuntu.com/security/notices/USN-8816-4",
            "https://ubuntu.com/security/notices/USN-8888-1",
            "https://ubuntu.com/security/notices/USN-8888-2",
            "https://ubuntu.com/security/notices/USN-9003-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-72098"
          ],
          "PublishedDate": "2026-08-15T06:21:23.897Z",
          "LastModifiedDate": "2026-10-30T13:19:46.927Z"
        },
        {
          "VulnerabilityID": "CVE-2026-74269",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74269",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:af237bf08f82a80a4d1d0d658818c8658a57de5177110aa13f92f9df31914b26",
          "Title": "kernel: bnxt: fix head underflow on XDP head-grow",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt: fix head underflow on XDP head-grow\n\nThe xdp.py test test_xdp_native_adjst_head_grow_data crashes when run on\na bnxt machine (and also crashes in NIPA).\n\nIt seems that the bug is an underflow in bnxt_rx_multi_page_skb, which\nbuilds the skb head:\n\n  napi_build_skb(data_ptr - bp-\u003erx_offset, rxr-\u003erx_page_size);\n\nThe problem with this expression is that in page mode, rx_offset is:\n\n  bp-\u003erx_offset = NET_IP_ALIGN + XDP_PACKET_HEADROOM;\n\nWhich evaluates (at least on x86_64) to 258.\n\nThe test test_xdp_native_adjst_head_grow_data tests a case where the\nhead is adjusted by -256.\n\nWhen this test runs, data_ptr is shifted to frag_start + 2 (where\nfrag_start = page_address(page) + offset).\n\nThen, bnxt_rx_multi_page_skb is invoked and the napi_build_skb\nexpression subtracts 258, landing at an address before frag_start. This\ncould be either the previous fragment or the previous physical page when\nthe offset is \u003c 256 (e.g. if the fragment started at offset 0).\n\nWhen the skb is freed, the page pool fragment reference is dropped on\neither the wrong page or the wrong frag of the right page. In either\ncase, the corrupted reference count can lead to the page being\nprematurely recycled while still in use. Once (incorrectly) recycled, it\ncan be handed out again and on driver teardown this would result in a\ndouble free.\n\nThe commit under fixes updated this code to handle the case where the\nnative page size is \u003e= 64k, but it unintentionally broke the head grow\ncase.\n\nTo fix this, add an offset field to struct bnxt_sw_rx_bd, mirroring the\nexisting offset field in struct bnxt_sw_rx_agg_bd. Populate it on\nallocation and preserve it on reuse.\n\nIn bnxt_rx_multi_page_skb, use the newly added offset field to compute\nthe fragment start and pass that to napi_build_skb. Adjust the layout\nwith skb_reserve.\n\nThere are two cases, the non-adjustment case and the adjustment case.\n\nIn both cases, the skb is built at page_address(page) + offset to\naccount for the case where the native page size \u003e= 64K and skb_reserve\nis called with data_ptr - (page_address(page) + offset). That\ndifference equals bp-\u003erx_offset when data_ptr was not moved, or\nbp-\u003erx_offset + xdp_adjust when XDP adjusted the head.\n\nRe-running the failing test with this commit applied causes the test to\nrun successfully to completion.\n\nThe other rx_skb_func implementations don't have this issue.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 2,
            "photon": 4,
            "redhat": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-74269",
            "https://git.kernel.org/linus/e26657fe3b85c068b01f42bb0c602f242d643ba9%20%287.2-rc1%29",
            "https://git.kernel.org/stable/c/3e8f3959a7fd28461b8cd9708c21286b4250b77a",
            "https://git.kernel.org/stable/c/4c03275bc4435cc8e25f7f3f08aff58c0e783d8d",
            "https://git.kernel.org/stable/c/59f6211c006cb5936b443fb396eb43864ca21ed5",
            "https://git.kernel.org/stable/c/bb72b1c6755631c74b7e0878ee55bb81c06776c0",
            "https://git.kernel.org/stable/c/e26657fe3b85c068b01f42bb0c602f242d643ba9",
            "https://git.kernel.org/stable/c/ff34e5a26a26c92142afea11455e259c4c4c617b",
            "https://lore.kernel.org/linux-cve-announce/2026081543-CVE-2026-74269-29cf@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-74269",
            "https://ubuntu.com/security/notices/USN-8781-1",
            "https://ubuntu.com/security/notices/USN-8816-1",
            "https://ubuntu.com/security/notices/USN-8816-2",
            "https://ubuntu.com/security/notices/USN-8816-3",
            "https://ubuntu.com/security/notices/USN-8816-4",
            "https://ubuntu.com/security/notices/USN-8888-1",
            "https://ubuntu.com/security/notices/USN-8888-2",
            "https://ubuntu.com/security/notices/USN-9003-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-74269"
          ],
          "PublishedDate": "2026-08-15T06:22:26.28Z",
          "LastModifiedDate": "2026-10-30T13:19:54.063Z"
        },
        {
          "VulnerabilityID": "CVE-2026-74520",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74520",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c2bd505440cb4b63e4da70f05d97cdb34f0cb50e832eb49149dd2b624f96f4be",
          "Title": "kernel: iommu/iommufd: Fix IOPF group ownership UAF",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/iommufd: Fix IOPF group ownership UAF\n\niopf_group_alloc() links each last-page IOPF group into the generic IOPF\npending list before invoking the domain fault handler.\niommufd_fault_iopf_handler() also queued an accepted group in the\nIOMMUFD deliver list without removing it from the generic pending list.\n\nWhen detach or HWPT replacement drops the device's IOPF reference count\nto zero, an IOMMU driver may call iopf_queue_remove_device(). That\nfunction responds to and frees groups through the generic pending list\nwithout removing the same groups from IOMMUFD's deliver list or response\nxarray. A later read, response, or cleanup can then access the freed\ngroup and cause a UAF.\n\nFix this by dequeuing an accepted group from the generic pending list\nbefore IOMMUFD queues it for userspace response.\nMake iopf_group_response() send a response regardless of pending-list\nmembership, so the dequeued group can still be completed by IOMMUFD.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-74520",
            "https://git.kernel.org/linus/738e6f32e61d80b554e37015ecb7bc620b88001c%20%287.2-rc6%29",
            "https://git.kernel.org/stable/c/4e74a369236424114b94cf6a9f5ff9e848b430b4",
            "https://git.kernel.org/stable/c/6da8f37419dd4c456f26fc203f04e000186f4b3d",
            "https://git.kernel.org/stable/c/738e6f32e61d80b554e37015ecb7bc620b88001c",
            "https://git.kernel.org/stable/c/8563099bc4b03e1894a983a394225d69b05d9277",
            "https://lore.kernel.org/linux-cve-announce/2026081544-CVE-2026-74520-7811@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-74520",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-74520"
          ],
          "PublishedDate": "2026-08-15T13:17:57.21Z",
          "LastModifiedDate": "2026-10-21T13:19:45.293Z"
        },
        {
          "VulnerabilityID": "CVE-2026-74752",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74752",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c101996413906e0716fa5dc9f3de55eabdeb6738e73e7ec81deada15d93885ee",
          "Title": "kernel: sctp: validate cookie AUTH state before use",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cookie AUTH state before use\n\nWhen cookie authentication is disabled, COOKIE_ECHO restores fixed-size\nAUTH fields directly from peer-controlled cookie bytes.  A forged RANDOM\nlength, HMAC list, or CHUNKS list can then reach association consumers\nwith lengths or identifiers that were never validated against the local\nbacking arrays.\n\nA forged RANDOM length can cause out-of-bounds reads during key-vector\nconstruction.  A forged HMAC identifier also caused a 32-byte write past\na zero-length AUTH chunk, providing a primitive for a local privilege\nescalation chain.\n\nValidate the cookie's RANDOM, HMACS, and CHUNKS parameters at the cookie\ntrust boundary before copying them into the association.  Reject invalid\ntypes, malformed lengths, unsupported HMAC identifiers, HMAC lists\nwithout SHA1, and forbidden chunk ids.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "photon": 4,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:95370",
            "https://access.redhat.com/security/cve/CVE-2026-74752",
            "https://bugzilla.redhat.com/2507721",
            "https://bugzilla.redhat.com/2513314",
            "https://bugzilla.redhat.com/2515351",
            "https://bugzilla.redhat.com/2515353",
            "https://bugzilla.redhat.com/2516278",
            "https://bugzilla.redhat.com/2516412",
            "https://bugzilla.redhat.com/2516674",
            "https://bugzilla.redhat.com/2521384",
            "https://bugzilla.redhat.com/2521419",
            "https://bugzilla.redhat.com/2524422",
            "https://bugzilla.redhat.com/2524442",
            "https://bugzilla.redhat.com/2524458",
            "https://bugzilla.redhat.com/2524475",
            "https://bugzilla.redhat.com/2532290",
            "https://bugzilla.redhat.com/2532407",
            "https://bugzilla.redhat.com/2552209",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507721",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513314",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2515351",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2515353",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516278",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516412",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516674",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521384",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521419",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2524422",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2524442",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2524458",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2524475",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532290",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532407",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552209",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64541",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68162",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68451",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68452",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74588",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74752",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80553",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80571",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80584",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89479",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98403",
            "https://errata.almalinux.org/9/ALSA-2026-95370.html",
            "https://errata.rockylinux.org/RLSA-2026:95370",
            "https://git.kernel.org/stable/c/3dbb44d88b1e94dd31fe43588af7437b34b44d56",
            "https://git.kernel.org/stable/c/4a4410de8dc6903d859c9e1731fc6dcee28bd072",
            "https://git.kernel.org/stable/c/7f17984cfa697613800eb693e183b06884129bd3",
            "https://git.kernel.org/stable/c/88619b117be1daf633ce32210570ce35a0bd1c98",
            "https://linux.oracle.com/cve/CVE-2026-74752.html",
            "https://linux.oracle.com/errata/ELSA-2026-95370.html",
            "https://lore.kernel.org/linux-cve-announce/2026082600-CVE-2026-74752-6509@gregkh/T",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-74752",
            "https://ubuntu.com/security/notices/USN-8886-1",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-74752"
          ],
          "PublishedDate": "2026-08-26T15:16:54.27Z",
          "LastModifiedDate": "2026-10-21T13:19:53.613Z"
        },
        {
          "VulnerabilityID": "CVE-2026-89631",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89631",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e236c949158876c11d025beead4b3e4aef9cfaea5694ce74928fdad4396d70f8",
          "Title": "kernel: smb: client: reject a tree connect response whose byte count is too small",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject a tree connect response whose byte count is too small\n\nCIFSTCon() bounds its strnlen() over the byte area with the server's\nByteCount minus two, which for ByteCount 0 or 1 goes negative as an int\nand converts to a huge size_t.  The later subtraction wraps the __u16\nbytes_left, and that is what bounds cifs_strndup_from_utf16(): a bound of\nup to 65535 against a ~16 KB cifs_req_poolp object runs off the end of the\nslab object, and the bytes reach userspace through tcon-\u003enativeFileSystem\nin /proc/fs/cifs/DebugData.\n\nReject a byte area too small for what the parser consumes.  Two bytes is\nthe least it can consume, and no conformant response carries fewer.  The\nnew trace point is the 129th smb_eio_trace entry, which __mode(byte)\ncannot represent, so the attribute goes with it.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 4,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:85773",
            "https://access.redhat.com/errata/RHSA-2026:85774",
            "https://access.redhat.com/security/cve/CVE-2026-89631",
            "https://bugzilla.redhat.com/2492098",
            "https://bugzilla.redhat.com/2492750",
            "https://bugzilla.redhat.com/2521384",
            "https://bugzilla.redhat.com/2524422",
            "https://bugzilla.redhat.com/2532089",
            "https://bugzilla.redhat.com/2532290",
            "https://bugzilla.redhat.com/2540391",
            "https://bugzilla.redhat.com/2540500",
            "https://bugzilla.redhat.com/2540872",
            "https://bugzilla.redhat.com/2546494",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492098",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492750",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521384",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2524422",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532089",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532290",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2540391",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2540500",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2546494",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53196",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74588",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74752",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89479",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89631",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93288",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98320",
            "https://errata.almalinux.org/8/ALSA-2026-85774.html",
            "https://errata.rockylinux.org/RLSA-2026:85773",
            "https://git.kernel.org/linus/65deb18359341141d37dc86fc7853511be3c87a7%20%287.3-rc1%29",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89631.mbox",
            "https://git.kernel.org/stable/c/2ae219762ebac929bf6ab3473681f10ed566af08",
            "https://git.kernel.org/stable/c/3be89e8039a85fa3b6cd5f9dcc4c1459eb356c2d",
            "https://git.kernel.org/stable/c/411e484fe71a7f1028de617447edad9cb6d9d68a",
            "https://git.kernel.org/stable/c/65deb18359341141d37dc86fc7853511be3c87a7",
            "https://git.kernel.org/stable/c/bb99866cb1d3d5e8201200a8692fd8da3106a8fd",
            "https://git.kernel.org/stable/c/d837645a719151ed392d4d9cab4571c2753dab12",
            "https://linux.oracle.com/cve/CVE-2026-89631.html",
            "https://linux.oracle.com/errata/ELSA-2026-85773.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-89631",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://ubuntu.com/security/notices/USN-9002-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-89631"
          ],
          "PublishedDate": "2026-09-11T20:19:48.64Z",
          "LastModifiedDate": "2026-10-30T13:20:23.05Z"
        },
        {
          "VulnerabilityID": "CVE-2026-89675",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89675",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:063d2f4bd83342e2da200ea0a4ec5546e481e34d1fc2e0c50dcc95d5194d148d",
          "Title": "kernel: nfsd: fix UAF in async copy cancel and shutdown",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix UAF in async copy cancel and shutdown\n\nAn async copy could be freed or used after free while a teardown caller\n(OFFLOAD_CANCEL, nfsd4_shutdown_copy, nfsd4_cancel_copy_by_sb) raced the\ncopy kthread:\n\n  - find_async_copy() bumped copy-\u003erefcount but left the copy on\n    clp-\u003easync_copies, so the reaper's cleanup_async_copy() could run\n    release_copy_files() concurrently with a cancel/shutdown caller. Both\n    put and NULL nf_src/nf_dst without a common lock, double-putting the\n    nfsd_file and freeing it early.\n\n  - nfsd4_do_async_copy() set NFSD4_COPY_F_STOPPED before its final uses\n    of the copy (nfsd_update_cmtime_attr() on copy-\u003enf_dst,\n    nfsd4_send_cb_offload()). nfsd4_stop_copy() treats a set STOPPED bit\n    as \"kthread done, skip kthread_stop()\", so a teardown caller ran\n    release_copy_files() -- which puts and NULLs nf_dst -- while the\n    kthread still dereferenced it (NULL/UAF).\n\n  - copy-\u003ecopy_task was never pinned. The one-shot kthread self-reaps on\n    return, so kthread_stop()'s get_task_struct() could touch a freed\n    task_struct.\n\n  - co_cb is embedded in the copy, but nfsd4_send_cb_offload() held a\n    reference only on the client, so a concurrent teardown could free\n    the copy while the CB_OFFLOAD callback was in flight.\n\nFix the teardown lifetime as a whole:\n\n  - find_async_copy() unlinks the copy (clear cp_clp, list_del_init)\n    under async_lock; the cancel, shutdown, and sb-cancel paths drop the\n    list-membership reference via nfs4_put_copy() after nfsd4_stop_copy().\n    Drop the now-redundant list_del fixup from cleanup_async_copy().\n\n  - Because unlinking hides the copy from the reaper, its\n    cleanup_async_copy() can no longer remove the copy's s2s_cp_stateids\n    entry; the cancel/shutdown/sb-cancel paths now call\n    nfs4_free_copy_state() themselves (while cp_clp is still valid) so\n    the entry does not dangle at freed memory for the laundromat and\n    manage_cpntf_state() to dereference.\n\n  - Give the kthread its own reference, taken in nfsd4_copy() before\n    wake_up_process() and dropped at the end of nfsd4_do_async_copy();\n    call wake_up_process() before list_add().\n\n  - Pin the task_struct with get_task_struct() in nfsd4_copy(), released\n    in nfs4_put_copy(), so kthread_stop() is safe whenever the kthread\n    exits. Set NFSD4_COPY_F_STOPPED only in nfsd4_stop_copy(), which now\n    always kthread_stop()s before release_copy_files(); completion is\n    still reported via NFSD4_COPY_F_COMPLETED, so\n    nfsd4_has_active_async_copies() is unaffected. Each teardown caller\n    removes the copy from clp-\u003easync_copies first, so kthread_stop() runs\n    exactly once.\n\n  - Take a copy reference in nfsd4_send_cb_offload(), dropped in\n    nfsd4_cb_offload_release(). The kthread still holds its own reference\n    there, so the refcount_inc() cannot race the final free.\n\n  - Read cp_clp with smp_load_acquire() to pair with the unordered\n    set_bit()/clear_bit() writers (Documentation/atomic_bitops.rst).",
          "Severity": "HIGH",
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:77690",
            "https://access.redhat.com/security/cve/CVE-2026-89675",
            "https://bugzilla.redhat.com/2436771",
            "https://bugzilla.redhat.com/2497032",
            "https://bugzilla.redhat.com/2499742",
            "https://bugzilla.redhat.com/2502222",
            "https://bugzilla.redhat.com/2502411",
            "https://bugzilla.redhat.com/2502476",
            "https://bugzilla.redhat.com/2502593",
            "https://bugzilla.redhat.com/2516705",
            "https://bugzilla.redhat.com/2521498",
            "https://bugzilla.redhat.com/2524431",
            "https://bugzilla.redhat.com/2532103",
            "https://bugzilla.redhat.com/2532111",
            "https://bugzilla.redhat.com/2532218",
            "https://bugzilla.redhat.com/2532219",
            "https://bugzilla.redhat.com/2532231",
            "https://bugzilla.redhat.com/2532272",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2436771",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2497032",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2499742",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502222",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502411",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502476",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502593",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516705",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521498",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2524431",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532103",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532111",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532218",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532219",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532231",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532272",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23103",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53360",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53365",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53398",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63970",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64035",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64115",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72317",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89530",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89663",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89669",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89675",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89676",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89690",
            "https://errata.almalinux.org/10/ALSA-2026-77690.html",
            "https://errata.rockylinux.org/RLSA-2026:77690",
            "https://git.kernel.org/linus/62c0f6eaf050bb9284c1f9cac6ed1770092e6b95%20%287.3-rc1%29",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89675.mbox",
            "https://git.kernel.org/stable/c/62c0f6eaf050bb9284c1f9cac6ed1770092e6b95",
            "https://git.kernel.org/stable/c/9031493ef7369d5c59c4bacc96f0c85965f09a98",
            "https://git.kernel.org/stable/c/a385cf5e016b748babf94cc664e43a26e17db117",
            "https://linux.oracle.com/cve/CVE-2026-89675.html",
            "https://linux.oracle.com/errata/ELSA-2026-77690.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-89675",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-89675"
          ],
          "PublishedDate": "2026-09-11T20:19:54.143Z",
          "LastModifiedDate": "2026-10-19T09:18:05.75Z"
        },
        {
          "VulnerabilityID": "CVE-2026-89811",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89811",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c233cddb25fb483413bc9ff1d20c19c2f8bed636d6225b82b793422dceb4ecf4",
          "Title": "kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Add TLB flush after MES queue eviction/suspension\n\nMES (Micro Engine Scheduler) does not perform heavy-weight TLB\ninvalidation after unmapping queues, unlike HWS which does this\nautomatically. This causes a race condition where in-flight DMA\ndescriptors can access memory that has been unmapped, leading to page\nfaults and GPU queue hangs during SVM page migration.\n\nThe issue manifests as KFDSVMRangeTest.MultiThreadMigrationTest\nfailures on gfx1151 (Strix Point) with XNACK mode 1 enabled - the GPU\ncompute queue hangs with packets submitted but never consumed.\n\nAdd kfd_flush_tlb() calls after MES queue removal in two locations:\n- evict_process_queues_cpsch(): after all queues removed during eviction\n- suspend_queues(): after debug/criu queue suspension (with mem_fence barrier)\n\nThis ensures all in-flight memory accesses from unmapped queues are\nflushed before memory is freed or migrated.\n\n(cherry picked from commit f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77)",
          "Severity": "HIGH",
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:81552",
            "https://access.redhat.com/security/cve/CVE-2026-89811",
            "https://bugzilla.redhat.com/2486468",
            "https://bugzilla.redhat.com/2502397",
            "https://bugzilla.redhat.com/2507153",
            "https://bugzilla.redhat.com/2507218",
            "https://bugzilla.redhat.com/2513148",
            "https://bugzilla.redhat.com/2513287",
            "https://bugzilla.redhat.com/2513430",
            "https://bugzilla.redhat.com/2513451",
            "https://bugzilla.redhat.com/2516396",
            "https://bugzilla.redhat.com/2528788",
            "https://bugzilla.redhat.com/2535265",
            "https://bugzilla.redhat.com/2535309",
            "https://bugzilla.redhat.com/2535338",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2486468",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2502397",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507153",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507218",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513148",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513287",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513430",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513451",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516396",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528788",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2535265",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2535309",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2535338",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46309",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63925",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64507",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64508",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68123",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68236",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68245",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68278",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72318",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80887",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89811",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89894",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89970",
            "https://errata.almalinux.org/9/ALSA-2026-81552.html",
            "https://errata.rockylinux.org/RLSA-2026:81552",
            "https://git.kernel.org/linus/94e25cb6ab7f4f025bcdcd8ea79fda30f12843a4%20%287.3-rc2%29",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89811.mbox",
            "https://git.kernel.org/stable/c/5bbd7f283312d0209a0fedcc9d2d33b5afa5a7b1",
            "https://git.kernel.org/stable/c/6aae545c87087e4dc96e205452243813bfa73ba2",
            "https://git.kernel.org/stable/c/750cd793ee69c27faf17fb9c49f92f71716bbc8b",
            "https://git.kernel.org/stable/c/94e25cb6ab7f4f025bcdcd8ea79fda30f12843a4",
            "https://git.kernel.org/stable/c/bbf5ad5268f36d7ebb7e99ae78fc73cffe98d372",
            "https://git.kernel.org/stable/c/e230c546ed93741833ab5babb0b202f9c2052b45",
            "https://linux.oracle.com/cve/CVE-2026-89811.html",
            "https://linux.oracle.com/errata/ELSA-2026-88477.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-89811",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://ubuntu.com/security/notices/USN-9002-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-89811"
          ],
          "PublishedDate": "2026-09-16T11:16:46.267Z",
          "LastModifiedDate": "2026-10-30T13:20:30.04Z"
        },
        {
          "VulnerabilityID": "CVE-2026-90111",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90111",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:cfc90ce8b3524a182cd31f3a1471f862ba6701446a4e79db9f3e0e37d21d2c9f",
          "Title": "kernel: ip6mr: do not clone dst in ip6mr_cache_report()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6mr: do not clone dst in ip6mr_cache_report()\n\nIPv6 input attaches a non-refcounted (NOREF) dst to skbs under RCU.\nWhen an ingress multicast packet misses MFC lookup,\nip6mr_cache_unresolved() places the skb onto the unresolved queue,\nescaping the receive-side RCU grace period.\n\nIf the underlying route is deleted and freed, and the MFC queue is later\nresolved with a wrong parent interface, ip6_mr_forward() invokes\nip6mr_cache_report(..., MRT6MSG_WRONGMIF), which executes\ndst_clone(skb_dst(pkt)) on the freed dst entry, triggering a slab\nuse-after-free.\n\nReport packets queued to mroute6_sk (a raw socket) and netlink\nnotifications do not require an attached dst entry.\n\nFix this by:\n1. Removing dst_clone() in ip6mr_cache_report() and ensuring report skbs\n   do not hold a dst.\n2. Dropping skb_dst before queuing unresolved skbs in\n   ip6mr_cache_unresolved(), matching the fact that multicast\n   forwarding resolves outgoing routes anew via ip6_route_output().",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 2,
            "photon": 3,
            "redhat": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-90111",
            "https://git.kernel.org/linus/235b42b5860189eb8c27c36435ad932cae65a734%20%287.3-rc1%29",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90111.mbox",
            "https://git.kernel.org/stable/c/235b42b5860189eb8c27c36435ad932cae65a734",
            "https://git.kernel.org/stable/c/42ef371466d5648f5c9e8bc219f0af0a2c2bbf8c",
            "https://git.kernel.org/stable/c/4a674afaae4136c71943aa3e35d433676fd40e8f",
            "https://git.kernel.org/stable/c/7f8287f606c8c028d4224e85d95dc448c6d6d623",
            "https://git.kernel.org/stable/c/b50d3cfb8513e895cee453dd0f834deee6ccc231",
            "https://git.kernel.org/stable/c/f57b0fd1c62e1be274ee154ab7fb8ac4481b7f89",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-90111",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-90111"
          ],
          "PublishedDate": "2026-09-17T17:17:03.13Z",
          "LastModifiedDate": "2026-10-30T13:20:42.083Z"
        },
        {
          "VulnerabilityID": "CVE-2026-90206",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90206",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:01618f3712f5ae9242382da239348b3ad2772fbacaa34557bef3261b80d3b7d1",
          "Title": "kernel: nvmet: fix max_qid race between configfs and controller allocation",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: fix max_qid race between configfs and controller allocation\n\nThe function nvmet_subsys_attr_qid_max_store() can race against\nnvmet_alloc_ctrl() when a subsystem's max_qid limit is modified.\n\nSuppose max_qid is currently 64. If nvmet_alloc_ctrl() executes:\nctrl-\u003esqs = kzalloc_objs(struct nvmet_sq *, subsys-\u003emax_qid + 1);\nand at this exact point, a userspace process changes max_qid to 128,\nnvmet_subsys_attr_qid_max_store() will set the new max_qid value. It\nattempts to delete active controllers to force a reconnect, but the\nnew controller won't be deleted because it hasn't been added to the\nsubsys-\u003ectrls list yet.\n\nnvmet_alloc_ctrl() then proceeds and adds the new controller to the\nsubsys-\u003ectrls list. Later, when nvmet_install_queue() is called, it\nwill see max_qid set to 128, but the memory allocated for sqs is only\nsized for 64 entries. This results in a KASAN out-of-bounds warning\nand potential memory corruptions.\n\nFix this by protecting the queue allocations and list insertion in\nnvmet_alloc_ctrl() with down_read(\u0026nvmet_config_sem). Because\nnvmet_subsys_attr_qid_max_store() acquires down_write(\u0026nvmet_config_sem)\nto modify the attribute, this safely prevents the configfs writer from\nmodifying max_qid during controller creation.\n\nCopy the max_qid from the subsystem to the controller's structure\nduring the allocation; ctrl-\u003emax_qid never changes as long as the\ncontroller remains in LIVE state, so this will prevent similar race\nconditions.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 2,
            "photon": 2,
            "redhat": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-90206",
            "https://git.kernel.org/linus/f1a8846e06388113dfdbb89dee005083fa9afdf9%20%287.3-rc1%29",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90206.mbox",
            "https://git.kernel.org/stable/c/2c23fc91789dfd9db746edb3ae9b90d65fabd410",
            "https://git.kernel.org/stable/c/6e6f8e3bfc66dff1833a48ecfd857268cff3be84",
            "https://git.kernel.org/stable/c/a1b88a1782eb6b368071dcda548a41b5c23d8cd2",
            "https://git.kernel.org/stable/c/af811970da4f0a928f5a1b1a946a04f755ce86f2",
            "https://git.kernel.org/stable/c/cae0f5ed6ce7af3f7e0003c417f1953a350f55bf",
            "https://git.kernel.org/stable/c/f1a8846e06388113dfdbb89dee005083fa9afdf9",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-90206",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-90206"
          ],
          "PublishedDate": "2026-09-17T17:17:15.7Z",
          "LastModifiedDate": "2026-10-30T13:20:46.387Z"
        },
        {
          "VulnerabilityID": "CVE-2026-90315",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90315",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:8def5c06381ae3e9194b1e6c76639d52ef58e22961f2b1ae910dd13c64fa5429",
          "Title": "kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/sysfs: Add lockdown checks to legacy I/O and memory handlers\n\nCurrently, the legacy I/O and memory sysfs handlers do not check\nsecurity_locked_down(LOCKDOWN_PCI_ACCESS), leaving the legacy_io and\nlegacy_mem files unprotected when the kernel is locked down.\n\nCommit eb627e17727e (\"PCI: Lock down BAR access when the kernel is locked\ndown\") added the check to pci_write_config(), pci_mmap_resource(), and\npci_write_resource_io() to prevent userspace from programming DMA-capable\nhardware that could be used to modify kernel code, but did not cover the\nlegacy handlers.\n\nAs a result, root can still write arbitrary I/O ports and map the legacy\nI/O and memory spaces while the kernel is locked down, which is the same\ncapability the lockdown is meant to remove.\n\nAdd the same check to pci_write_legacy_io(), pci_mmap_legacy_mem(), and\npci_mmap_legacy_io().\n\nThese generic handlers cover both architectures that define HAVE_PCI_LEGACY\n(such as Alpha and PowerPC).\n\n[bhelgaas: add Link]",
          "Severity": "HIGH",
          "VendorSeverity": {
            "alma": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:95367",
            "https://access.redhat.com/security/cve/CVE-2026-90315",
            "https://bugzilla.redhat.com/2507296",
            "https://bugzilla.redhat.com/2516278",
            "https://bugzilla.redhat.com/2516412",
            "https://bugzilla.redhat.com/2516674",
            "https://bugzilla.redhat.com/2521419",
            "https://bugzilla.redhat.com/2532407",
            "https://bugzilla.redhat.com/2536264",
            "https://bugzilla.redhat.com/2559811",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507296",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516278",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516412",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516674",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521419",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532407",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2536264",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559811",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64378",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90315",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98974",
            "https://errata.almalinux.org/10/ALSA-2026-95367.html",
            "https://errata.rockylinux.org/RLSA-2026:95367",
            "https://git.kernel.org/linus/747b9bbbbdfdee51aee2456388f9b94b5086de4d%20%287.3-rc1%29",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90315.mbox",
            "https://git.kernel.org/stable/c/3556caa31a2bfbc22c11b812fd4ed8851c2d7bff",
            "https://git.kernel.org/stable/c/747b9bbbbdfdee51aee2456388f9b94b5086de4d",
            "https://git.kernel.org/stable/c/cd07aef510ac6a2873e01f9ddddc5492490b0067",
            "https://linux.oracle.com/cve/CVE-2026-90315.html",
            "https://linux.oracle.com/errata/ELSA-2026-95367.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-90315",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-90315"
          ],
          "PublishedDate": "2026-09-17T17:17:29.34Z",
          "LastModifiedDate": "2026-10-19T09:19:25.46Z"
        },
        {
          "VulnerabilityID": "CVE-2026-98118",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98118",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9dd03a4c4af29604b787462738d846937c724c7b33ff1a00a5391bba02a8c31a",
          "Title": "kernel: netfs: Fix readahead synchronisation issues by loading all folios upfront",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix readahead synchronisation issues by loading all folios upfront\n\nThere are some synchronisation issues that derive from the app thread\nadding more folios to the rolling buffer whilst the collector thread is\nlooking at them or trying to clear them, such as determining the setting of\nfront_folio_order when the next folio hasn't been added yet,\n\nThe reason for the rolling buffer approach is that loading the buffer\nupfront and then dropping all the refs just acquired is quite a slow\noperation, and loading progressively allows some of the cost to be deferred\nuntil after at least some of the I/O is started.\n\nInstead, a better way is to load all the folios into the rolling buffer\nupfront - and then drop the refs later, once the I/O is in progress.  (Even\nbetter would be for the refs not to be there at all.)\n\nFix this by changing the rolling buffer loader to load all the folios\nselected by the VM for readahead upfront into the folio queue.  The folio\nqueue is allocated a batch worth at a time as we don't know how many folios\nare involved (the readahead_control struct, alas, has a page count, not a\nfolio count).\n\nThe folio refs acquired from readahead are then dropped in bulk once the\nfirst subrequest is dispatched as it's quite a slow operation.  The\ncollector waits for NETFS_RREQ_NEED_PUT_RA_REFS to be cleared so that it\ndoesn't unlock folios before the xarray has been scanned for them.\n\nThis simplifies the buffer handling later and isn't noticeably slower as\nthe xarray doesn't need to be modified and the folios are all already\npre-locked.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-362"
          ],
          "VendorSeverity": {
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 5.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-98118",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98118.mbox",
            "https://git.kernel.org/stable/c/8c9b33945712074a85d3bdacbca036ba6b3d92c6",
            "https://git.kernel.org/stable/c/fed0b33e6c584986ba70018ec9f9787a98216e64",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-98118",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-98118"
          ],
          "PublishedDate": "2026-09-25T11:17:43.03Z",
          "LastModifiedDate": "2026-10-28T16:00:38.963Z"
        },
        {
          "VulnerabilityID": "CVE-2026-98364",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98364",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9a6b50a60da55dfb057800661e2e0df8c28467d049911c41cbf95bba31e00451",
          "Title": "kernel: xfrm: hold net_device reference under RCU in bundle creation",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: hold net_device reference under RCU in bundle creation\n\nxfrm_bundle_create() and xfrm_create_dummy_bundle() read dst-\u003edev into\na local pointer without taking a device reference, then pass it to\nxfrm_fill_dst(). A concurrent RTM_DELLINK replaces dst-\u003edev via\ndst_dev_put() and frees the old net_device, causing a use-after-free\nwhen xfrm6_fill_dst() later dereferences the stale dev pointer.\n\n  BUG: KASAN: slab-use-after-free in xfrm6_fill_dst+0x82c/0x860\n  (net/ipv6/xfrm6_policy.c:86 netdev_hold())\n  Read of size 8 at addr ffff8880142fe588 by task exploit/153\n  Call Trace:\n   xfrm6_fill_dst+0x82c/0x860\n   xfrm_resolve_and_create_bundle+0x21d4/0x2bd0\n   xfrm_lookup_with_ifid+0x485/0x1640\n   ip6_dst_lookup_flow+0x19b/0x1e0\n   udpv6_sendmsg+0x1443/0x2dd0\n\nFix this by reading dst-\u003edev via dst_dev_rcu() and keeping the RCU\nread-side critical section active until xfrm_fill_dst() has taken the\nrequired device references.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "amazon": 3,
            "bottlerocket": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364",
            "https://access.redhat.com/errata/RHSA-2026:93412",
            "https://access.redhat.com/security/cve/CVE-2026-98364",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492108",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492733",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492853",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507222",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513435",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516579",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516935",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516970",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519475",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2524438",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2535227",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2540396",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2540555",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2546487",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2553390",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2554835",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2555068",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725",
            "https://errata.rockylinux.org/RLSA-2026:93412",
            "https://git.kernel.org/linus/9fa903b24b1f46b4ff5443bcd4aca23e5c57f9c1%20%287.3-rc4%29",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98364.mbox",
            "https://git.kernel.org/stable/c/8d85d6bc9c46dc41cb2be0eac53f8ab068c3a807",
            "https://git.kernel.org/stable/c/9fa903b24b1f46b4ff5443bcd4aca23e5c57f9c1",
            "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-yqaindjkanr5.toml",
            "https://linux.oracle.com/cve/CVE-2026-98364.html",
            "https://linux.oracle.com/errata/ELSA-2026-93413.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-98364",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-98364"
          ],
          "PublishedDate": "2026-10-06T09:18:30.547Z",
          "LastModifiedDate": "2026-10-19T10:18:39.29Z"
        },
        {
          "VulnerabilityID": "CVE-2026-98466",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98466",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c791df95c119532786b33d03d5e31f57ee11ed1a410e5a28c95ee11bb433d537",
          "Title": "kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Transfer the hyp stack pages out of the host stage-2\n\nfix_host_ownership() walks only the linear-map alias of each memblock\nregion, and the per-CPU hyp stack, mapped in the private VA range for\nits guard page, has none.\n\nWalk each stack's VA range with the same walker.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "amazon": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 8.2
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93412",
            "https://access.redhat.com/security/cve/CVE-2026-98466",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492108",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492733",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2492853",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507222",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2513435",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516579",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516935",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516970",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519475",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2524438",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2535227",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2540396",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2540555",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2546487",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2553390",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2554835",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2555068",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725",
            "https://errata.rockylinux.org/RLSA-2026:93412",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98466.mbox",
            "https://git.kernel.org/stable/c/22df195bff84300a3f04813d6148765c77ac565a",
            "https://git.kernel.org/stable/c/3a8c562892b96f35bba1e00d5e455a15963bbb92",
            "https://git.kernel.org/stable/c/e5dd2a91a7ae3a276e6d79806127e923936e241b",
            "https://linux.oracle.com/cve/CVE-2026-98466.html",
            "https://linux.oracle.com/errata/ELSA-2026-93412.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-98466",
            "https://ubuntu.com/security/notices/USN-8959-1",
            "https://ubuntu.com/security/notices/USN-8960-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-98466"
          ],
          "PublishedDate": "2026-10-18T16:16:57.09Z",
          "LastModifiedDate": "2026-10-24T14:16:43.193Z"
        },
        {
          "VulnerabilityID": "CVE-2026-98715",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98715",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a800c2524473313ce4189e9856762920c67d5da55b47927faf92dc9574678c46",
          "Title": "kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN\n\nDon't reset the VMCB's TLB control back to \"do nothing\" on a failed VMRUN,\nas empirical testing shows that the CPU performs the requested TLB flush if\nand only if VMRUN is successful, i.e. clearing TLB control on a failed\nVMRUN effectively drops a TLB flush.\n\nExplicitly track the need to flush all ASIDs on a per-CPU basis, as the\nASID reuse condition is tied to the pCPU, not to the vCPU.  As a bonus,\nthis also obviates the need to avoid clobbering FLUSH_ALL_ASID with\nTLB_CONTROL_FLUSH_ASID, e.g. in svm_flush_tlb_asid().\n\nDeliberately don't bother saving/restoring the \"old\" tlb_ctl on failure,\nin quotes because it's not exactly the old tlb_ctl, it's the tlb_ctl from\nafter pre_svm_run(), but before updating tlb_ctl for flush_all_asids.  If\nVMRUN fails and TLB_CONTROL_FLUSH_ALL_ASID is forced, then the next\nsuccessful run of the VMCB *may* unnecessarily flush all ASIDs, which\nstrictly speaking could result in noisy neighbor issues.  However, the\nfact that new_asid() is already guest-triggerable, because of KVM's flawed\nbehavior of clearing the ASID on emulated INIT, means that a guest can\nalready trigger a flush of all ASIDs at roughly the same rate.  And once\nKVM stops clobbering the ASID on emulated INIT, *or* assigns a static ASID\nto each vCPU, this flaw goes away.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 1
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-98715",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98715.mbox",
            "https://git.kernel.org/stable/c/60d93c27859fb3ec5b5a689e24de303f166477d0",
            "https://git.kernel.org/stable/c/f2bd7cf6a83e49c710e2b93d3064fa0ebb7e0006",
            "https://git.kernel.org/stable/c/fd873c3d1b5240e80365f09e758e8c96b88a7cdb",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-98715",
            "https://www.cve.org/CVERecord?id=CVE-2026-98715"
          ],
          "PublishedDate": "2026-10-18T16:17:25.05Z",
          "LastModifiedDate": "2026-11-06T18:18:30.193Z"
        },
        {
          "VulnerabilityID": "CVE-2026-98853",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98853",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:58f61d62d524dc37ea25dcdbc4575c459d57d736c5fb283311eeca18e61d32a1",
          "Title": "kernel: net: gso: limit recursive IP-in-IP segmentation",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gso: limit recursive IP-in-IP segmentation\n\nIP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segment()\nfor each nested IP header. encap_level tracks header bytes, not callback\ndepth, so a deep chain can exhaust the kernel stack. Making\ninet_gso_segment() stackable introduced unbounded IPv4 nesting; IPIP\nGSO/TSO later made the path reachable. The IPv6 stackable path was\nintroduced separately and uses the same guard.\n\nCount IPv4 and IPv6 GSO handler entries in skb_gso_cb, initialized once\nper top-level GSO operation and preserved across GRE/UDP context changes.\nUse the existing IP_TUNNEL_RECURSION_LIMIT for both handlers. The first\nfive entries pass, and the sixth returns -EINVAL before dispatching\nanother GSO callback.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-98853",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98853.mbox",
            "https://git.kernel.org/stable/c/006c8b834aed8b02bd8fb9fb05e9e7ead37d1763",
            "https://git.kernel.org/stable/c/388604279da3d0698a151efa4fb6d852efa0de4a",
            "https://git.kernel.org/stable/c/c949646c900e879afce47df1b607fa320eb63bf2",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-98853",
            "https://www.cve.org/CVERecord?id=CVE-2026-98853"
          ],
          "PublishedDate": "2026-10-18T16:17:39.733Z",
          "LastModifiedDate": "2026-10-30T13:21:30.87Z"
        },
        {
          "VulnerabilityID": "CVE-2026-98974",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98974",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:365fbb547766da81d081840dd774f7a53d29cf364ff5f0a46d1ebcea32ab2cc2",
          "Title": "kernel: kernel: xfs: Unauthorized data modification via improper file size exchange handling",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix exchange-range-to-eof file size exchange\n\nNorbert Szetei posted a patch containing an incomplete description of a\nbug in XFS_IOC_EXCHANGE_RANGE's TO_EOF flag.  The bug tricks\nexchange-range into modifying a file so that it has shared blocks\nstarting beyond EOF, which is never allowed because files never have\nwritten data beyond EOF, and you can only share written data blocks.\nThis is key to all the incorrect behavior that follows.\n\nEventually I got from Norbert a description of what's going wrong:\n\n\u003e Fair. Here it is with physical block numbers, 4k blocks. peer is the file\n\u003e that gets rewritten and file1 is the one that ends up with the flag\n\u003e cleared.\n\u003e\n\u003e Start, nothing shared:\n\u003e\n\u003e\tpeer size 4096   -\u003e [100]\n\u003e\tfile1 size 12288 -\u003e [200] [201] [202]\n\u003e\tdonor1 size 4096 -\u003e [300]\n\u003e\tdonor2 size 4096 -\u003e [400]\n\u003e\n\u003e 1. FICLONERANGE peer's block into file1's middle slot:\n\u003e\n\u003e\tpeer size 4096   -\u003e [100]\n\u003e\tfile1 size 12288 -\u003e [200] [100] [202] reflink flag set\n\u003e                             ^^^^^ both files own block 100\n\u003e\n\u003e 2. XFS_IOC_EXCHANGE_RANGE file1 against donor1, file1_offset 0,\n\u003e file2_offset 8192, length 0, TO_EOF. One block is exchanged, and the sizes\n\u003e are exchanged with it:\n\u003e\n\u003e\tfile1 size 4096   -\u003e [200] [100] [300] reflink flag set\n\u003e                              ^^^^^^^^^^^ still owned, now past the size\n\u003e\tdonor1 size 12288 -\u003e [202]\n\u003e\n\u003e file1 says it is one block long while it still owns three. Nothing was\n\u003e unmapped. file2_offset is block 2, so this exchange cannot clear a flag.\n\u003e\n\u003e 3. XFS_IOC_EXCHANGE_RANGE file1 against donor2, both offsets 0, length 4096.\n\u003e By i_disk_size this is two one-block files exchanging everything, so\n\u003e xmi_can_exchange_reflink_flags() agrees and the flag is cleared:\n\u003e\n\u003e\tfile1 size 4096   -\u003e [400] [100] [300] reflink flag CLEARED\n\u003e\tdonor2 size 4096  -\u003e [200]\n\u003e\n\u003e Block 100 is still shared with peer.\n\u003e\n\u003e 4. pwrite(file1, 4096, 4096), which is file1's second slot, block 100.\n\u003e xfs_is_cow_inode(file1) is false, so no CoW:\n\u003e\n\u003e\tpeer size 4096 -\u003e [100] same block, new contents\n\u003e\n\u003e Block 100 is the only one that matters here. PoC below, it reads a file\n\u003e called peer in the current directory. The filesystem needs reflink and\n\u003e exchange-range, which mkfs.xfs 7.x turns on by default.\n\nSo yes, TO_EOF is screwing up the file size even if it's actually\nexchanging the data block correctly.  The following is the intended\nbehavior of XFS_EXCHANGE_RANGE_TO_EOF, as described by its manpage:\n\n\"Ignore the length parameter.  All bytes in file1_fd from file1_offset\n to EOF are moved to file2_fd, and file2's size is set to\n (file2_offset+(file1_length-file1_offset)).  Meanwhile, all bytes in\n file2 from file2_offset to EOF are moved to file1 and file1's size is\n set to (file1_offset+(file2_length-file2_offset)).\"\n\nIn other words, if we only exchange a portion of the file data, then we\nshould only exchange the portion of the file size that relates to the\nexchanged data.  Unfortunately, the code swaps the ondisk file size and\nthe incore file sizes, which is incorrect if the caller passes in a\nnonzero offset.\n\nHaving confused the file sizes, the PoC uses a second exchange-range\ncall on what looks like a non-reflinked single-block file.  Because the\nfile size is set incorrectly, exchange-range thinks it's exchanging the\nfull contents of two files and clears the reflink flag on the broken\nfile.  That enables an extending write of the broken file to rewrite the\nshared block that's just past EOF.  This has become known colloquially\nas refluxfs.\n\nOnce the file sizes are set correctly, the second exchange-range no\nlonger thinks that it's doing a full-contents swap, so it won't clear\nthe reflink flag on either of its file arguments.\n\nNorbert followed up to an earlier version of this patch with a second\ncomplaint about us not handling the i_disk_size state correctly:\n\n\u003e The offsets are bounded against the incore i_size but subtracted from\n\u003e\n---truncated---",
          "Severity": "HIGH",
          "VendorSeverity": {
            "alma": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:95367",
            "https://access.redhat.com/security/cve/CVE-2026-98974",
            "https://bugzilla.redhat.com/2507296",
            "https://bugzilla.redhat.com/2516278",
            "https://bugzilla.redhat.com/2516412",
            "https://bugzilla.redhat.com/2516674",
            "https://bugzilla.redhat.com/2521419",
            "https://bugzilla.redhat.com/2532407",
            "https://bugzilla.redhat.com/2536264",
            "https://bugzilla.redhat.com/2559811",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507296",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516278",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516412",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2516674",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521419",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2532407",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2536264",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559811",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64378",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90315",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98974",
            "https://errata.almalinux.org/10/ALSA-2026-95367.html",
            "https://errata.rockylinux.org/RLSA-2026:95367",
            "https://git.kernel.org/stable/c/7dfb218c829c1acb626e0fe92c5fddb9a26a03e9",
            "https://git.kernel.org/stable/c/952b5c99a840c2bff1f6645fd5e06e1db6ec2623",
            "https://git.kernel.org/stable/c/b361d32b884f8ddcb9bad5d99b69eece648f8e43",
            "https://git.kernel.org/stable/c/cf32eb20dfacfd2e92ce86ba1fece9ae5f98a7d8",
            "https://linux.oracle.com/cve/CVE-2026-98974.html",
            "https://linux.oracle.com/errata/ELSA-2026-95367.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-98974",
            "https://www.cve.org/CVERecord?id=CVE-2026-98974"
          ],
          "PublishedDate": "2026-10-23T13:17:19.013Z",
          "LastModifiedDate": "2026-10-24T14:16:49.923Z"
        },
        {
          "VulnerabilityID": "CVE-2026-98999",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98999",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a92a8aae15f29a0cc711f88b1c02ee75f5dfdc73a5d2f47e0f512aa32033c22e",
          "Title": "kernel: drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin\n\nxe_bo_pin_external() and xe_bo_unpin_external() maintain the bo's\npinned_link list membership in xe-\u003epinned.late.external, based on\nwhether the current call is the outermost pin or the final unpin.\nHowever, the same external bo's pin_count can also be raised and\nlowered directly by __xe_pin_fb_vma()/__xe_unpin_fb_vma(), which pin\nthe bo as a display scanout buffer without going through\nxe_bo_pin_external()/xe_bo_unpin_external() at all, and have no\nnotion of, or ownership over, pinned_link.\n\nIf a bo is pinned both externally (e.g. dma-buf export) and as an fb,\nand the external unpin happens first, xe_bo_unpin_external() correctly\nobserves pin_count \u003e 1 and leaves the bo on pinned_link. When the fb\nunpin later performs the true last unpin (pin_count 1 -\u003e 0), it never\ntouches pinned_link, leaving the bo linked on xe-\u003epinned.late.external\nindefinitely. Once the bo is subsequently freed, this stale list entry\npoints into freed memory, corrupting the list and risking a\nuse-after-free the next time the list is walked or spliced.\n\nThe backup object pin/unpin sites in xe_bo_notifier_prepare_pinned()/\nxe_bo_notifier_unprepare_pinned() have the same bypass characteristic,\nthough they never add their bo to a pinned list, so are not affected\nby this particular list-corruption issue.\n\nMove the pinned_link removal into xe_bo_account_unpin(), which already\nruns on every unpin path (kernel, external, framebuffer, backup\nobject) right before the true 1 -\u003e 0 pin_count transition. Since\nlist_del_init() only operates on the node itself, this removal is\nlist-agnostic and safe to perform regardless of which list (external\nor kernel_bo_present) the bo happens to be linked on, or which code\npath is performing the final unpin. Drop the now-redundant explicit\nlist_del_init() calls in xe_bo_unpin_external() and xe_bo_unpin().\n\nv2:\n- New patch\n\nv3:\n- Rebased on changes to previous patch.\n\n(cherry picked from commit ca58d36a1f93af586ee93b340c9f9fd81312cc01)",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-98999",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98999.mbox",
            "https://git.kernel.org/stable/c/3a11adcfd9a2de74d405bd3e8c4d7a1b328e4684",
            "https://git.kernel.org/stable/c/b3eaff982839e5c22912d604cd8e7748cece8d63",
            "https://git.kernel.org/stable/c/cf238c067eaae1cbfb00738e29219b9568d2313e",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-98999",
            "https://www.cve.org/CVERecord?id=CVE-2026-98999"
          ],
          "PublishedDate": "2026-10-23T13:17:22.177Z",
          "LastModifiedDate": "2026-10-24T14:16:51.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99109",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99109",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c84536bde7d3701ea37860b26c6610d029c7e7c8332c4fe29548e3767be22806",
          "Title": "kernel: smb: client: reject SetEA requests that do not fit the request buffer",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject SetEA requests that do not fit the request buffer\n\nCIFSSMBSetEA() copies the caller's extended attribute value into the\nSMB request buffer without checking that it fits.  The requirement is\nstated in the source but was never implemented:\n\n\t/*BB add length check to see if it would fit in\n\t     negotiated SMB buffer size BB */\n\t/* if (ea_value_len \u003e buffer_size - 512 (enough for header)) */\n\tif (ea_value_len)\n\t\tmemcpy(parm_data-\u003elist.name + name_len + 1,\n\t\t       ea_value, ea_value_len);\n\nThe only bound applied on the way in is in cifs_xattr_set():\n\n\t#define MAX_EA_VALUE_SIZE CIFSMaxBufSize\n\t...\n\tif (size \u003e MAX_EA_VALUE_SIZE)\n\nCIFSMaxBufSize is the full payload capacity of the buffer, so a value\nof exactly that size leaves no room for the SMB header, the TRANS2\nparameter block, the fealist header and the EA name that are written\nahead of it in the same object.\n\nSendReceive() already enforces the correct limit on this very length:\n\n\tif (in_len \u003e CIFSMaxBufSize + MAX_CIFS_HDR_SIZE)\n\nbut it is called after the copy has taken place.  An unprivileged\nsetxattr(2) on an SMB1 mount with a 250-byte name and a 16384-byte\nvalue writes 16384 bytes starting 345 bytes into a 16588-byte\ncifs_request object, ending 141 bytes past it:\n\n  BUG: KASAN: slab-out-of-bounds in CIFSSMBSetEA+0xabc/0xde0\n  Write of size 16384 at addr ffff888003aa0159 by task init/68\n   __asan_memcpy+0x3c/0x60\n   CIFSSMBSetEA+0xabc/0xde0\n   cifs_xattr_set+0xd3a/0xff0\n   __vfs_setxattr+0x13e/0x1a0\n  The buggy address is located 345 bytes inside of\n   allocated 16588-byte region\n\nApply SendReceive()'s limit to the assembled request before the copy\nrather than after it, and widen the byte counters so the sum cannot\nwrap before it is tested.\n\nbyte_count is also tested against U16_MAX, because it is stored in the\n16-bit pSMB-\u003eByteCount.  That becomes reachable when CIFSMaxBufSize is\nraised at module load, where it may be set as high as 1024*127: with a\n5-byte EA name and a 65521-byte value, count is exactly U16_MAX while\nbyte_count is 65556, and cpu_to_le16() would truncate it to 20 and\ntransmit a frame whose ByteCount does not match its length.  Testing\nbyte_count covers count as well, since byte_count is the larger of the\ntwo and count's only 16-bit consumer is written after this point.\n\ncheck_add_overflow() is evaluated first so that total_len is assigned\nbefore it is reported.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99109",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99109.mbox",
            "https://git.kernel.org/stable/c/4aa2c106aef4bf3dfd97c30842db0767b26e8428",
            "https://git.kernel.org/stable/c/79345a5d14b851e9ed28d3a9fe53301661dbcf11",
            "https://git.kernel.org/stable/c/9efbd764ab80fa86d2258550877a74d78a25e855",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99109",
            "https://www.cve.org/CVERecord?id=CVE-2026-99109"
          ],
          "PublishedDate": "2026-10-28T11:17:30.287Z",
          "LastModifiedDate": "2026-11-06T18:18:31.847Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99110",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99110",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:97a2660370d4fa24fd48c8e3983ec2e4a4aaae7e860bbf6f4f5c28eb08fe9f04",
          "Title": "kernel: smb: client: fix heap overflow in cifs_do_set_acl()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix heap overflow in cifs_do_set_acl()\n\ncifs_set_acl() validates ACL size using posix_acl_xattr_size():\n\n        4 + (count * 8)  // 4-byte header + 8 bytes per ACE\n\ncifs_do_set_acl() then calls posix_acl_to_cifs() to write the CIFS\nwire format into the same buffer:\n\n        6 + (count * 10)  // 6-byte header + 10 bytes per ACE\n\nAn ACL that passes the xattr-based check in cifs_set_acl() can\noverflow the heap when posix_acl_to_cifs() writes the larger CIFS\nformat.\n\nValidate the CIFS format size against the remaining buffer space and\nUSHRT_MAX before converting--data_count is __u16, so sizes above\nUSHRT_MAX truncate the on-wire packet length, causing the server to\napply a partial ACL.  Replace MaxDataCount = 1000 with\nmin(CIFSMaxBufSize, USHRT_MAX).",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99110",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99110.mbox",
            "https://git.kernel.org/stable/c/1dac61e2c29d1a71784604b48cf3b1234a65ec29",
            "https://git.kernel.org/stable/c/596b4062e6c75bdd85a7f2b7f2087a872dc420ac",
            "https://git.kernel.org/stable/c/68652afb9b9adf70125971abee9b95341e042249",
            "https://git.kernel.org/stable/c/9312a00215602ba028495ef3fa00fb84af0478e0",
            "https://git.kernel.org/stable/c/d96f3365ce61c5f39602955af43c8174548dee98",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99110",
            "https://www.cve.org/CVERecord?id=CVE-2026-99110"
          ],
          "PublishedDate": "2026-10-28T11:17:30.41Z",
          "LastModifiedDate": "2026-10-31T13:17:55.833Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99152",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99152",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9c4441ce18106b3da81f94a7a81d1b750d76c52fc8788c5161404bfc7147a576",
          "Title": "kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi: Validate the task named by a management response\n\n__iscsi_complete_pdu() fetches the task for five response types from one\nplace and checks only that the index resolved:\n\n      case ISCSI_OP_LOGOUT_RSP:\n      case ISCSI_OP_LOGIN_RSP:\n      case ISCSI_OP_TEXT_RSP:\n      case ISCSI_OP_SCSI_TMFUNC_RSP:\n      case ISCSI_OP_NOOP_IN:\n              task = iscsi_itt_to_task(conn, hdr-\u003eitt);\n              if (!task)\n                      return ISCSI_ERR_BAD_ITT;\n\niscsi_itt_to_task() bounds the index against cmds_max and looks at\nnothing else, so a target can name any slot in the pool, including one\nthat has never been used. task-\u003econn is then NULL, and both\niscsi_nop_out_rsp() and iscsi_complete_task() dereference it. One\nunsolicited NOP-In is enough; a Text Response carrying the same ITT\ncrashes in iscsi_complete_task() instead.\n\nRequire the task to be in flight and not a SCSI command, the way\niscsi_itt_to_ctask() does for the command opcodes.\n\n[    6.298634] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI\n[    6.298642] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]\n[    6.298652] CPU: 1 UID: 0 PID: 111 Comm: iscsistart Not tainted 7.2.0-rc5-ISCSI1-gf5098b6bae76 #1 PREEMPT(lazy)\n[    6.298654] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[    6.298656] RIP: 0010:iscsi_nop_out_rsp.constprop.0+0x46/0x160\n[    6.298691] Code: c1 ea 03 48 83 ec 08 80 3c 02 00 0f 85 f5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 58 48 8d 7d 60 48 89 fa 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 c0 00 00 00 48 8b 45 60 48 39 c3 74 50 48 b8 00\n[    6.298698] RSP: 0018:ffff88806c907be8 EFLAGS: 00010206\n[    6.298701] RAX: dffffc0000000000 RBX: ffff888006116800 RCX: 0000000000000020\n[    6.298702] RDX: 000000000000000c RSI: ffff88800525d578 RDI: 0000000000000060\n[    6.298703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000\n[    6.298706] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000\n[    6.298706] R13: 000000000000002e R14: ffff8880056eb440 R15: ffff888006116800\n[    6.298707] FS:  00007fc02d1c2740(0000) GS:ffff8880b29bc000(0000) knlGS:0000000000000000\n[    6.298710] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[    6.298711] CR2: 000055fe3b56ddf8 CR3: 00000000053b9004 CR4: 0000000000770ef0\n[    6.298712] PKRU: 55555554\n[    6.298713] Call Trace:\n[    6.298714]  \u003cIRQ\u003e\n[    6.298714]  __iscsi_complete_pdu+0x13a8/0x22a0\n[    6.298758]  iscsi_complete_pdu+0x54/0xa0\n[    6.298759]  iscsi_tcp_hdr_recv_done+0x870/0x2c80\n[    6.298778]  iscsi_tcp_recv_skb+0x31e/0xec0\n[    6.298800]  iscsi_sw_tcp_recv+0x12f/0x390\n[    6.298804]  __tcp_read_sock+0x1ab/0x810\n[    6.298812]  iscsi_sw_tcp_data_ready+0x18b/0x510\n[    6.298814]  tcp_rcv_established+0x1f56/0x3a00\n[    6.298842]  tcp_v4_do_rcv+0x449/0x960\n[    6.298847]  tcp_v4_rcv+0x2245/0x3bc0",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99152",
            "https://git.kernel.org/stable/c/11bffcd9cb346732eab2914ef44fe777a3f0b585",
            "https://git.kernel.org/stable/c/55a65ef61e2775aeb18fda63bd1959fa8b41f936",
            "https://git.kernel.org/stable/c/5b56229cc152095fbe4e4ff537cb206c4aa41610",
            "https://git.kernel.org/stable/c/77134cf996bab55683f0ceafb9e300d97ac046f8",
            "https://git.kernel.org/stable/c/7a7a473aec51195778a54fdd71f20fda3047b8ef",
            "https://git.kernel.org/stable/c/bf4035656852a386fecb5d6217710a1bde536e76",
            "https://git.kernel.org/stable/c/e96ae694c5038aae84142b64e41b56324b7af9a7",
            "https://git.kernel.org/stable/c/f721487523d45941aed4b0ac8d829b0461a7d860",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99152",
            "https://www.cve.org/CVERecord?id=CVE-2026-99152"
          ],
          "PublishedDate": "2026-10-28T11:17:35.317Z",
          "LastModifiedDate": "2026-10-31T13:17:57.443Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99153",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99153",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:435ee5e7fa9d345189861f0c5ceeb2f907a8a0bfb1abf1acaf197ad53509f991",
          "Title": "kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi: Validate the ITT reflected in a Reject PDU\n\nA Reject PDU carries a copy of the header it rejects, and\niscsi_handle_reject() takes the ITT out of that copy to find the task to\nclean up:\n\n      memcpy(\u0026rejected_pdu, data, sizeof(struct iscsi_hdr));\n      ...\n      task = iscsi_itt_to_task(conn, rejected_pdu.itt);\n\nThat value is whatever the target put there. iscsi_itt_to_task() bounds\nthe index against cmds_max and checks nothing else, so any task in the\npool can be named, and iscsi_nop_out_rsp() then completes it.\n\nAn index that has never been used gives a NULL task-\u003econn: the pool is\nzeroed at session setup and conn is assigned only when a task is\nallocated. If the task was used and returned, iscsi_complete_task() hits\nits WARN_ON_ONCE(task-\u003estate == ISCSI_TASK_FREE) and the refcount\nunderflows. An in-flight SCSI command is completed as successful - a 1\nMiB read returned 1048576 with none of its buffer written and no\nwarning.\n\nValidate the reflected ITT the way iscsi_itt_to_ctask() validates a\ncommand ITT, and require the task to be in flight and not a SCSI\ncommand.\n\n[    6.248477] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI\n[    6.249357] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]\n[    6.249951] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 7.2.0-rc5-ISCSI1-gf5098b6bae76 #1 PREEMPT(lazy)\n[    6.250718] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[    6.251616] RIP: 0010:iscsi_nop_out_rsp.constprop.0+0x46/0x160\n[    6.252043] Code: c1 ea 03 48 83 ec 08 80 3c 02 00 0f 85 f5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 58 48 8d 7d 60 48 89 fa 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 c0 00 00 00 48 8b 45 60 48 39 c3 74 50 48 b8 00\n[    6.252813] RSP: 0018:ffff88806c907b80 EFLAGS: 00010206\n[    6.253042] RAX: dffffc0000000000 RBX: ffff88800607e000 RCX: ffffffff8d571a25\n[    6.253345] RDX: 000000000000000c RSI: ffff88806c907c38 RDI: 0000000000000060\n[    6.253642] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff235a504\n[    6.253947] R10: 0000000000000003 R11: 7463656e6e6f6320 R12: 0000000000000000\n[    6.254251] R13: 0000000000000000 R14: ffff88806c907c38 R15: 0000000000000000\n[    6.254549] FS:  0000000000000000(0000) GS:ffff8880d95bc000(0000) knlGS:0000000000000000\n[    6.254887] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[    6.255140] CR2: 00007fc393e8ffc0 CR3: 0000000005252006 CR4: 0000000000770ef0\n[    6.255439] PKRU: 55555554\n[    6.255564] Call Trace:\n[    6.255674]  \u003cIRQ\u003e\n[    6.255768]  __iscsi_complete_pdu+0x18bf/0x22a0\n[    6.256733]  iscsi_complete_pdu+0x54/0xa0\n[    6.256905]  iscsi_tcp_data_recv_done+0xf4/0x250\n[    6.257103]  iscsi_tcp_recv_skb+0x31e/0xec0\n[    6.257680]  iscsi_sw_tcp_recv+0x12f/0x390\n[    6.258061]  __tcp_read_sock+0x1ab/0x810\n[    6.258853]  iscsi_sw_tcp_data_ready+0x18b/0x510\n[    6.259808]  tcp_data_queue+0x1f13/0x4cd0\n[    6.260567]  tcp_rcv_established+0x8a5/0x3a00\n[    6.261931]  tcp_v4_do_rcv+0x449/0x960\n[    6.262269]  tcp_v4_rcv+0x2245/0x3bc0",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99153",
            "https://git.kernel.org/stable/c/21ef746340ce246344f34278e205b8960c1d8874",
            "https://git.kernel.org/stable/c/3637a4ad1d07477f1c60609876da6b60154d224b",
            "https://git.kernel.org/stable/c/576125e7382a7826bd6c3c1ca4d9c582ed5be21d",
            "https://git.kernel.org/stable/c/7215a69b6456fda79c0935c2959045dff3fcaac8",
            "https://git.kernel.org/stable/c/c5958c770b2a0ee492414e26b07da9164a0d1f5d",
            "https://git.kernel.org/stable/c/d20583a9dbe0d32a9af8384c857c95c0fc115103",
            "https://git.kernel.org/stable/c/d79343ae3223b3f7f74b55e79f8a1371fa3f4b1a",
            "https://git.kernel.org/stable/c/ebb8c5ef2aabf66895253600e8390e8fc7094807",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99153",
            "https://www.cve.org/CVERecord?id=CVE-2026-99153"
          ],
          "PublishedDate": "2026-10-28T11:17:35.443Z",
          "LastModifiedDate": "2026-10-31T13:17:57.617Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99167",
          "VendorIDs": [
            "DSA-6602-1"
          ],
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99167",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9fdb8bc19992549602958fdb4129c6faad38120da412bc95de3c637210b3b055",
          "Title": "kernel: net/sched: fix use-after-free in __tcf_action_put()",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: fix use-after-free in __tcf_action_put()\n\n__tcf_action_put() decrements the reference count before decrementing the\nbinding count. Another thread can free the action between these operations,\ncausing the binding-count update to access freed memory. KASAN reports it\nas:\n\n  BUG: KASAN: slab-use-after-free in __tcf_action_put+0x327/0x340\n  Write of size 4 at addr ff11000000d46420 by task tc-put-pause/64\n\nHold the action IDR mutex across both counter updates and IDR removal,\nkeeping cleanup outside the lock.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99167",
            "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99167.mbox",
            "https://git.kernel.org/stable/c/2465d27ef90de9105c2bffb6c35f8ce08918e642",
            "https://git.kernel.org/stable/c/2e012e431aa271ef3c84206f48854f539c03bff0",
            "https://git.kernel.org/stable/c/4d83a3fc03bc595dd39b79ad61288738fbb1f2ba",
            "https://git.kernel.org/stable/c/7b16eb911091aae237a8673da94e4dfb9cd21d54",
            "https://git.kernel.org/stable/c/969ad6f2b266f383b44194d50d15631969b26222",
            "https://git.kernel.org/stable/c/fcc7d734ceccfab8ec3398c5b34f8e775d459507",
            "https://git.kernel.org/stable/c/fd01abed2568209f7daaf60e5ee68ae4a4744f48",
            "https://git.kernel.org/stable/c/fde33eb9955d819af282d5f5e84684eaec248291",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99167",
            "https://www.cve.org/CVERecord?id=CVE-2026-99167"
          ],
          "PublishedDate": "2026-10-28T11:17:37.173Z",
          "LastModifiedDate": "2026-10-31T13:17:58.417Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99227",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99227",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:fd32036598145cb594908172883f59b99171667d17058be11445200574490156",
          "Title": "kernel: kernel: Privilege escalation via reference counter wrap in io_uring",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/waitid: prevent cancel reference wrap\n\nio_waitid packs the cancellation state into bit 31 of -\u003erefs and uses\nbits 30:0 as a 31-bit reference counter:\n\n  #define IO_WAITID_CANCEL_FLAG BIT(31)\n  #define IO_WAITID_REF_MASK    GENMASK(30, 0)\n\n__io_waitid_cancel() marks a request canceled, then increments the low\nbits of -\u003erefs to claim completion ownership. When another path owns the\nrequest, the increment remains even though cancellation returns false.\nThe request remains discoverable by cancellation, so repeated failed\nattempts can wrap the 31-bit reference field to zero. A later\ncancellation can claim ownership and complete the request a second time.\n\nUse atomic_fetch_or() when setting the cancel flag and inspect the old\nflag value. The first cancel attempt continues to the existing ownership\nincrement, preserving its wake and issuer handoff semantics. Later\nattempts see the cancel flag and return without incrementing the\nreference field.\n\nThis makes repeated failed cancellation attempts idempotent while\nleaving the first-cancel state transitions unchanged.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99227",
            "https://git.kernel.org/stable/c/20b67288574c7c3df6b8ea7ed3b7af90a868006f",
            "https://git.kernel.org/stable/c/22fb4a4518e305164c7f203608287564de292f34",
            "https://git.kernel.org/stable/c/5bfeee1774791602a0d53eb717f00f172127a017",
            "https://git.kernel.org/stable/c/857aa2012b91cad6fdef54a4b6c632d9d0b6e64f",
            "https://git.kernel.org/stable/c/98787d3fa4e99564d2b2bc21255b21f670c450d0",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99227",
            "https://www.cve.org/CVERecord?id=CVE-2026-99227"
          ],
          "PublishedDate": "2026-11-02T16:17:47.42Z",
          "LastModifiedDate": "2026-11-03T20:18:28.357Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99231",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99231",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:dcb81535fe85e938e4a1c446fd13a3cb081e24348edb717701cf7e278b9c0cb1",
          "Title": "kernel: kernel: Privilege escalation via use-after-free in io_uring waitid",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/waitid: own the request before clearing -\u003ehead\n\nio_waitid_remove_wq() only takes the wait queue lock if -\u003ehead is set.\nio_waitid_wait() clears -\u003ehead first thing, before it tries to become the\nowner of the request by bumping -\u003erefs. If somebody else owns the request\nat that point, nothing keeps it from completing the request while the\nwake up handler is still going to touch it:\n\nCPU0 (io_waitid_wait)                 CPU1 (io_waitid, holds a ref)\nlist_del_init(\u0026wait-\u003eentry)\nsmp_store_release(\u0026iw-\u003ehead, NULL)\n                                      __do_wait() finds another child\n                                      io_waitid_remove_wq()\n                                        // -\u003ehead == NULL, no locking\n                                      io_waitid_finish(), IOU_COMPLETE\n                                      // request freed and reused\natomic_fetch_inc(\u0026iw-\u003erefs)\n\nThe same goes for __io_waitid_cancel() if it claims the request in that\nwindow. -\u003erefs is part of the per opcode data of the request, so this\nincrements whatever the next user of the request keeps there. If that\nhappens to be zero, the handler concludes that it owns the request, and\nqueues io_waitid_cb() for it. With the window held open by a delay, and\nthe request reused for a receive that is waiting for data:\n\n  BUG: KASAN: slab-use-after-free in __wake_up_common+0x1ca/0x1f0\n   __wake_up_sync_key+0x36/0x50\n   sock_def_readable+0xf1/0x420\n   unix_stream_sendmsg+0x60b/0x1110\n  Allocated by task 87:\n   io_arm_apoll+0x1ed/0x940\n  Freed by task 87:\n   __io_submit_flush_completions+0x118d/0x1a10\n   tctx_task_work_run+0x327/0x950\n\nOnly clear -\u003ehead once the handler owns the request. If it doesn't, the\nowner finds -\u003ehead set and has to wait for the lock, which is held by the\ncaller of the handler. Deleting the already deleted entry again is\nharmless.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99231",
            "https://git.kernel.org/stable/c/6e11ce129b34fb9a43b2bbe838df49ea52878d5c",
            "https://git.kernel.org/stable/c/8381a912c65b8de16e8a848225c7c5a56b6ea834",
            "https://git.kernel.org/stable/c/bf01da1a9cca4a54e5c30b8344e52c26afb87be7",
            "https://git.kernel.org/stable/c/c10ad2813e15186fb51b37a4d17fafddc99e89a5",
            "https://git.kernel.org/stable/c/c254eec4364b9f4b4cbdce43be3fb4df5a651a70",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99231",
            "https://www.cve.org/CVERecord?id=CVE-2026-99231"
          ],
          "PublishedDate": "2026-11-02T16:17:48.06Z",
          "LastModifiedDate": "2026-11-06T18:18:33.167Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99233",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99233",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7b0ade322e2705994ecb683c3f7fba7a030ab1089489d3cd912863d93d8dc7b4",
          "Title": "kernel: kernel: Privilege escalation via use-after-free in tracing subsystem",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/histograms: Verify event_call identity when updating synth_event refcount\n\nIn event_hist_trigger_parse() and hist_unreg_all(), the histogram\nregistration and unregistration paths look up find_synth_event() using\ntrace_event_name(file-\u003eevent_call) and adjust se-\u003eref if a match is\nfound.\n\nBecause find_synth_event() only compares the event basename, registering\nor removing a histogram on a non-synthetic trace event whose basename\nmatches a synthetic event erroneously modifies the synthetic event's\nreference count.  If a histogram is registered on the non-synthetic\nevent before the synthetic event is created and removed afterwards,\nse-\u003eref is decremented without a matching increment, allowing the\nsynthetic event to be freed while an active histogram action still holds\na pointer to it.\n\nIntroduce find_synth_event_call() to verify that \u0026se-\u003ecall matches\nfile-\u003eevent_call before adjusting se-\u003eref.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99233",
            "https://git.kernel.org/stable/c/06e816bed499fe47f39f12044382cc5d064485fb",
            "https://git.kernel.org/stable/c/23b4106e8b35823acc79e206c7745f55b9cfd78b",
            "https://git.kernel.org/stable/c/3403d9bb27ebc3572bd048620746b4414e073bf9",
            "https://git.kernel.org/stable/c/381f543ed35c434d5b707369aa5dcd69ecf440af",
            "https://git.kernel.org/stable/c/4472579bd1c83708b6fe623c870cdf728e947205",
            "https://git.kernel.org/stable/c/5597bb8db6855fcb97a67196d227fea359bcd81c",
            "https://git.kernel.org/stable/c/cf4e31d5da80fae4c9cdbe7af55b7c3ad213f0e4",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99233",
            "https://www.cve.org/CVERecord?id=CVE-2026-99233"
          ],
          "PublishedDate": "2026-11-02T16:17:48.39Z",
          "LastModifiedDate": "2026-11-03T20:18:29.27Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99235",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99235",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:088d4f96731d98359e32dd3bbccc8c1627dd8459a439a522a290421bb61d699a",
          "Title": "kernel: kernel: Privilege escalation via use-after-free in event tracing subsystem",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Save the event file instead of the compatible histogram\n\ncreate_field_var_hist() creates a histogram on the matched event to\nsupply a field variable, and records it on the target so it can be torn\ndown later:\n\n\thist_data = find_compatible_hist(target_hist_data, file);\n\t...\n\t/* Save the compatible histogram information */\n\tvar_hist-\u003ehist_data = hist_data;\n\nhist_data is not the histogram it creates. It is one that was already\nthere, whose keys the new one copies. The saved pointer has a single\nuser, unregister_field_var_hists(), which runs when the target is\nremoved:\n\n\tfile = hist_data-\u003efield_var_hists[i]-\u003ehist_data-\u003eevent_file;\n\nfind_compatible_hist() matches on keys alone, so it can pick one with no\nvariables of its own. check_var_refs() then returns false and the user\ncan remove it while the target still points at it:\n\n BUG: KASAN: slab-use-after-free in event_hist_trigger_free+0x2b2/0x320\n Read of size 8 at addr ffff8880093b90e0 by task init/1\n\n Freed by task 1:\n  kfree+0x154/0x420\n  event_hist_trigger_free+0x1d5/0x320\n  event_hist_trigger_parse+0x35f3/0x69e0\n  trigger_process_regex+0x1a6/0x250\n\nSave the event file instead. It is all the dereference ever wanted, and\nit does not go away when the user removes a trigger.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99235",
            "https://git.kernel.org/stable/c/173914501b97236d7ea7dc2af7f30feddd4e1436",
            "https://git.kernel.org/stable/c/3609ada3c12cecfb0ae5ee82ef4f86c5f18a2dea",
            "https://git.kernel.org/stable/c/7a111ba0d1b74c99bc8f096565dc71945f694254",
            "https://git.kernel.org/stable/c/7cafc82e6153f05a221be678cd649d02e06ba909",
            "https://git.kernel.org/stable/c/8b307d64a60548e4a74cb746f74d7ed4bd49965e",
            "https://git.kernel.org/stable/c/9631dbccd3c649b567a5aafffea6b00634183997",
            "https://git.kernel.org/stable/c/a6165126b1a1b26342b55be6eb6ee23af8756aba",
            "https://git.kernel.org/stable/c/ac815a379644b2ad5008a009a3516ada31b5dd82",
            "https://git.kernel.org/stable/c/d5c42664fc094899af9aae5300b27fe8fdb658ef",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99235",
            "https://www.cve.org/CVERecord?id=CVE-2026-99235"
          ],
          "PublishedDate": "2026-11-02T16:17:48.79Z",
          "LastModifiedDate": "2026-11-03T20:18:29.627Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99236",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99236",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e6a8c71f8c7e777da6319855304f0fd39131de37180b3f689903ccbcdd688cc1",
          "Title": "kernel: kernel: privilege escalation via incomplete event filter expressions",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Reject incomplete event filter expressions\n\nA non-empty expression normally finishes in predicate_parse()'s inner\nloop, which resolves the pending logical operators before jumping to\nfinalization. If the input ends after an operator, possibly followed by\nunary '!' tokens, the outer loop instead falls through with unresolved\noperator state.\n\nFor example, \"common_pid == 1 || common_pid == 2 \u0026\u0026\" leaves\nprog[0].target equal to -1. The second pass then reads prog[-1] before\nthe forward-jump check can reject it. Depending on adjacent slab\ncontents, it can also copy an out-of-bounds word into a branch target\nthat passes the forward-only check. A self-targeted perf tracepoint\ncounting event can reach this path through PERF_EVENT_IOC_SET_FILTER.\n\nReject the outer-loop fallthrough when a predicate has already been\nparsed. This ensures that non-empty expressions only reach finalization\nafter the inner loop has resolved their operators. Keep the existing\nno-filter error for input that has no predicates. Add a regression test\nfor trailing logical operators and unary negations.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99236",
            "https://git.kernel.org/stable/c/1008e9e0b8280d47f1ab5e9c113f666a023a9697",
            "https://git.kernel.org/stable/c/15ff3cc7f2beecc3f95d66358f20ad7b057466aa",
            "https://git.kernel.org/stable/c/1fdc4164e488916402badddbb1f51e9380dabb91",
            "https://git.kernel.org/stable/c/2a98f5d4913ec081e08e1075512cb7ec313d9f72",
            "https://git.kernel.org/stable/c/4a1a6d35359991c5d47f4bf101cfbe1475c94093",
            "https://git.kernel.org/stable/c/5a999b5a16530898f0dbe5f8c50fd45ea72e110b",
            "https://git.kernel.org/stable/c/5bcdf3c18c3471122ee9652b0e2f5cdb718d9a46",
            "https://git.kernel.org/stable/c/64993d970dde2a2da353e9e99595a4fa88ec27d9",
            "https://git.kernel.org/stable/c/b205ff58e02922ac324f931cf9eb238a3acdb048",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99236",
            "https://www.cve.org/CVERecord?id=CVE-2026-99236"
          ],
          "PublishedDate": "2026-11-02T16:17:49.003Z",
          "LastModifiedDate": "2026-11-03T20:18:29.827Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99239",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99239",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:140589366af14cfda183dfb1122c806ef9a3b0cc746bc19a8cda5c9126a9ce6f",
          "Title": "kernel: kernel: Privilege escalation via race condition in Bluetooth L2CAP",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn\n\nl2cap_chan may be linked to l2cap_conn at most once. This is assumed in\nseveral places, eg l2cap_chan_del cleanup.\n\nThere is a TOCTOU race where the invariant is violated:\n\n    [Task 1]                          [Task 2]\n    l2cap_chan_connect                l2cap_sock_bind\n      l2cap_chan_lock                   lock_sock\n      l2cap_state_change                if (sk-\u003esk_state != BT_OPEN)\n        chan-\u003estate = BT_CONNECT\n        l2cap_sock_state_change_cb      chan-\u003estate = BT_BOUND\n                                        sk-\u003esk_state = BT_BOUND\n          lock_sock \u003c------------------ release_sock\n          sk-\u003esk_state = BT_CONNECT\n\nl2cap_sock_connect() does not check sk-\u003esk_state, so since chan-\u003estate\nis now BT_BOUND, subsequent connect() ends up with second\n__l2cap_chan_add.\n\nExplicitly document and check the invariant in __l2cap_chan_add with\nWARN_ON_ONCE. The only callsite where it could be hit is\nl2cap_chan_connect, so add pre-check there to avoid relying on\nchan-\u003estate. chan-\u003estate read/write is not properly guarded currently so\nthere can be other TOCTOUC problems.\n\nAdd l2cap_lock_chan in l2cap_sock_bind() to guard chan-\u003estate write.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99239",
            "https://git.kernel.org/stable/c/10c705dd706aa93164ba41f2566f15206d6c178e",
            "https://git.kernel.org/stable/c/52fe88e4ef87311eee32b45c65603e7c69e75e7d",
            "https://git.kernel.org/stable/c/73820561d8cbfd3364a29b8fa77f1707f26029da",
            "https://git.kernel.org/stable/c/820579652b24ce277e0097cd65b42bd9b7b8bf07",
            "https://git.kernel.org/stable/c/85cc289eb08afa975375f838187369e68b429ee0",
            "https://git.kernel.org/stable/c/86b55991d3cd690e73c5ef8d20b75ae4905b357a",
            "https://git.kernel.org/stable/c/d3afd7803f9bc2a8c4270199497b60158b2fc647",
            "https://git.kernel.org/stable/c/e618d928ec7f88cbeadfa3542adcac40f474e629",
            "https://git.kernel.org/stable/c/fabaff1c59ff2cc89cb7e5bd0186a5e15f0c73b2",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99239",
            "https://www.cve.org/CVERecord?id=CVE-2026-99239"
          ],
          "PublishedDate": "2026-11-02T16:17:49.54Z",
          "LastModifiedDate": "2026-11-03T20:18:30.28Z"
        },
        {
          "VulnerabilityID": "CVE-2026-99246",
          "PkgID": "linux-libc-dev@6.12.113-1",
          "PkgName": "linux-libc-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/linux-libc-dev@6.12.113-1?arch=all\u0026distro=debian-13.7",
            "UID": "41814e67830e036b"
          },
          "InstalledVersion": "6.12.113-1",
          "FixedVersion": "6.12.115-1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99246",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:19291598e86c78ad675ed8ed349ff7b09a50ef0b91499effbadbbd47c7e1a959",
          "Title": "kernel: kernel: Arbitrary code execution via use-after-free in TIPC subsystem",
          "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: protect node reset trace dump with node lock\n\nThe tipc_node_reset_links trace event asks tipc_node_dump() to walk the\nnode's link entries. Unlike the other node events that request link data,\nthis event runs without the node lock.\n\nThis permits bearer teardown to free a link while the trace callback is\ndumping it:\n\n  CPU 0                                CPU 1\n  trace_tipc_node_reset_links()\n    tipc_node_dump()\n      l = n-\u003elinks[0].link\n                                       tipc_node_write_lock()\n                                       kfree(l)\n                                       n-\u003elinks[0].link = NULL\n                                       tipc_node_write_unlock()\n      tipc_link_dump(l)\n\ntipc_link_dump() then dereferences the stale pointer. KASAN reported:\n\n  BUG: KASAN: slab-use-after-free in tipc_link_dump\n  Read of size 4 by task poc/115\n  Call Trace:\n   tipc_link_dump+0x10cb/0x16b0\n   tipc_node_dump+0x4bb/0x740\n   trace_event_raw_event_tipc_node_class+0x258/0x360\n   tipc_node_reset_links+0x14d/0x1a0\n   tipc_rcv+0x13f5/0x3030\n   tipc_udp_recv+0x4e3/0x670\n  Allocated by task 0:\n   tipc_link_create+0x1e1/0x1020\n   tipc_node_check_dest+0x7d2/0x11a0\n   tipc_disc_rcv+0xdbf/0x1430\n  Freed by task 89:\n   kfree+0x131/0x3c0\n   tipc_node_link_down+0x267/0x4b0\n   tipc_node_delete_links+0xec/0x160\n   bearer_disable+0x107/0x260\n\nTake the node write lock around the trace event. This serializes the\ndump against tipc_node_link_down(delete=true), which frees the link\nunder the same write lock.",
          "Severity": "HIGH",
          "VendorSeverity": {
            "azure": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-99246",
            "https://git.kernel.org/stable/c/6abd93d01b0f495f29201925a5ee8e6a583c4044",
            "https://git.kernel.org/stable/c/6e492cb98ca69cc1145175e23e22e3b84da7f26d",
            "https://git.kernel.org/stable/c/7bb6a35bd6d69019539d8782fb590fd2aa8a3236",
            "https://git.kernel.org/stable/c/a6101d62ccfa153db8c218ce59362b8e0316fd4f",
            "https://git.kernel.org/stable/c/b8b7d28dc2b7472ffd1eff3954c38f1976b21a7b",
            "https://git.kernel.org/stable/c/c8b72ca0918e95f708f67c8b3e69b05290f2b6d2",
            "https://git.kernel.org/stable/c/dddf197f29ba5e47a476dde82bf542ca2e0d5e5e",
            "https://git.kernel.org/stable/c/fa8c78c0e49aa11fae116fd841e41aa8f2d68751",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-99246",
            "https://www.cve.org/CVERecord?id=CVE-2026-99246"
          ],
          "PublishedDate": "2026-11-03T12:17:31.03Z",
          "LastModifiedDate": "2026-11-03T20:18:31.013Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "login@1:4.16.0-2+really2.41.5-0+deb13u1",
          "PkgName": "login",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "dc99754e767c40b9"
          },
          "InstalledVersion": "1:4.16.0-2+really2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:758ec2ea7ce0983fd1586ddcd327dd561264ff4285fb0932674038135ab677ca",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "login@1:4.16.0-2+really2.41.5-0+deb13u1",
          "PkgName": "login",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "dc99754e767c40b9"
          },
          "InstalledVersion": "1:4.16.0-2+really2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:509add088c0b4e6d8653d522c56d178e2902be66050d272a4f0d1d15c0ce7afa",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "login@1:4.16.0-2+really2.41.5-0+deb13u1",
          "PkgName": "login",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "dc99754e767c40b9"
          },
          "InstalledVersion": "1:4.16.0-2+really2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ebe955f52d6b2e511b4cbca7aceab93842a8269b6d98f31fbaae12acb5ffb6bf",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "login@1:4.16.0-2+really2.41.5-0+deb13u1",
          "PkgName": "login",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "dc99754e767c40b9"
          },
          "InstalledVersion": "1:4.16.0-2+really2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:670d9394d047da27dbc363e02addbfb6167ca6a843096e093f4720ce602827ad",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "mount@2.41.5-0+deb13u1",
          "PkgName": "mount",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d781ec5616a75c78"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0b0dd64e7449b36cd94569f4fc285c17ea8feeec45b3506252c72186f95fc1f7",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "mount@2.41.5-0+deb13u1",
          "PkgName": "mount",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d781ec5616a75c78"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6ba42e04cec68b5c0d3add4cac50a56954b8c74f5a6e8f2060a8f014a9d121f8",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "mount@2.41.5-0+deb13u1",
          "PkgName": "mount",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d781ec5616a75c78"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e5e87a070f867f1a23eb65d3ac50937eb92051cedeb2b9a0e96ad7b83651175f",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "mount@2.41.5-0+deb13u1",
          "PkgName": "mount",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "d781ec5616a75c78"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a80ebba2076cd1e527ceb2fcf353cbb71b1019e3b98a3422f8e7be8516e40f4a",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2025-69720",
          "PkgID": "ncurses-base@6.5+20250216-2",
          "PkgName": "ncurses-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/ncurses-base@6.5%2B20250216-2?arch=all\u0026distro=debian-13.7",
            "UID": "767a0231348a5cb5"
          },
          "InstalledVersion": "6.5+20250216-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:4082e417473cbe41fe08c50cd6f9e111cdf99ae0d22ca28a52829f7accb552dd",
          "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
          "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121",
            "CWE-120"
          ],
          "VendorSeverity": {
            "alma": 2,
            "azure": 4,
            "cbl-mariner": 4,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:5913",
            "https://access.redhat.com/security/cve/CVE-2025-69720",
            "https://bugzilla.redhat.com/2449037",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
            "https://errata.almalinux.org/10/ALSA-2026-5913.html",
            "https://errata.rockylinux.org/RLSA-2026:5913",
            "https://github.com/Cao-Wuhui/CVE-2025-69720",
            "https://github.com/advisories/GHSA-9952-mrqj-h4jh",
            "https://invisible-island.net/archives/ncurses/6.5",
            "https://invisible-island.net/archives/ncurses/6.5/",
            "https://invisible-island.net/ncurses",
            "https://invisible-island.net/ncurses/",
            "https://linux.oracle.com/cve/CVE-2025-69720.html",
            "https://linux.oracle.com/errata/ELSA-2026-5913.html",
            "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
            "https://ubuntu.com/security/notices/USN-8503-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-69720"
          ],
          "PublishedDate": "2026-03-19T15:16:21.293Z",
          "LastModifiedDate": "2026-06-17T10:00:50.423Z"
        },
        {
          "VulnerabilityID": "CVE-2025-69720",
          "PkgID": "ncurses-bin@6.5+20250216-2",
          "PkgName": "ncurses-bin",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/ncurses-bin@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7",
            "UID": "5b541563cf6587e5"
          },
          "InstalledVersion": "6.5+20250216-2",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:4fd7e63c1caf3c7b5e8c89ba851f9f5eb38a7769060cb1ea15cf88e3116df83b",
          "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
          "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121",
            "CWE-120"
          ],
          "VendorSeverity": {
            "alma": 2,
            "azure": 4,
            "cbl-mariner": 4,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:5913",
            "https://access.redhat.com/security/cve/CVE-2025-69720",
            "https://bugzilla.redhat.com/2449037",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
            "https://errata.almalinux.org/10/ALSA-2026-5913.html",
            "https://errata.rockylinux.org/RLSA-2026:5913",
            "https://github.com/Cao-Wuhui/CVE-2025-69720",
            "https://github.com/advisories/GHSA-9952-mrqj-h4jh",
            "https://invisible-island.net/archives/ncurses/6.5",
            "https://invisible-island.net/archives/ncurses/6.5/",
            "https://invisible-island.net/ncurses",
            "https://invisible-island.net/ncurses/",
            "https://linux.oracle.com/cve/CVE-2025-69720.html",
            "https://linux.oracle.com/errata/ELSA-2026-5913.html",
            "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
            "https://ubuntu.com/security/notices/USN-8503-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-69720"
          ],
          "PublishedDate": "2026-03-19T15:16:21.293Z",
          "LastModifiedDate": "2026-06-17T10:00:50.423Z"
        },
        {
          "VulnerabilityID": "CVE-2026-9538",
          "PkgID": "perl@5.40.1-6+deb13u1",
          "PkgName": "perl",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl@5.40.1-6%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "18e3540e0d9ac388"
          },
          "InstalledVersion": "5.40.1-6+deb13u1",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:840325d2a6d44f826cacdea40a2644ca4942b7399e3dec3615ce6e81b0486501",
          "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size",
          "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-789"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/26/4",
            "https://access.redhat.com/errata/RHSA-2026:49525",
            "https://access.redhat.com/security/cve/CVE-2026-9538",
            "https://bugzilla.redhat.com/2481315",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481315",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538",
            "https://errata.almalinux.org/9/ALSA-2026-49525.html",
            "https://errata.rockylinux.org/RLSA-2026:49525",
            "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch",
            "https://linux.oracle.com/cve/CVE-2026-9538.html",
            "https://linux.oracle.com/errata/ELSA-2026-49525.html",
            "https://lists.security.metacpan.org/cve-announce/msg/40396448/",
            "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-9538",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-9538"
          ],
          "PublishedDate": "2026-05-26T02:16:41.15Z",
          "LastModifiedDate": "2026-07-23T11:10:00.12Z"
        },
        {
          "VulnerabilityID": "CVE-2026-9538",
          "PkgID": "perl-base@5.40.1-6+deb13u1",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.40.1-6%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e64a633beeac3a7d"
          },
          "InstalledVersion": "5.40.1-6+deb13u1",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0f50dd257dbbd34c9f07ad8cab080ab90ab7dcc23d38e4996bf892fc2f572a9d",
          "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size",
          "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-789"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/26/4",
            "https://access.redhat.com/errata/RHSA-2026:49525",
            "https://access.redhat.com/security/cve/CVE-2026-9538",
            "https://bugzilla.redhat.com/2481315",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481315",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538",
            "https://errata.almalinux.org/9/ALSA-2026-49525.html",
            "https://errata.rockylinux.org/RLSA-2026:49525",
            "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch",
            "https://linux.oracle.com/cve/CVE-2026-9538.html",
            "https://linux.oracle.com/errata/ELSA-2026-49525.html",
            "https://lists.security.metacpan.org/cve-announce/msg/40396448/",
            "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-9538",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-9538"
          ],
          "PublishedDate": "2026-05-26T02:16:41.15Z",
          "LastModifiedDate": "2026-07-23T11:10:00.12Z"
        },
        {
          "VulnerabilityID": "CVE-2026-9538",
          "PkgID": "perl-modules-5.40@5.40.1-6+deb13u1",
          "PkgName": "perl-modules-5.40",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6%2Bdeb13u1?arch=all\u0026distro=debian-13.7",
            "UID": "c866326379cc085"
          },
          "InstalledVersion": "5.40.1-6+deb13u1",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:551f5610e962e88ad28be4b946f693e4620cc86f908a6625bbbee7bb8e36736f"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3f6142fd7045aa1387f73ea284603026cef4250210d35f67c074e825513da106",
          "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size",
          "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-789"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/26/4",
            "https://access.redhat.com/errata/RHSA-2026:49525",
            "https://access.redhat.com/security/cve/CVE-2026-9538",
            "https://bugzilla.redhat.com/2481315",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481315",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538",
            "https://errata.almalinux.org/9/ALSA-2026-49525.html",
            "https://errata.rockylinux.org/RLSA-2026:49525",
            "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch",
            "https://linux.oracle.com/cve/CVE-2026-9538.html",
            "https://linux.oracle.com/errata/ELSA-2026-49525.html",
            "https://lists.security.metacpan.org/cve-announce/msg/40396448/",
            "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-9538",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-9538"
          ],
          "PublishedDate": "2026-05-26T02:16:41.15Z",
          "LastModifiedDate": "2026-07-23T11:10:00.12Z"
        },
        {
          "VulnerabilityID": "CVE-2026-15308",
          "PkgID": "python3.13@3.13.5-2+deb13u5",
          "PkgName": "python3.13",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "c039d7d84076b819"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15308",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d3ac9007769e533b3c854e99ed6e33f46d8b2c8d62bea2aca714a9915651f9b4",
          "Title": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations",
          "Description": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "bitnami": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.7
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/07/09/4",
            "https://access.redhat.com/errata/RHSA-2026:39798",
            "https://access.redhat.com/errata/RHSA-2026:41949",
            "https://access.redhat.com/security/cve/CVE-2026-15308",
            "https://bugzilla.redhat.com/2498608",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2498608",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15308",
            "https://errata.almalinux.org/9/ALSA-2026-41949.html",
            "https://errata.rockylinux.org/RLSA-2026:39798",
            "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9",
            "https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7",
            "https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14",
            "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced",
            "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606",
            "https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00",
            "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd",
            "https://github.com/python/cpython/issues/153030",
            "https://github.com/python/cpython/pull/153031",
            "https://linux.oracle.com/cve/CVE-2026-15308.html",
            "https://linux.oracle.com/errata/ELSA-2026-41949.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-15308",
            "https://ubuntu.com/security/notices/USN-8744-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-15308"
          ],
          "PublishedDate": "2026-07-09T17:16:58.26Z",
          "LastModifiedDate": "2026-10-25T17:10:00.197Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19445",
          "PkgID": "python3.13@3.13.5-2+deb13u5",
          "PkgName": "python3.13",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "c039d7d84076b819"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19445",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:213973618767a4be1b216215cb88fe21391dff9de4cab320b14ecb43e8a54233",
          "Title": "python: Use-after-free of a server-side SSLContext when sni_callback switches contexts",
          "Description": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 4,
            "bitnami": 4,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
              "V40Score": 9.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/30/17",
            "https://access.redhat.com/errata/RHSA-2026:89742",
            "https://access.redhat.com/security/cve/CVE-2026-19445",
            "https://bugzilla.redhat.com/2543492",
            "https://bugzilla.redhat.com/2544127",
            "https://bugzilla.redhat.com/2544138",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2543492",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544138",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12345",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19445",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19553",
            "https://errata.almalinux.org/9/ALSA-2026-89742.html",
            "https://errata.rockylinux.org/RLSA-2026:89742",
            "https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d",
            "https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b",
            "https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7",
            "https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8",
            "https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698",
            "https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c",
            "https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b",
            "https://github.com/python/cpython/issues/156293",
            "https://github.com/python/cpython/pull/158504",
            "https://linux.oracle.com/cve/CVE-2026-19445.html",
            "https://linux.oracle.com/errata/ELSA-2026-89742.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19445",
            "https://www.cve.org/CVERecord?id=CVE-2026-19445"
          ],
          "PublishedDate": "2026-09-30T17:16:45.72Z",
          "LastModifiedDate": "2026-10-03T01:17:24.93Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19553",
          "PkgID": "python3.13@3.13.5-2+deb13u5",
          "PkgName": "python3.13",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "c039d7d84076b819"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19553",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:09053e870022e9796058b829ac3b10e412383273c5bb11b8063103e02edc445a",
          "Title": "python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()",
          "Description": "ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-297"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "bitnami": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 7.6
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 7.4
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/30/16",
            "https://access.redhat.com/errata/RHSA-2026:89742",
            "https://access.redhat.com/security/cve/CVE-2026-19553",
            "https://bugzilla.redhat.com/2543492",
            "https://bugzilla.redhat.com/2544127",
            "https://bugzilla.redhat.com/2544138",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2543492",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544138",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12345",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19445",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19553",
            "https://errata.almalinux.org/9/ALSA-2026-89742.html",
            "https://errata.rockylinux.org/RLSA-2026:89742",
            "https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96",
            "https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf",
            "https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082",
            "https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed",
            "https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced",
            "https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80",
            "https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062",
            "https://github.com/python/cpython/issues/156793",
            "https://github.com/python/cpython/pull/158503",
            "https://linux.oracle.com/cve/CVE-2026-19553.html",
            "https://linux.oracle.com/errata/ELSA-2026-89742.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19553",
            "https://www.cve.org/CVERecord?id=CVE-2026-19553"
          ],
          "PublishedDate": "2026-09-30T17:16:45.88Z",
          "LastModifiedDate": "2026-10-16T19:17:06.673Z"
        },
        {
          "VulnerabilityID": "CVE-2026-7210",
          "PkgID": "python3.13@3.13.5-2+deb13u5",
          "PkgName": "python3.13",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "c039d7d84076b819"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-7210",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ea3d7adcf018c9b9a31312a241f9ec77d602a1554bd150c6d017537e76c0361a",
          "Title": "python: Python/Expat: Denial of Service via crafted XML document",
          "Description": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-331"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "bitnami": 3,
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "bitnami": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/11/13",
            "http://www.openwall.com/lists/oss-security/2026/05/11/8",
            "https://access.redhat.com/security/cve/CVE-2026-7210",
            "https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4",
            "https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566",
            "https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56",
            "https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b",
            "https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286",
            "https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a",
            "https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f",
            "https://github.com/python/cpython/issues/149018",
            "https://github.com/python/cpython/pull/149023",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-7210",
            "https://www.cve.org/CVERecord?id=CVE-2026-7210"
          ],
          "PublishedDate": "2026-05-11T18:16:42.413Z",
          "LastModifiedDate": "2026-10-26T18:10:00.173Z"
        },
        {
          "VulnerabilityID": "CVE-2026-82049",
          "PkgID": "python3.13@3.13.5-2+deb13u5",
          "PkgName": "python3.13",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "c039d7d84076b819"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82049",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:916e6f6d14c93f5c453fb41b428aaf3f5de459e95a2957b89b3db98b16dbfcc8",
          "Title": "python: Python tarfile module: File modification and content disclosure via crafted archives",
          "Description": "In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "bitnami": 3,
            "redhat": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 8.4
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "V3Score": 7.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/14/27",
            "https://access.redhat.com/security/cve/CVE-2026-82049",
            "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913",
            "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771",
            "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca",
            "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3",
            "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d",
            "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8",
            "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e",
            "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c",
            "https://github.com/python/cpython/issues/157190",
            "https://github.com/python/cpython/pull/157191",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-82049",
            "https://www.cve.org/CVERecord?id=CVE-2026-82049"
          ],
          "PublishedDate": "2026-09-14T19:17:50.927Z",
          "LastModifiedDate": "2026-10-11T01:16:25.82Z"
        },
        {
          "VulnerabilityID": "CVE-2026-15308",
          "PkgID": "python3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "python3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "9f929573ac64edf"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15308",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ef7162b738a8510d1347c955ee901cca1a549d3626b06b7d5fa2f3e026376cbe",
          "Title": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations",
          "Description": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "bitnami": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.7
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/07/09/4",
            "https://access.redhat.com/errata/RHSA-2026:39798",
            "https://access.redhat.com/errata/RHSA-2026:41949",
            "https://access.redhat.com/security/cve/CVE-2026-15308",
            "https://bugzilla.redhat.com/2498608",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2498608",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15308",
            "https://errata.almalinux.org/9/ALSA-2026-41949.html",
            "https://errata.rockylinux.org/RLSA-2026:39798",
            "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9",
            "https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7",
            "https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14",
            "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced",
            "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606",
            "https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00",
            "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd",
            "https://github.com/python/cpython/issues/153030",
            "https://github.com/python/cpython/pull/153031",
            "https://linux.oracle.com/cve/CVE-2026-15308.html",
            "https://linux.oracle.com/errata/ELSA-2026-41949.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-15308",
            "https://ubuntu.com/security/notices/USN-8744-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-15308"
          ],
          "PublishedDate": "2026-07-09T17:16:58.26Z",
          "LastModifiedDate": "2026-10-25T17:10:00.197Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19445",
          "PkgID": "python3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "python3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "9f929573ac64edf"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19445",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:38a3b4ff14b17026bee8ddc7378b218cdbda2a0cf70df1abfc313efce949e081",
          "Title": "python: Use-after-free of a server-side SSLContext when sni_callback switches contexts",
          "Description": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-416"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 4,
            "bitnami": 4,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
              "V40Score": 9.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/30/17",
            "https://access.redhat.com/errata/RHSA-2026:89742",
            "https://access.redhat.com/security/cve/CVE-2026-19445",
            "https://bugzilla.redhat.com/2543492",
            "https://bugzilla.redhat.com/2544127",
            "https://bugzilla.redhat.com/2544138",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2543492",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544138",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12345",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19445",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19553",
            "https://errata.almalinux.org/9/ALSA-2026-89742.html",
            "https://errata.rockylinux.org/RLSA-2026:89742",
            "https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d",
            "https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b",
            "https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7",
            "https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8",
            "https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698",
            "https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c",
            "https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b",
            "https://github.com/python/cpython/issues/156293",
            "https://github.com/python/cpython/pull/158504",
            "https://linux.oracle.com/cve/CVE-2026-19445.html",
            "https://linux.oracle.com/errata/ELSA-2026-89742.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19445",
            "https://www.cve.org/CVERecord?id=CVE-2026-19445"
          ],
          "PublishedDate": "2026-09-30T17:16:45.72Z",
          "LastModifiedDate": "2026-10-03T01:17:24.93Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19553",
          "PkgID": "python3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "python3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "9f929573ac64edf"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19553",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c96fd104870aa22f224f06fa3802b4ecf5dc0f2946890deefc8897c0906b7e14",
          "Title": "python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()",
          "Description": "ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-297"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "bitnami": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 7.6
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 7.4
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/30/16",
            "https://access.redhat.com/errata/RHSA-2026:89742",
            "https://access.redhat.com/security/cve/CVE-2026-19553",
            "https://bugzilla.redhat.com/2543492",
            "https://bugzilla.redhat.com/2544127",
            "https://bugzilla.redhat.com/2544138",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2543492",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544127",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2544138",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12345",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19445",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19553",
            "https://errata.almalinux.org/9/ALSA-2026-89742.html",
            "https://errata.rockylinux.org/RLSA-2026:89742",
            "https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96",
            "https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf",
            "https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082",
            "https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed",
            "https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced",
            "https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80",
            "https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062",
            "https://github.com/python/cpython/issues/156793",
            "https://github.com/python/cpython/pull/158503",
            "https://linux.oracle.com/cve/CVE-2026-19553.html",
            "https://linux.oracle.com/errata/ELSA-2026-89742.html",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19553",
            "https://www.cve.org/CVERecord?id=CVE-2026-19553"
          ],
          "PublishedDate": "2026-09-30T17:16:45.88Z",
          "LastModifiedDate": "2026-10-16T19:17:06.673Z"
        },
        {
          "VulnerabilityID": "CVE-2026-7210",
          "PkgID": "python3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "python3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "9f929573ac64edf"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-7210",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d06a95d73b0484210f112d5c6742ea65fbe11bee6f84be3ca149e3f500ce6b6d",
          "Title": "python: Python/Expat: Denial of Service via crafted XML document",
          "Description": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-331"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "bitnami": 3,
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "bitnami": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/11/13",
            "http://www.openwall.com/lists/oss-security/2026/05/11/8",
            "https://access.redhat.com/security/cve/CVE-2026-7210",
            "https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4",
            "https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566",
            "https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56",
            "https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b",
            "https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286",
            "https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a",
            "https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f",
            "https://github.com/python/cpython/issues/149018",
            "https://github.com/python/cpython/pull/149023",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-7210",
            "https://www.cve.org/CVERecord?id=CVE-2026-7210"
          ],
          "PublishedDate": "2026-05-11T18:16:42.413Z",
          "LastModifiedDate": "2026-10-26T18:10:00.173Z"
        },
        {
          "VulnerabilityID": "CVE-2026-82049",
          "PkgID": "python3.13-minimal@3.13.5-2+deb13u5",
          "PkgName": "python3.13-minimal",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/python3.13-minimal@3.13.5-2%2Bdeb13u5?arch=amd64\u0026distro=debian-13.7",
            "UID": "9f929573ac64edf"
          },
          "InstalledVersion": "3.13.5-2+deb13u5",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82049",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:cd5faa2bfabff77887c12d050e5033455f5573aa056b2c899e90af45cc4bbc7c",
          "Title": "python: Python tarfile module: File modification and content disclosure via crafted archives",
          "Description": "In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "bitnami": 3,
            "redhat": 3
          },
          "CVSS": {
            "bitnami": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 8.4
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "V3Score": 7.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/14/27",
            "https://access.redhat.com/security/cve/CVE-2026-82049",
            "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913",
            "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771",
            "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca",
            "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3",
            "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d",
            "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8",
            "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e",
            "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c",
            "https://github.com/python/cpython/issues/157190",
            "https://github.com/python/cpython/pull/157191",
            "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-82049",
            "https://www.cve.org/CVERecord?id=CVE-2026-82049"
          ],
          "PublishedDate": "2026-09-14T19:17:50.927Z",
          "LastModifiedDate": "2026-10-11T01:16:25.82Z"
        },
        {
          "VulnerabilityID": "CVE-2026-119741",
          "PkgID": "rsync@3.5.0+ds1-0+deb13u1",
          "PkgName": "rsync",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/rsync@3.5.0%2Bds1-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "38d7e00f8d886b77"
          },
          "InstalledVersion": "3.5.0+ds1-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:11273558a16e5f5b426a4851f406e41d2583fb5c656e6bcee4d981417cb47663"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119741",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:b0a28e19dacded64cb74969e3fcaa004e406e9be298e3d7baa5e00106d8266ff",
          "Title": "rsync: rsync: Denial of Service via crafted checksums during delta transfer",
          "Description": "rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-407"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-119741",
            "https://github.com/RsyncProject/rsync",
            "https://github.com/RsyncProject/rsync/blob/a7404a9a633cff28ee1602f328b9c3fa69cdbd04/testsuite/hashsearch-collision-skip_test.py",
            "https://github.com/RsyncProject/rsync/commit/a7404a9a633cff28ee1602f328b9c3fa69cdbd04",
            "https://github.com/RsyncProject/rsync/pull/1132",
            "https://github.com/RsyncProject/rsync/releases/tag/v3.5.2",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-119741",
            "https://www.cve.org/CVERecord?id=CVE-2026-119741",
            "https://www.vulncheck.com/advisories/rsync-through-3.5.1-denial-of-service-via-hash-search-checksum-collisions"
          ],
          "PublishedDate": "2026-11-03T16:17:21.94Z",
          "LastModifiedDate": "2026-11-04T15:17:41.083Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "util-linux@2.41.5-0+deb13u1",
          "PkgName": "util-linux",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e4d9863928456765"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:56c6635422471ebd17faa5a2a3033bfcd7781fbf0b5730155dec3e34454cc8c8",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "util-linux@2.41.5-0+deb13u1",
          "PkgName": "util-linux",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e4d9863928456765"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f816e1660c20a9fc46f42734bf56bdc1ac781660910fa2ec912e4a233abc8926",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "util-linux@2.41.5-0+deb13u1",
          "PkgName": "util-linux",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e4d9863928456765"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3202ca9bd7ad680b3fc00187bebf93c4984bd960555a809869f8349b4fc706e6",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "util-linux@2.41.5-0+deb13u1",
          "PkgName": "util-linux",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "e4d9863928456765"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:2bdf59fd223e90d83772ade3710444c7c38b844635ef0a3468f79aa0d2888bd1",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76642",
          "PkgID": "uuid-dev@2.41.5-0+deb13u1",
          "PkgName": "uuid-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/uuid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "88cf012bdcc17d43"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:977b05b1b121ec510679611054841a805b19de294c1cc00fd85a955eca707117",
          "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks",
          "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-390"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 2,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-76642",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476",
            "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892",
            "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a",
            "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc",
            "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f",
            "https://linux.oracle.com/cve/CVE-2026-76642.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76642",
            "https://www.cve.org/CVERecord?id=CVE-2026-76642",
            "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper"
          ],
          "PublishedDate": "2026-09-03T13:06:08.44Z",
          "LastModifiedDate": "2026-09-24T20:28:01.78Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78408",
          "PkgID": "uuid-dev@2.41.5-0+deb13u1",
          "PkgName": "uuid-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/uuid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "88cf012bdcc17d43"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5a17b3c22e72fea58bfefc9314894adc7949daee75dd75901851eefa7d998139",
          "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority",
          "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-775"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "V3Score": 7.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/09/05/2",
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78408",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj",
            "https://linux.oracle.com/cve/CVE-2026-78408.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78408",
            "https://www.cve.org/CVERecord?id=CVE-2026-78408"
          ],
          "PublishedDate": "2026-09-02T16:17:23.687Z",
          "LastModifiedDate": "2026-11-05T03:17:32.977Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78409",
          "PkgID": "uuid-dev@2.41.5-0+deb13u1",
          "PkgName": "uuid-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/uuid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "88cf012bdcc17d43"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d1436723ca42077597a166b90e4cd4f0369b9f93880af6fe77e932411c2d3fd0",
          "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks",
          "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "redhat": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/security/cve/CVE-2026-78409",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522607",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78409",
            "https://www.cve.org/CVERecord?id=CVE-2026-78409"
          ],
          "PublishedDate": "2026-09-02T16:17:23.833Z",
          "LastModifiedDate": "2026-11-05T00:17:28.61Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "uuid-dev@2.41.5-0+deb13u1",
          "PkgName": "uuid-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/uuid-dev@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7",
            "UID": "88cf012bdcc17d43"
          },
          "InstalledVersion": "2.41.5-0+deb13u1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:4a7c0d16dce22b2c1b01bc64bce46c7cf72aceb085088d8c6dfffbeda6e4cb05",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76844",
          "VendorIDs": [
            "DSA-6613-1"
          ],
          "PkgID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1",
          "PkgName": "zlib1g",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "ec1c0574f56f96a0"
          },
          "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1",
          "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76844",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f946cbf8479435d079598dab41cedd6925c0525c658652bd500c47d881130a72",
          "Title": "webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal",
          "Description": "zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "azure": 2,
            "ghsa": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
              "V3Score": 7.4
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
              "V3Score": 8.6
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-76844",
            "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
            "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6",
            "https://github.com/madler/zlib",
            "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393",
            "https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148",
            "https://github.com/webpack/webpack-dev-middleware",
            "https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js",
            "https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b",
            "https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b",
            "https://github.com/webpack/webpack-dev-middleware/pull/2404",
            "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6",
            "https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0",
            "https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76844",
            "https://www.cve.org/CVERecord?id=CVE-2026-76844",
            "https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath",
            "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
          ],
          "PublishedDate": "2026-08-24T14:17:02.25Z",
          "LastModifiedDate": "2026-10-12T17:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2026-85091",
          "VendorIDs": [
            "DSA-6613-1"
          ],
          "PkgID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1",
          "PkgName": "zlib1g",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "ec1c0574f56f96a0"
          },
          "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1",
          "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:a70f6272827f64e1427d048ced77491aab5d64ab95725e56920802ff391197d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-85091",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:91f0d0f027ce3ce42733c151a219a761983a9fb4ee390dde0bc83c37902ef1c7",
          "Title": "zlib: zlib: Heap buffer overflow in gz_vacate() allows arbitrary code execution",
          "Description": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "azure": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-85091",
            "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
            "https://github.com/madler/zlib",
            "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-85091",
            "https://ubuntu.com/security/notices/USN-8954-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-85091",
            "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
          ],
          "PublishedDate": "2026-09-03T13:06:20.573Z",
          "LastModifiedDate": "2026-09-09T20:41:07.123Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76844",
          "VendorIDs": [
            "DSA-6613-1"
          ],
          "PkgID": "zlib1g-dev@1:1.3.dfsg+really1.3.1-1+b1",
          "PkgName": "zlib1g-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/zlib1g-dev@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "ed8c6cef2a443168"
          },
          "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1",
          "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76844",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c79bf5a3b2ea0ba28e2d932028f5726483fbd8da8a0c802fff90d4b85bf5f233",
          "Title": "webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal",
          "Description": "zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "azure": 2,
            "ghsa": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
              "V3Score": 7.4
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
              "V3Score": 8.6
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-76844",
            "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
            "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6",
            "https://github.com/madler/zlib",
            "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393",
            "https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148",
            "https://github.com/webpack/webpack-dev-middleware",
            "https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js",
            "https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b",
            "https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b",
            "https://github.com/webpack/webpack-dev-middleware/pull/2404",
            "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6",
            "https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0",
            "https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76844",
            "https://www.cve.org/CVERecord?id=CVE-2026-76844",
            "https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath",
            "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
          ],
          "PublishedDate": "2026-08-24T14:17:02.25Z",
          "LastModifiedDate": "2026-10-12T17:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2026-85091",
          "VendorIDs": [
            "DSA-6613-1"
          ],
          "PkgID": "zlib1g-dev@1:1.3.dfsg+really1.3.1-1+b1",
          "PkgName": "zlib1g-dev",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/zlib1g-dev@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1",
            "UID": "ed8c6cef2a443168"
          },
          "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1",
          "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:2c901d77d041851c6a4d7e1390cb754e4e70c199cdc6515cecf668bea773501d"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-85091",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:bf79bcaae7886106b874b5f4d8f5e5b9bb42ca4e0b02ac4a207baea7f7ac10ea",
          "Title": "zlib: zlib: Heap buffer overflow in gz_vacate() allows arbitrary code execution",
          "Description": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "azure": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-85091",
            "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
            "https://github.com/madler/zlib",
            "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-85091",
            "https://ubuntu.com/security/notices/USN-8954-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-85091",
            "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
          ],
          "PublishedDate": "2026-09-03T13:06:20.573Z",
          "LastModifiedDate": "2026-09-09T20:41:07.123Z"
        }
      ]
    },
    {
      "Target": "Node.js",
      "Class": "lang-pkgs",
      "Type": "node-pkg",
      "Packages": [
        {
          "ID": "activity@7.0.0-dev.0",
          "Name": "activity",
          "Identifier": {
            "PURL": "pkg:npm/activity@7.0.0-dev.0",
            "UID": "a7f5fa40f4e6ee4a"
          },
          "Version": "7.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/activity/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "files_downloadlimit@5.2.0-dev.0",
          "Name": "files_downloadlimit",
          "Identifier": {
            "PURL": "pkg:npm/files_downloadlimit@5.2.0-dev.0",
            "UID": "7d509cfadec634ff"
          },
          "Version": "5.2.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/files_downloadlimit/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "files_pdfviewer@7.0.0-dev.0",
          "Name": "files_pdfviewer",
          "Identifier": {
            "PURL": "pkg:npm/files_pdfviewer@7.0.0-dev.0",
            "UID": "b23fbe1049cbdd22"
          },
          "Version": "7.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/files_pdfviewer/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "firstrunwizard@7.0.0-dev.0",
          "Name": "firstrunwizard",
          "Identifier": {
            "PURL": "pkg:npm/firstrunwizard@7.0.0-dev.0",
            "UID": "196fc2634baf6e62"
          },
          "Version": "7.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/firstrunwizard/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "logreader@7.0.0-dev.0",
          "Name": "logreader",
          "Identifier": {
            "PURL": "pkg:npm/logreader@7.0.0-dev.0",
            "UID": "97decb2c9bcbe297"
          },
          "Version": "7.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/logreader/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "nextcloud@1.0.0",
          "Name": "nextcloud",
          "Identifier": {
            "PURL": "pkg:npm/nextcloud@1.0.0",
            "UID": "644e3608858e3c70"
          },
          "Version": "1.0.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "notifications@7.0.0-dev.0",
          "Name": "notifications",
          "Identifier": {
            "PURL": "pkg:npm/notifications@7.0.0-dev.0",
            "UID": "e1ef063f5e4b323e"
          },
          "Version": "7.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-only"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/notifications/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "office@1.0.0",
          "Name": "office",
          "Identifier": {
            "PURL": "pkg:npm/office@1.0.0",
            "UID": "3991bb60d2b8ab3d"
          },
          "Version": "1.0.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/office/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "password_policy@6.0.0-dev.0",
          "Name": "password_policy",
          "Identifier": {
            "PURL": "pkg:npm/password_policy@6.0.0-dev.0",
            "UID": "d4b33642e8db8eee"
          },
          "Version": "6.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/password_policy/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "photos@7.0.0",
          "Name": "photos",
          "Identifier": {
            "PURL": "pkg:npm/photos@7.0.0",
            "UID": "489a0283952b28f3"
          },
          "Version": "7.0.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/photos/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "privacy@6.0.0-dev.0",
          "Name": "privacy",
          "Identifier": {
            "PURL": "pkg:npm/privacy@6.0.0-dev.0",
            "UID": "a8698ac62ffed03"
          },
          "Version": "6.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/privacy/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "recommendations@7.0.0-dev.0",
          "Name": "recommendations",
          "Identifier": {
            "PURL": "pkg:npm/recommendations@7.0.0-dev.0",
            "UID": "323d84a4d1e50da2"
          },
          "Version": "7.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/recommendations/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "support@6.0.0-dev.0",
          "Name": "support",
          "Identifier": {
            "PURL": "pkg:npm/support@6.0.0-dev.0",
            "UID": "c3a4b3ad93a30b7c"
          },
          "Version": "6.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/support/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "text@8.0.0-dev.0",
          "Name": "text",
          "Identifier": {
            "PURL": "pkg:npm/text@8.0.0-dev.0",
            "UID": "b0642272f05a8e79"
          },
          "Version": "8.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/text/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "viewer@7.0.0-dev.0",
          "Name": "viewer",
          "Identifier": {
            "PURL": "pkg:npm/viewer@7.0.0-dev.0",
            "UID": "f95ee3da0838dea3"
          },
          "Version": "7.0.0-dev.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "FilePath": "usr/src/nextcloud/apps/viewer/package.json",
          "AnalyzedBy": "node-pkg"
        }
      ]
    },
    {
      "Target": "usr/src/nextcloud/3rdparty/composer/installed.json",
      "Class": "lang-pkgs",
      "Type": "composer-vendor",
      "Packages": [
        {
          "ID": "aws/aws-crt-php@v1.2.7",
          "Name": "aws/aws-crt-php",
          "Identifier": {
            "PURL": "pkg:composer/aws/aws-crt-php@v1.2.7",
            "UID": "99f5b2f1deb92c47"
          },
          "Version": "v1.2.7",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3,
              "EndLine": 59
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "aws/aws-sdk-php@3.398.3",
          "Name": "aws/aws-sdk-php",
          "Identifier": {
            "PURL": "pkg:composer/aws/aws-sdk-php@3.398.3",
            "UID": "3410b4dd3a56e949"
          },
          "Version": "3.398.3",
          "Licenses": [
            "Apache-2.0"
          ],
          "DependsOn": [
            "aws/aws-crt-php@v1.2.7",
            "guzzlehttp/guzzle@7.15.2",
            "guzzlehttp/promises@2.5.1",
            "guzzlehttp/psr7@2.13.0",
            "mtdowling/jmespath.php@2.9.1",
            "psr/http-message@2.0",
            "symfony/filesystem@v7.4.8"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 60,
              "EndLine": 159
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "bantu/ini-get-wrapper@v1.0.1",
          "Name": "bantu/ini-get-wrapper",
          "Identifier": {
            "PURL": "pkg:composer/bantu/ini-get-wrapper@v1.0.1",
            "UID": "975e983fc53c8d05"
          },
          "Version": "v1.0.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 160,
              "EndLine": 196
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "brick/math@0.12.1",
          "Name": "brick/math",
          "Identifier": {
            "PURL": "pkg:composer/brick/math@0.12.1",
            "UID": "919fce5418faae3a"
          },
          "Version": "0.12.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 197,
              "EndLine": 259
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "cweagans/composer-patches@1.7.3",
          "Name": "cweagans/composer-patches",
          "Identifier": {
            "PURL": "pkg:composer/cweagans/composer-patches@1.7.3",
            "UID": "a4e746b4815b0f6b"
          },
          "Version": "1.7.3",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 260,
              "EndLine": 310
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "deepdiver/zipstreamer@v3.0.1",
          "Name": "deepdiver/zipstreamer",
          "Identifier": {
            "PURL": "pkg:composer/deepdiver/zipstreamer@v3.0.1",
            "UID": "bd89bf1b67e357f0"
          },
          "Version": "v3.0.1",
          "Licenses": [
            "GPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 311,
              "EndLine": 394
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "deepdiver1975/tarstreamer@v2.1.0",
          "Name": "deepdiver1975/tarstreamer",
          "Identifier": {
            "PURL": "pkg:composer/deepdiver1975/tarstreamer@v2.1.0",
            "UID": "6a27e11aba6c1bb6"
          },
          "Version": "v2.1.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 395,
              "EndLine": 449
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "doctrine/dbal@3.10.4",
          "Name": "doctrine/dbal",
          "Identifier": {
            "PURL": "pkg:composer/doctrine/dbal@3.10.4",
            "UID": "ef03dd832a05028d"
          },
          "Version": "3.10.4",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "doctrine/deprecations@1.1.6",
            "doctrine/event-manager@2.0.1",
            "psr/cache@3.0.0",
            "psr/log@3.0.2"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 450,
              "EndLine": 566
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "doctrine/deprecations@1.1.6",
          "Name": "doctrine/deprecations",
          "Identifier": {
            "PURL": "pkg:composer/doctrine/deprecations@1.1.6",
            "UID": "e51b85517a7a9ef2"
          },
          "Version": "1.1.6",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 567,
              "EndLine": 617
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "doctrine/event-manager@2.0.1",
          "Name": "doctrine/event-manager",
          "Identifier": {
            "PURL": "pkg:composer/doctrine/event-manager@2.0.1",
            "UID": "e684647fc53e3963"
          },
          "Version": "2.0.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 618,
              "EndLine": 711
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "doctrine/lexer@3.0.1",
          "Name": "doctrine/lexer",
          "Identifier": {
            "PURL": "pkg:composer/doctrine/lexer@3.0.1",
            "UID": "d270ce591a0ac0ae"
          },
          "Version": "3.0.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 712,
              "EndLine": 791
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "egulias/email-validator@4.0.4",
          "Name": "egulias/email-validator",
          "Identifier": {
            "PURL": "pkg:composer/egulias/email-validator@4.0.4",
            "UID": "1f671e168f95bea6"
          },
          "Version": "4.0.4",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "doctrine/lexer@3.0.1",
            "symfony/polyfill-intl-idn@v1.38.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 792,
              "EndLine": 861
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "fusonic/opengraph@v3.0.0",
          "Name": "fusonic/opengraph",
          "Identifier": {
            "PURL": "pkg:composer/fusonic/opengraph@v3.0.0",
            "UID": "b44873ddca7a3bd2"
          },
          "Version": "v3.0.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/http-client@1.0.3",
            "psr/http-factory@1.1.0",
            "symfony/css-selector@v6.4.24",
            "symfony/dom-crawler@v7.4.12"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 862,
              "EndLine": 927
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "giggsey/libphonenumber-for-php-lite@9.0.9",
          "Name": "giggsey/libphonenumber-for-php-lite",
          "Identifier": {
            "PURL": "pkg:composer/giggsey/libphonenumber-for-php-lite@9.0.9",
            "UID": "4832c891439ec7e"
          },
          "Version": "9.0.9",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 928,
              "EndLine": 1008
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "guzzlehttp/guzzle@7.15.2",
          "Name": "guzzlehttp/guzzle",
          "Identifier": {
            "PURL": "pkg:composer/guzzlehttp/guzzle@7.15.2",
            "UID": "3050bcab88c6e612"
          },
          "Version": "7.15.2",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "guzzlehttp/promises@2.5.1",
            "guzzlehttp/psr7@2.13.0",
            "psr/http-client@1.0.3",
            "symfony/deprecation-contracts@v3.7.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1009,
              "EndLine": 1139
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "guzzlehttp/promises@2.5.1",
          "Name": "guzzlehttp/promises",
          "Identifier": {
            "PURL": "pkg:composer/guzzlehttp/promises@2.5.1",
            "UID": "147c809002b564f2"
          },
          "Version": "2.5.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.7.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1140,
              "EndLine": 1226
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "guzzlehttp/psr7@2.13.0",
          "Name": "guzzlehttp/psr7",
          "Identifier": {
            "PURL": "pkg:composer/guzzlehttp/psr7@2.13.0",
            "UID": "75fc873f2c5a01b8"
          },
          "Version": "2.13.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/http-factory@1.1.0",
            "psr/http-message@2.0",
            "ralouphie/getallheaders@3.0.3",
            "symfony/deprecation-contracts@v3.7.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1227,
              "EndLine": 1348
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "guzzlehttp/uri-template@v1.0.4",
          "Name": "guzzlehttp/uri-template",
          "Identifier": {
            "PURL": "pkg:composer/guzzlehttp/uri-template@v1.0.4",
            "UID": "b96593265fffa22d"
          },
          "Version": "v1.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1349,
              "EndLine": 1437
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "icewind/searchdav@v3.2.0",
          "Name": "icewind/searchdav",
          "Identifier": {
            "PURL": "pkg:composer/icewind/searchdav@v3.2.0",
            "UID": "720dfbf0e97c8464"
          },
          "Version": "v3.2.0",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "DependsOn": [
            "sabre/dav@4.7.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1438,
              "EndLine": 1488
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "icewind/smb@3.8.1",
          "Name": "icewind/smb",
          "Identifier": {
            "PURL": "pkg:composer/icewind/smb@3.8.1",
            "UID": "6d72444728fa7446"
          },
          "Version": "3.8.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "icewind/streams@v0.7.8"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1489,
              "EndLine": 1528
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "icewind/streams@v0.7.8",
          "Name": "icewind/streams",
          "Identifier": {
            "PURL": "pkg:composer/icewind/streams@v0.7.8",
            "UID": "5876eee5328a3667"
          },
          "Version": "v0.7.8",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1529,
              "EndLine": 1576
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "justinrainbow/json-schema@6.6.4",
          "Name": "justinrainbow/json-schema",
          "Identifier": {
            "PURL": "pkg:composer/justinrainbow/json-schema@6.6.4",
            "UID": "548b5b71eb1c144"
          },
          "Version": "6.6.4",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "marc-mabe/php-enum@v4.7.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1577,
              "EndLine": 1654
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "kornrunner/blurhash@v1.2.2",
          "Name": "kornrunner/blurhash",
          "Identifier": {
            "PURL": "pkg:composer/kornrunner/blurhash@v1.2.2",
            "UID": "cab6dd664721d6b3"
          },
          "Version": "v1.2.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1655,
              "EndLine": 1705
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "laravel/serializable-closure@v2.0.4",
          "Name": "laravel/serializable-closure",
          "Identifier": {
            "PURL": "pkg:composer/laravel/serializable-closure@v2.0.4",
            "UID": "532db6567a4eaf62"
          },
          "Version": "v2.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1706,
              "EndLine": 1769
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "lcobucci/clock@3.0.0",
          "Name": "lcobucci/clock",
          "Identifier": {
            "PURL": "pkg:composer/lcobucci/clock@3.0.0",
            "UID": "de0e0650d21cc35d"
          },
          "Version": "3.0.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/clock@1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1770,
              "EndLine": 1836
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "marc-mabe/php-enum@v4.7.1",
          "Name": "marc-mabe/php-enum",
          "Identifier": {
            "PURL": "pkg:composer/marc-mabe/php-enum@v4.7.1",
            "UID": "8939418934763312"
          },
          "Version": "v4.7.1",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1837,
              "EndLine": 1912
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "masterminds/html5@2.10.1",
          "Name": "masterminds/html5",
          "Identifier": {
            "PURL": "pkg:composer/masterminds/html5@2.10.1",
            "UID": "8474d77f8bcf5969"
          },
          "Version": "2.10.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1913,
              "EndLine": 1982
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "mexitek/phpcolors@v1.0.4",
          "Name": "mexitek/phpcolors",
          "Identifier": {
            "PURL": "pkg:composer/mexitek/phpcolors@v1.0.4",
            "UID": "db08ac1e4a6aee4d"
          },
          "Version": "v1.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1983,
              "EndLine": 2038
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "microsoft/azure-storage-blob@1.5.4",
          "Name": "microsoft/azure-storage-blob",
          "Identifier": {
            "PURL": "pkg:composer/microsoft/azure-storage-blob@1.5.4",
            "UID": "774ece1695d51762"
          },
          "Version": "1.5.4",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "microsoft/azure-storage-common@1.5.2"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2039,
              "EndLine": 2089
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "microsoft/azure-storage-common@1.5.2",
          "Name": "microsoft/azure-storage-common",
          "Identifier": {
            "PURL": "pkg:composer/microsoft/azure-storage-common@1.5.2",
            "UID": "3bb546c922359e75"
          },
          "Version": "1.5.2",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "guzzlehttp/guzzle@7.15.2"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2090,
              "EndLine": 2140
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "mlocati/ip-lib@1.22.0",
          "Name": "mlocati/ip-lib",
          "Identifier": {
            "PURL": "pkg:composer/mlocati/ip-lib@1.22.0",
            "UID": "7870a71a0ea080df"
          },
          "Version": "1.22.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2141,
              "EndLine": 2214
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "mtdowling/jmespath.php@2.9.1",
          "Name": "mtdowling/jmespath.php",
          "Identifier": {
            "PURL": "pkg:composer/mtdowling/jmespath.php@2.9.1",
            "UID": "f124a1259328ae33"
          },
          "Version": "2.9.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2215,
              "EndLine": 2283
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "nextcloud/lognormalizer@v3.0.1",
          "Name": "nextcloud/lognormalizer",
          "Identifier": {
            "PURL": "pkg:composer/nextcloud/lognormalizer@v3.0.1",
            "UID": "84a87e46bd408c18"
          },
          "Version": "v3.0.1",
          "Licenses": [
            "AGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2284,
              "EndLine": 2349
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "paragonie/constant_time_encoding@v2.6.3",
          "Name": "paragonie/constant_time_encoding",
          "Identifier": {
            "PURL": "pkg:composer/paragonie/constant_time_encoding@v2.6.3",
            "UID": "825387642615ab31"
          },
          "Version": "v2.6.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2350,
              "EndLine": 2419
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "pear/archive_tar@1.5.0",
          "Name": "pear/archive_tar",
          "Identifier": {
            "PURL": "pkg:composer/pear/archive_tar@1.5.0",
            "UID": "6bfe3bca60572ad"
          },
          "Version": "1.5.0",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "DependsOn": [
            "pear/pear-core-minimal@v1.10.16"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2420,
              "EndLine": 2492
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "pear/console_getopt@v1.4.3",
          "Name": "pear/console_getopt",
          "Identifier": {
            "PURL": "pkg:composer/pear/console_getopt@v1.4.3",
            "UID": "ff3230baca3e814c"
          },
          "Version": "v1.4.3",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2493,
              "EndLine": 2546
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "pear/pear-core-minimal@v1.10.16",
          "Name": "pear/pear-core-minimal",
          "Identifier": {
            "PURL": "pkg:composer/pear/pear-core-minimal@v1.10.16",
            "UID": "82cf000748cfe459"
          },
          "Version": "v1.10.16",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "DependsOn": [
            "pear/console_getopt@v1.4.3",
            "pear/pear_exception@v1.0.2"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2547,
              "EndLine": 2598
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "pear/pear_exception@v1.0.2",
          "Name": "pear/pear_exception",
          "Identifier": {
            "PURL": "pkg:composer/pear/pear_exception@v1.0.2",
            "UID": "ee102c99b2601cd1"
          },
          "Version": "v1.0.2",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2599,
              "EndLine": 2660
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "php-http/guzzle7-adapter@1.1.0",
          "Name": "php-http/guzzle7-adapter",
          "Identifier": {
            "PURL": "pkg:composer/php-http/guzzle7-adapter@1.1.0",
            "UID": "b37f49338b5f6859"
          },
          "Version": "1.1.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "guzzlehttp/guzzle@7.15.2",
            "php-http/httplug@2.4.1",
            "psr/http-client@1.0.3"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2661,
              "EndLine": 2722
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "php-http/httplug@2.4.1",
          "Name": "php-http/httplug",
          "Identifier": {
            "PURL": "pkg:composer/php-http/httplug@2.4.1",
            "UID": "6a642cd739dcebef"
          },
          "Version": "2.4.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "php-http/promise@1.3.1",
            "psr/http-client@1.0.3",
            "psr/http-message@2.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2723,
              "EndLine": 2782
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "php-http/promise@1.3.1",
          "Name": "php-http/promise",
          "Identifier": {
            "PURL": "pkg:composer/php-http/promise@1.3.1",
            "UID": "ef9d5e322abadd5d"
          },
          "Version": "1.3.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2783,
              "EndLine": 2837
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "php-opencloud/openstack@v3.14.0",
          "Name": "php-opencloud/openstack",
          "Identifier": {
            "PURL": "pkg:composer/php-opencloud/openstack@v3.14.0",
            "UID": "4d43e53f03cf8b42"
          },
          "Version": "v3.14.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "DependsOn": [
            "guzzlehttp/guzzle@7.15.2",
            "guzzlehttp/psr7@2.13.0",
            "guzzlehttp/uri-template@v1.0.4",
            "justinrainbow/json-schema@6.6.4"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2838,
              "EndLine": 2917
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "phpseclib/phpseclib@2.0.55",
          "Name": "phpseclib/phpseclib",
          "Identifier": {
            "PURL": "pkg:composer/phpseclib/phpseclib@2.0.55",
            "UID": "12349e2f2292fb75"
          },
          "Version": "2.0.55",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 2918,
              "EndLine": 3030
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "pimple/pimple@v3.6.0",
          "Name": "pimple/pimple",
          "Identifier": {
            "PURL": "pkg:composer/pimple/pimple@v3.6.0",
            "UID": "5dcfa33869760bb2"
          },
          "Version": "v3.6.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/container@2.0.2"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3031,
              "EndLine": 3086
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "predis/predis@v3.5.1",
          "Name": "predis/predis",
          "Identifier": {
            "PURL": "pkg:composer/predis/predis@v3.5.1",
            "UID": "7f477da68c2e31ca"
          },
          "Version": "v3.5.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/http-message@2.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3087,
              "EndLine": 3152
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/cache@3.0.0",
          "Name": "psr/cache",
          "Identifier": {
            "PURL": "pkg:composer/psr/cache@3.0.0",
            "UID": "829ebaf32ee6f82b"
          },
          "Version": "3.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3153,
              "EndLine": 3204
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/clock@1.0.0",
          "Name": "psr/clock",
          "Identifier": {
            "PURL": "pkg:composer/psr/clock@1.0.0",
            "UID": "b6c657bac7c6741d"
          },
          "Version": "1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3205,
              "EndLine": 3255
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/container@2.0.2",
          "Name": "psr/container",
          "Identifier": {
            "PURL": "pkg:composer/psr/container@2.0.2",
            "UID": "2dd399d8a83b2cb8"
          },
          "Version": "2.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3256,
              "EndLine": 3311
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/event-dispatcher@1.0.0",
          "Name": "psr/event-dispatcher",
          "Identifier": {
            "PURL": "pkg:composer/psr/event-dispatcher@1.0.0",
            "UID": "147b4b629b0929a7"
          },
          "Version": "1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3312,
              "EndLine": 3364
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/http-client@1.0.3",
          "Name": "psr/http-client",
          "Identifier": {
            "PURL": "pkg:composer/psr/http-client@1.0.3",
            "UID": "1011e210322d9e70"
          },
          "Version": "1.0.3",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/http-message@2.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3365,
              "EndLine": 3419
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/http-factory@1.1.0",
          "Name": "psr/http-factory",
          "Identifier": {
            "PURL": "pkg:composer/psr/http-factory@1.1.0",
            "UID": "4f0b6dafc6ed3c8d"
          },
          "Version": "1.1.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/http-message@2.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3420,
              "EndLine": 3477
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/http-message@2.0",
          "Name": "psr/http-message",
          "Identifier": {
            "PURL": "pkg:composer/psr/http-message@2.0",
            "UID": "c96f3e3d0d85af41"
          },
          "Version": "2.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3478,
              "EndLine": 3533
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/log@3.0.2",
          "Name": "psr/log",
          "Identifier": {
            "PURL": "pkg:composer/psr/log@3.0.2",
            "UID": "eaf004de0f69599"
          },
          "Version": "3.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3534,
              "EndLine": 3586
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "punic/punic@3.8.1",
          "Name": "punic/punic",
          "Identifier": {
            "PURL": "pkg:composer/punic/punic@3.8.1",
            "UID": "53bc6560052c00d0"
          },
          "Version": "3.8.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3587,
              "EndLine": 3676
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "ralouphie/getallheaders@3.0.3",
          "Name": "ralouphie/getallheaders",
          "Identifier": {
            "PURL": "pkg:composer/ralouphie/getallheaders@3.0.3",
            "UID": "5a2d25e650e57d3a"
          },
          "Version": "3.0.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3677,
              "EndLine": 3723
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "sabre/dav@4.7.0",
          "Name": "sabre/dav",
          "Identifier": {
            "PURL": "pkg:composer/sabre/dav@4.7.0",
            "UID": "af90e84f3ad95c95"
          },
          "Version": "4.7.0",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "DependsOn": [
            "psr/log@3.0.2",
            "sabre/event@5.1.7",
            "sabre/http@5.1.12",
            "sabre/uri@2.3.4",
            "sabre/vobject@4.5.6",
            "sabre/xml@2.2.11"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3724,
              "EndLine": 3814
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "sabre/event@5.1.7",
          "Name": "sabre/event",
          "Identifier": {
            "PURL": "pkg:composer/sabre/event@5.1.7",
            "UID": "4f05c711a212a23e"
          },
          "Version": "5.1.7",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3815,
              "EndLine": 3883
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "sabre/http@5.1.12",
          "Name": "sabre/http",
          "Identifier": {
            "PURL": "pkg:composer/sabre/http@5.1.12",
            "UID": "a88e35118848acaa"
          },
          "Version": "5.1.12",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "DependsOn": [
            "sabre/event@5.1.7",
            "sabre/uri@2.3.4"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3884,
              "EndLine": 3949
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "sabre/uri@2.3.4",
          "Name": "sabre/uri",
          "Identifier": {
            "PURL": "pkg:composer/sabre/uri@2.3.4",
            "UID": "2f15ecb99956f82b"
          },
          "Version": "2.3.4",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3950,
              "EndLine": 4012
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "sabre/vobject@4.5.6",
          "Name": "sabre/vobject",
          "Identifier": {
            "PURL": "pkg:composer/sabre/vobject@4.5.6",
            "UID": "fe5a1b8bb0ba1881"
          },
          "Version": "4.5.6",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "DependsOn": [
            "sabre/xml@2.2.11"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4013,
              "EndLine": 4123
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "sabre/xml@2.2.11",
          "Name": "sabre/xml",
          "Identifier": {
            "PURL": "pkg:composer/sabre/xml@2.2.11",
            "UID": "3815a381b29d8842"
          },
          "Version": "2.2.11",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "DependsOn": [
            "sabre/uri@2.3.4"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4124,
              "EndLine": 4200
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "spomky-labs/cbor-php@3.0.4",
          "Name": "spomky-labs/cbor-php",
          "Identifier": {
            "PURL": "pkg:composer/spomky-labs/cbor-php@3.0.4",
            "UID": "1dfb0e5da41076fd"
          },
          "Version": "3.0.4",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "brick/math@0.12.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4201,
              "EndLine": 4286
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "spomky-labs/pki-framework@1.2.1",
          "Name": "spomky-labs/pki-framework",
          "Identifier": {
            "PURL": "pkg:composer/spomky-labs/pki-framework@1.2.1",
            "UID": "ab7d3a87c7507e64"
          },
          "Version": "1.2.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "brick/math@0.12.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4287,
              "EndLine": 4400
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "stecman/symfony-console-completion@v0.14.0",
          "Name": "stecman/symfony-console-completion",
          "Identifier": {
            "PURL": "pkg:composer/stecman/symfony-console-completion@v0.14.0",
            "UID": "6bb78ec1da823075"
          },
          "Version": "v0.14.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/console@v6.4.41"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4401,
              "EndLine": 4453
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/console@v6.4.41",
          "Name": "symfony/console",
          "Identifier": {
            "PURL": "pkg:composer/symfony/console@v6.4.41",
            "UID": "de7de215c2088249"
          },
          "Version": "v6.4.41",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.7.1",
            "symfony/service-contracts@v3.7.0",
            "symfony/string@v7.4.13"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4454,
              "EndLine": 4554
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/css-selector@v6.4.24",
          "Name": "symfony/css-selector",
          "Identifier": {
            "PURL": "pkg:composer/symfony/css-selector@v6.4.24",
            "UID": "2290352408709d19"
          },
          "Version": "v6.4.24",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4555,
              "EndLine": 4626
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/deprecation-contracts@v3.7.1",
          "Name": "symfony/deprecation-contracts",
          "Identifier": {
            "PURL": "pkg:composer/symfony/deprecation-contracts@v3.7.1",
            "UID": "77f5776f97a2a7a"
          },
          "Version": "v3.7.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4627,
              "EndLine": 4700
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/dom-crawler@v7.4.12",
          "Name": "symfony/dom-crawler",
          "Identifier": {
            "PURL": "pkg:composer/symfony/dom-crawler@v7.4.12",
            "UID": "e5bc278c852a6278"
          },
          "Version": "v7.4.12",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "masterminds/html5@2.10.1",
            "symfony/deprecation-contracts@v3.7.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4701,
              "EndLine": 4775
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/event-dispatcher@v6.4.37",
          "Name": "symfony/event-dispatcher",
          "Identifier": {
            "PURL": "pkg:composer/symfony/event-dispatcher@v6.4.37",
            "UID": "80eba194ca1324e0"
          },
          "Version": "v6.4.37",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/event-dispatcher-contracts@v3.7.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4776,
              "EndLine": 4862
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/event-dispatcher-contracts@v3.7.0",
          "Name": "symfony/event-dispatcher-contracts",
          "Identifier": {
            "PURL": "pkg:composer/symfony/event-dispatcher-contracts@v3.7.0",
            "UID": "8f617d99d5063167"
          },
          "Version": "v3.7.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/event-dispatcher@1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4863,
              "EndLine": 4945
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/filesystem@v7.4.8",
          "Name": "symfony/filesystem",
          "Identifier": {
            "PURL": "pkg:composer/symfony/filesystem@v7.4.8",
            "UID": "6c728451b9a4b68a"
          },
          "Version": "v7.4.8",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 4946,
              "EndLine": 5018
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/http-foundation@v6.4.42",
          "Name": "symfony/http-foundation",
          "Identifier": {
            "PURL": "pkg:composer/symfony/http-foundation@v6.4.42",
            "UID": "dc50f2f76fdc49f3"
          },
          "Version": "v6.4.42",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.7.1",
            "symfony/polyfill-php83@v1.38.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5019,
              "EndLine": 5102
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/mailer@v6.4.40",
          "Name": "symfony/mailer",
          "Identifier": {
            "PURL": "pkg:composer/symfony/mailer@v6.4.40",
            "UID": "f7b8396447a739bb"
          },
          "Version": "v6.4.40",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "egulias/email-validator@4.0.4",
            "psr/event-dispatcher@1.0.0",
            "psr/log@3.0.2",
            "symfony/event-dispatcher@v6.4.37",
            "symfony/mime@v7.4.13",
            "symfony/service-contracts@v3.7.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5103,
              "EndLine": 5189
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/mime@v7.4.13",
          "Name": "symfony/mime",
          "Identifier": {
            "PURL": "pkg:composer/symfony/mime@v7.4.13",
            "UID": "90da03b7e800140d"
          },
          "Version": "v7.4.13",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.7.1",
            "symfony/polyfill-intl-idn@v1.38.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5190,
              "EndLine": 5281
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-intl-grapheme@v1.38.1",
          "Name": "symfony/polyfill-intl-grapheme",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-intl-grapheme@v1.38.1",
            "UID": "737482f3360208a0"
          },
          "Version": "v1.38.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5282,
              "EndLine": 5366
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-intl-idn@v1.38.1",
          "Name": "symfony/polyfill-intl-idn",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-intl-idn@v1.38.1",
            "UID": "100b4bc3c74cf9bb"
          },
          "Version": "v1.38.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/polyfill-intl-normalizer@v1.38.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5367,
              "EndLine": 5456
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-intl-normalizer@v1.38.0",
          "Name": "symfony/polyfill-intl-normalizer",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-intl-normalizer@v1.38.0",
            "UID": "b7f031725c88c175"
          },
          "Version": "v1.38.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5457,
              "EndLine": 5544
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php83@v1.38.1",
          "Name": "symfony/polyfill-php83",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php83@v1.38.1",
            "UID": "7ebe9806f855211f"
          },
          "Version": "v1.38.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5545,
              "EndLine": 5627
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php84@v1.33.0",
          "Name": "symfony/polyfill-php84",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php84@v1.33.0",
            "UID": "323d77eee542f310"
          },
          "Version": "v1.33.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5628,
              "EndLine": 5710
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php85@v1.33.0",
          "Name": "symfony/polyfill-php85",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php85@v1.33.0",
            "UID": "3961510f6ba6ba7f"
          },
          "Version": "v1.33.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5711,
              "EndLine": 5793
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-uuid@v1.29.0",
          "Name": "symfony/polyfill-uuid",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-uuid@v1.29.0",
            "UID": "157f247bf9cf1acd"
          },
          "Version": "v1.29.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5794,
              "EndLine": 5875
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/process@v6.4.41",
          "Name": "symfony/process",
          "Identifier": {
            "PURL": "pkg:composer/symfony/process@v6.4.41",
            "UID": "33d15225f425a6fc"
          },
          "Version": "v6.4.41",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5876,
              "EndLine": 5943
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/routing@v6.4.41",
          "Name": "symfony/routing",
          "Identifier": {
            "PURL": "pkg:composer/symfony/routing@v6.4.41",
            "UID": "846525649a1b9b80"
          },
          "Version": "v6.4.41",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.7.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 5944,
              "EndLine": 6033
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/service-contracts@v3.7.0",
          "Name": "symfony/service-contracts",
          "Identifier": {
            "PURL": "pkg:composer/symfony/service-contracts@v3.7.0",
            "UID": "1b37cc686a3b6cd8"
          },
          "Version": "v3.7.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/container@2.0.2",
            "symfony/deprecation-contracts@v3.7.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 6034,
              "EndLine": 6123
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/string@v7.4.13",
          "Name": "symfony/string",
          "Identifier": {
            "PURL": "pkg:composer/symfony/string@v7.4.13",
            "UID": "d00bf34b7623a3b8"
          },
          "Version": "v7.4.13",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.7.1",
            "symfony/polyfill-intl-grapheme@v1.38.1",
            "symfony/polyfill-intl-normalizer@v1.38.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 6124,
              "EndLine": 6217
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/translation@v6.4.38",
          "Name": "symfony/translation",
          "Identifier": {
            "PURL": "pkg:composer/symfony/translation@v6.4.38",
            "UID": "4c2569c6c4edf857"
          },
          "Version": "v6.4.38",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.7.1",
            "symfony/translation-contracts@v3.7.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 6218,
              "EndLine": 6319
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/translation-contracts@v3.7.0",
          "Name": "symfony/translation-contracts",
          "Identifier": {
            "PURL": "pkg:composer/symfony/translation-contracts@v3.7.0",
            "UID": "def1e6a6b31e0eef"
          },
          "Version": "v3.7.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 6320,
              "EndLine": 6404
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/uid@v6.4.32",
          "Name": "symfony/uid",
          "Identifier": {
            "PURL": "pkg:composer/symfony/uid@v6.4.32",
            "UID": "d95eb389cacab081"
          },
          "Version": "v6.4.32",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/polyfill-uuid@v1.29.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 6405,
              "EndLine": 6485
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "wapmorgan/mp3info@0.1.1",
          "Name": "wapmorgan/mp3info",
          "Identifier": {
            "PURL": "pkg:composer/wapmorgan/mp3info@0.1.1",
            "UID": "bcfbce467ec18fb3"
          },
          "Version": "0.1.1",
          "Licenses": [
            "LGPL-3.0-only"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 6486,
              "EndLine": 6540
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "web-auth/cose-lib@4.3.0",
          "Name": "web-auth/cose-lib",
          "Identifier": {
            "PURL": "pkg:composer/web-auth/cose-lib@4.3.0",
            "UID": "3f2674095877ff67"
          },
          "Version": "4.3.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "brick/math@0.12.1",
            "spomky-labs/pki-framework@1.2.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 6541,
              "EndLine": 6626
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "web-auth/webauthn-lib@4.9.1",
          "Name": "web-auth/webauthn-lib",
          "Identifier": {
            "PURL": "pkg:composer/web-auth/webauthn-lib@4.9.1",
            "UID": "8392fa7231c1f058"
          },
          "Version": "4.9.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "lcobucci/clock@3.0.0",
            "paragonie/constant_time_encoding@v2.6.3",
            "psr/clock@1.0.0",
            "psr/event-dispatcher@1.0.0",
            "psr/http-client@1.0.3",
            "psr/http-factory@1.1.0",
            "psr/log@3.0.2",
            "spomky-labs/cbor-php@3.0.4",
            "spomky-labs/pki-framework@1.2.1",
            "symfony/deprecation-contracts@v3.7.1",
            "symfony/uid@v6.4.32",
            "web-auth/cose-lib@4.3.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 6627,
              "EndLine": 6719
            }
          ],
          "AnalyzedBy": "composer-vendor"
        }
      ],
      "Vulnerabilities": [
        {
          "VulnerabilityID": "CVE-2026-108082",
          "PkgID": "symfony/http-foundation@v6.4.42",
          "PkgName": "symfony/http-foundation",
          "PkgIdentifier": {
            "PURL": "pkg:composer/symfony/http-foundation@v6.4.42",
            "UID": "dc50f2f76fdc49f3"
          },
          "InstalledVersion": "v6.4.42",
          "FixedVersion": "8.1.7, 6.1.0, 6.2.0, 7.1.0, 7.2.0, 7.3.0, 8.1.0, 5.4.54, 6.3.0, 6.4.0, 6.4.46, 7.4.0, 7.4.19",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-108082",
          "DataSource": {
            "ID": "php-security-advisories",
            "Name": "PHP Security Advisories Database",
            "URL": "https://github.com/FriendsOfPHP/security-advisories"
          },
          "Fingerprint": "sha256:701fbd6cc504061484b69e75aa0aef2cf1ae7b61c012d34dc03f02db3d4b3025",
          "Title": "symfony/http-foundation: symfony/http-foundation: Denial of Service via crafted HTTP headers",
          "Description": "Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed header values with a pattern whose token alternative also matched whitespace, followed by a (?\u003c!\\s) lookbehind. A run of whitespace placed before a separator could be divided among the iterations of the enclosing repetition in exponentially many ways, and the engine tried all of them before settling. HeaderBag calls it for the Cache-Control header whenever a Request is built, so any application handling HTTP requests is reachable, with no authentication.\n\n\n\nA single request carrying such a header costs close to a second of CPU (813 ms for a run of 17 spaces in an 8 KB header on PHP 8.5, doubling with each extra space). From 18 spaces on, preg_match_all() gives up at pcre.backtrack_limit and split() returns an empty array, so every directive of the header is silently dropped.\n\n\n\nThis issue affects symfony/http-foundation v4.1.0-BETA1 through v5.4.53, v6.0.0-BETA1 through v6.4.45, v7.0.0-BETA1 through v7.4.18, and v8.0.0-BETA1 through v8.1.6.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-1333"
          ],
          "VendorSeverity": {
            "ghsa": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.7
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-108082",
            "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2026-108082.yaml",
            "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-108082.yaml",
            "https://github.com/symfony/symfony",
            "https://github.com/symfony/symfony/commit/343a1772ce6ac03e48b228d2d7168d19750e3f36",
            "https://github.com/symfony/symfony/commit/9ffa802e5d7e9fb8ba95eeefd27e863e83b1baca",
            "https://github.com/symfony/symfony/pull/66048",
            "https://github.com/symfony/symfony/pull/66491",
            "https://github.com/symfony/symfony/releases/tag/v5.4.54",
            "https://github.com/symfony/symfony/releases/tag/v6.4.48",
            "https://github.com/symfony/symfony/releases/tag/v7.4.21",
            "https://github.com/symfony/symfony/releases/tag/v8.1.9",
            "https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-108082",
            "https://symfony.com/blog/cve-2026-108082-redos-in-headerutils-split-reachable-through-the-cache-control-request-header",
            "https://symfony.com/cve-2026-108082",
            "https://www.cve.org/CVERecord?id=CVE-2026-108082"
          ],
          "PublishedDate": "2026-10-15T15:17:22.583Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        }
      ]
    },
    {
      "Target": "usr/src/nextcloud/apps/notifications/vendor/composer/installed.json",
      "Class": "lang-pkgs",
      "Type": "composer-vendor",
      "Packages": [
        {
          "ID": "bamarni/composer-bin-plugin@1.9.1",
          "Name": "bamarni/composer-bin-plugin",
          "Identifier": {
            "PURL": "pkg:composer/bamarni/composer-bin-plugin@1.9.1",
            "UID": "d188944ca69a7832"
          },
          "Version": "1.9.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3,
              "EndLine": 62
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "brick/math@0.14.8",
          "Name": "brick/math",
          "Identifier": {
            "PURL": "pkg:composer/brick/math@0.14.8",
            "UID": "b48449c5d0cf614"
          },
          "Version": "0.14.8",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 63,
              "EndLine": 125
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "guzzlehttp/guzzle@7.15.2",
          "Name": "guzzlehttp/guzzle",
          "Identifier": {
            "PURL": "pkg:composer/guzzlehttp/guzzle@7.15.2",
            "UID": "8fca9f13c149a7b8"
          },
          "Version": "7.15.2",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "guzzlehttp/promises@2.5.1",
            "guzzlehttp/psr7@2.13.0",
            "psr/http-client@1.0.3",
            "symfony/deprecation-contracts@v3.7.1",
            "symfony/polyfill-php80@v1.37.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 126,
              "EndLine": 256
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "guzzlehttp/promises@2.5.1",
          "Name": "guzzlehttp/promises",
          "Identifier": {
            "PURL": "pkg:composer/guzzlehttp/promises@2.5.1",
            "UID": "1a8f066d81d7b67a"
          },
          "Version": "2.5.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.7.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 257,
              "EndLine": 343
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "guzzlehttp/psr7@2.13.0",
          "Name": "guzzlehttp/psr7",
          "Identifier": {
            "PURL": "pkg:composer/guzzlehttp/psr7@2.13.0",
            "UID": "152bad83a1314543"
          },
          "Version": "2.13.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/http-factory@1.1.0",
            "psr/http-message@2.0",
            "ralouphie/getallheaders@3.0.3",
            "symfony/deprecation-contracts@v3.7.1",
            "symfony/polyfill-php80@v1.37.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 344,
              "EndLine": 465
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "minishlink/web-push@v10.0.3",
          "Name": "minishlink/web-push",
          "Identifier": {
            "PURL": "pkg:composer/minishlink/web-push@v10.0.3",
            "UID": "ef08706eccfa3494"
          },
          "Version": "v10.0.3",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "guzzlehttp/guzzle@7.15.2",
            "spomky-labs/base64url@v2.0.4",
            "symfony/polyfill-php83@v1.33.0",
            "web-token/jwt-library@4.1.7"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 466,
              "EndLine": 538
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/clock@1.0.0",
          "Name": "psr/clock",
          "Identifier": {
            "PURL": "pkg:composer/psr/clock@1.0.0",
            "UID": "edaf692e039f4b"
          },
          "Version": "1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 539,
              "EndLine": 589
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/http-client@1.0.3",
          "Name": "psr/http-client",
          "Identifier": {
            "PURL": "pkg:composer/psr/http-client@1.0.3",
            "UID": "a530f9ea56ec6f60"
          },
          "Version": "1.0.3",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/http-message@2.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 590,
              "EndLine": 644
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/http-factory@1.1.0",
          "Name": "psr/http-factory",
          "Identifier": {
            "PURL": "pkg:composer/psr/http-factory@1.1.0",
            "UID": "ccb2d6ed3b842556"
          },
          "Version": "1.1.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "psr/http-message@2.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 645,
              "EndLine": 702
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/http-message@2.0",
          "Name": "psr/http-message",
          "Identifier": {
            "PURL": "pkg:composer/psr/http-message@2.0",
            "UID": "e5710105874cb19"
          },
          "Version": "2.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 703,
              "EndLine": 758
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "ralouphie/getallheaders@3.0.3",
          "Name": "ralouphie/getallheaders",
          "Identifier": {
            "PURL": "pkg:composer/ralouphie/getallheaders@3.0.3",
            "UID": "1667d487c2c32d05"
          },
          "Version": "3.0.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 759,
              "EndLine": 805
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "spomky-labs/base64url@v2.0.4",
          "Name": "spomky-labs/base64url",
          "Identifier": {
            "PURL": "pkg:composer/spomky-labs/base64url@v2.0.4",
            "UID": "4674066dfb1364ea"
          },
          "Version": "v2.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 806,
              "EndLine": 873
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "spomky-labs/pki-framework@1.4.1",
          "Name": "spomky-labs/pki-framework",
          "Identifier": {
            "PURL": "pkg:composer/spomky-labs/pki-framework@1.4.1",
            "UID": "3e91d2da140ac27a"
          },
          "Version": "1.4.1",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "brick/math@0.14.8"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 874,
              "EndLine": 985
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/deprecation-contracts@v3.7.1",
          "Name": "symfony/deprecation-contracts",
          "Identifier": {
            "PURL": "pkg:composer/symfony/deprecation-contracts@v3.7.1",
            "UID": "515f66f4df5f89a5"
          },
          "Version": "v3.7.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 986,
              "EndLine": 1059
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php80@v1.37.0",
          "Name": "symfony/polyfill-php80",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php80@v1.37.0",
            "UID": "c6fdb001285671fa"
          },
          "Version": "v1.37.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1060,
              "EndLine": 1146
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php83@v1.33.0",
          "Name": "symfony/polyfill-php83",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php83@v1.33.0",
            "UID": "6bd8fb5e3af15cd4"
          },
          "Version": "v1.33.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1147,
              "EndLine": 1229
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "web-token/jwt-library@4.1.7",
          "Name": "web-token/jwt-library",
          "Identifier": {
            "PURL": "pkg:composer/web-token/jwt-library@4.1.7",
            "UID": "c49c99aafe78ec2e"
          },
          "Version": "4.1.7",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "brick/math@0.14.8",
            "psr/clock@1.0.0",
            "spomky-labs/pki-framework@1.4.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1230,
              "EndLine": 1321
            }
          ],
          "AnalyzedBy": "composer-vendor"
        }
      ]
    },
    {
      "Target": "usr/src/nextcloud/apps/photos/vendor/composer/installed.json",
      "Class": "lang-pkgs",
      "Type": "composer-vendor",
      "Packages": [
        {
          "ID": "hexogen/kdtree@v0.2.6",
          "Name": "hexogen/kdtree",
          "Identifier": {
            "PURL": "pkg:composer/hexogen/kdtree@v0.2.6",
            "UID": "2733d869381ac9e0"
          },
          "Version": "v0.2.6",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3,
              "EndLine": 66
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "nelexa/buffer@1.3.0",
          "Name": "nelexa/buffer",
          "Identifier": {
            "PURL": "pkg:composer/nelexa/buffer@1.3.0",
            "UID": "2804dd3f8b1c7e7e"
          },
          "Version": "1.3.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 67,
              "EndLine": 129
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php84@v1.38.1",
          "Name": "symfony/polyfill-php84",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php84@v1.38.1",
            "UID": "ac6248bc81ce256a"
          },
          "Version": "v1.38.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 130,
              "EndLine": 212
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "woltlab/webp-exif@v0.1.5",
          "Name": "woltlab/webp-exif",
          "Identifier": {
            "PURL": "pkg:composer/woltlab/webp-exif@v0.1.5",
            "UID": "477d176e286b67cc"
          },
          "Version": "v0.1.5",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "nelexa/buffer@1.3.0",
            "symfony/polyfill-php84@v1.38.1"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 213,
              "EndLine": 265
            }
          ],
          "AnalyzedBy": "composer-vendor"
        }
      ]
    },
    {
      "Target": "usr/src/nextcloud/apps/suspicious_login/vendor/composer/installed.json",
      "Class": "lang-pkgs",
      "Type": "composer-vendor",
      "Packages": [
        {
          "ID": "amphp/amp@v2.6.5",
          "Name": "amphp/amp",
          "Identifier": {
            "PURL": "pkg:composer/amphp/amp@v2.6.5",
            "UID": "491e25037937b3c1"
          },
          "Version": "v2.6.5",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3,
              "EndLine": 89
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "amphp/byte-stream@v1.8.2",
          "Name": "amphp/byte-stream",
          "Identifier": {
            "PURL": "pkg:composer/amphp/byte-stream@v1.8.2",
            "UID": "d57ecc31a0d12867"
          },
          "Version": "v1.8.2",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "amphp/amp@v2.6.5"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 90,
              "EndLine": 163
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "amphp/parallel@v1.4.4",
          "Name": "amphp/parallel",
          "Identifier": {
            "PURL": "pkg:composer/amphp/parallel@v1.4.4",
            "UID": "4b1faafcaf4782c0"
          },
          "Version": "v1.4.4",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "amphp/amp@v2.6.5",
            "amphp/byte-stream@v1.8.2",
            "amphp/parser@v1.1.1",
            "amphp/process@v1.1.9",
            "amphp/serialization@v1.0.0",
            "amphp/sync@v1.4.2"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 164,
              "EndLine": 240
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "amphp/parser@v1.1.1",
          "Name": "amphp/parser",
          "Identifier": {
            "PURL": "pkg:composer/amphp/parser@v1.1.1",
            "UID": "defa4f9c568ca8a6"
          },
          "Version": "v1.1.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 241,
              "EndLine": 305
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "amphp/process@v1.1.9",
          "Name": "amphp/process",
          "Identifier": {
            "PURL": "pkg:composer/amphp/process@v1.1.9",
            "UID": "6f256785804762d6"
          },
          "Version": "v1.1.9",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "amphp/amp@v2.6.5",
            "amphp/byte-stream@v1.8.2"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 306,
              "EndLine": 373
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "amphp/serialization@v1.0.0",
          "Name": "amphp/serialization",
          "Identifier": {
            "PURL": "pkg:composer/amphp/serialization@v1.0.0",
            "UID": "fd03574ceba33058"
          },
          "Version": "v1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 374,
              "EndLine": 434
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "amphp/sync@v1.4.2",
          "Name": "amphp/sync",
          "Identifier": {
            "PURL": "pkg:composer/amphp/sync@v1.4.2",
            "UID": "51d657e873b609d7"
          },
          "Version": "v1.4.2",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "amphp/amp@v2.6.5"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 435,
              "EndLine": 505
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "andrewdalpino/okbloomer@1.0.0",
          "Name": "andrewdalpino/okbloomer",
          "Identifier": {
            "PURL": "pkg:composer/andrewdalpino/okbloomer@1.0.0",
            "UID": "3327794e936728a0"
          },
          "Version": "1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 506,
              "EndLine": 571
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "bamarni/composer-bin-plugin@1.9.1",
          "Name": "bamarni/composer-bin-plugin",
          "Identifier": {
            "PURL": "pkg:composer/bamarni/composer-bin-plugin@1.9.1",
            "UID": "15a8d8c158a00367"
          },
          "Version": "1.9.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 572,
              "EndLine": 631
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "joomla/string@3.0.4",
          "Name": "joomla/string",
          "Identifier": {
            "PURL": "pkg:composer/joomla/string@3.0.4",
            "UID": "d301c3f71cebfd3f"
          },
          "Version": "3.0.4",
          "Licenses": [
            "GPL-2.0-or-later"
          ],
          "DependsOn": [
            "symfony/deprecation-contracts@v3.6.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 632,
              "EndLine": 713
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "psr/log@3.0.2",
          "Name": "psr/log",
          "Identifier": {
            "PURL": "pkg:composer/psr/log@3.0.2",
            "UID": "2c9b9f0c2580b1e0"
          },
          "Version": "3.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 714,
              "EndLine": 766
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "rubix/ml@2.5.3",
          "Name": "rubix/ml",
          "Identifier": {
            "PURL": "pkg:composer/rubix/ml@2.5.3",
            "UID": "aac38ee14907e844"
          },
          "Version": "2.5.3",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "amphp/parallel@v1.4.4",
            "andrewdalpino/okbloomer@1.0.0",
            "psr/log@3.0.2",
            "rubix/tensor@3.0.5",
            "symfony/polyfill-mbstring@v1.33.0",
            "symfony/polyfill-php80@v1.33.0",
            "symfony/polyfill-php82@v1.33.0",
            "symfony/polyfill-php83@v1.33.0",
            "wamania/php-stemmer@v4.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 767,
              "EndLine": 930
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "rubix/tensor@3.0.5",
          "Name": "rubix/tensor",
          "Identifier": {
            "PURL": "pkg:composer/rubix/tensor@3.0.5",
            "UID": "44a8e5dcd655e706"
          },
          "Version": "3.0.5",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 931,
              "EndLine": 1036
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/deprecation-contracts@v3.6.0",
          "Name": "symfony/deprecation-contracts",
          "Identifier": {
            "PURL": "pkg:composer/symfony/deprecation-contracts@v3.6.0",
            "UID": "b478768436789d98"
          },
          "Version": "v3.6.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1037,
              "EndLine": 1106
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-mbstring@v1.33.0",
          "Name": "symfony/polyfill-mbstring",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-mbstring@v1.33.0",
            "UID": "880cf63f940eac96"
          },
          "Version": "v1.33.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1107,
              "EndLine": 1194
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php80@v1.33.0",
          "Name": "symfony/polyfill-php80",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php80@v1.33.0",
            "UID": "1a5d2a8fba6d2f23"
          },
          "Version": "v1.33.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1195,
              "EndLine": 1281
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php82@v1.33.0",
          "Name": "symfony/polyfill-php82",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php82@v1.33.0",
            "UID": "7ad498d51609a45c"
          },
          "Version": "v1.33.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1282,
              "EndLine": 1364
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "symfony/polyfill-php83@v1.33.0",
          "Name": "symfony/polyfill-php83",
          "Identifier": {
            "PURL": "pkg:composer/symfony/polyfill-php83@v1.33.0",
            "UID": "a33e067c8d17a788"
          },
          "Version": "v1.33.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1365,
              "EndLine": 1447
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "wamania/php-stemmer@v4.0.0",
          "Name": "wamania/php-stemmer",
          "Identifier": {
            "PURL": "pkg:composer/wamania/php-stemmer@v4.0.0",
            "UID": "5f8c243c140a734c"
          },
          "Version": "v4.0.0",
          "Licenses": [
            "MIT"
          ],
          "DependsOn": [
            "joomla/string@3.0.4"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 1448,
              "EndLine": 1499
            }
          ],
          "AnalyzedBy": "composer-vendor"
        }
      ]
    },
    {
      "Target": "usr/src/nextcloud/apps/twofactor_totp/vendor/composer/installed.json",
      "Class": "lang-pkgs",
      "Type": "composer-vendor",
      "Packages": [
        {
          "ID": "christian-riesen/base32@1.6.0",
          "Name": "christian-riesen/base32",
          "Identifier": {
            "PURL": "pkg:composer/christian-riesen/base32@1.6.0",
            "UID": "753c76b072d239a9"
          },
          "Version": "1.6.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 3,
              "EndLine": 64
            }
          ],
          "AnalyzedBy": "composer-vendor"
        },
        {
          "ID": "rullzer/easytotp@v0.1.4",
          "Name": "rullzer/easytotp",
          "Identifier": {
            "PURL": "pkg:composer/rullzer/easytotp@v0.1.4",
            "UID": "bcfbabd8e0e52f6d"
          },
          "Version": "v0.1.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:f2480b0515ca4a212eccf5ced92944b4cb5bf632f7c2961697f7d5722b5bf26b"
          },
          "Locations": [
            {
              "StartLine": 65,
              "EndLine": 119
            }
          ],
          "AnalyzedBy": "composer-vendor"
        }
      ]
    }
  ]
}
